$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/7942bb08-5508-3ac1-9c25-6405883086d5.roa File: 7942bb08-5508-3ac1-9c25-6405883086d5.roa (raw, json) Hash identifier: +TXZa1wbmVuLI1CskqHgnKNp0GQW2rT//99RgUkn7UY= Subject key identifier: ED:1B:6E:BD:36:F5:CB:25:6C:5E:66:56:FF:AA:3C:25:7D:5F:0A:78 Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b Certificate serial: 010D0C9F4328584BB4FB37D220749BB197408CF0 Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/7942bb08-5508-3ac1-9c25-6405883086d5.roa Signing time: Fri 31 Oct 2025 18:19:23 +0000 ROA not before: Fri 31 Oct 2025 18:19:23 +0000 ROA not after: Thu 29 Jan 2026 19:19:23 +0000 asID: 21949 IP address blocks: 138.28.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:fb:37:d2:20:74:9b:b1:97:40:8c:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b Validity Not Before: Oct 31 18:19:23 2025 GMT Not After : Jan 29 19:19:23 2026 GMT Subject: CN=c0913f1c-cdf5-47e5-a431-4baf3277b289 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:dc:87:b9:14:75:2e:8b:5d:26:ba:07:4e:7f: a6:e8:eb:77:e0:78:d9:6d:79:83:ac:70:90:dc:6b: 90:4e:39:7c:32:40:c8:b4:d5:af:0e:49:a3:f8:38: 73:2a:2c:2c:13:45:a8:c5:b1:f0:bb:70:ae:22:7e: a0:68:3e:cb:4e:b4:6a:78:d9:7a:4e:78:14:90:0d: ba:40:22:99:90:c0:04:ea:b5:9c:2d:62:25:b9:06: 20:59:10:7b:e7:9f:6f:7a:ec:f5:8b:df:4b:a4:e1: 1a:07:9d:98:b7:e5:de:32:0c:e1:b1:51:37:7b:72: a1:2b:9a:c6:89:a4:89:6b:50:b1:6b:ef:4c:91:d0: 6e:be:c0:d5:8a:0b:e7:d6:8b:7a:3b:bf:48:4d:f3: 8f:de:39:64:25:9f:d5:1c:c5:6a:4f:b2:b1:0a:a6: 47:3c:9a:09:57:7c:13:fc:4d:b8:f8:16:65:4d:28: 28:d3:0d:64:12:bf:19:a7:a5:24:8f:65:fc:9c:47: 8f:3b:49:0f:fb:6a:4b:90:22:a6:53:d8:28:4c:52: d6:b4:c1:f9:13:04:5e:23:ea:c5:42:66:db:07:32: 90:80:d2:f4:23:70:9b:85:05:d1:f1:10:3f:bd:cb: f0:f4:36:c0:b7:ea:72:0a:61:00:58:99:02:ac:43: f8:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:1B:6E:BD:36:F5:CB:25:6C:5E:66:56:FF:AA:3C:25:7D:5F:0A:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/7942bb08-5508-3ac1-9c25-6405883086d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl X509v3 Authority Key Identifier: keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer sbgp-ipAddrBlock: critical IPv4: 138.28.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:f2:af:da:e4:b3:04:cd:52:b9:1b:85:e2:4d:71:44:42:df: 15:a3:aa:ef:71:e3:7f:1e:1b:60:ed:2f:99:d8:16:f5:3f:69: 84:2c:e6:87:5b:85:1f:fc:88:e0:a0:cf:3c:d4:ff:9e:a2:fa: 84:e8:04:32:45:fd:5d:0d:4a:9f:1a:e1:61:ba:8a:e6:4c:2d: d2:13:a4:96:2e:8a:0f:43:93:86:3b:1b:02:86:0b:6c:86:b1: 13:97:c8:97:27:c1:a9:8c:68:84:9b:df:1c:73:af:1a:a3:02: 7d:ee:a5:92:2b:fa:af:97:85:9a:ab:41:16:cb:95:2d:6d:52: 30:18:2d:69:17:ba:2a:d1:75:8f:80:6d:17:45:27:0a:07:5b: 7d:4e:88:61:b2:49:f1:6c:b5:7b:40:cc:80:d9:b1:5e:c4:f6: 20:d1:dc:27:40:c6:23:53:96:38:22:50:04:29:dd:2f:b3:8f: 10:51:3a:dc:26:52:1d:41:fa:6c:c7:a0:88:2f:17:a3:02:dd: cc:9c:22:d4:a6:e9:05:f8:60:1e:8b:66:f2:50:26:da:f9:a1: cc:fd:7b:bc:b8:f8:62:dd:64:e5:b3:e5:c1:b9:09:b2:16:40: 95:83:55:64:b4:73:c5:99:f0:aa:94:c8:32:ba:9d:19:6a:06: 30:ee:0f:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu0+zfSIHSbsZdAjPAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx YzViMB4XDTI1MTAzMTE4MTkyM1oXDTI2MDEyOTE5MTkyM1owLzEtMCsGA1UEAxMk YzA5MTNmMWMtY2RmNS00N2U1LWE0MzEtNGJhZjMyNzdiMjg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtyHuRR1LotdJroHTn+m6Ot34HjZbXmDrHCQ 3GuQTjl8MkDItNWvDkmj+DhzKiwsE0WoxbHwu3CuIn6gaD7LTrRqeNl6TngUkA26 QCKZkMAE6rWcLWIluQYgWRB7559veuz1i99LpOEaB52Yt+XeMgzhsVE3e3KhK5rG iaSJa1Cxa+9MkdBuvsDVigvn1ot6O79ITfOP3jlkJZ/VHMVqT7KxCqZHPJoJV3wT /E24+BZlTSgo0w1kEr8Zp6Ukj2X8nEePO0kP+2pLkCKmU9goTFLWtMH5EwReI+rF QmbbBzKQgNL0I3CbhQXR8RA/vcvw9DbAt+pyCmEAWJkCrEP4kQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO0bbr029cslbF5mVv+qPCV9Xwp4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvNzk0MmJiMDgtNTUwOC0z YWMxLTljMjUtNjQwNTg4MzA4NmQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFihzgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHzyr9rkswTNUrkbheJNcURC3xWjqu9x438eG2DtL5nYFvU/aYQs5odb hR/8iOCgzzzU/56i+oToBDJF/V0NSp8a4WG6iuZMLdITpJYuig9Dk4Y7GwKGC2yG sROXyJcnwamMaISb3xxzrxqjAn3upZIr+q+XhZqrQRbLlS1tUjAYLWkXuirRdY+A bRdFJwoHW31OiGGySfFstXtAzIDZsV7E9iDR3CdAxiNTljgiUAQp3S+zjxBROtwm Uh1B+mzHoIgvF6MC3cycItSm6QX4YB6LZvJQJtr5ocz9e7y4+GLdZOWz5cG5CbIW QJWDVWS0c8WZ8KqUyDK6nRlqBjDuD5M= -----END CERTIFICATE-----Generated at Sat Nov 1 02:30:34 2025 by rpki-client