$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/719038d9-6923-4e29-8b36-f45b06ce12f8/37aeddef-dd3b-3dec-801b-e0f9e620765c.roa File: 37aeddef-dd3b-3dec-801b-e0f9e620765c.roa (raw, json) Hash identifier: vPJxJlT8oCM0FBVgAaUMR0Ut7zQ8DhAhLEgmYBv2eE0= Subject key identifier: 55:4E:82:D6:05:16:81:C1:17:08:42:A1:E2:27:1F:CE:0F:7B:E4:82 Certificate issuer: /CN=719038d9-6923-4e29-8b36-f45b06ce12f8 Certificate serial: 010D0C9F4328584B4AF57B105AE26A6693E1C380 Authority key identifier: 77:B0:ED:77:A7:4B:CF:DD:67:4A:BA:E9:67:66:F8:1D:2E:6F:6D:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/719038d9-6923-4e29-8b36-f45b06ce12f8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/719038d9-6923-4e29-8b36-f45b06ce12f8/37aeddef-dd3b-3dec-801b-e0f9e620765c.roa Signing time: Tue 23 Sep 2025 18:52:08 +0000 ROA not before: Tue 23 Sep 2025 18:52:08 +0000 ROA not after: Mon 22 Dec 2025 19:52:08 +0000 asID: 393238 IP address blocks: 138.28.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/719038d9-6923-4e29-8b36-f45b06ce12f8/719038d9-6923-4e29-8b36-f45b06ce12f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/719038d9-6923-4e29-8b36-f45b06ce12f8/719038d9-6923-4e29-8b36-f45b06ce12f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/719038d9-6923-4e29-8b36-f45b06ce12f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4a:f5:7b:10:5a:e2:6a:66:93:e1:c3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=719038d9-6923-4e29-8b36-f45b06ce12f8 Validity Not Before: Sep 23 18:52:08 2025 GMT Not After : Dec 22 19:52:08 2025 GMT Subject: CN=d55ee43a-cca6-459b-9596-72698dc9d82a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:8c:8b:5d:de:1c:c7:ab:86:86:27:64:5e:16: 6e:b8:77:27:7c:d7:b4:e7:9c:f3:1f:5c:32:12:f1: de:9f:98:e6:21:66:94:ec:1d:71:62:07:24:87:a3: 34:33:af:aa:05:29:63:4b:22:cd:8c:e3:7a:d7:dd: 0b:6e:52:6d:a3:b0:6b:a2:9e:bf:da:38:32:10:3c: 5c:f9:24:4e:7c:c6:c8:90:de:8c:c5:12:e0:ed:6c: bb:d4:ab:c3:63:7a:50:ee:57:9c:78:e4:d1:b8:c2: f0:8c:2c:e6:06:e7:d4:35:b9:56:7e:95:81:55:3c: bb:1b:61:73:80:ce:8d:13:16:aa:a2:39:3b:87:4a: b3:3f:d3:42:72:23:52:1a:65:c3:28:0d:49:e4:fc: 44:15:66:18:a5:11:26:22:79:3c:45:cb:31:b3:5f: 1a:6c:c9:8a:e0:f5:a4:fa:d0:6e:7c:82:be:2b:af: a3:ac:44:97:8a:85:47:4f:d3:2f:b1:14:c2:1c:af: c3:4d:3d:23:54:30:4d:e4:78:62:9d:5e:df:2a:c7: cf:e8:03:46:e9:74:c4:83:15:a3:4c:3b:a6:78:b8: 15:ab:1f:88:cc:51:89:70:85:de:60:3f:ac:b5:97: fa:91:22:4e:ab:6b:b1:62:82:d0:9f:9c:14:93:91: 86:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:4E:82:D6:05:16:81:C1:17:08:42:A1:E2:27:1F:CE:0F:7B:E4:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/719038d9-6923-4e29-8b36-f45b06ce12f8/37aeddef-dd3b-3dec-801b-e0f9e620765c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/719038d9-6923-4e29-8b36-f45b06ce12f8/719038d9-6923-4e29-8b36-f45b06ce12f8.crl X509v3 Authority Key Identifier: keyid:77:B0:ED:77:A7:4B:CF:DD:67:4A:BA:E9:67:66:F8:1D:2E:6F:6D:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/719038d9-6923-4e29-8b36-f45b06ce12f8.cer sbgp-ipAddrBlock: critical IPv4: 138.28.