$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/4c9f1b4e-8311-3d71-9b79-a652244709a6.roa File: 4c9f1b4e-8311-3d71-9b79-a652244709a6.roa (raw, json) Hash identifier: oOXIG9LXFn9oaf6+1p7OdexMSLNtZYAm2NUG294kw80= Subject key identifier: 94:95:61:53:FB:C3:B0:DE:68:CB:AC:9D:80:77:44:0C:1F:64:BF:8C Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584AEEADCA12CC3B7E58897C0A28 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/4c9f1b4e-8311-3d71-9b79-a652244709a6.roa Signing time: Thu 21 Aug 2025 17:33:19 +0000 ROA not before: Thu 21 Aug 2025 17:33:19 +0000 ROA not after: Wed 19 Nov 2025 18:33:19 +0000 asID: 31898 IP address blocks: 138.2.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:ad:ca:12:cc:3b:7e:58:89:7c:0a:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Aug 21 17:33:19 2025 GMT Not After : Nov 19 18:33:19 2025 GMT Subject: CN=29a0e14c-1dde-4c56-8e7e-a151d17b09c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:d9:6e:6f:81:42:d2:90:41:eb:81:8e:8a:d9: 99:5f:be:31:4b:12:e0:4a:bf:df:36:84:8e:0e:c3: 18:69:1f:91:f3:a8:dc:37:2d:a6:8c:6b:26:c2:05: 88:5b:3d:fd:d3:33:15:41:77:ed:b4:9d:b0:52:d7: 70:69:77:61:2c:93:cc:a1:6f:d8:26:92:b6:33:0b: 98:1c:c1:ca:4a:a4:55:f0:48:b0:09:d7:88:bc:64: df:e5:7d:26:ad:d0:b1:fb:13:1a:1c:a0:79:ca:5d: a1:ee:3f:9b:78:8f:8c:ab:8a:80:5f:58:24:e4:a6: 63:a3:a7:74:63:79:91:35:9d:d4:81:c2:c5:4b:78: 82:a6:b7:63:12:07:96:c7:31:88:0f:fc:be:20:14: 7a:af:6b:60:16:14:fc:b9:95:6c:19:bb:45:17:a4: 4f:6c:34:0a:11:67:ff:de:f5:dc:77:2a:a6:1e:91: b0:f8:51:b6:4d:26:61:c4:4d:92:6c:2f:e2:fa:2d: 7c:5a:69:02:75:e1:f6:c6:41:ef:58:5f:20:a1:eb: ef:cd:2c:83:73:5b:6c:e5:d1:33:fd:82:5e:d5:c7: 62:96:95:dd:97:e2:a2:f7:a2:f0:64:57:37:37:f5: 82:17:e2:51:56:82:f6:25:35:db:21:ea:01:28:58: 08:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:95:61:53:FB:C3:B0:DE:68:CB:AC:9D:80:77:44:0C:1F:64:BF:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/4c9f1b4e-8311-3d71-9b79-a652244709a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 138.2.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:50:a5:d4:39:6e:46:8a:15:02:0a:d5:3a:51:94:01:1f:a7: 97:01:21:8c:67:9f:41:94:16:f8:38:1c:61:47:14:79:9e:3e: eb:19:32:da:24:d8:ce:17:11:24:e6:15:a0:80:2d:8d:57:7c: d2:d0:4e:7a:f2:f4:7e:20:c5:f9:d3:43:08:5f:e5:8f:8a:ba: e2:c9:0c:0e:8b:29:04:62:4f:28:16:8b:51:09:44:cd:d7:63: 78:d0:eb:74:c2:52:64:00:ea:94:aa:0f:14:e6:0c:20:e3:6a: 3a:b6:e9:f2:9a:fb:f7:2c:c2:cf:9f:a0:1e:50:63:3d:cb:b2: 17:2d:6c:5f:5f:77:f2:2d:51:3d:dd:94:b8:9b:22:f8:31:75: ec:e2:23:40:89:57:58:e7:54:fc:6b:bb:b8:79:c6:8e:28:59: e4:7d:18:34:6b:9b:0f:47:fe:5c:0f:be:e6:1f:df:1f:2f:96: 07:d2:2c:b1:18:44:1c:b7:e2:08:ff:42:f0:8a:c7:21:13:35: 78:2f:15:d1:f8:f2:07:5d:5f:ab:66:9b:92:ca:0b:5f:b7:c3: 6d:06:ef:c6:08:68:fb:e6:41:90:20:80:c8:2f:e5:fd:28:0b: 57:17:0f:35:da:22:2c:c3:49:c1:79:3a:5b:17:9d:70:d4:dd: 10:d7:55:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErurcoSzDt+WIl8CigwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI1MDgyMTE3MzMxOVoXDTI1MTExOTE4MzMxOVowLzEtMCsGA1UEAxMk MjlhMGUxNGMtMWRkZS00YzU2LThlN2UtYTE1MWQxN2IwOWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdlub4FC0pBB64GOitmZX74xSxLgSr/fNoSO DsMYaR+R86jcNy2mjGsmwgWIWz390zMVQXfttJ2wUtdwaXdhLJPMoW/YJpK2MwuY HMHKSqRV8EiwCdeIvGTf5X0mrdCx+xMaHKB5yl2h7j+beI+Mq4qAX1gk5KZjo6d0 Y3mRNZ3UgcLFS3iCprdjEgeWxzGID/y+IBR6r2tgFhT8uZVsGbtFF6RPbDQKEWf/ 3vXcdyqmHpGw+FG2TSZhxE2SbC/i+i18WmkCdeH2xkHvWF8goevvzSyDc1ts5dEz /YJe1cdilpXdl+Ki96LwZFc3N/WCF+JRVoL2JTXbIeoBKFgISwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJSVYVP7w7DeaMusnYB3RAwfZL+MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvNGM5ZjFiNGUtODMxMS0z ZDcxLTliNzktYTY1MjI0NDcwOWE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGigKAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAENQpdQ5bkaKFQIK1TpRlAEfp5cBIYxnn0GUFvg4HGFHFHmePusZMtok 2M4XESTmFaCALY1XfNLQTnry9H4gxfnTQwhf5Y+KuuLJDA6LKQRiTygWi1EJRM3X Y3jQ63TCUmQA6pSqDxTmDCDjajq26fKa+/csws+foB5QYz3LshctbF9fd/ItUT3d lLibIvgxdeziI0CJV1jnVPxru7h5xo4oWeR9GDRrmw9H/lwPvuYf3x8vlgfSLLEY RBy34gj/QvCKxyETNXgvFdH48gddX6tmm5LKC1+3w20G78YIaPvmQZAggMgv5f0o C1cXDzXaIizDScF5OlsXnXDU3RDXVSE= -----END CERTIFICATE-----Generated at Sat Aug 23 20:59:32 2025 by rpki-client