$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/8f4fd58a-3135-3fa4-8496-60e3143a2363.roa File: 8f4fd58a-3135-3fa4-8496-60e3143a2363.roa (raw, json) Hash identifier: t+oBJGkFanenzjtDatZgKp33TMdt8losdGRCmevrYWU= Subject key identifier: EC:4B:3C:86:DA:CA:A6:D1:96:34:E6:EE:C4:ED:6F:5D:80:6B:0D:33 Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584AEF55CB37B2A3F5B9E2F10600 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/8f4fd58a-3135-3fa4-8496-60e3143a2363.roa Signing time: Thu 21 Aug 2025 23:11:49 +0000 ROA not before: Thu 21 Aug 2025 23:11:49 +0000 ROA not after: Thu 20 Nov 2025 00:11:49 +0000 asID: 31898 IP address blocks: 138.1.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ef:55:cb:37:b2:a3:f5:b9:e2:f1:06:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Aug 21 23:11:49 2025 GMT Not After : Nov 20 00:11:49 2025 GMT Subject: CN=0246b875-730c-47de-8068-f55cf7921517 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:1e:9e:43:e0:db:dc:98:f6:7f:16:09:54:a5: 65:fd:0f:de:12:b7:c0:db:fa:60:0d:0e:fd:62:09: 0e:cf:2b:c5:4e:1a:76:76:43:b9:b6:ff:78:bc:5a: 0c:38:7c:94:38:9f:42:bc:04:aa:8a:68:0d:5b:2d: 6b:1d:1b:08:59:53:93:7f:53:01:cd:b6:88:b3:01: 45:27:16:08:14:12:4d:35:63:ac:68:bb:4c:8f:ff: 9b:83:6b:6b:d4:db:17:d8:05:8c:37:21:ae:17:dd: 26:2c:36:89:22:fd:e6:41:eb:78:5e:8a:89:fb:e8: 5f:19:c1:3c:2f:a8:01:a4:72:b8:bc:a5:60:f0:e3: 2d:16:85:8f:0e:19:14:b2:61:2d:86:4b:9e:cd:6d: 8b:7b:5a:c1:1a:62:16:6a:d1:17:4d:04:73:ac:08: 48:58:3d:5e:6a:1d:f9:46:29:08:4a:d6:cb:67:87: 6e:ce:55:5a:b8:32:7b:df:f0:94:66:aa:cf:da:0d: 10:af:b4:31:32:82:25:e1:80:05:07:b6:4f:cb:0c: db:bd:c0:83:a3:45:6f:38:75:cf:72:46:4f:a3:59: 54:13:d6:8c:bc:d4:07:6a:bb:91:44:63:0b:4e:8e: 69:4c:58:5a:88:20:69:4d:90:4f:71:66:d0:ae:ed: 3e:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:4B:3C:86:DA:CA:A6:D1:96:34:E6:EE:C4:ED:6F:5D:80:6B:0D:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/8f4fd58a-3135-3fa4-8496-60e3143a2363.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 138.1.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:9c:b7:6d:ee:f4:e4:c4:e0:55:01:61:0d:f8:e7:a1:b5:9b: 8f:e2:0a:97:93:16:e6:88:89:78:94:7b:3b:1f:b9:a7:35:a7: ab:fd:59:19:fc:d5:4b:90:64:3c:64:16:fa:a6:b2:02:9d:17: 29:0a:de:45:d8:d4:6d:62:10:e5:0c:ad:49:28:d2:48:81:9c: 19:4a:13:db:b7:59:08:e8:f5:a8:8a:9c:e5:11:f5:fd:52:08: ed:f5:5a:65:06:b9:b7:98:dc:e2:2b:2a:f6:8d:6e:46:51:ec: 77:1a:7f:83:bc:3b:04:ee:0f:2a:3f:a9:1b:6f:b4:50:bf:5f: 3d:a4:44:78:51:7b:7f:d6:6c:04:ec:45:14:41:d4:74:a8:a7: a2:6b:40:81:5d:fb:70:f3:aa:8c:71:95:62:09:e7:96:37:7d: 72:ab:02:b4:87:dc:06:69:67:ca:2f:cf:a4:48:9b:0b:4b:67: 7c:70:f4:7c:a0:ec:3d:e4:ad:b6:54:b1:cb:25:70:95:4f:d7: 20:79:e4:3a:10:d9:22:ea:e9:50:77:a4:53:dc:a3:80:8b:2e: 59:f7:8e:fe:16:59:c6:44:ff:e5:b6:ba:95:00:36:2a:94:23: 0c:d4:ed:54:ef:be:dc:4b:66:84:74:b9:89:6c:57:7a:0a:a2: 4f:59:8c:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErvVcs3sqP1ueLxBgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI1MDgyMTIzMTE0OVoXDTI1MTEyMDAwMTE0OVowLzEtMCsGA1UEAxMk MDI0NmI4NzUtNzMwYy00N2RlLTgwNjgtZjU1Y2Y3OTIxNTE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlh6eQ+Db3Jj2fxYJVKVl/Q/eErfA2/pgDQ79 YgkOzyvFThp2dkO5tv94vFoMOHyUOJ9CvASqimgNWy1rHRsIWVOTf1MBzbaIswFF JxYIFBJNNWOsaLtMj/+bg2tr1NsX2AWMNyGuF90mLDaJIv3mQet4XoqJ++hfGcE8 L6gBpHK4vKVg8OMtFoWPDhkUsmEthkuezW2Le1rBGmIWatEXTQRzrAhIWD1eah35 RikIStbLZ4duzlVauDJ73/CUZqrP2g0Qr7QxMoIl4YAFB7ZPywzbvcCDo0VvOHXP ckZPo1lUE9aMvNQHaruRRGMLTo5pTFhaiCBpTZBPcWbQru0+VQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOxLPIbayqbRljTm7sTtb12Aaw0zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvOGY0ZmQ1OGEtMzEzNS0z ZmE0LTg0OTYtNjBlMzE0M2EyMzYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEigHgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD+ct23u9OTE4FUBYQ3456G1m4/iCpeTFuaIiXiUezsfuac1p6v9WRn8 1UuQZDxkFvqmsgKdFykK3kXY1G1iEOUMrUko0kiBnBlKE9u3WQjo9aiKnOUR9f1S CO31WmUGubeY3OIrKvaNbkZR7Hcaf4O8OwTuDyo/qRtvtFC/Xz2kRHhRe3/WbATs RRRB1HSop6JrQIFd+3DzqoxxlWIJ55Y3fXKrArSH3AZpZ8ovz6RImwtLZ3xw9Hyg 7D3krbZUscslcJVP1yB55DoQ2SLq6VB3pFPco4CLLln3jv4WWcZE/+W2upUANiqU IwzU7VTvvtxLZoR0uYlsV3oKok9ZjII= -----END CERTIFICATE-----Generated at Sat Aug 23 16:38:17 2025 by rpki-client