$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/e6b9215b-9f20-3cc6-b755-623aa3a1a4da.roa File: e6b9215b-9f20-3cc6-b755-623aa3a1a4da.roa (raw, json) Hash identifier: v9IvmalzBP/WAUM1Mr3b/YNaHjPbjQDiXoJ9mYY4thM= Subject key identifier: 02:A3:F0:F0:46:3D:15:91:A1:94:00:07:61:67:0C:DF:ED:C3:F9:95 Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584AEEADC75E06A95F622F1F1680 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/e6b9215b-9f20-3cc6-b755-623aa3a1a4da.roa Signing time: Thu 21 Aug 2025 17:33:18 +0000 ROA not before: Thu 21 Aug 2025 17:33:18 +0000 ROA not after: Wed 19 Nov 2025 18:33:18 +0000 asID: 31898 IP address blocks: 138.1.96.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:ad:c7:5e:06:a9:5f:62:2f:1f:16:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Aug 21 17:33:18 2025 GMT Not After : Nov 19 18:33:18 2025 GMT Subject: CN=0a9602f6-6e4f-4f48-b705-f740a7023e04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:1f:4f:80:48:f1:36:4d:eb:a8:ed:76:0e:60: 9b:4f:7a:a3:c3:da:95:8a:3a:74:b1:ad:0e:23:d0: 0c:4c:97:96:30:e3:39:96:c0:1d:c8:47:4f:1e:59: c0:75:dc:72:53:c8:a6:63:52:43:4a:64:0b:b6:46: 1b:e1:4b:27:b8:9f:c7:38:e1:b7:25:d4:88:e0:d2: 21:9d:91:62:81:dd:67:d6:59:c8:98:bc:8f:97:83: 79:d1:33:95:c0:25:56:f7:d2:55:31:00:7e:bf:bc: fa:f5:27:ef:e5:28:28:0e:44:d9:37:38:2e:f4:db: d3:2f:2c:67:bd:d2:da:d5:11:e0:ea:37:00:91:14: d9:d7:52:00:58:ee:ee:c3:a2:94:3a:fd:66:6d:38: 29:b8:bf:06:bb:b6:f2:13:10:c5:47:1a:10:5a:e1: 3a:60:2e:9b:11:11:a3:9a:fa:20:74:3c:ff:76:69: 95:2e:9e:90:b9:c0:39:59:51:ff:31:b6:4d:ef:d9: c3:95:e9:81:d3:cd:c3:1a:28:f4:22:5f:d8:c4:8c: 0b:bb:9d:69:5e:c5:ce:0b:5b:b0:6d:50:eb:b1:5f: 70:0f:96:a8:8c:7b:20:ce:cb:c8:9b:3a:91:ea:2b: a1:7f:33:dc:1b:20:e4:1e:c5:eb:5a:c2:57:05:4a: ff:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:A3:F0:F0:46:3D:15:91:A1:94:00:07:61:67:0C:DF:ED:C3:F9:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/e6b9215b-9f20-3cc6-b755-623aa3a1a4da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 138.1.96.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:80:76:fc:72:b8:a5:54:f3:f5:02:4f:60:15:18:da:2b:0c: 9e:26:9e:8b:c3:cf:40:43:03:da:1a:86:bb:27:df:5f:4b:ed: ea:fb:a4:bb:4e:10:78:b9:8a:a3:28:1e:67:6b:24:1f:ad:67: 38:a2:d9:2d:c6:46:e4:19:83:2c:fe:4e:dd:27:3b:53:7c:9b: fa:0b:ce:98:a9:e6:9f:49:b8:0d:7d:48:6b:99:f4:30:5b:8d: 48:10:3a:0b:99:8d:23:d1:58:3e:e5:83:3c:b3:f3:4c:0e:d2: 3e:75:45:3e:73:22:a2:39:d4:ac:cd:36:a3:51:70:4a:eb:77: 2f:e2:c1:c2:84:18:f0:29:5a:fa:41:9c:de:db:b1:fc:9e:ef: 51:aa:98:7c:c8:ea:5b:90:6a:88:10:3d:46:fd:01:cc:eb:61: 43:e6:c3:e6:4a:7a:4d:b8:7f:94:e0:c2:a8:c7:22:92:d0:7c: 02:2b:c0:e6:35:91:24:38:95:dd:2e:e4:4e:79:d8:3c:46:91: da:27:4c:83:a3:d3:09:1e:bd:ea:99:33:72:d3:f3:d9:bb:23: f0:84:46:52:42:7e:cc:4f:66:ed:e1:c0:8c:9f:7c:db:17:af: fd:09:d7:af:6a:a7:b0:59:d2:0f:86:3d:0f:01:5e:95:14:d1: 89:58:ed:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErurcdeBqlfYi8fFoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI1MDgyMTE3MzMxOFoXDTI1MTExOTE4MzMxOFowLzEtMCsGA1UEAxMk MGE5NjAyZjYtNmU0Zi00ZjQ4LWI3MDUtZjc0MGE3MDIzZTA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuB9PgEjxNk3rqO12DmCbT3qjw9qVijp0sa0O I9AMTJeWMOM5lsAdyEdPHlnAddxyU8imY1JDSmQLtkYb4UsnuJ/HOOG3JdSI4NIh nZFigd1n1lnImLyPl4N50TOVwCVW99JVMQB+v7z69Sfv5SgoDkTZNzgu9NvTLyxn vdLa1RHg6jcAkRTZ11IAWO7uw6KUOv1mbTgpuL8Gu7byExDFRxoQWuE6YC6bERGj mvogdDz/dmmVLp6QucA5WVH/MbZN79nDlemB083DGij0Il/YxIwLu51pXsXOC1uw bVDrsV9wD5aojHsgzsvImzqR6iuhfzPcGyDkHsXrWsJXBUr/WwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAKj8PBGPRWRoZQAB2FnDN/tw/mVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvZTZiOTIxNWItOWYyMC0z Y2M2LWI3NTUtNjIzYWEzYTFhNGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCigFgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACOAdvxyuKVU8/UCT2AVGNorDJ4mnovDz0BDA9oahrsn319L7er7pLtO EHi5iqMoHmdrJB+tZzii2S3GRuQZgyz+Tt0nO1N8m/oLzpip5p9JuA19SGuZ9DBb jUgQOguZjSPRWD7lgzyz80wO0j51RT5zIqI51KzNNqNRcErrdy/iwcKEGPApWvpB nN7bsfye71GqmHzI6luQaogQPUb9AczrYUPmw+ZKek24f5TgwqjHIpLQfAIrwOY1 kSQ4ld0u5E552DxGkdonTIOj0wkeveqZM3LT89m7I/CERlJCfsxPZu3hwIyffNsX r/0J169qp7BZ0g+GPQ8BXpUU0YlY7WY= -----END CERTIFICATE-----Generated at Sat Aug 23 15:50:46 2025 by rpki-client