$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd/82a59d09-a68a-3b74-821f-acd3c06dab3a.roa File: 82a59d09-a68a-3b74-821f-acd3c06dab3a.roa (raw, json) Hash identifier: Q7YKws9b346GeROAvLrNlZI7JzZHzFCHbc1u2rwttfM= Subject key identifier: 07:65:A7:55:94:33:1E:30:2B:29:17:F9:80:21:79:76:06:6A:C8:D2 Certificate issuer: /CN=2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd Certificate serial: 010D0C9F4328584B2FC18DCA97AB21E5E367F500 Authority key identifier: B5:E6:E8:04:62:4C:F1:67:1E:06:89:04:66:D1:E6:25:2D:BB:82:AD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd/82a59d09-a68a-3b74-821f-acd3c06dab3a.roa Signing time: Sun 14 Sep 2025 01:00:33 +0000 ROA not before: Sun 14 Sep 2025 01:00:33 +0000 ROA not after: Sat 13 Dec 2025 02:00:33 +0000 asID: 8075 IP address blocks: 138.128.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2f:c1:8d:ca:97:ab:21:e5:e3:67:f5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd Validity Not Before: Sep 14 01:00:33 2025 GMT Not After : Dec 13 02:00:33 2025 GMT Subject: CN=a1191fe8-be98-440f-bc2f-2633e98dbcb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:37:a5:25:fb:ca:40:5c:bb:b0:42:70:79:61: 14:0d:ab:a9:b9:62:b8:7d:d4:04:22:97:34:37:0c: e6:a3:5b:47:db:54:d9:30:27:c1:c3:b1:93:27:97: ea:8f:b5:7a:7e:52:a7:e1:b1:eb:6a:a0:52:3e:07: 57:90:ea:6c:80:5d:a0:7a:8b:fb:f7:f7:1f:35:71: 6e:1e:2b:35:9a:b7:db:32:98:9c:23:fb:b6:54:9a: 33:c3:2f:64:ac:b9:4c:35:d6:e0:c0:5f:5b:d8:a0: 24:1d:d9:2e:40:3e:bf:33:bd:6a:1e:51:14:32:b0: c0:eb:44:6f:2e:95:38:39:07:a5:67:f1:4b:ce:f1: 90:ae:9e:32:89:20:9f:ce:1e:27:b9:56:a1:95:2d: 12:57:f1:59:59:37:1c:15:e5:2a:34:0b:58:55:09: 8d:a8:c8:b5:14:f4:bd:c9:f9:b3:da:b4:5e:5e:66: 33:39:04:e4:e0:ad:eb:f4:91:d1:74:d9:e4:d7:63: 53:d2:3f:11:51:a3:7a:4f:30:2a:ff:96:2e:22:b6: b6:e1:89:40:ef:8e:37:25:5f:ef:5c:12:a6:cf:2a: 00:2b:a3:cf:8c:b2:2c:c2:01:49:f1:c0:79:6a:87: 69:2b:a6:2f:60:0b:1b:a4:91:83:f0:52:3b:c6:e5: 53:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:65:A7:55:94:33:1E:30:2B:29:17:F9:80:21:79:76:06:6A:C8:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd/82a59d09-a68a-3b74-821f-acd3c06dab3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd.crl X509v3 Authority Key Identifier: keyid:B5:E6:E8:04:62:4C:F1:67:1E:06:89:04:66:D1:E6:25:2D:BB:82:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd.cer sbgp-ipAddrBlock: critical IPv4: 138.128.