$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/9a160e7b-6dd4-3ff5-97ef-984437ea4e07.roa File: 9a160e7b-6dd4-3ff5-97ef-984437ea4e07.roa (raw, json) Hash identifier: 72dvzCrzGP+T0leG6WdQsepUaL2wgnd9i76tm4qGaVE= Subject key identifier: 21:B9:A8:E5:63:E4:C5:45:25:28:D3:AE:20:27:9A:1C:CD:03:9B:6C Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584AEEADA16A8021F0BF25B81C00 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/9a160e7b-6dd4-3ff5-97ef-984437ea4e07.roa Signing time: Thu 21 Aug 2025 17:33:00 +0000 ROA not before: Thu 21 Aug 2025 17:33:00 +0000 ROA not after: Wed 19 Nov 2025 18:33:00 +0000 asID: 31898 IP address blocks: 138.1.104.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:ad:a1:6a:80:21:f0:bf:25:b8:1c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Aug 21 17:33:00 2025 GMT Not After : Nov 19 18:33:00 2025 GMT Subject: CN=a0b2a504-183a-4a04-9642-4bed94e036a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:78:8a:33:a5:8a:94:7c:4e:13:ac:df:dc:11: c2:a1:bd:b0:af:ca:e9:90:de:ca:77:63:ac:64:37: de:16:8c:f5:5e:ab:73:6e:69:9c:d7:56:68:13:bf: 48:9c:db:f2:2c:49:c3:8a:59:1a:88:9b:e3:54:89: b4:40:aa:d3:db:32:2f:41:71:0a:56:c2:3d:dd:68: 43:a8:f5:21:19:14:c9:59:dc:76:c4:04:24:57:f9: 75:c4:1e:3f:88:59:5d:d2:9c:57:b3:78:5b:2b:eb: 5b:d3:74:a8:76:30:8b:1d:4a:d1:80:c2:f9:94:c2: 0c:7b:63:2a:f9:71:e6:ec:f8:f5:d6:fa:b8:00:e6: 8d:69:60:a9:d2:e9:03:95:fb:9c:74:51:51:42:a7: f7:4a:05:56:34:37:5d:2c:01:c0:ca:f2:cf:7f:07: 96:e0:ba:58:c5:8f:99:28:44:1a:9f:50:be:62:0b: 88:dc:30:6c:c7:56:cc:fd:3e:c1:c0:42:3c:5c:5c: a3:4e:3b:56:d1:4f:a2:cb:4d:80:c7:0b:36:3c:93: 3f:3a:75:90:d8:84:0d:d4:5b:49:1f:01:f8:53:12: 61:b8:f2:b1:ba:18:99:45:a3:75:ea:43:0d:5a:c2: 74:1d:6f:1e:b8:02:6e:7a:5d:34:41:9c:1b:4b:56: 4a:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:B9:A8:E5:63:E4:C5:45:25:28:D3:AE:20:27:9A:1C:CD:03:9B:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/9a160e7b-6dd4-3ff5-97ef-984437ea4e07.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 138.1.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:17:d7:43:47:5b:e0:02:d2:4b:84:bd:08:8a:1c:c1:f3:5f: 63:ab:ab:c9:39:25:22:9b:40:1a:ee:c5:3c:01:cc:62:11:97: 71:73:c8:4e:45:27:37:d9:aa:03:4f:16:ac:4c:07:fc:85:2f: ab:43:79:e6:fa:73:68:e3:e9:79:00:14:ea:e0:2a:1f:92:05: 30:de:eb:a6:69:d6:da:2b:ca:22:03:4f:e1:71:d4:06:f8:ea: 71:cc:a8:c1:2c:ab:00:3f:b9:77:ca:51:e7:0a:cc:07:d8:e9: c5:b8:07:35:34:a4:eb:f3:24:eb:04:17:25:e3:49:85:2f:12: 05:d5:f8:88:d9:0b:e3:a0:99:ab:de:1a:0c:02:a4:5a:d5:d1: e7:bd:76:0c:48:d0:de:a5:da:a0:d6:cd:dd:71:2d:39:e8:bc: a4:97:5e:74:fc:32:3d:f2:cd:f3:56:9b:45:f5:e9:a8:78:3e: 0e:41:1a:31:9a:b3:fa:8f:ca:af:9b:31:49:aa:aa:ec:f7:32: 91:48:f5:4f:24:f8:af:09:34:b3:c8:a9:a7:a7:8d:51:f4:c7: dd:d7:ea:5d:24:4c:bb:aa:9e:11:69:87:bf:c9:02:40:6e:e9: 93:16:d2:f7:62:0c:79:a5:8c:ce:a1:d4:eb:a1:d6:3e:d3:2a: a6:79:a9:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEruraFqgCHwvyW4HAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI1MDgyMTE3MzMwMFoXDTI1MTExOTE4MzMwMFowLzEtMCsGA1UEAxMk YTBiMmE1MDQtMTgzYS00YTA0LTk2NDItNGJlZDk0ZTAzNmE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgniKM6WKlHxOE6zf3BHCob2wr8rpkN7Kd2Os ZDfeFoz1Xqtzbmmc11ZoE79InNvyLEnDilkaiJvjVIm0QKrT2zIvQXEKVsI93WhD qPUhGRTJWdx2xAQkV/l1xB4/iFld0pxXs3hbK+tb03SodjCLHUrRgML5lMIMe2Mq +XHm7Pj11vq4AOaNaWCp0ukDlfucdFFRQqf3SgVWNDddLAHAyvLPfweW4LpYxY+Z KEQan1C+YguI3DBsx1bM/T7BwEI8XFyjTjtW0U+iy02Axws2PJM/OnWQ2IQN1FtJ HwH4UxJhuPKxuhiZRaN16kMNWsJ0HW8euAJuel00QZwbS1ZK9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCG5qOVj5MVFJSjTriAnmhzNA5tsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvOWExNjBlN2ItNmRkNC0z ZmY1LTk3ZWYtOTg0NDM3ZWE0ZTA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDigFoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAcX10NHW+AC0kuEvQiKHMHzX2Orq8k5JSKbQBruxTwBzGIRl3FzyE5F JzfZqgNPFqxMB/yFL6tDeeb6c2jj6XkAFOrgKh+SBTDe66Zp1toryiIDT+Fx1Ab4 6nHMqMEsqwA/uXfKUecKzAfY6cW4BzU0pOvzJOsEFyXjSYUvEgXV+IjZC+Ogmave GgwCpFrV0ee9dgxI0N6l2qDWzd1xLTnovKSXXnT8Mj3yzfNWm0X16ah4Pg5BGjGa s/qPyq+bMUmqquz3MpFI9U8k+K8JNLPIqaenjVH0x93X6l0kTLuqnhFph7/JAkBu 6ZMW0vdiDHmljM6h1Ouh1j7TKqZ5qTc= -----END CERTIFICATE-----Generated at Sat Aug 23 16:23:56 2025 by rpki-client