$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/dcbee77f-0b9f-3f76-b677-9d188fef23aa.roa File: dcbee77f-0b9f-3f76-b677-9d188fef23aa.roa (raw, json) Hash identifier: rBzyl/xYFIwTSvJkY+DKihu+LddlDYyEneFTWxMnWcE= Subject key identifier: CF:EE:68:72:FA:49:BE:D0:B5:56:72:60:30:A9:AC:C1:C3:58:35:62 Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584AEEADB4B47D4B1E4151CC9100 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/dcbee77f-0b9f-3f76-b677-9d188fef23aa.roa Signing time: Thu 21 Aug 2025 17:33:09 +0000 ROA not before: Thu 21 Aug 2025 17:33:09 +0000 ROA not after: Wed 19 Nov 2025 18:33:09 +0000 asID: 31898 IP address blocks: 138.1.40.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:ad:b4:b4:7d:4b:1e:41:51:cc:91:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Aug 21 17:33:09 2025 GMT Not After : Nov 19 18:33:09 2025 GMT Subject: CN=3a267a68-fe1f-46c5-b4b5-8b52fb3f7c0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:d4:71:b0:b0:e9:06:99:66:a8:b1:79:25:85: 19:e1:53:1d:4d:73:53:0e:8d:d5:5f:22:d0:b4:b4: 04:8f:65:75:17:5f:81:b5:36:8c:86:35:65:f8:07: 10:d9:a2:32:42:48:78:10:b1:be:47:c7:e9:87:7f: 7c:b7:55:9f:94:b1:60:d4:49:c7:b8:07:47:5d:31: ea:86:d3:63:c4:89:f8:69:8a:37:10:10:ab:c9:93: 70:fa:4c:ac:fe:58:29:bd:fd:46:18:f5:f5:b2:0f: df:57:00:89:72:90:66:89:f0:23:34:f9:55:66:52: 03:2a:b2:72:2c:54:51:29:c1:1a:51:5c:e1:16:c9: ed:32:ea:16:1f:f8:a1:09:bb:e8:16:b0:cd:95:f3: 85:77:bb:30:da:58:c8:3a:6d:79:54:e9:63:27:d0: 99:75:a6:1c:49:6f:b0:2c:c0:1e:e6:10:e7:0d:a1: 0c:c8:1b:42:7d:60:5f:fe:be:fa:d1:7e:5f:10:53: 8a:1f:c1:24:ed:bb:b7:69:2b:2d:a0:b2:46:e7:f0: ba:22:df:5f:23:c3:89:8a:62:e1:89:2a:39:bb:48: 06:55:03:f3:92:7d:33:36:0a:64:75:05:28:8e:1b: 73:77:58:7c:d6:86:84:84:fe:47:30:86:12:af:66: 13:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:EE:68:72:FA:49:BE:D0:B5:56:72:60:30:A9:AC:C1:C3:58:35:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/dcbee77f-0b9f-3f76-b677-9d188fef23aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 138.1.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:95:0b:67:ae:fb:1c:86:e0:e3:10:2e:21:da:d8:c8:ae:4b: 82:3c:1c:75:b6:06:4f:03:94:c9:a6:a5:38:64:b5:9a:30:fe: 06:08:fd:5d:d3:73:ac:67:de:b1:b1:34:c2:f5:27:c4:d6:01: 90:25:02:3d:b5:7f:d5:e2:00:e0:d1:05:b1:5b:05:23:d0:1a: 8d:7e:93:18:18:02:76:cf:18:79:57:f5:df:ca:0c:d7:9e:2f: 9c:05:10:17:4e:d8:3c:e1:8c:ea:43:d4:50:26:c5:2d:4e:bf: 14:9b:d8:e0:56:fa:cf:f8:4c:d6:54:6b:6a:63:78:7d:7f:ef: 8c:97:2c:f8:70:8e:f1:6f:98:8c:55:e3:14:8e:4b:1b:bb:1f: 5a:8e:fb:4f:12:78:d3:5f:0c:e3:5f:c9:be:30:53:dd:1c:2a: 3e:8b:4b:2c:6f:b1:38:62:c9:34:1b:85:53:ac:49:89:6a:95: 40:04:1f:b6:b7:9e:45:6f:da:73:6f:3b:88:cf:a9:65:13:c7: 05:48:e5:01:29:42:b5:55:bb:8f:69:66:f9:47:09:b9:a1:5c: 96:47:3c:91:ba:e1:b4:1b:d3:74:4d:32:e2:3a:16:c9:4d:4a: 6d:72:6a:0b:37:43:57:02:4f:82:92:96:36:b6:81:28:83:01: 81:93:68:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErurbS0fUseQVHMkQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI1MDgyMTE3MzMwOVoXDTI1MTExOTE4MzMwOVowLzEtMCsGA1UEAxMk M2EyNjdhNjgtZmUxZi00NmM1LWI0YjUtOGI1MmZiM2Y3YzBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtRxsLDpBplmqLF5JYUZ4VMdTXNTDo3VXyLQ tLQEj2V1F1+BtTaMhjVl+AcQ2aIyQkh4ELG+R8fph398t1WflLFg1EnHuAdHXTHq htNjxIn4aYo3EBCryZNw+kys/lgpvf1GGPX1sg/fVwCJcpBmifAjNPlVZlIDKrJy LFRRKcEaUVzhFsntMuoWH/ihCbvoFrDNlfOFd7sw2ljIOm15VOljJ9CZdaYcSW+w LMAe5hDnDaEMyBtCfWBf/r760X5fEFOKH8Ek7bu3aSstoLJG5/C6It9fI8OJimLh iSo5u0gGVQPzkn0zNgpkdQUojhtzd1h81oaEhP5HMIYSr2YTKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM/uaHL6Sb7QtVZyYDCprMHDWDViMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvZGNiZWU3N2YtMGI5Zi0z Zjc2LWI2NzctOWQxODhmZWYyM2FhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDigEoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKaVC2eu+xyG4OMQLiHa2MiuS4I8HHW2Bk8DlMmmpThktZow/gYI/V3T c6xn3rGxNML1J8TWAZAlAj21f9XiAODRBbFbBSPQGo1+kxgYAnbPGHlX9d/KDNee L5wFEBdO2DzhjOpD1FAmxS1OvxSb2OBW+s/4TNZUa2pjeH1/74yXLPhwjvFvmIxV 4xSOSxu7H1qO+08SeNNfDONfyb4wU90cKj6LSyxvsThiyTQbhVOsSYlqlUAEH7a3 nkVv2nNvO4jPqWUTxwVI5QEpQrVVu49pZvlHCbmhXJZHPJG64bQb03RNMuI6FslN Sm1yags3Q1cCT4KSlja2gSiDAYGTaL4= -----END CERTIFICATE-----Generated at Sat Aug 23 16:25:59 2025 by rpki-client