$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/064f31cb-b8ed-3761-966e-d1306f7a3b3e.roa File: 064f31cb-b8ed-3761-966e-d1306f7a3b3e.roa (raw, json) Hash identifier: IB2UvnMsZXGBDwjDeJf2mxOvbgYxJcFEfmiMBFTY59s= Subject key identifier: 76:03:FA:F0:FE:C1:A3:9C:CC:36:26:7A:59:66:94:95:5C:CD:6F:7B Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584AEE2A669226A7ABBC98FB7FA0 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/064f31cb-b8ed-3761-966e-d1306f7a3b3e.roa Signing time: Thu 21 Aug 2025 13:08:35 +0000 ROA not before: Thu 21 Aug 2025 13:08:35 +0000 ROA not after: Wed 19 Nov 2025 14:08:35 +0000 asID: 31898 IP address blocks: 138.2.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:2a:66:92:26:a7:ab:bc:98:fb:7f:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Aug 21 13:08:35 2025 GMT Not After : Nov 19 14:08:35 2025 GMT Subject: CN=77e3cbd9-9ea9-42d6-9807-c1ea1b2b97e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:87:69:e6:4d:ea:3e:44:93:f4:c8:fb:76:f6: 16:8b:ee:6d:20:35:b9:9b:68:d5:18:77:c7:65:19: d1:86:14:1a:b6:0d:6c:ef:b5:77:9c:65:66:97:0d: bd:22:e6:d5:79:44:f5:76:10:d0:aa:12:d7:db:ed: 98:06:4b:26:82:e4:37:8e:20:cf:77:00:c2:75:cf: c3:40:b9:cc:0d:4d:10:12:0b:1d:59:d9:21:10:37: ba:4b:c1:0b:ab:46:a9:0c:2c:1c:d5:6b:92:87:89: 10:6c:a9:11:f7:62:d6:d7:ec:16:85:1f:99:8a:49: fd:26:7f:5b:9f:f9:04:0b:00:64:26:63:39:73:23: 09:e1:24:ce:88:7d:cb:f3:48:2b:d5:b1:18:99:f6: f3:f3:7f:62:01:b8:4d:65:c9:2c:95:42:69:70:28: d2:a3:ff:1b:33:f5:b2:f6:88:f2:d6:69:63:84:8b: c6:9c:c4:f2:2b:e9:bf:4b:dd:fa:9b:d2:23:c2:30: 1a:2e:98:05:56:24:b6:5b:5a:c9:a6:73:52:fc:17: ef:63:fc:da:af:b9:b3:51:f3:e9:2d:f2:29:22:88: b9:b3:fd:4e:af:9c:ca:ba:33:67:5d:08:42:03:87: eb:06:b2:8c:cf:9d:b3:9e:12:64:31:18:fd:8e:81: 33:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:03:FA:F0:FE:C1:A3:9C:CC:36:26:7A:59:66:94:95:5C:CD:6F:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/064f31cb-b8ed-3761-966e-d1306f7a3b3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 138.2.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:68:77:0e:e7:13:4b:01:a3:35:e8:ca:d8:8e:f7:78:7f:87: 5e:56:83:c9:1f:e8:3d:bf:63:39:b8:69:2e:11:51:04:8b:34: cb:64:58:ba:3a:c2:84:dc:10:50:eb:cc:65:e4:89:59:cf:4b: 80:94:42:5f:dc:1c:bf:a5:f6:97:ce:41:00:6d:d6:62:96:5c: 53:29:37:bf:5f:19:c6:4c:f0:cd:59:2b:22:e6:0f:33:40:0c: 85:54:0e:df:d0:b5:17:f1:cd:62:ff:66:db:de:f4:cb:60:1d: 8d:ba:b7:78:b4:9f:99:a6:2e:21:44:94:b4:50:c3:73:4f:6f: aa:16:4a:8f:f0:ce:ab:9a:f9:62:3c:c6:06:4a:d2:4f:59:72: d1:dd:dc:8a:6c:20:32:49:4c:94:42:0b:5e:3f:70:95:f1:7f: 27:69:b0:71:7d:2e:44:63:91:75:e2:b2:50:aa:63:c0:60:aa: 05:08:7b:1c:af:3e:3c:49:00:69:84:d9:34:b4:4d:d9:88:09: f6:b5:65:ca:1a:79:a4:1f:31:08:d7:56:bd:4a:06:95:b8:f1: 3a:cc:4e:67:74:34:4b:d7:47:2c:68:d1:a2:04:56:8b:d8:58: 84:f3:42:5d:45:ff:d0:8d:16:1f:a8:d1:10:20:fa:e0:8d:2a: b3:f6:5b:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEruKmaSJqervJj7f6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI1MDgyMTEzMDgzNVoXDTI1MTExOTE0MDgzNVowLzEtMCsGA1UEAxMk NzdlM2NiZDktOWVhOS00MmQ2LTk4MDctYzFlYTFiMmI5N2UwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYdp5k3qPkST9Mj7dvYWi+5tIDW5m2jVGHfH ZRnRhhQatg1s77V3nGVmlw29IubVeUT1dhDQqhLX2+2YBksmguQ3jiDPdwDCdc/D QLnMDU0QEgsdWdkhEDe6S8ELq0apDCwc1WuSh4kQbKkR92LW1+wWhR+Zikn9Jn9b n/kECwBkJmM5cyMJ4STOiH3L80gr1bEYmfbz839iAbhNZckslUJpcCjSo/8bM/Wy 9ojy1mljhIvGnMTyK+m/S936m9IjwjAaLpgFViS2W1rJpnNS/BfvY/zar7mzUfPp LfIpIoi5s/1Or5zKujNnXQhCA4frBrKMz52znhJkMRj9joEz7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHYD+vD+waOczDYmellmlJVczW97MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvMDY0ZjMxY2ItYjhlZC0z NzYxLTk2NmUtZDEzMDZmN2EzYjNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEigLgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF9odw7nE0sBozXoytiO93h/h15Wg8kf6D2/Yzm4aS4RUQSLNMtkWLo6 woTcEFDrzGXkiVnPS4CUQl/cHL+l9pfOQQBt1mKWXFMpN79fGcZM8M1ZKyLmDzNA DIVUDt/QtRfxzWL/Ztve9MtgHY26t3i0n5mmLiFElLRQw3NPb6oWSo/wzqua+WI8 xgZK0k9ZctHd3IpsIDJJTJRCC14/cJXxfydpsHF9LkRjkXXislCqY8BgqgUIexyv PjxJAGmE2TS0TdmICfa1ZcoaeaQfMQjXVr1KBpW48TrMTmd0NEvXRyxo0aIEVovY WITzQl1F/9CNFh+o0RAg+uCNKrP2WyE= -----END CERTIFICATE-----Generated at Sat Aug 23 16:02:01 2025 by rpki-client