$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/f19aef8c-221c-3d3c-83dc-f3b59bf1a641.roa File: f19aef8c-221c-3d3c-83dc-f3b59bf1a641.roa (raw, json) Hash identifier: gawjDXCsUhZIoZLl8cyydUscZZq/uhdFaVhx8u49Qw8= Subject key identifier: 93:B4:91:E4:BB:7A:73:54:FA:A6:FD:53:96:2C:C8:65:0E:AD:89:66 Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584AEEAD9EB8ED781100F8885340 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/f19aef8c-221c-3d3c-83dc-f3b59bf1a641.roa Signing time: Thu 21 Aug 2025 17:32:58 +0000 ROA not before: Thu 21 Aug 2025 17:32:58 +0000 ROA not after: Wed 19 Nov 2025 18:32:58 +0000 asID: 31898 IP address blocks: 138.1.100.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:ad:9e:b8:ed:78:11:00:f8:88:53:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Aug 21 17:32:58 2025 GMT Not After : Nov 19 18:32:58 2025 GMT Subject: CN=3a3bf8f2-7566-4c2d-abe9-9dc936debc4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:19:27:dd:bd:16:1e:60:d6:4d:90:b4:78:de: 03:a0:7c:f9:b5:2c:2b:4b:60:a8:8a:db:3f:d5:0c: 01:02:2d:2f:d2:ad:c0:a0:5e:d5:b2:e1:85:f8:42: be:83:25:9a:9b:fc:41:d8:4f:fe:75:84:9b:cc:12: f6:bf:34:80:0b:b3:51:93:87:4d:26:cd:7e:a4:48: 4c:08:28:bb:e0:b5:7d:33:a3:af:5f:a9:1a:16:1f: 4a:fe:34:93:aa:b9:18:ee:c9:57:d1:a5:dc:8d:96: da:b3:6d:34:c7:2a:8d:d9:a1:e9:6c:79:fb:44:7f: f6:a2:7d:b7:56:8a:9d:9e:50:d2:82:95:a4:95:9f: 83:d1:6e:29:d8:01:ab:d4:66:9a:39:05:b0:76:89: cf:08:c1:81:0c:e2:2e:80:ae:b3:d4:52:b9:7d:64: 3a:89:1f:2a:51:9f:6f:4b:30:20:69:cc:67:ae:62: 4d:ed:aa:22:0f:c2:38:1d:59:2a:90:04:f8:3a:6e: 6e:29:bb:c3:55:b3:0f:7f:23:fa:32:de:8b:99:be: cb:2d:60:1e:8d:a9:39:35:7b:b6:42:a7:66:99:53: dc:81:ba:16:24:7d:6e:2d:7a:96:b1:f2:52:a2:68: c9:82:e9:ec:34:75:11:3c:55:40:e3:1a:e9:a6:b8: 81:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:B4:91:E4:BB:7A:73:54:FA:A6:FD:53:96:2C:C8:65:0E:AD:89:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/f19aef8c-221c-3d3c-83dc-f3b59bf1a641.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 138.1.100.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:15:0a:56:d2:b8:95:9c:aa:96:6c:42:ff:cc:17:90:0c:f7: 28:a8:80:ee:36:2f:28:16:e6:72:f2:71:c5:f3:f5:0e:6b:d9: 11:8a:95:86:2a:c2:78:df:9b:88:ca:f6:10:9a:ff:4e:c1:32: 81:96:54:09:3f:66:a6:22:04:68:fb:0d:d7:32:e9:2e:28:49: 21:73:55:06:ef:d2:5c:b0:d6:6b:0e:12:2a:52:87:48:8a:fd: 43:a8:6b:f8:92:02:13:9e:90:da:6f:9d:40:99:26:30:93:0d: 95:3b:12:49:d8:e3:50:bb:77:06:9f:40:b8:f3:90:0c:ba:f8: 2e:12:77:9d:1e:bc:fe:37:49:6c:a0:77:77:31:c8:48:da:b7: a0:8e:cf:01:74:ee:b4:76:7c:f6:1a:a3:8a:42:ed:00:fc:14: 84:5f:e0:e9:7f:ae:47:0a:33:03:3f:f0:fa:83:f0:f2:5e:c3: db:cd:a1:04:22:31:53:17:04:fe:00:df:d4:1b:80:56:2c:bc: 82:ae:0b:75:2f:6b:21:39:41:de:b1:e0:d9:2f:b8:ab:b7:d8: 7a:b3:41:60:bd:3f:fc:81:a4:62:f6:99:83:fa:b0:68:49:72: 9a:32:f1:7e:97:4a:af:9b:c3:ae:da:12:19:6e:e0:98:48:53: 13:fe:c8:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErurZ647XgRAPiIU0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI1MDgyMTE3MzI1OFoXDTI1MTExOTE4MzI1OFowLzEtMCsGA1UEAxMk M2EzYmY4ZjItNzU2Ni00YzJkLWFiZTktOWRjOTM2ZGViYzRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5hkn3b0WHmDWTZC0eN4DoHz5tSwrS2Coits/ 1QwBAi0v0q3AoF7VsuGF+EK+gyWam/xB2E/+dYSbzBL2vzSAC7NRk4dNJs1+pEhM CCi74LV9M6OvX6kaFh9K/jSTqrkY7slX0aXcjZbas200xyqN2aHpbHn7RH/2on23 VoqdnlDSgpWklZ+D0W4p2AGr1GaaOQWwdonPCMGBDOIugK6z1FK5fWQ6iR8qUZ9v SzAgacxnrmJN7aoiD8I4HVkqkAT4Om5uKbvDVbMPfyP6Mt6Lmb7LLWAejak5NXu2 QqdmmVPcgboWJH1uLXqWsfJSomjJgunsNHURPFVA4xrppriBswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJO0keS7enNU+qb9U5YsyGUOrYlmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvZjE5YWVmOGMtMjIxYy0z ZDNjLTgzZGMtZjNiNTliZjFhNjQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCigFkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGMVClbSuJWcqpZsQv/MF5AM9yiogO42LygW5nLyccXz9Q5r2RGKlYYq wnjfm4jK9hCa/07BMoGWVAk/ZqYiBGj7Ddcy6S4oSSFzVQbv0lyw1msOEipSh0iK /UOoa/iSAhOekNpvnUCZJjCTDZU7EknY41C7dwafQLjzkAy6+C4Sd50evP43SWyg d3cxyEjat6COzwF07rR2fPYao4pC7QD8FIRf4Ol/rkcKMwM/8PqD8PJew9vNoQQi MVMXBP4A39QbgFYsvIKuC3UvayE5Qd6x4NkvuKu32HqzQWC9P/yBpGL2mYP6sGhJ cpoy8X6XSq+bw67aEhlu4JhIUxP+yCM= -----END CERTIFICATE-----Generated at Sat Aug 23 15:33:49 2025 by rpki-client