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:86:f3:60:7c:7a:25:b4:80:94:19:de:09:3d:28:ad:bb:3f: fb:43:45:39:ee:2c:e0:fc:d6:fe:16:81:46:a5:e5:75:b8:10: 9b:c9:7c:b1:15:b5:3b:b2:c4:80:f1:e9:5d:e4:dd:f9:a4:6e: 48:d4:7d:c2:c7:6e:31:9b:10:4f:88:5b:0e:9b:ad:c0:7b:3d: ea:26:5f:ea:b5:50:7a:06:9a:1b:b4:bf:5a:d0:be:e7:2e:3b: ef:17:14:b0:10:cc:ee:a1:1f:66:50:8a:ca:e2:85:ed:f3:a1: a7:7b:92:4c:0e:a4:1f:cb:7e:eb:55:e4:51:21:01:d3:9a:c8: 9b:61:88:92:6e:28:c0:42:a8:d4:a7:20:1e:71:61:82:dc:db: 8a:73:22:d2:96:69:70:07:2f:f4:a3:5c:7d:03:a2:b1:82:6c: 44:c3:f7:93:e3:a0:63:90:49:47:5f:5b:3e:47:7f:5a:2a:44: 58:72:70:d0:0d:cd:e9:59:09:7c:51:61:b2:d2:4f:7c:a7:ae: e6:e1:4c:18:08:5a:dc:1c:8c:b2:58:d0:8c:a0:1d:e5:38:5e: 0c:43:59:a6:b8:04:a1:64:ac:b4:ae:aa:09:d7:0d:44:91:a1: d9:6b:8e:82:43:b0:d7:88:ba:b4:db:34:0e:71:15:d0:82:ae: 74:b5:6d:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsvwY3Kl6sh5eNn9QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmIzYmNiNDctNWYxOC00NmQzLTliNTAtNjNkNWNiYjll OWRkMB4XDTI1MDkxNDAxMDAzM1oXDTI1MTIxMzAyMDAzM1owLzEtMCsGA1UEAxMk YTExOTFmZTgtYmU5OC00NDBmLWJjMmYtMjYzM2U5OGRiY2I3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTelJfvKQFy7sEJweWEUDaupuWK4fdQEIpc0 Nwzmo1tH21TZMCfBw7GTJ5fqj7V6flKn4bHraqBSPgdXkOpsgF2geov79/cfNXFu His1mrfbMpicI/u2VJozwy9krLlMNdbgwF9b2KAkHdkuQD6/M71qHlEUMrDA60Rv LpU4OQelZ/FLzvGQrp4yiSCfzh4nuVahlS0SV/FZWTccFeUqNAtYVQmNqMi1FPS9 yfmz2rReXmYzOQTk4K3r9JHRdNnk12NT0j8RUaN6TzAq/5YuIra24YlA7443JV/v XBKmzyoAK6PPjLIswgFJ8cB5aodpK6YvYAsbpJGD8FI7xuVTNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAdlp1WUMx4wKykX+YAheXYGasjSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yYjNi Y2I0Ny01ZjE4LTQ2ZDMtOWI1MC02M2Q1Y2JiOWU5ZGQvODJhNTlkMDktYTY4YS0z Yjc0LTgyMWYtYWNkM2MwNmRhYjNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMmIzYmNiNDctNWYxOC00NmQzLTli NTAtNjNkNWNiYjllOWRkLzJiM2JjYjQ3LTVmMTgtNDZkMy05YjUwLTYzZDVjYmI5 ZTlkZC5jcmwwHwYDVR0jBBgwFoAUteboBGJM8WceBokEZtHmJS27gq0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yYjNiY2I0Ny01ZjE4LTQ2ZDMtOWI1MC02M2Q1 Y2JiOWU5ZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAioD7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAImG82B8eiW0gJQZ3gk9KK27P/tDRTnuLOD81v4WgUal5XW4EJvJfLEV tTuyxIDx6V3k3fmkbkjUfcLHbjGbEE+IWw6brcB7PeomX+q1UHoGmhu0v1rQvucu O+8XFLAQzO6hH2ZQisrihe3zoad7kkwOpB/LfutV5FEhAdOayJthiJJuKMBCqNSn IB5xYYLc24pzItKWaXAHL/SjXH0DorGCbETD95PjoGOQSUdfWz5Hf1oqRFhycNAN zelZCXxRYbLST3ynrubhTBgIWtwcjLJY0IygHeU4XgxDWaa4BKFkrLSuqgnXDUSR odlrjoJDsNeIurTbNA5xFdCCrnS1bQU= -----END CERTIFICATE-----Generated at Sat Oct 11 00:02:11 2025 by rpki-client