$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/96a7d5f8-e293-37e1-9694-e0d0a7da47b9.roa File: 96a7d5f8-e293-37e1-9694-e0d0a7da47b9.roa (raw, json) Hash identifier: TpOqGlojxILUqMtZ6GpDv3uQtzMCFrfyGOMg7kdO/Y0= Subject key identifier: 4F:30:36:37:68:E5:4B:C8:22:E5:3C:2F:22:E9:81:5B:1F:A6:E2:79 Certificate issuer: /CN=3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc Certificate serial: 010D0C9F4328584B1AD198414654641C85D8A900 Authority key identifier: 56:34:70:D9:2B:60:85:B1:A7:7C:A0:97:7D:A5:7A:1D:B8:27:54:05 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/96a7d5f8-e293-37e1-9694-e0d0a7da47b9.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 10497 IP address blocks: 138.220.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 18 Sep 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:98:41:46:54:64:1c:85:d8:a9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=691ae927-820d-4816-ab7c-4fcee55a2e8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e0:c4:0b:bf:a1:8c:2e:96:6d:3c:e9:f8:52: 24:04:8b:fe:b5:58:56:ad:bc:74:5e:f4:b4:c7:a6: f3:90:a1:cb:e0:7e:83:4f:86:29:a9:83:7b:3d:bd: a7:6e:43:45:fd:23:28:f0:bc:54:4c:d1:6c:08:18: d7:5d:26:dc:93:e9:c0:7d:73:25:81:e3:5e:18:74: 6f:5e:20:e5:d2:fe:f8:a9:83:9a:26:54:f7:a3:7f: f3:a9:27:8f:c9:71:77:4d:57:94:c0:41:81:5a:f2: d6:ae:49:10:dc:ea:ce:81:e4:36:3a:b8:7e:a8:69: 9f:07:79:26:58:db:67:0e:70:9d:f1:33:89:38:ef: 57:61:4e:39:63:9e:ec:92:96:b8:40:3c:bc:31:c8: e6:18:4f:77:ce:e6:1b:d0:e4:ec:03:69:1d:b7:85: 6e:e3:7d:1d:9b:1d:95:d7:1c:e6:f7:17:66:54:ab: 1a:ed:a7:9f:2f:63:99:46:6e:44:15:77:a8:ce:d0: a4:1c:e9:b8:44:03:60:dd:40:a1:bb:40:a8:d3:ad: f9:7f:b7:a0:c2:11:6d:81:ee:31:33:9b:44:7a:72: 11:64:f7:9f:48:9b:7f:c5:36:b8:49:17:ec:eb:47: 08:4b:c2:d7:d6:ef:84:3a:09:ae:3a:21:09:62:e5: e6:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:30:36:37:68:E5:4B:C8:22:E5:3C:2F:22:E9:81:5B:1F:A6:E2:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/96a7d5f8-e293-37e1-9694-e0d0a7da47b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.crl X509v3 Authority Key Identifier: keyid:56:34:70:D9:2B:60:85:B1:A7:7C:A0:97:7D:A5:7A:1D:B8:27:54:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.cer sbgp-ipAddrBlock: critical IPv4: 138.220.5.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:f4:61:15:72:4e:e2:c9:da:ff:72:05:14:a0:d8:d7:65:5c: 8b:08:de:58:ff:b4:cf:54:12:90:91:3c:d7:67:be:bc:05:50: 7d:de:54:ed:0d:68:ba:4e:3b:a8:b9:09:da:59:a5:55:b5:ee: 27:4b:1d:af:97:87:09:a5:f7:dc:6d:ea:52:df:be:76:16:4c: c4:40:47:78:7c:28:36:97:dd:02:9d:5b:82:9e:d5:2d:41:37: 4d:ca:b6:46:14:fb:00:91:5a:61:1a:94:e4:34:3b:5f:77:cf: fb:51:bd:16:54:34:28:db:00:58:2e:df:e4:1f:94:b7:ac:34: 9e:94:05:ea:af:d2:f6:b5:ae:b9:74:4d:fa:41:4c:ab:cf:6c: 3e:7d:30:8d:13:a1:32:89:ae:12:34:03:7f:8b:6c:7a:58:51: 23:ef:e6:9a:bb:c4:0b:54:96:ef:6d:85:ee:be:1c:0b:99:19: af:27:f2:27:98:44:0f:e8:c5:76:bd:ab:2b:ca:b5:37:15:91: d6:69:76:ce:46:c7:9e:0f:a6:10:8a:7c:31:ea:5f:85:50:ba: 1e:61:f0:b5:f9:f4:21:d9:9a:ae:12:32:ba:9c:57:29:bc:52: 53:d7:e6:e2:c3:02:90:c5:d4:67:62:ab:28:7d:f2:87:98:69: 5c:3c:76:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsa0ZhBRlRkHIXYqQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2I2MzVmZGQtODFhNy00YzVkLThmOTAtOWU3NTEzYjNk Y2RjMB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk NjkxYWU5MjctODIwZC00ODE2LWFiN2MtNGZjZWU1NWEyZThiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoODEC7+hjC6WbTzp+FIkBIv+tVhWrbx0XvS0 x6bzkKHL4H6DT4YpqYN7Pb2nbkNF/SMo8LxUTNFsCBjXXSbck+nAfXMlgeNeGHRv XiDl0v74qYOaJlT3o3/zqSePyXF3TVeUwEGBWvLWrkkQ3OrOgeQ2Orh+qGmfB3km WNtnDnCd8TOJOO9XYU45Y57skpa4QDy8McjmGE93zuYb0OTsA2kdt4Vu430dmx2V 1xzm9xdmVKsa7aefL2OZRm5EFXeoztCkHOm4RANg3UChu0Co0635f7egwhFtge4x M5tEenIRZPefSJt/xTa4SRfs60cIS8LX1u+EOgmuOiEJYuXmFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE8wNjdo5UvIIuU8LyLpgVsfpuJ5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zYjYz NWZkZC04MWE3LTRjNWQtOGY5MC05ZTc1MTNiM2RjZGMvOTZhN2Q1ZjgtZTI5My0z N2UxLTk2OTQtZTBkMGE3ZGE0N2I5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2I2MzVmZGQtODFhNy00YzVkLThm OTAtOWU3NTEzYjNkY2RjLzNiNjM1ZmRkLTgxYTctNGM1ZC04ZjkwLTllNzUxM2Iz ZGNkYy5jcmwwHwYDVR0jBBgwFoAUVjRw2StghbGnfKCXfaV6HbgnVAUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zYjYzNWZkZC04MWE3LTRjNWQtOGY5MC05ZTc1 MTNiM2RjZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAitwFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEn0YRVyTuLJ2v9yBRSg2NdlXIsI3lj/tM9UEpCRPNdnvrwFUH3eVO0N aLpOO6i5CdpZpVW17idLHa+Xhwml99xt6lLfvnYWTMRAR3h8KDaX3QKdW4Ke1S1B N03KtkYU+wCRWmEalOQ0O193z/tRvRZUNCjbAFgu3+QflLesNJ6UBeqv0va1rrl0 TfpBTKvPbD59MI0ToTKJrhI0A3+LbHpYUSPv5pq7xAtUlu9the6+HAuZGa8n8ieY RA/oxXa9qyvKtTcVkdZpds5Gx54PphCKfDHqX4VQuh5h8LX59CHZmq4SMrqcVym8 UlPX5uLDApDF1Gdiqyh98oeYaVw8dk0= -----END CERTIFICATE-----Generated at Tue Sep 16 19:48:09 2025 by rpki-client