$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/c9936526-b1d1-37e2-8f2a-94e5fec1d9e8.roa File: c9936526-b1d1-37e2-8f2a-94e5fec1d9e8.roa (raw, json) Hash identifier: W5rmjA1Pn3ACOOpgDu69azuRUUGQv2nJLOY90NZn2os= Subject key identifier: B4:BF:50:18:F7:46:72:0D:C3:DE:5C:DD:CD:5F:D6:BF:12:E0:90:93 Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584AEF55DE3EFB425784EDB9CD80 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/c9936526-b1d1-37e2-8f2a-94e5fec1d9e8.roa Signing time: Thu 21 Aug 2025 23:11:58 +0000 ROA not before: Thu 21 Aug 2025 23:11:58 +0000 ROA not after: Thu 20 Nov 2025 00:11:58 +0000 asID: 31898 IP address blocks: 138.1.92.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ef:55:de:3e:fb:42:57:84:ed:b9:cd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Aug 21 23:11:58 2025 GMT Not After : Nov 20 00:11:58 2025 GMT Subject: CN=4f53e987-6c5e-4757-ade9-ac2d6d8e665d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:d6:7b:b8:e0:3a:58:4e:3c:aa:26:df:13:60: e7:8a:63:57:1e:b0:6a:08:92:be:38:b8:9a:99:0f: be:97:2c:59:41:7e:6f:b2:3a:d8:ee:a2:d0:4a:46: 43:81:da:9d:99:64:81:be:78:12:db:89:88:ed:36: b8:e4:56:06:60:27:6c:c0:33:da:ca:c9:29:e1:b6: 5e:7f:f6:18:50:c0:81:96:46:e7:51:68:ab:73:98: f6:b8:3e:76:bd:7e:53:96:b5:14:22:9f:57:24:58: 08:0c:76:6e:70:2f:76:41:c0:0a:34:c3:28:a7:60: b7:3d:cf:3d:83:17:f0:56:ff:10:3a:9c:3c:ca:e9: ab:18:bd:ba:a8:ff:2a:48:72:e5:b5:af:da:20:41: 6b:e4:3e:96:0e:b9:7e:ae:05:38:29:98:f2:06:ac: 48:e4:68:8a:75:8f:f8:53:ac:6a:ce:da:77:59:5f: 43:8d:9e:79:fa:9b:0f:d6:cc:99:4d:e3:13:9c:4c: c8:a7:4d:f1:cb:dc:75:2a:6b:e3:e4:1a:f9:c0:ff: 9c:f8:8e:a2:f6:e1:bb:85:63:99:00:29:13:f0:02: 4a:69:0c:e9:c3:e9:39:c7:bc:d5:31:bb:b7:35:9b: 21:39:fb:92:ea:90:63:db:fb:22:bb:b2:5b:92:1a: d0:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:BF:50:18:F7:46:72:0D:C3:DE:5C:DD:CD:5F:D6:BF:12:E0:90:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/c9936526-b1d1-37e2-8f2a-94e5fec1d9e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 138.1.92.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:eb:db:7b:8a:ee:e8:85:5c:0f:25:a0:83:4e:18:03:ab:f8: 75:2c:02:90:0f:31:d9:59:76:80:4f:59:73:bf:78:29:81:db: 89:13:8b:b0:d2:61:49:22:23:45:26:eb:3c:aa:a5:e4:51:17: c5:1d:58:80:ec:eb:48:1e:e8:87:88:14:a3:cf:30:e1:aa:57: 31:27:2a:f0:a1:3b:fc:d4:3e:c7:43:b8:50:7b:3d:f2:76:98: 9e:c7:70:72:5f:55:2c:b1:c8:95:2d:e4:06:d4:66:f0:28:bf: 26:10:0a:59:46:43:78:0a:2e:fe:6a:a1:d5:73:3a:dd:f4:92: cc:82:7f:fb:b1:63:cb:84:99:e2:f0:3f:8b:a9:e5:96:6f:30: 18:f2:97:e9:89:56:7b:f5:24:dc:10:07:cb:45:a0:f8:be:91: fe:7d:12:f3:14:0d:a3:fb:54:46:43:89:cf:02:9d:a1:c2:a9: 6a:bc:3c:72:ad:b9:5a:24:f4:fc:a3:45:ba:7a:1c:a9:7d:51: 71:60:36:2d:3a:02:ba:43:76:79:1b:65:52:cf:f5:81:30:26: e5:c8:85:7a:2b:fb:b4:89:08:90:b7:34:3f:d7:af:1a:f1:72: 1f:1a:a1:c3:68:02:93:2d:d9:96:8a:fd:b0:8d:aa:21:a7:36: 97:ba:bf:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErvVd4++0JXhO25zYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI1MDgyMTIzMTE1OFoXDTI1MTEyMDAwMTE1OFowLzEtMCsGA1UEAxMk NGY1M2U5ODctNmM1ZS00NzU3LWFkZTktYWMyZDZkOGU2NjVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNZ7uOA6WE48qibfE2DnimNXHrBqCJK+OLia mQ++lyxZQX5vsjrY7qLQSkZDgdqdmWSBvngS24mI7Ta45FYGYCdswDPayskp4bZe f/YYUMCBlkbnUWirc5j2uD52vX5TlrUUIp9XJFgIDHZucC92QcAKNMMop2C3Pc89 gxfwVv8QOpw8yumrGL26qP8qSHLlta/aIEFr5D6WDrl+rgU4KZjyBqxI5GiKdY/4 U6xqztp3WV9DjZ55+psP1syZTeMTnEzIp03xy9x1Kmvj5Br5wP+c+I6i9uG7hWOZ ACkT8AJKaQzpw+k5x7zVMbu3NZshOfuS6pBj2/siu7JbkhrQIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLS/UBj3RnINw95c3c1f1r8S4JCTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvYzk5MzY1MjYtYjFkMS0z N2UyLThmMmEtOTRlNWZlYzFkOWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCigFcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGbr23uK7uiFXA8loINOGAOr+HUsApAPMdlZdoBPWXO/eCmB24kTi7DS YUkiI0Um6zyqpeRRF8UdWIDs60ge6IeIFKPPMOGqVzEnKvChO/zUPsdDuFB7PfJ2 mJ7HcHJfVSyxyJUt5AbUZvAovyYQCllGQ3gKLv5qodVzOt30ksyCf/uxY8uEmeLw P4up5ZZvMBjyl+mJVnv1JNwQB8tFoPi+kf59EvMUDaP7VEZDic8CnaHCqWq8PHKt uVok9PyjRbp6HKl9UXFgNi06ArpDdnkbZVLP9YEwJuXIhXor+7SJCJC3ND/Xrxrx ch8aocNoApMt2ZaK/bCNqiGnNpe6vwc= -----END CERTIFICATE-----Generated at Sat Aug 23 15:42:33 2025 by rpki-client