$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/a689957c-73d9-39c9-aa63-169e1dec2e34.roa File: a689957c-73d9-39c9-aa63-169e1dec2e34.roa (raw, json) Hash identifier: YIX1V+l95ubO45HHBofscobwltJaqLC88bq6JfHPFOE= Subject key identifier: 9F:9E:28:67:19:42:F5:E2:1D:67:73:11:67:E4:B4:19:3A:A1:76:C6 Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584AEF55D8AD45E4BE805E149040 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/a689957c-73d9-39c9-aa63-169e1dec2e34.roa Signing time: Thu 21 Aug 2025 23:11:56 +0000 ROA not before: Thu 21 Aug 2025 23:11:56 +0000 ROA not after: Thu 20 Nov 2025 00:11:56 +0000 asID: 31898 IP address blocks: 138.1.84.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ef:55:d8:ad:45:e4:be:80:5e:14:90:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Aug 21 23:11:56 2025 GMT Not After : Nov 20 00:11:56 2025 GMT Subject: CN=689328a8-1cad-4466-92d4-4bf2d6128d15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:56:b4:ea:ee:02:5b:99:a3:db:9f:bd:44:4b: 4f:44:74:ba:55:85:be:7f:84:e0:80:7c:59:49:4f: 6a:64:42:11:f1:af:da:c4:0b:af:79:9b:e2:c9:b9: 5a:9e:ee:e6:a7:a2:fe:4e:ce:bd:f1:19:ae:28:9c: a7:5c:56:22:e1:04:47:c8:a3:42:5f:64:2d:73:86: 5e:87:ad:c5:93:30:23:e7:cd:f9:d5:bc:9a:dc:5f: e2:48:0e:ca:58:ed:23:7c:0c:71:d5:0b:62:fc:df: fa:29:74:7f:05:bc:e6:cd:53:9e:bd:10:50:67:be: 36:38:4e:12:55:3c:49:09:9d:7d:89:49:4c:43:98: 20:59:fb:98:75:c8:5a:e1:a6:95:44:8f:5a:55:dd: b8:79:4d:36:8b:0f:34:11:cd:d8:82:42:c7:31:4a: fa:58:a4:9e:52:6d:04:87:3f:2c:ef:64:f5:b3:c1: 58:ce:9d:ae:18:3f:36:d7:8d:53:bb:7b:86:ac:82: 28:b2:3b:d6:53:78:96:7f:5f:6e:72:b2:89:28:ee: 72:3a:26:80:ec:8d:0b:80:ac:70:13:16:c7:65:dd: d3:3c:5d:3d:e3:a5:4d:76:5f:a6:5e:63:ec:09:93: fb:dc:40:37:7b:44:35:aa:21:7b:c5:3f:93:35:57: cd:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:9E:28:67:19:42:F5:E2:1D:67:73:11:67:E4:B4:19:3A:A1:76:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/a689957c-73d9-39c9-aa63-169e1dec2e34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 138.1.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:40:f5:45:e3:9b:d4:1c:ef:96:95:69:bf:77:8a:b1:38:41: d6:85:bb:f3:92:31:e6:82:78:ca:11:fb:e2:ce:54:78:0d:c8: bf:ee:d3:fd:d3:24:fd:71:a3:c2:49:2f:52:ee:e7:4d:b1:df: 0d:9b:d2:81:bc:48:3e:71:ee:62:24:5d:8a:42:58:76:1a:d1: e4:fc:79:35:45:26:27:99:6e:5b:91:b2:a0:d9:e5:3d:2c:c7: 8e:f5:26:ae:3b:ee:c4:2b:d6:d8:bb:bc:12:10:66:7a:3d:d3: 77:26:58:1c:32:ec:1a:4c:f6:5f:94:76:d3:2b:2a:9e:d3:ec: 2c:c4:32:0e:d4:a3:58:52:1f:8c:ce:c5:ae:48:3f:53:52:ad: 38:45:b6:ab:5b:d9:1b:de:0f:c9:1e:0e:c4:42:72:35:d1:49: fd:35:ce:a3:a7:d6:62:e2:67:f0:fc:7a:91:d2:1c:3f:31:e1: f6:76:0c:d8:c1:64:31:23:95:c5:eb:d8:8b:e3:14:83:a7:29: 90:ef:1b:05:22:12:32:f9:23:69:35:ef:62:9b:12:7a:9a:f1: 36:30:f1:63:04:db:8c:38:da:bb:6d:96:6b:7e:f3:11:a0:93: 65:e8:90:0f:a0:4a:64:51:38:af:11:68:f7:02:d6:d4:71:cd: f2:93:fd:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErvVditReS+gF4UkEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI1MDgyMTIzMTE1NloXDTI1MTEyMDAwMTE1NlowLzEtMCsGA1UEAxMk Njg5MzI4YTgtMWNhZC00NDY2LTkyZDQtNGJmMmQ2MTI4ZDE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvla06u4CW5mj25+9REtPRHS6VYW+f4TggHxZ SU9qZEIR8a/axAuveZviyblanu7mp6L+Ts698RmuKJynXFYi4QRHyKNCX2Qtc4Ze h63FkzAj58351bya3F/iSA7KWO0jfAxx1Qti/N/6KXR/BbzmzVOevRBQZ742OE4S VTxJCZ19iUlMQ5ggWfuYdcha4aaVRI9aVd24eU02iw80Ec3YgkLHMUr6WKSeUm0E hz8s72T1s8FYzp2uGD82141Tu3uGrIIosjvWU3iWf19ucrKJKO5yOiaA7I0LgKxw ExbHZd3TPF0946VNdl+mXmPsCZP73EA3e0Q1qiF7xT+TNVfNIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ+eKGcZQvXiHWdzEWfktBk6oXbGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvYTY4OTk1N2MtNzNkOS0z OWM5LWFhNjMtMTY5ZTFkZWMyZTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCigFUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACNA9UXjm9Qc75aVab93irE4QdaFu/OSMeaCeMoR++LOVHgNyL/u0/3T JP1xo8JJL1Lu502x3w2b0oG8SD5x7mIkXYpCWHYa0eT8eTVFJieZbluRsqDZ5T0s x471Jq477sQr1ti7vBIQZno903cmWBwy7BpM9l+UdtMrKp7T7CzEMg7Uo1hSH4zO xa5IP1NSrThFtqtb2RveD8keDsRCcjXRSf01zqOn1mLiZ/D8epHSHD8x4fZ2DNjB ZDEjlcXr2IvjFIOnKZDvGwUiEjL5I2k172KbEnqa8TYw8WME24w42rttlmt+8xGg k2XokA+gSmRROK8RaPcC1tRxzfKT/T0= -----END CERTIFICATE-----Generated at Sat Aug 23 17:57:15 2025 by rpki-client