$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/307aeb60-6fd2-387f-9d04-e569fa20b91c.roa File: 307aeb60-6fd2-387f-9d04-e569fa20b91c.roa (raw, json) Hash identifier: +3UaIbahefg8va95AlI4UyUwomnTWR0e9uO3k7DONu4= Subject key identifier: 71:CF:95:68:AC:97:A6:B6:48:30:A3:A8:BD:98:FA:3E:EC:7E:94:0E Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584AEEADA75FF3A6E26C529ACAC0 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/307aeb60-6fd2-387f-9d04-e569fa20b91c.roa Signing time: Thu 21 Aug 2025 17:33:02 +0000 ROA not before: Thu 21 Aug 2025 17:33:02 +0000 ROA not after: Wed 19 Nov 2025 18:33:02 +0000 asID: 31898 IP address blocks: 138.1.12.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:ad:a7:5f:f3:a6:e2:6c:52:9a:ca:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Aug 21 17:33:02 2025 GMT Not After : Nov 19 18:33:02 2025 GMT Subject: CN=a60f5f72-2fba-4440-9e5e-203f51a72bf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:68:e1:e2:06:d6:bf:22:0c:3d:6b:87:14:0a: a2:4f:8c:26:d9:b5:cc:81:67:f7:15:4f:12:03:60: d9:8c:b2:b0:eb:87:ad:62:4e:36:f4:3c:95:70:ba: d4:fe:2d:d8:9c:a2:0a:6e:52:a9:6a:90:8c:e8:22: da:92:ff:00:75:45:6f:4e:0e:2e:34:41:b5:77:6c: 62:32:97:b9:3b:04:c2:9f:1e:80:20:72:6e:8f:d3: ea:29:fa:fb:01:15:54:74:12:60:07:f9:79:90:f8: 0e:8a:ac:47:5e:e7:4d:1b:c3:11:d5:ff:8d:f9:9a: 2b:7a:e6:24:61:ef:70:a3:27:90:db:46:16:e2:04: 86:70:46:cb:e7:6e:80:b9:bc:7a:40:72:23:15:67: fd:79:7a:3d:a4:9c:93:03:7b:d0:db:50:9f:91:15: 2d:b7:72:6a:2a:a8:3f:35:e3:91:f4:5a:a6:58:0e: 84:cc:8f:8a:f7:9b:53:5f:bf:3f:0b:66:18:60:f6: 5e:7c:fa:78:be:89:ac:f5:b0:41:1a:f1:06:e4:a3: 5d:e0:86:8b:08:ac:14:e9:d8:bc:e2:1f:91:9c:80: 89:03:4f:13:4a:7b:ac:1f:65:9b:85:56:fa:62:39: ec:b2:9b:f7:c6:f9:1d:36:15:c4:25:f3:84:72:2a: 8d:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:CF:95:68:AC:97:A6:B6:48:30:A3:A8:BD:98:FA:3E:EC:7E:94:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/307aeb60-6fd2-387f-9d04-e569fa20b91c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 138.1.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:57:60:a7:49:70:94:ce:ab:91:bb:be:5f:1b:79:1a:19:c0: b7:72:c8:40:90:c2:10:0e:4c:6d:55:d5:9f:10:7d:23:4d:8a: 6a:87:4d:05:7e:eb:2f:7e:64:b3:79:3e:73:ec:84:78:75:99: 02:a4:84:50:8f:47:77:bb:3e:38:9b:77:65:54:ff:4a:14:45: 96:c8:0f:6e:ed:4d:34:2b:9e:00:0e:23:27:f1:cc:66:7a:95: 08:ba:16:20:0d:3d:8b:7b:c1:4e:0a:69:5a:99:78:a8:2e:7a: b4:f9:26:81:f8:44:83:1f:aa:8d:9a:cd:57:1b:df:4f:0c:a1: 18:a6:7a:6d:cd:e0:aa:ed:ba:92:ea:ae:81:3e:7a:b8:b2:5a: 1f:5f:e6:2f:c4:25:57:b8:01:30:34:76:96:c7:df:9e:38:01: fe:e4:10:b1:df:90:66:d0:a2:19:17:9b:17:39:24:45:81:65: f7:a8:1d:5b:37:52:2a:24:0c:40:b3:f5:be:0f:d1:10:49:2d: d4:fb:9a:d1:d1:b4:3b:d7:32:f5:00:26:60:46:b1:3c:5f:b6: 41:15:31:39:b4:de:25:76:28:0e:8f:3c:66:7e:72:1b:cb:b3: 92:2c:31:3f:bd:bd:26:40:1a:ba:31:16:f5:1b:78:43:ec:da: 5b:11:26:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEruradf86bibFKaysAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI1MDgyMTE3MzMwMloXDTI1MTExOTE4MzMwMlowLzEtMCsGA1UEAxMk YTYwZjVmNzItMmZiYS00NDQwLTllNWUtMjAzZjUxYTcyYmYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomjh4gbWvyIMPWuHFAqiT4wm2bXMgWf3FU8S A2DZjLKw64etYk429DyVcLrU/i3YnKIKblKpapCM6CLakv8AdUVvTg4uNEG1d2xi Mpe5OwTCnx6AIHJuj9PqKfr7ARVUdBJgB/l5kPgOiqxHXudNG8MR1f+N+ZoreuYk Ye9woyeQ20YW4gSGcEbL526Aubx6QHIjFWf9eXo9pJyTA3vQ21CfkRUtt3JqKqg/ NeOR9FqmWA6EzI+K95tTX78/C2YYYPZefPp4voms9bBBGvEG5KNd4IaLCKwU6di8 4h+RnICJA08TSnusH2WbhVb6Yjnsspv3xvkdNhXEJfOEciqNNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHHPlWisl6a2SDCjqL2Y+j7sfpQOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvMzA3YWViNjAtNmZkMi0z ODdmLTlkMDQtZTU2OWZhMjBiOTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCigEMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFBXYKdJcJTOq5G7vl8beRoZwLdyyECQwhAOTG1V1Z8QfSNNimqHTQV+ 6y9+ZLN5PnPshHh1mQKkhFCPR3e7Pjibd2VU/0oURZbID27tTTQrngAOIyfxzGZ6 lQi6FiANPYt7wU4KaVqZeKguerT5JoH4RIMfqo2azVcb308MoRimem3N4KrtupLq roE+eriyWh9f5i/EJVe4ATA0dpbH3544Af7kELHfkGbQohkXmxc5JEWBZfeoHVs3 UiokDECz9b4P0RBJLdT7mtHRtDvXMvUAJmBGsTxftkEVMTm03iV2KA6PPGZ+chvL s5IsMT+9vSZAGroxFvUbeEPs2lsRJpQ= -----END CERTIFICATE-----Generated at Sat Aug 23 15:55:57 2025 by rpki-client