$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7405a99a-393f-3196-80ba-b4ad1406ad44.roa File: 7405a99a-393f-3196-80ba-b4ad1406ad44.roa (raw, json) Hash identifier: RyHDcKrGBJweOLNWbrUuyCkVLgZ49oj3Z5ZUNyzf/TA= Subject key identifier: 00:7B:5D:0F:0B:35:EF:45:45:04:32:20:D1:3C:9C:77:26:0F:91:12 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B1C3710DE5D07C195D374C5D8 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7405a99a-393f-3196-80ba-b4ad1406ad44.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 701 IP address blocks: 138.89.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:37:10:de:5d:07:c1:95:d3:74:c5:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=e8ac22f6-b974-45d2-b383-46c9f5fb878f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:dc:96:7f:b0:c4:9b:40:e0:22:8b:28:ba:6d: db:9a:02:1b:bf:b7:fb:2b:7f:53:b5:b7:7d:93:50: cb:89:7a:fe:d9:94:53:cf:5e:d8:eb:01:de:51:68: 53:4d:b3:3f:af:2d:06:08:40:fb:0b:d7:df:58:76: 58:5c:86:73:f0:8d:fe:c2:21:cb:18:0b:26:79:1e: f3:bb:52:2d:b1:30:47:9d:99:fe:92:7b:b8:62:9a: a9:c7:96:74:b5:77:cc:1e:71:db:aa:7d:7b:ba:88: ff:54:fd:78:5d:58:41:05:e0:e3:34:72:74:83:54: 60:42:c9:06:1e:47:63:54:61:47:e8:fc:fe:03:b7: c6:3e:83:b5:f8:ec:7a:14:c1:bd:fe:e7:25:c8:3e: 11:8e:ee:66:40:d4:99:03:cd:30:98:57:c5:a9:6f: 93:dc:6f:dc:b5:db:93:35:22:86:5e:0d:4d:95:ec: c4:16:9a:80:c5:97:7b:67:f6:2d:4f:47:1c:b6:2a: d9:eb:ef:88:58:00:91:d5:5d:c0:f9:0c:f4:db:e6: 2e:f8:af:a6:ac:59:7d:c8:ee:88:02:80:81:88:99: 95:9d:cb:65:22:ed:36:0b:b1:e2:a8:8f:de:67:87: 2c:23:2d:eb:8f:73:1c:10:8c:0a:8c:cc:14:f7:db: 7f:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:7B:5D:0F:0B:35:EF:45:45:04:32:20:D1:3C:9C:77:26:0F:91:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7405a99a-393f-3196-80ba-b4ad1406ad44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 138.89.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:2d:96:07:1e:63:c7:6d:b9:de:c4:8a:cf:07:e4:78:1a:ef: 37:33:19:d2:c8:ed:78:89:1d:fd:67:0d:72:8f:13:42:9b:ac: aa:f2:4d:96:d1:9b:c5:a9:e5:ab:89:d0:4a:62:0b:4d:2a:63: db:28:9e:c0:67:78:bc:d1:75:5c:59:55:8c:41:6c:0f:36:c7: 7f:91:cb:e7:a2:81:ab:5a:45:65:c3:3b:bc:13:32:cf:89:d0: b5:2f:2f:a0:87:e0:8c:37:99:94:c4:c2:21:7c:9c:b3:aa:16: 49:bd:25:af:33:c1:a8:50:e5:6f:a4:ca:96:39:91:17:c4:20: 02:05:f4:10:fe:e4:86:7c:a8:ee:0e:16:75:44:fb:d4:01:d9: 47:d0:90:39:2b:d9:2c:dc:95:75:bc:61:d8:db:94:f8:60:00: c1:05:01:35:04:72:74:b2:10:45:03:c9:22:b5:54:a2:50:6f: 1b:cc:3a:21:78:ba:81:35:ee:b4:5a:fc:9a:8c:13:57:3b:5c: c4:5c:d1:70:f6:3b:6d:ac:47:ba:f0:5a:5d:24:83:24:5a:c7: 5f:84:2a:bf:1c:2f:15:61:5c:97:1b:77:ea:47:18:d9:7d:50: 88:1d:af:c6:9f:4d:88:80:36:55:e6:1d:9f:33:69:ce:1f:93: 5e:f6:84:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNxDeXQfBldN0xdgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk ZThhYzIyZjYtYjk3NC00NWQyLWIzODMtNDZjOWY1ZmI4NzhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9yWf7DEm0DgIosoum3bmgIbv7f7K39Ttbd9 k1DLiXr+2ZRTz17Y6wHeUWhTTbM/ry0GCED7C9ffWHZYXIZz8I3+wiHLGAsmeR7z u1ItsTBHnZn+knu4Ypqpx5Z0tXfMHnHbqn17uoj/VP14XVhBBeDjNHJ0g1RgQskG HkdjVGFH6Pz+A7fGPoO1+Ox6FMG9/uclyD4Rju5mQNSZA80wmFfFqW+T3G/ctduT NSKGXg1NlezEFpqAxZd7Z/YtT0cctirZ6++IWACR1V3A+Qz02+Yu+K+mrFl9yO6I AoCBiJmVnctlIu02C7HiqI/eZ4csIy3rj3McEIwKjMwU99t/BwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAB7XQ8LNe9FRQQyINE8nHcmD5ESMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNzQwNWE5OWEtMzkzZi0z MTk2LTgwYmEtYjRhZDE0MDZhZDQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHilkAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADEtlgceY8dtud7Eis8H5Hga7zczGdLI7XiJHf1nDXKPE0KbrKryTZbR m8Wp5auJ0EpiC00qY9sonsBneLzRdVxZVYxBbA82x3+Ry+eigataRWXDO7wTMs+J 0LUvL6CH4Iw3mZTEwiF8nLOqFkm9Ja8zwahQ5W+kypY5kRfEIAIF9BD+5IZ8qO4O FnVE+9QB2UfQkDkr2SzclXW8YdjblPhgAMEFATUEcnSyEEUDySK1VKJQbxvMOiF4 uoE17rRa/JqME1c7XMRc0XD2O22sR7rwWl0kgyRax1+EKr8cLxVhXJcbd+pHGNl9 UIgdr8afTYiANlXmHZ8zac4fk172hAY= -----END CERTIFICATE-----Generated at Mon Oct 20 18:26:29 2025 by rpki-client