$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/1d6f4d1f-8053-3029-aca7-121773bc8778.roa File: 1d6f4d1f-8053-3029-aca7-121773bc8778.roa (raw, json) Hash identifier: goTyCqEZL26V4J6pkuFBi9Gk3WFXYooH8X0bHqOMWXk= Subject key identifier: D3:E1:0D:A5:45:00:3B:74:CD:D6:B6:6F:B2:A0:87:61:AA:6C:75:8D Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584AEC4C820469D91680A4B36DF0 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/1d6f4d1f-8053-3029-aca7-121773bc8778.roa Signing time: Wed 20 Aug 2025 21:05:41 +0000 ROA not before: Wed 20 Aug 2025 21:05:41 +0000 ROA not after: Tue 18 Nov 2025 22:05:41 +0000 asID: 31898 IP address blocks: 138.2.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:4c:82:04:69:d9:16:80:a4:b3:6d:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Aug 20 21:05:41 2025 GMT Not After : Nov 18 22:05:41 2025 GMT Subject: CN=34841be7-9ece-4482-92a7-eff64c7efb8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:e6:4a:94:b2:77:43:e1:65:91:54:07:e7:24: 63:8c:14:75:27:f0:62:c5:74:d8:8b:c1:1c:7d:22: 45:f7:fc:4d:b7:ab:24:3b:53:ad:c8:d5:3d:cf:17: 3f:97:96:86:97:c6:7a:76:af:06:8c:8b:ea:87:02: f3:38:27:0a:4d:ea:c7:85:58:3e:33:07:62:3f:0e: 46:ba:64:61:cf:22:59:4a:30:b2:27:88:b6:f0:b2: 20:a3:a0:09:c0:84:5b:07:14:e4:ac:c5:28:e1:3e: 5c:b8:63:47:e1:54:07:ca:35:e8:1f:07:74:45:af: 2a:5e:7a:cc:64:1b:8f:d3:4e:bf:9c:70:ee:59:2b: bd:c7:8c:d4:45:38:10:f6:1d:0c:30:a5:f7:a7:57: 01:86:bc:70:be:29:da:3e:36:f3:d4:c6:04:ff:fb: 0a:12:47:7a:b5:64:e0:60:ae:47:92:57:88:1e:d9: 7a:90:c6:e6:20:bf:7b:c0:e0:85:22:87:1f:cd:84: 75:ec:68:42:61:53:fb:37:11:e2:1c:2e:64:f1:13: 91:0d:fb:06:8b:5b:df:82:59:8e:cf:64:cd:35:2c: b6:74:e5:30:5d:8e:6b:f0:01:71:c0:33:55:2a:fd: 10:15:b1:90:b7:8d:c8:11:61:4e:0f:d1:9d:b8:bf: a4:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:E1:0D:A5:45:00:3B:74:CD:D6:B6:6F:B2:A0:87:61:AA:6C:75:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/1d6f4d1f-8053-3029-aca7-121773bc8778.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 138.2.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:1f:4b:dd:75:40:44:2f:2b:05:e5:7a:5b:9b:f4:89:97:79: e3:28:9a:d8:06:61:3b:8a:d3:9f:bc:77:11:cf:26:35:74:58: 77:dc:9c:8d:88:07:84:fa:af:d1:f2:e9:66:7e:29:bf:28:df: 73:30:82:fa:39:1d:a9:1a:d7:9f:a5:1d:28:40:95:c2:e6:ef: b6:13:0b:6f:e4:c4:8e:d5:82:c1:2b:e5:85:9a:62:80:68:42: 24:e6:95:e5:93:09:9d:82:0e:3f:70:69:7b:99:8f:8b:ce:60: 11:87:21:8c:df:fc:db:e3:f5:dd:c4:11:f5:91:90:1c:1f:22: 2b:94:56:b6:8a:3a:98:92:3c:aa:fc:0e:06:1c:92:dd:ba:0f: 94:cb:56:a8:5c:cc:89:98:90:e8:72:68:80:e3:70:37:c8:64: ae:6f:bf:4d:a3:dc:46:dc:49:0b:95:bd:9a:6d:72:9d:da:53: 08:b3:33:a4:76:02:6d:73:b0:00:10:ae:26:8f:23:02:bb:3c: 3d:63:ad:64:94:a6:e3:2c:59:a8:3e:27:f1:40:bb:e5:6f:31: 64:6d:e9:65:cd:ad:3d:1b:fb:df:4c:75:a5:b3:ea:1b:b7:4b: f1:11:28:1a:40:3f:74:6c:85:cf:be:15:28:7f:1d:d7:b6:43: 3b:38:5a:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsTIIEadkWgKSzbfAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI1MDgyMDIxMDU0MVoXDTI1MTExODIyMDU0MVowLzEtMCsGA1UEAxMk MzQ4NDFiZTctOWVjZS00NDgyLTkyYTctZWZmNjRjN2VmYjhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoeZKlLJ3Q+FlkVQH5yRjjBR1J/BixXTYi8Ec fSJF9/xNt6skO1OtyNU9zxc/l5aGl8Z6dq8GjIvqhwLzOCcKTerHhVg+MwdiPw5G umRhzyJZSjCyJ4i28LIgo6AJwIRbBxTkrMUo4T5cuGNH4VQHyjXoHwd0Ra8qXnrM ZBuP006/nHDuWSu9x4zURTgQ9h0MMKX3p1cBhrxwvinaPjbz1MYE//sKEkd6tWTg YK5HkleIHtl6kMbmIL97wOCFIocfzYR17GhCYVP7NxHiHC5k8RORDfsGi1vfglmO z2TNNSy2dOUwXY5r8AFxwDNVKv0QFbGQt43IEWFOD9GduL+kdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNPhDaVFADt0zda2b7Kgh2GqbHWNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvMWQ2ZjRkMWYtODA1My0z MDI5LWFjYTctMTIxNzczYmM4Nzc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEigJgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGsfS911QEQvKwXlelub9ImXeeMomtgGYTuK05+8dxHPJjV0WHfcnI2I B4T6r9Hy6WZ+Kb8o33Mwgvo5Haka15+lHShAlcLm77YTC2/kxI7VgsEr5YWaYoBo QiTmleWTCZ2CDj9waXuZj4vOYBGHIYzf/Nvj9d3EEfWRkBwfIiuUVraKOpiSPKr8 DgYckt26D5TLVqhczImYkOhyaIDjcDfIZK5vv02j3EbcSQuVvZptcp3aUwizM6R2 Am1zsAAQriaPIwK7PD1jrWSUpuMsWag+J/FAu+VvMWRt6WXNrT0b+99MdaWz6hu3 S/ERKBpAP3Rshc++FSh/Hde2Qzs4Woo= -----END CERTIFICATE-----Generated at Sat Aug 23 16:39:14 2025 by rpki-client