$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/1397b71d-13d4-3f60-94a3-f56343af9a0b.roa File: 1397b71d-13d4-3f60-94a3-f56343af9a0b.roa (raw, json) Hash identifier: JTzFkCstkYYB0ULKl4wD+Q5PwDB4vcBmwllBmvfG48E= Subject key identifier: 8D:1D:DC:CE:1B:08:F7:78:E5:5F:49:E7:D0:25:DE:FA:A1:02:4C:75 Certificate issuer: /CN=39b6b2fc-3422-46e7-b637-7b8dcb84bff1 Certificate serial: 010D0C9F4328584B4616FC2D34ADB3153021D480 Authority key identifier: F5:79:B5:2B:5C:12:7C:0B:C8:CD:00:75:42:2C:15:FC:6F:A6:37:73 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/1397b71d-13d4-3f60-94a3-f56343af9a0b.roa Signing time: Mon 22 Sep 2025 01:00:33 +0000 ROA not before: Mon 22 Sep 2025 01:00:33 +0000 ROA not after: Sun 21 Dec 2025 02:00:33 +0000 asID: 897 IP address blocks: 192.138.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:46:16:fc:2d:34:ad:b3:15:30:21:d4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39b6b2fc-3422-46e7-b637-7b8dcb84bff1 Validity Not Before: Sep 22 01:00:33 2025 GMT Not After : Dec 21 02:00:33 2025 GMT Subject: CN=0aa61c0e-8147-42c2-8259-e96559e5f33c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:39:b7:a5:60:64:7a:69:9f:e8:aa:a4:01:9f: 3a:15:3e:5b:ee:fd:69:d1:47:ae:ff:19:13:da:04: ec:d3:84:58:fb:86:66:1f:98:0e:88:4a:f5:ee:a9: 83:d4:27:f9:a5:cd:a4:2e:be:9f:98:d3:d7:a8:79: eb:50:94:92:22:31:bf:1b:d4:56:a2:2b:11:97:f0: af:08:3f:8e:e9:eb:f4:d9:1b:63:48:76:34:b7:9c: 1e:97:a1:b4:f1:73:27:5a:a9:98:96:4b:85:5b:66: e1:09:8a:8d:a7:e5:61:e4:45:7d:f4:f9:d6:b5:7f: 6b:a1:1d:60:84:0e:48:74:d9:0e:16:ba:c0:ac:fb: d2:cd:78:be:16:37:64:de:61:8b:04:5c:39:39:75: 5a:17:8f:80:55:aa:28:43:27:ba:96:ea:e7:a0:7f: 31:25:b0:4b:d5:6d:a7:a5:b2:7a:ea:e3:a9:57:6e: f6:b9:d1:36:30:e7:a4:c6:5d:af:76:27:80:5f:b2: 3f:8b:3e:61:f3:77:20:b1:df:65:e4:40:1c:c4:e5: a5:09:6f:97:4a:23:47:4a:4c:bb:76:fb:27:4f:d3: 1c:63:d5:0e:e0:24:3b:87:15:02:1d:09:36:76:f4: 57:c0:fe:d7:15:cb:37:45:8e:3b:29:19:d7:90:e9: df:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:1D:DC:CE:1B:08:F7:78:E5:5F:49:E7:D0:25:DE:FA:A1:02:4C:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/1397b71d-13d4-3f60-94a3-f56343af9a0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.crl X509v3 Authority Key Identifier: keyid:F5:79:B5:2B:5C:12:7C:0B:C8:CD:00:75:42:2C:15:FC:6F:A6:37:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.cer sbgp-ipAddrBlock: critical IPv4: 192.138.