$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/98417e41-fc5c-3417-9add-ed6493dc5046.roa File: 98417e41-fc5c-3417-9add-ed6493dc5046.roa (raw, json) Hash identifier: PKo+ruqxB4yvDhwrT5Jhg418LN3FXbRPNrjN/DUpcK0= Subject key identifier: 3F:3F:05:BA:1A:EB:5D:CF:A1:00:BC:38:6E:C4:D3:96:81:06:E8:76 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B1C36DE1528F2510D060AAD20 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/98417e41-fc5c-3417-9add-ed6493dc5046.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 701 IP address blocks: 138.89.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:36:de:15:28:f2:51:0d:06:0a:ad:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=ed8a3e23-3829-40f0-b09b-5cf2c78f27f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:ea:e0:80:3e:4e:34:65:08:9e:5e:75:09:fd: a8:ea:24:39:57:7a:5c:8c:a0:5c:bb:c7:7b:85:90: d6:2c:30:09:ff:ba:65:5c:a9:ee:4a:0f:36:b9:37: 28:98:cf:45:5a:c2:96:45:d7:85:8b:c0:08:ae:39: 9a:c0:09:94:d2:c0:61:12:bf:36:19:fc:54:d5:89: 23:0c:4c:26:57:e2:e8:c9:fb:54:64:01:6c:01:99: 40:2f:d6:0e:f9:b6:d4:f7:69:66:e0:7a:41:2f:e0: b1:e8:b0:13:66:8b:86:51:68:cb:20:b3:f1:06:d9: d8:94:47:4b:62:a3:8a:75:9a:47:00:35:f1:d6:ad: ce:b4:02:6a:2c:2e:82:bf:2e:91:04:4a:87:5a:5a: fd:e4:8c:6e:98:95:90:c0:cd:dd:05:71:71:ef:e9: e3:69:8f:11:da:16:5e:83:6d:f0:e1:31:bb:ba:b0: a6:6a:84:f4:4c:d1:fd:3c:11:1f:46:09:e9:df:ab: 7e:8f:4f:bc:f9:68:31:69:86:0a:5e:22:7d:77:2a: 17:12:38:70:d5:27:ab:04:a7:ae:98:c7:46:57:72: c6:21:b0:fc:91:da:b8:cd:ed:16:f7:ae:25:67:d8: 37:af:49:68:9d:68:cb:2d:d2:70:b5:e8:40:cf:b9: 45:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:3F:05:BA:1A:EB:5D:CF:A1:00:BC:38:6E:C4:D3:96:81:06:E8:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/98417e41-fc5c-3417-9add-ed6493dc5046.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 138.89.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:36:d6:1e:84:87:7b:c2:dc:2c:2a:d2:c8:15:05:e5:e5:03: 6a:c2:d9:43:5f:8b:84:4a:d0:61:29:ab:de:4d:87:49:71:74: 7d:0e:cb:89:d5:a2:22:94:35:42:57:04:fe:4f:58:fc:bb:59: 99:e7:79:c8:b7:89:9b:9d:ba:56:cb:df:c8:b6:3c:6d:58:75: ae:6a:34:7a:8d:44:4f:b1:60:3c:cb:21:1a:10:df:43:e7:ad: 3e:14:b0:c7:6d:4b:9a:3e:b9:4b:d5:fc:8b:26:3d:1f:eb:f9: a7:af:66:9d:4d:e1:7a:eb:17:8c:6d:54:82:ae:72:ac:b2:9c: 51:af:99:6d:91:04:33:23:39:69:dc:ad:79:bd:4f:76:17:bd: 9b:dc:23:f8:ad:2b:5f:9f:3f:a2:6a:7e:fc:8d:93:ef:c0:37: 57:db:78:be:34:1e:69:3b:f7:67:0c:98:4f:fb:18:09:44:55: 18:5e:f1:92:2b:9f:83:93:b7:2d:29:f0:a0:f4:83:89:7b:db: 06:fe:d0:8c:5f:08:87:27:cd:07:1a:86:bc:23:29:30:a4:78: bf:ac:c5:38:e1:0e:7e:86:2a:f3:df:3b:6a:cc:16:4d:e3:cf: 93:50:97:12:a8:d2:db:c7:84:ef:1f:21:f4:a4:17:b5:5e:a4: a4:0d:56:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNt4VKPJRDQYKrSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk ZWQ4YTNlMjMtMzgyOS00MGYwLWIwOWItNWNmMmM3OGYyN2Y3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgOrggD5ONGUInl51Cf2o6iQ5V3pcjKBcu8d7 hZDWLDAJ/7plXKnuSg82uTcomM9FWsKWRdeFi8AIrjmawAmU0sBhEr82GfxU1Ykj DEwmV+LoyftUZAFsAZlAL9YO+bbU92lm4HpBL+Cx6LATZouGUWjLILPxBtnYlEdL YqOKdZpHADXx1q3OtAJqLC6Cvy6RBEqHWlr95IxumJWQwM3dBXFx7+njaY8R2hZe g23w4TG7urCmaoT0TNH9PBEfRgnp36t+j0+8+WgxaYYKXiJ9dyoXEjhw1SerBKeu mMdGV3LGIbD8kdq4ze0W964lZ9g3r0lonWjLLdJwtehAz7lF5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD8/Bboa613PoQC8OG7E05aBBuh2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOTg0MTdlNDEtZmM1Yy0z NDE3LTlhZGQtZWQ2NDkzZGM1MDQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGilmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF021h6Eh3vC3Cwq0sgVBeXlA2rC2UNfi4RK0GEpq95Nh0lxdH0Oy4nV oiKUNUJXBP5PWPy7WZnneci3iZudulbL38i2PG1Yda5qNHqNRE+xYDzLIRoQ30Pn rT4UsMdtS5o+uUvV/IsmPR/r+aevZp1N4XrrF4xtVIKucqyynFGvmW2RBDMjOWnc rXm9T3YXvZvcI/itK1+fP6JqfvyNk+/AN1fbeL40Hmk792cMmE/7GAlEVRhe8ZIr n4OTty0p8KD0g4l72wb+0IxfCIcnzQcahrwjKTCkeL+sxTjhDn6GKvPfO2rMFk3j z5NQlxKo0tvHhO8fIfSkF7VepKQNVm4= -----END CERTIFICATE-----Generated at Fri Oct 10 20:01:36 2025 by rpki-client