$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/67018b80-74f6-3e9a-9483-f3cf3b7e8aa5.roa File: 67018b80-74f6-3e9a-9483-f3cf3b7e8aa5.roa (raw, json) Hash identifier: 8X/nitSzx/Lvw9XhOHvczeMA7WQ7YkMJ/jDOcHoary0= Subject key identifier: 51:5F:4A:14:BF:B3:BF:F2:BC:D0:EF:7E:06:06:BB:B6:1F:3F:0A:41 Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584AEF55C89B4A4C2E0C477EBC00 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/67018b80-74f6-3e9a-9483-f3cf3b7e8aa5.roa Signing time: Thu 21 Aug 2025 23:11:48 +0000 ROA not before: Thu 21 Aug 2025 23:11:48 +0000 ROA not after: Thu 20 Nov 2025 00:11:48 +0000 asID: 31898 IP address blocks: 138.1.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ef:55:c8:9b:4a:4c:2e:0c:47:7e:bc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Aug 21 23:11:48 2025 GMT Not After : Nov 20 00:11:48 2025 GMT Subject: CN=3fadb428-c41a-4797-8555-f16bf30adf29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:c5:ad:4c:12:1b:66:f4:04:4d:09:2d:2c:de: 38:84:f5:ee:3e:8f:14:11:cd:6f:22:79:d3:48:3b: c5:c5:01:e5:06:2d:f2:7b:8b:6d:ba:fb:d5:8b:ff: ca:e5:35:02:a2:ac:eb:e3:70:3c:35:18:87:d9:e4: ed:1f:f5:b2:a0:c2:ba:ad:05:3e:8c:90:b8:98:4c: bf:90:b7:d4:be:f8:2b:e7:f2:09:c5:11:cf:f0:92: 44:16:13:40:ce:9b:9c:73:f4:3e:5a:d1:14:fd:6d: 43:f6:25:77:a4:90:81:93:97:9e:1e:ea:8b:6d:a5: 6a:e0:40:07:e3:51:65:86:25:4b:c9:83:68:83:83: 5a:54:4b:94:7c:75:f8:a2:f7:50:82:54:86:e9:60: 37:42:47:48:b2:d8:c0:06:a4:01:ed:4e:c5:53:17: 88:91:90:38:e5:2b:da:6b:75:1d:c8:fd:fd:ac:ce: 45:e1:64:29:c3:41:f6:ae:f8:ef:a7:9b:5c:7a:f0: 17:44:fe:bd:4a:eb:29:d1:38:09:4b:41:ae:15:be: 9e:b8:8f:fe:9b:c8:b5:3d:f1:ad:06:06:07:d9:9f: 5a:42:8b:e8:4e:4d:35:9d:33:ef:65:39:04:62:43: d5:73:a1:63:3b:14:68:83:e3:34:55:eb:2e:d7:f4: 3b:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:5F:4A:14:BF:B3:BF:F2:BC:D0:EF:7E:06:06:BB:B6:1F:3F:0A:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/67018b80-74f6-3e9a-9483-f3cf3b7e8aa5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 138.1.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:66:44:fd:fb:8e:33:e8:8d:d8:21:e7:91:c1:9a:58:a0:f4: 00:11:ae:3f:a9:80:13:8b:ed:ca:ee:fc:24:34:dc:bb:b8:6b: 1c:43:c3:b0:7d:eb:27:cd:6d:3c:ec:42:a5:39:37:ea:03:45: d4:45:db:73:28:26:c0:40:99:b3:0a:0d:7b:21:da:7d:8b:ee: 98:67:51:cd:13:10:0e:21:f1:e4:86:a8:77:b2:75:73:bd:ef: b0:0f:01:dd:60:7a:51:fd:47:de:66:37:11:2a:13:0a:f2:15: b1:58:35:c4:d5:9b:62:3c:ee:f3:2e:a6:c4:ad:6b:58:0d:84: 1a:d9:93:b6:ef:7f:f4:e7:ae:4a:71:76:f3:d7:fa:06:74:b9: 19:f0:a4:c7:2d:00:67:e5:bd:1b:f5:33:42:28:72:08:68:91: 44:e8:50:24:e6:4f:da:ac:44:95:d4:68:92:fa:25:ce:94:bf: a3:4a:4f:23:6d:4d:6a:8d:1e:77:81:2c:03:c4:3f:ff:17:4f: ca:92:67:b9:79:d7:0f:34:4f:06:dc:f5:69:bc:aa:a5:af:ad: 71:60:33:38:2f:ae:0d:b4:ae:e7:63:d5:c9:7c:34:65:4e:55: 95:2f:43:d5:82:a0:1f:ac:83:4c:2b:38:90:fb:90:07:c2:6d: de:5c:e2:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErvVcibSkwuDEd+vAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI1MDgyMTIzMTE0OFoXDTI1MTEyMDAwMTE0OFowLzEtMCsGA1UEAxMk M2ZhZGI0MjgtYzQxYS00Nzk3LTg1NTUtZjE2YmYzMGFkZjI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8WtTBIbZvQETQktLN44hPXuPo8UEc1vInnT SDvFxQHlBi3ye4ttuvvVi//K5TUCoqzr43A8NRiH2eTtH/WyoMK6rQU+jJC4mEy/ kLfUvvgr5/IJxRHP8JJEFhNAzpucc/Q+WtEU/W1D9iV3pJCBk5eeHuqLbaVq4EAH 41FlhiVLyYNog4NaVEuUfHX4ovdQglSG6WA3QkdIstjABqQB7U7FUxeIkZA45Sva a3UdyP39rM5F4WQpw0H2rvjvp5tcevAXRP69Susp0TgJS0GuFb6euI/+m8i1PfGt BgYH2Z9aQovoTk01nTPvZTkEYkPVc6FjOxRog+M0Vesu1/Q7/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFFfShS/s7/yvNDvfgYGu7YfPwpBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvNjcwMThiODAtNzRmNi0z ZTlhLTk0ODMtZjNjZjNiN2U4YWE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEigHQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAFmRP37jjPojdgh55HBmlig9AARrj+pgBOL7cru/CQ03Lu4axxDw7B9 6yfNbTzsQqU5N+oDRdRF23MoJsBAmbMKDXsh2n2L7phnUc0TEA4h8eSGqHeydXO9 77APAd1gelH9R95mNxEqEwryFbFYNcTVm2I87vMupsSta1gNhBrZk7bvf/Tnrkpx dvPX+gZ0uRnwpMctAGflvRv1M0IocghokUToUCTmT9qsRJXUaJL6Jc6Uv6NKTyNt TWqNHneBLAPEP/8XT8qSZ7l51w80Twbc9Wm8qqWvrXFgMzgvrg20rudj1cl8NGVO VZUvQ9WCoB+sg0wrOJD7kAfCbd5c4ho= -----END CERTIFICATE-----Generated at Sat Aug 23 15:55:05 2025 by rpki-client