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:70:43:c2:8b:5d:69:e1:9c:e4:46:72:a8:0e:d9:2b:1e:82: 84:2d:74:a0:01:82:5d:07:7c:63:18:0f:d9:e4:3e:4e:34:09: b6:60:50:16:a9:ee:a0:ba:0b:c8:a0:c4:93:8a:2f:69:69:10: 73:4d:7d:67:14:11:b6:96:19:88:33:4d:69:09:16:75:c7:1a: 82:cb:a8:a2:78:65:39:85:2a:9c:9a:c7:f8:6e:70:55:76:3d: c9:b7:0e:d5:7e:af:14:02:97:53:00:2f:d6:14:3c:5c:40:47: 6a:b0:e4:b2:f3:a2:47:f6:9d:ce:22:dc:04:14:c1:7c:7c:b3: d6:e2:71:5a:8a:d8:9b:84:61:1f:de:b6:d4:1c:f4:66:b1:4d: 64:23:0e:a4:8e:f6:a4:6f:be:71:83:49:21:af:55:a3:62:3c: dd:c3:c5:ab:48:5b:23:1b:9b:9f:f9:4d:83:01:06:32:f4:8b: dc:fe:ea:2b:e1:51:52:52:a3:a4:0e:08:7e:f2:9b:d9:46:e3: 0a:5a:f1:37:0e:19:42:d5:5a:f6:06:7d:ca:23:b2:4e:58:32: 24:9c:be:29:46:2f:87:a9:57:0f:60:12:d1:05:5d:60:8d:26: ef:d4:b8:3b:02:1b:0c:e1:12:f6:52:01:aa:fe:2e:2f:7e:48: bf:b9:8b:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtGFvwtNK2zFTAh1IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzliNmIyZmMtMzQyMi00NmU3LWI2MzctN2I4ZGNiODRi ZmYxMB4XDTI1MDkyMjAxMDAzM1oXDTI1MTIyMTAyMDAzM1owLzEtMCsGA1UEAxMk MGFhNjFjMGUtODE0Ny00MmMyLTgyNTktZTk2NTU5ZTVmMzNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjm3pWBkemmf6KqkAZ86FT5b7v1p0Ueu/xkT 2gTs04RY+4ZmH5gOiEr17qmD1Cf5pc2kLr6fmNPXqHnrUJSSIjG/G9RWoisRl/Cv CD+O6ev02RtjSHY0t5wel6G08XMnWqmYlkuFW2bhCYqNp+Vh5EV99PnWtX9roR1g hA5IdNkOFrrArPvSzXi+Fjdk3mGLBFw5OXVaF4+AVaooQye6lurnoH8xJbBL1W2n pbJ66uOpV272udE2MOekxl2vdieAX7I/iz5h83cgsd9l5EAcxOWlCW+XSiNHSky7 dvsnT9McY9UO4CQ7hxUCHQk2dvRXwP7XFcs3RY47KRnXkOnfKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI0d3M4bCPd45V9J59Al3vqhAkx1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8zOWI2 YjJmYy0zNDIyLTQ2ZTctYjYzNy03YjhkY2I4NGJmZjEvMTM5N2I3MWQtMTNkNC0z ZjYwLTk0YTMtZjU2MzQzYWY5YTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMzliNmIyZmMtMzQyMi00NmU3LWI2 MzctN2I4ZGNiODRiZmYxLzM5YjZiMmZjLTM0MjItNDZlNy1iNjM3LTdiOGRjYjg0 YmZmMS5jcmwwHwYDVR0jBBgwFoAU9Xm1K1wSfAvIzQB1QiwV/G+mN3MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8zOWI2YjJmYy0zNDIyLTQ2ZTctYjYzNy03Yjhk Y2I4NGJmZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwIoAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEZwQ8KLXWnhnORGcqgO2SsegoQtdKABgl0HfGMYD9nkPk40CbZgUBap 7qC6C8igxJOKL2lpEHNNfWcUEbaWGYgzTWkJFnXHGoLLqKJ4ZTmFKpyax/hucFV2 Pcm3DtV+rxQCl1MAL9YUPFxAR2qw5LLzokf2nc4i3AQUwXx8s9bicVqK2JuEYR/e ttQc9GaxTWQjDqSO9qRvvnGDSSGvVaNiPN3DxatIWyMbm5/5TYMBBjL0i9z+6ivh UVJSo6QOCH7ym9lG4wpa8TcOGULVWvYGfcojsk5YMiScvilGL4epVw9gEtEFXWCN Ju/UuDsCGwzhEvZSAar+Li9+SL+5ixo= -----END CERTIFICATE-----Generated at Fri Oct 10 22:26:56 2025 by rpki-client