$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/85b9f7ba-a53d-3665-ba4a-c8a6835f3433.roa File: 85b9f7ba-a53d-3665-ba4a-c8a6835f3433.roa (raw, json) Hash identifier: 8Mtd+A5lsLqNAmVahF5sprxlWhAQ2YICe0Cie/eYKEQ= Subject key identifier: C5:99:18:6C:43:EA:BC:62:DC:33:64:63:74:DF:10:81:85:DD:65:46 Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584AEEADC18DF7F1C63F76D55680 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/85b9f7ba-a53d-3665-ba4a-c8a6835f3433.roa Signing time: Thu 21 Aug 2025 17:33:15 +0000 ROA not before: Thu 21 Aug 2025 17:33:15 +0000 ROA not after: Wed 19 Nov 2025 18:33:15 +0000 asID: 31898 IP address blocks: 138.1.76.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:ad:c1:8d:f7:f1:c6:3f:76:d5:56:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Aug 21 17:33:15 2025 GMT Not After : Nov 19 18:33:15 2025 GMT Subject: CN=2592c97d-9328-48e5-a1c3-b6224c6cbd8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:20:87:8e:11:77:b9:59:73:90:78:37:5d:94: 7b:78:91:6e:00:db:5c:47:cc:8e:34:e5:01:c6:34: 6d:02:2b:fe:ce:11:0a:2a:45:bf:ca:1b:43:9c:09: d9:6d:17:87:9e:76:e5:ff:ad:74:1c:0b:c2:47:20: 94:5d:3e:e1:00:ba:f8:92:02:00:23:22:32:e8:63: 26:ad:1f:1a:2e:76:26:5e:62:cf:a5:47:fa:13:93: 22:a1:76:66:69:a4:1c:55:89:7a:06:79:26:28:d3: 49:82:80:a1:7f:00:47:89:7b:00:e6:fe:ce:a7:04: e8:ab:bd:ad:e3:b7:1c:d9:6a:17:1a:84:5e:e9:9d: 50:d3:57:7f:aa:a6:10:59:2a:f5:15:f9:ab:fa:70: 6b:1f:b9:0a:16:1b:db:bf:06:ad:09:17:64:e6:41: 55:7c:5b:06:36:3d:39:b7:87:be:2b:ab:48:d6:dd: 80:f0:74:d1:54:7e:89:bb:23:5c:e2:3e:83:8e:e0: 28:60:df:b6:66:ab:69:0b:93:d5:6f:f4:5e:64:88: 90:61:13:cb:6d:0a:ae:7e:1a:b5:9a:f7:56:42:43: 97:3b:2c:02:d5:eb:32:f6:eb:fa:27:2c:9a:0f:0a: 4d:f2:a8:f8:14:af:33:72:92:67:ab:c7:fe:4e:e9: fb:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:99:18:6C:43:EA:BC:62:DC:33:64:63:74:DF:10:81:85:DD:65:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/85b9f7ba-a53d-3665-ba4a-c8a6835f3433.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 138.1.76.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:51:04:f7:ac:f0:b4:d7:e8:4c:7a:12:63:88:12:b3:06:fd: 45:f8:be:9b:d2:4e:89:06:37:76:a9:ea:47:37:85:11:30:7e: cd:48:f5:b0:ad:3a:4a:2e:85:26:7d:be:03:af:54:2c:b1:27: e1:51:02:00:0b:4f:63:70:e4:91:8f:13:bc:5e:5e:8f:28:ee: 60:5d:61:7d:c8:02:76:ec:ca:84:ac:21:de:88:8d:8a:4e:76: f4:9c:79:1b:ec:d7:80:2c:cc:bd:0f:e4:60:88:2b:61:96:70: af:d3:ac:7c:f0:2e:0a:ee:3f:55:27:55:e0:da:2f:c6:1a:61: 40:b2:48:27:11:08:9b:3c:61:f9:35:ad:f8:28:23:f1:0a:db: d4:c4:d3:0d:28:15:89:e1:60:2b:2f:12:44:aa:f8:06:67:e5: 41:54:87:dd:67:3f:fa:d7:89:ce:26:8d:48:c7:20:6b:8c:a5: 1e:67:53:79:4d:29:7a:8a:94:52:b5:1c:c4:79:df:e2:8c:04: 3f:5c:a6:0a:d0:aa:67:cc:f9:95:38:dd:ba:ce:b2:ec:de:7b: 28:1b:a7:45:3b:4b:e1:c9:c8:69:3c:6a:11:75:92:d6:81:35: cb:3b:68:00:ba:18:8d:93:15:27:bc:b4:81:39:b2:2c:b9:39: 24:bc:ae:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErurcGN9/HGP3bVVoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI1MDgyMTE3MzMxNVoXDTI1MTExOTE4MzMxNVowLzEtMCsGA1UEAxMk MjU5MmM5N2QtOTMyOC00OGU1LWExYzMtYjYyMjRjNmNiZDhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3CCHjhF3uVlzkHg3XZR7eJFuANtcR8yONOUB xjRtAiv+zhEKKkW/yhtDnAnZbReHnnbl/610HAvCRyCUXT7hALr4kgIAIyIy6GMm rR8aLnYmXmLPpUf6E5MioXZmaaQcVYl6BnkmKNNJgoChfwBHiXsA5v7OpwToq72t 47cc2WoXGoRe6Z1Q01d/qqYQWSr1Ffmr+nBrH7kKFhvbvwatCRdk5kFVfFsGNj05 t4e+K6tI1t2A8HTRVH6JuyNc4j6DjuAoYN+2ZqtpC5PVb/ReZIiQYRPLbQqufhq1 mvdWQkOXOywC1esy9uv6JyyaDwpN8qj4FK8zcpJnq8f+Tun7iQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMWZGGxD6rxi3DNkY3TfEIGF3WVGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvODViOWY3YmEtYTUzZC0z NjY1LWJhNGEtYzhhNjgzNWYzNDMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCigFMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAtRBPes8LTX6Ex6EmOIErMG/UX4vpvSTokGN3ap6kc3hREwfs1I9bCt OkouhSZ9vgOvVCyxJ+FRAgALT2Nw5JGPE7xeXo8o7mBdYX3IAnbsyoSsId6IjYpO dvSceRvs14AszL0P5GCIK2GWcK/TrHzwLgruP1UnVeDaL8YaYUCySCcRCJs8Yfk1 rfgoI/EK29TE0w0oFYnhYCsvEkSq+AZn5UFUh91nP/rXic4mjUjHIGuMpR5nU3lN KXqKlFK1HMR53+KMBD9cpgrQqmfM+ZU43brOsuzeeygbp0U7S+HJyGk8ahF1ktaB Ncs7aAC6GI2TFSe8tIE5siy5OSS8rtM= -----END CERTIFICATE-----Generated at Sat Aug 23 16:00:30 2025 by rpki-client