$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/279cdfee-9157-3525-9a87-00a0528370c2.roa File: 279cdfee-9157-3525-9a87-00a0528370c2.roa (raw, json) Hash identifier: Q8cb0a/HGzvYpirOkvHsvGrJtDv6HDUsFroy4giB0wc= Subject key identifier: C9:B2:E4:9B:64:6D:D5:87:54:02:14:0A:D8:87:45:56:0E:6E:DC:22 Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584AEF55C2E39CF93E586F3A3380 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/279cdfee-9157-3525-9a87-00a0528370c2.roa Signing time: Thu 21 Aug 2025 23:11:45 +0000 ROA not before: Thu 21 Aug 2025 23:11:45 +0000 ROA not after: Thu 20 Nov 2025 00:11:45 +0000 asID: 31898 IP address blocks: 138.1.16.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ef:55:c2:e3:9c:f9:3e:58:6f:3a:33:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Aug 21 23:11:45 2025 GMT Not After : Nov 20 00:11:45 2025 GMT Subject: CN=9eacf96c-e670-4f65-9f27-4aa6c13adfcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:d8:2e:d0:e6:fa:92:fe:e7:f6:2f:02:50:0b: ef:9b:08:f7:d2:d6:b9:65:05:62:e1:b3:57:3e:81: 12:c5:22:3f:93:1b:87:28:6f:1d:2c:de:6b:9f:11: a7:be:4a:ad:97:fd:b5:7e:1c:3e:77:c0:33:f3:c9: cd:2b:2b:43:14:a6:af:b2:81:33:46:18:ec:20:0a: f3:1d:ef:53:ee:90:8e:b0:79:ce:8a:ca:ca:77:87: 38:e5:6a:4c:b8:23:98:15:a1:a1:fe:0b:dd:00:83: fb:d6:a2:a2:c4:a5:32:2f:94:b1:02:30:a3:e8:fb: 86:73:ff:83:14:ca:36:f6:88:98:c4:95:d6:6e:d3: 73:36:1d:f9:cf:6f:cd:3d:c0:86:ff:fa:c6:2a:2f: 41:ec:4e:0e:6a:e4:a8:c9:a8:f1:e8:f8:c3:b6:f3: 28:ee:57:a1:fb:d4:df:d7:49:9b:c5:64:06:03:57: ef:3e:95:7c:92:2f:88:11:63:af:7a:f3:90:ad:c7: 6f:6f:ca:5f:37:0f:7f:ae:e0:c0:5c:fc:2b:b8:e1: a1:36:8f:8f:58:94:b3:49:e3:f3:66:ae:a2:93:00: b8:4e:ef:6a:7d:5d:84:73:c0:7a:e6:c0:21:90:fe: 44:12:14:e5:57:7e:6e:c0:9d:97:cc:f5:c3:32:db: 36:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:B2:E4:9B:64:6D:D5:87:54:02:14:0A:D8:87:45:56:0E:6E:DC:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/279cdfee-9157-3525-9a87-00a0528370c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 138.1.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:3e:a8:77:05:90:37:35:2b:bb:1c:67:40:3a:05:84:49:1a: dd:03:ee:19:0d:64:63:18:ad:a0:e4:c5:2c:76:2a:f4:84:85: fa:3a:eb:16:39:ea:d4:bb:53:a9:28:f0:e3:5f:c2:17:2f:78: e4:0a:d5:e7:e7:1e:4a:a1:a7:af:80:0e:2c:d8:9e:21:8e:5f: b8:c6:b1:1a:85:68:a4:b6:00:01:18:8a:c7:d7:30:19:ba:ff: f0:cf:6e:59:d1:bd:d0:e9:26:6f:01:9a:1c:8c:33:d6:0c:15: 1a:ca:69:0c:45:db:b2:14:96:e5:c8:10:3b:18:c2:e0:e6:b5: 0a:62:1f:ab:b6:63:cb:34:4a:1a:02:19:42:eb:72:66:40:41: 79:b4:e0:eb:74:b2:0b:93:2c:cb:76:8e:2a:74:4f:dd:b7:da: dd:6b:6b:37:c7:8f:a3:50:2b:8c:fc:7b:32:31:94:33:8c:f6: e5:2b:19:a1:1e:9b:17:00:d4:37:f6:9a:9b:14:8f:04:b7:51: 96:4b:7b:c0:99:41:2a:b0:7f:19:7c:c1:22:a0:35:1b:56:50: ce:d6:33:78:eb:d7:5f:45:a0:e6:14:6e:30:77:88:12:15:aa: 38:73:b2:88:16:00:d1:a5:f6:67:17:25:04:69:a3:2b:53:da: dd:9f:57:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErvVcLjnPk+WG86M4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI1MDgyMTIzMTE0NVoXDTI1MTEyMDAwMTE0NVowLzEtMCsGA1UEAxMk OWVhY2Y5NmMtZTY3MC00ZjY1LTlmMjctNGFhNmMxM2FkZmNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3tgu0Ob6kv7n9i8CUAvvmwj30ta5ZQVi4bNX PoESxSI/kxuHKG8dLN5rnxGnvkqtl/21fhw+d8Az88nNKytDFKavsoEzRhjsIArz He9T7pCOsHnOisrKd4c45WpMuCOYFaGh/gvdAIP71qKixKUyL5SxAjCj6PuGc/+D FMo29oiYxJXWbtNzNh35z2/NPcCG//rGKi9B7E4OauSoyajx6PjDtvMo7leh+9Tf 10mbxWQGA1fvPpV8ki+IEWOvevOQrcdvb8pfNw9/ruDAXPwruOGhNo+PWJSzSePz Zq6ikwC4Tu9qfV2Ec8B65sAhkP5EEhTlV35uwJ2XzPXDMts2XwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMmy5JtkbdWHVAIUCtiHRVYObtwiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvMjc5Y2RmZWUtOTE1Ny0z NTI1LTlhODctMDBhMDUyODM3MGMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCigEQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHA+qHcFkDc1K7scZ0A6BYRJGt0D7hkNZGMYraDkxSx2KvSEhfo66xY5 6tS7U6ko8ONfwhcveOQK1efnHkqhp6+ADizYniGOX7jGsRqFaKS2AAEYisfXMBm6 //DPblnRvdDpJm8BmhyMM9YMFRrKaQxF27IUluXIEDsYwuDmtQpiH6u2Y8s0ShoC GULrcmZAQXm04Ot0sguTLMt2jip0T9232t1razfHj6NQK4z8ezIxlDOM9uUrGaEe mxcA1Df2mpsUjwS3UZZLe8CZQSqwfxl8wSKgNRtWUM7WM3jr119FoOYUbjB3iBIV qjhzsogWANGl9mcXJQRpoytT2t2fV3E= -----END CERTIFICATE-----Generated at Sun Aug 24 00:04:38 2025 by rpki-client