$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/8c902e46-b21f-3030-b0df-bde4fc7464f8.roa File: 8c902e46-b21f-3030-b0df-bde4fc7464f8.roa (raw, json) Hash identifier: hTxLoZv6pQuGXWSofB4bkshHnlHKvSlskHjv87HkpWg= Subject key identifier: AC:4D:DB:8F:E6:D9:78:C2:25:8D:FB:EA:85:26:D3:8C:AB:CC:2E:F3 Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584AEEADBA09833746242226D780 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/8c902e46-b21f-3030-b0df-bde4fc7464f8.roa Signing time: Thu 21 Aug 2025 17:33:11 +0000 ROA not before: Thu 21 Aug 2025 17:33:11 +0000 ROA not after: Wed 19 Nov 2025 18:33:11 +0000 asID: 31898 IP address blocks: 138.1.68.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:ad:ba:09:83:37:46:24:22:26:d7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Aug 21 17:33:11 2025 GMT Not After : Nov 19 18:33:11 2025 GMT Subject: CN=83cdffa8-2cba-4701-91bc-b4f67bca0f06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b0:8a:e9:a0:13:ac:e4:de:94:27:b6:14:0d: ce:75:2a:c5:28:9f:38:fe:bd:b7:85:a2:36:af:31: 0f:6a:73:7f:f0:6f:ca:23:35:ba:bc:fd:7b:11:1a: 47:c1:22:50:1f:23:02:8f:3d:06:97:57:71:eb:5d: d0:0e:af:58:c4:7b:90:97:a7:92:10:fb:3e:da:c2: 72:19:48:16:0d:ef:54:20:00:76:73:0d:a3:dd:43: 84:57:26:b6:79:9e:ae:c3:3d:ab:89:89:d4:ed:f0: b9:e4:f3:23:a7:93:4b:62:49:1e:84:0c:3a:45:84: 55:0e:b9:a5:14:f2:ea:6b:ac:99:ad:3f:b7:d6:21: 87:81:a0:9a:65:f0:bc:c7:4d:78:87:d8:08:45:83: f5:88:72:41:11:c6:dd:ae:e8:2a:84:14:a7:26:68: b9:12:e6:59:52:d9:79:a0:0b:18:e8:48:56:ee:1f: 75:bf:1d:50:74:04:53:80:f0:73:24:db:fa:a7:81: 5e:bd:8a:80:a2:e4:08:68:5a:ab:a6:af:28:5b:ab: 83:c2:37:60:c9:e9:5e:56:6f:22:0f:9f:06:a7:a2: 68:9a:0f:1d:b4:72:2a:ee:96:62:8c:ba:38:20:35: e4:ba:84:83:59:45:a8:df:8c:00:e1:ef:46:b3:29: fd:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:4D:DB:8F:E6:D9:78:C2:25:8D:FB:EA:85:26:D3:8C:AB:CC:2E:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/8c902e46-b21f-3030-b0df-bde4fc7464f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 138.1.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:60:86:01:2a:a1:5e:7b:ee:35:0d:03:af:8d:97:a1:3c:74: 9e:41:af:12:b8:8b:34:6e:86:69:ff:6f:24:d1:88:c2:98:54: 2d:f9:99:bb:59:a6:7c:1b:e9:26:39:e1:88:86:c3:a7:ef:93: 2f:21:66:6f:14:4e:7f:44:fc:2c:bc:7e:f1:52:f6:29:6c:9f: 41:ce:a4:f1:1d:aa:c1:a5:2f:94:d9:e5:d2:17:78:24:4a:6e: 51:38:ce:6b:3b:ad:34:f0:d2:0b:2c:01:7d:b9:da:df:b1:4c: 24:fd:ca:67:55:22:c9:ee:c7:a5:67:f1:31:a5:f0:27:72:60: 08:b7:2a:ac:67:4a:8d:70:47:ce:c2:ad:1e:56:56:a7:a5:e4: 7d:22:a2:c0:56:d0:2c:fb:3a:a6:05:ec:d2:3c:e3:38:b1:dd: d7:51:1e:cc:a5:17:2e:17:92:d7:80:12:1f:38:64:a9:7e:56: 10:d8:6e:0d:7b:84:f9:cf:ee:4c:2b:82:8d:b3:fb:94:6c:de: 3f:95:1d:81:05:04:ac:43:c5:36:ca:aa:08:ef:75:e0:b2:4f: 90:e8:fd:21:70:61:da:d4:c0:a2:a9:7f:01:86:b9:a6:42:6a: a0:0a:24:97:4f:c7:67:20:b2:82:de:f3:db:82:cc:c9:d2:09: 60:7e:e9:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErurboJgzdGJCIm14AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI1MDgyMTE3MzMxMVoXDTI1MTExOTE4MzMxMVowLzEtMCsGA1UEAxMk ODNjZGZmYTgtMmNiYS00NzAxLTkxYmMtYjRmNjdiY2EwZjA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7CK6aATrOTelCe2FA3OdSrFKJ84/r23haI2 rzEPanN/8G/KIzW6vP17ERpHwSJQHyMCjz0Gl1dx613QDq9YxHuQl6eSEPs+2sJy GUgWDe9UIAB2cw2j3UOEVya2eZ6uwz2riYnU7fC55PMjp5NLYkkehAw6RYRVDrml FPLqa6yZrT+31iGHgaCaZfC8x014h9gIRYP1iHJBEcbdrugqhBSnJmi5EuZZUtl5 oAsY6EhW7h91vx1QdARTgPBzJNv6p4FevYqAouQIaFqrpq8oW6uDwjdgyeleVm8i D58Gp6Jomg8dtHIq7pZijLo4IDXkuoSDWUWo34wA4e9Gsyn9hQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKxN24/m2XjCJY376oUm04yrzC7zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvOGM5MDJlNDYtYjIxZi0z MDMwLWIwZGYtYmRlNGZjNzQ2NGY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCigFEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHNghgEqoV577jUNA6+Nl6E8dJ5BrxK4izRuhmn/byTRiMKYVC35mbtZ pnwb6SY54YiGw6fvky8hZm8UTn9E/Cy8fvFS9ilsn0HOpPEdqsGlL5TZ5dIXeCRK blE4zms7rTTw0gssAX252t+xTCT9ymdVIsnux6Vn8TGl8CdyYAi3KqxnSo1wR87C rR5WVqel5H0iosBW0Cz7OqYF7NI84zix3ddRHsylFy4XkteAEh84ZKl+VhDYbg17 hPnP7kwrgo2z+5Rs3j+VHYEFBKxDxTbKqgjvdeCyT5Do/SFwYdrUwKKpfwGGuaZC aqAKJJdPx2cgsoLe89uCzMnSCWB+6UY= -----END CERTIFICATE-----Generated at Sat Aug 23 16:26:50 2025 by rpki-client