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:35:8c:78:25:cc:0d:3a:e5:e7:71:c7:8b:97:40:75:71:a4: 18:29:30:bf:cc:e1:1c:95:9b:a1:77:a9:ab:b0:43:e7:4d:54: 07:4e:3b:34:25:9d:2f:93:e8:e8:b2:3a:96:8e:d9:6e:09:f1: 90:83:39:dd:b1:a6:f4:4f:f4:ee:fb:0a:36:3e:a0:ad:f0:1b: 79:5f:0a:3b:cd:ca:59:45:7f:54:94:4d:d1:f0:13:04:a9:9a: 71:33:48:30:b5:40:96:70:c9:07:b5:8f:78:be:e7:f9:1e:fa: 4f:fe:cc:7b:49:f5:c7:b5:d3:88:2a:70:5d:a7:c5:ce:49:f8: bf:5e:78:76:fd:d7:76:9c:a2:7b:d8:32:74:3d:8d:d6:81:18: 1e:c1:e3:bd:3e:89:1e:4a:0f:88:e4:62:df:56:c3:c1:f9:df: 5b:ec:d9:ff:e5:95:00:4b:42:7a:28:b5:45:15:4d:fc:43:42: 2b:c2:4d:b2:6f:38:91:98:25:c6:c0:27:cf:83:62:51:1f:65: 2b:21:72:00:ae:b2:7d:ce:9b:cc:17:8d:f0:89:ba:73:c7:2b: e7:20:8d:5d:12:5a:c8:12:18:50:38:82:1f:5f:f5:53:af:0d: 84:54:46:a8:ab:19:13:6c:da:55:77:ad:67:ed:25:79:b9:95: 40:cc:ec:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtK9XsQWuJqZpPhw4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzE5MDM4ZDktNjkyMy00ZTI5LThiMzYtZjQ1YjA2Y2Ux MmY4MB4XDTI1MDkyMzE4NTIwOFoXDTI1MTIyMjE5NTIwOFowLzEtMCsGA1UEAxMk ZDU1ZWU0M2EtY2NhNi00NTliLTk1OTYtNzI2OThkYzlkODJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7YyLXd4cx6uGhidkXhZuuHcnfNe055zzH1wy EvHen5jmIWaU7B1xYgckh6M0M6+qBSljSyLNjON6190LblJto7Brop6/2jgyEDxc +SROfMbIkN6MxRLg7Wy71KvDY3pQ7leceOTRuMLwjCzmBufUNblWfpWBVTy7G2Fz gM6NExaqojk7h0qzP9NCciNSGmXDKA1J5PxEFWYYpREmInk8Rcsxs18abMmK4PWk +tBufIK+K6+jrESXioVHT9MvsRTCHK/DTT0jVDBN5HhinV7fKsfP6ANG6XTEgxWj TDumeLgVqx+IzFGJcIXeYD+stZf6kSJOq2uxYoLQn5wUk5GGYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFVOgtYFFoHBFwhCoeInH84Pe+SCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83MTkw MzhkOS02OTIzLTRlMjktOGIzNi1mNDViMDZjZTEyZjgvMzdhZWRkZWYtZGQzYi0z ZGVjLTgwMWItZTBmOWU2MjA3NjVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNzE5MDM4ZDktNjkyMy00ZTI5LThi MzYtZjQ1YjA2Y2UxMmY4LzcxOTAzOGQ5LTY5MjMtNGUyOS04YjM2LWY0NWIwNmNl MTJmOC5jcmwwHwYDVR0jBBgwFoAUd7Dtd6dLz91nSrrpZ2b4HS5vbQMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC83MTkwMzhkOS02OTIzLTRlMjktOGIzNi1mNDVi MDZjZTEyZjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHihwAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFg1jHglzA065edxx4uXQHVxpBgpML/M4RyVm6F3qauwQ+dNVAdOOzQl nS+T6OiyOpaO2W4J8ZCDOd2xpvRP9O77CjY+oK3wG3lfCjvNyllFf1SUTdHwEwSp mnEzSDC1QJZwyQe1j3i+5/ke+k/+zHtJ9ce104gqcF2nxc5J+L9eeHb913aconvY MnQ9jdaBGB7B470+iR5KD4jkYt9Ww8H531vs2f/llQBLQnootUUVTfxDQivCTbJv OJGYJcbAJ8+DYlEfZSshcgCusn3Om8wXjfCJunPHK+cgjV0SWsgSGFA4gh9f9VOv DYRURqirGRNs2lV3rWftJXm5lUDM7Ek= -----END CERTIFICATE-----Generated at Sat Oct 11 04:32:01 2025 by rpki-client