$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/3d994d2e-9d51-3b0b-8066-798ab49b2e6b.roa File: 3d994d2e-9d51-3b0b-8066-798ab49b2e6b.roa (raw, json) Hash identifier: vpE2PPxldnff+0EUuSDmw84I4fdOsI39Azs5O37qTMY= Subject key identifier: 78:D3:6D:C9:38:C2:25:67:EB:17:1B:DD:73:22:65:CC:C8:3E:B2:0E Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584AEEADBCA9246B2E5610E2E600 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/3d994d2e-9d51-3b0b-8066-798ab49b2e6b.roa Signing time: Thu 21 Aug 2025 17:33:12 +0000 ROA not before: Thu 21 Aug 2025 17:33:12 +0000 ROA not after: Wed 19 Nov 2025 18:33:12 +0000 asID: 31898 IP address blocks: 138.1.72.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:ad:bc:a9:24:6b:2e:56:10:e2:e6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Aug 21 17:33:12 2025 GMT Not After : Nov 19 18:33:12 2025 GMT Subject: CN=d21326bd-364b-4281-b032-51dcfb64f738 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:8b:98:ab:c2:93:c3:22:17:3a:3a:9c:39:e5: 06:5d:5f:49:1d:9d:b9:b9:2d:cf:41:19:d0:1a:c5: 77:12:31:29:c0:04:02:15:15:1a:59:8d:52:c9:51: 79:cb:1c:df:e2:7f:90:f2:11:fe:2a:12:d0:f7:e8: e3:21:5b:38:82:ad:2b:c5:5c:c9:f1:5f:02:6e:7f: 2e:28:b5:32:02:95:03:d0:7d:ca:31:b5:a9:cd:f4: d0:f7:fd:9d:f0:2c:1f:14:28:2d:9a:67:66:7a:78: 62:b7:73:30:bd:b2:44:99:2f:98:10:36:51:7f:90: 28:fb:36:be:10:82:4d:44:e0:fd:6f:c9:06:b3:15: f2:03:cb:ac:b0:b3:c3:4a:ab:12:9d:8c:5c:2a:1a: 23:55:2f:b6:e5:95:0e:e1:14:46:b8:27:51:c3:da: 2e:51:38:24:c2:39:dd:5b:c4:b9:ca:91:15:66:d9: d6:8e:41:b3:08:a2:bc:97:d5:08:70:b9:e1:4e:94: 38:a2:4e:fc:c9:34:70:74:6f:88:02:0a:1c:1e:8c: 0b:84:93:01:ca:b3:97:f3:4e:37:26:71:a8:81:a1: 0f:60:05:7e:c0:9a:01:15:5d:a3:5a:95:e0:c8:bf: 51:05:ab:92:bd:8d:d6:c8:ed:a0:1d:3a:af:9a:9e: 5b:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:D3:6D:C9:38:C2:25:67:EB:17:1B:DD:73:22:65:CC:C8:3E:B2:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/3d994d2e-9d51-3b0b-8066-798ab49b2e6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 138.1.72.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:23:57:c8:6c:9b:0b:e1:ed:ec:9d:05:15:27:39:af:29:f5: 20:96:46:0e:cc:08:4d:83:db:94:62:8b:b3:72:a4:47:79:f9: aa:34:24:55:e8:86:c6:56:82:27:69:42:cf:3f:06:e0:4a:d6: 0a:97:e4:68:53:dd:7b:fa:1e:04:66:b9:71:c9:9f:7f:85:d0: 12:58:b7:19:22:3d:fb:ad:7c:70:89:b4:4d:d0:3a:a1:8c:f9: c1:0c:8d:7f:63:92:05:64:a2:9b:f8:57:cb:8f:1b:30:f2:6f: b5:b7:45:45:41:9f:5e:57:ff:c1:c0:fd:03:c7:64:e9:f2:19: 57:15:6d:62:75:9c:63:58:4f:b8:5c:8a:49:39:83:3b:35:e7: fc:a7:28:fc:da:59:d9:0b:e5:87:55:61:ac:a6:4e:fc:9f:02: 5d:85:19:1b:4b:40:d2:d8:09:ba:65:0f:cb:b8:72:bd:fb:59: d5:e8:64:3d:a0:0e:07:20:b1:19:ef:0c:8b:34:2d:b9:fd:2b: 6b:4d:e5:d6:ae:78:63:1e:92:1f:ad:3f:db:f7:d9:80:f3:98: ed:3c:47:13:eb:5f:ab:19:44:e8:96:51:70:c0:c7:89:82:2f: e4:ee:b2:c2:93:fa:cc:e1:14:5a:41:19:a5:df:62:27:46:ed: 39:6b:a7:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErurbypJGsuVhDi5gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI1MDgyMTE3MzMxMloXDTI1MTExOTE4MzMxMlowLzEtMCsGA1UEAxMk ZDIxMzI2YmQtMzY0Yi00MjgxLWIwMzItNTFkY2ZiNjRmNzM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoouYq8KTwyIXOjqcOeUGXV9JHZ25uS3PQRnQ GsV3EjEpwAQCFRUaWY1SyVF5yxzf4n+Q8hH+KhLQ9+jjIVs4gq0rxVzJ8V8Cbn8u KLUyApUD0H3KMbWpzfTQ9/2d8CwfFCgtmmdmenhit3MwvbJEmS+YEDZRf5Ao+za+ EIJNROD9b8kGsxXyA8ussLPDSqsSnYxcKhojVS+25ZUO4RRGuCdRw9ouUTgkwjnd W8S5ypEVZtnWjkGzCKK8l9UIcLnhTpQ4ok78yTRwdG+IAgocHowLhJMByrOX8043 JnGogaEPYAV+wJoBFV2jWpXgyL9RBauSvY3WyO2gHTqvmp5bBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHjTbck4wiVn6xcb3XMiZczIPrIOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvM2Q5OTRkMmUtOWQ1MS0z YjBiLTgwNjYtNzk4YWI0OWIyZTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCigFIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIgjV8hsmwvh7eydBRUnOa8p9SCWRg7MCE2D25Rii7NypEd5+ao0JFXo hsZWgidpQs8/BuBK1gqX5GhT3Xv6HgRmuXHJn3+F0BJYtxkiPfutfHCJtE3QOqGM +cEMjX9jkgVkopv4V8uPGzDyb7W3RUVBn15X/8HA/QPHZOnyGVcVbWJ1nGNYT7hc ikk5gzs15/ynKPzaWdkL5YdVYaymTvyfAl2FGRtLQNLYCbplD8u4cr37WdXoZD2g DgcgsRnvDIs0Lbn9K2tN5daueGMekh+tP9v32YDzmO08RxPrX6sZROiWUXDAx4mC L+TussKT+szhFFpBGaXfYidG7Tlrp4s= -----END CERTIFICATE-----Generated at Sat Aug 23 15:53:42 2025 by rpki-client