$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/e8874dbb-bef6-3aa9-af33-e0455fcd9fd3.roa File: e8874dbb-bef6-3aa9-af33-e0455fcd9fd3.roa (raw, json) Hash identifier: 3gyDkwSD26bUWzn8OOXZq1hdI6js+HMzlVwXfiECUFQ= Subject key identifier: FE:79:05:A6:8C:94:29:3C:06:A5:1B:43:35:94:C0:BA:10:39:FD:04 Certificate issuer: /CN=ab35c487-3629-4de4-8ce1-80f9eb60428a Certificate serial: 010D0C9F4328584BA0D25ABDB04DBC0193F52500 Authority key identifier: 56:45:9C:04:73:90:DE:AE:3F:57:CF:20:35:2C:99:D9:18:4D:8A:C7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/e8874dbb-bef6-3aa9-af33-e0455fcd9fd3.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 19257 IP address blocks: 138.229.64.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:5a:bd:b0:4d:bc:01:93:f5:25:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab35c487-3629-4de4-8ce1-80f9eb60428a Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=624c7dea-4ce2-4baa-a5a4-4c707948dfc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:8c:7d:75:ee:3e:36:42:9e:f0:45:e6:63:b0: 52:59:bb:03:18:c3:2a:39:12:c3:c2:95:55:21:7d: 82:f1:da:ab:2d:58:a8:80:61:a3:9e:80:de:93:12: ef:a5:b6:70:06:da:3a:3a:5a:ac:58:80:b2:3b:1c: 9c:c9:ad:78:82:3e:a7:18:75:fd:f5:98:6e:1e:20: 16:15:09:93:61:ed:6b:9a:ef:32:50:bc:ad:26:63: bf:ff:b9:e7:3d:06:78:26:44:fd:62:9a:12:86:4d: a2:40:18:92:70:6a:67:1b:86:b4:6f:5a:0e:f9:0b: e5:4f:fe:47:11:1a:ae:97:c4:d7:45:69:a6:c4:42: e1:37:7a:3f:3b:75:27:cd:12:96:11:0c:fc:90:b2: d2:d3:13:59:4a:ce:31:13:d0:68:1e:a8:cd:a6:1b: 07:c3:a4:d5:f0:ec:88:92:16:1c:05:95:85:ce:05: 84:f3:79:4f:34:0e:4b:4a:d5:34:b7:84:db:d5:f5: e3:70:fc:87:20:0c:35:f8:36:cd:40:3d:d1:38:ba: c4:bd:ac:f7:91:57:21:60:94:eb:0c:a7:48:07:a2: c7:d8:34:4e:dc:2e:d9:db:84:84:8c:66:36:4f:9b: 20:81:5c:7b:1d:1e:f3:6e:98:82:18:e8:5a:8e:45: f2:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:79:05:A6:8C:94:29:3C:06:A5:1B:43:35:94:C0:BA:10:39:FD:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/e8874dbb-bef6-3aa9-af33-e0455fcd9fd3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.crl X509v3 Authority Key Identifier: keyid:56:45:9C:04:73:90:DE:AE:3F:57:CF:20:35:2C:99:D9:18:4D:8A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer sbgp-ipAddrBlock: critical IPv4: 138.229.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:8f:ee:ba:49:55:64:6f:c8:a3:e8:04:94:97:92:83:f1:d8: 53:cc:fd:bc:81:e1:9b:d7:84:9b:b6:0a:57:76:87:12:cf:99: c9:d6:11:8f:90:03:8d:b4:c8:8b:83:1a:a8:74:85:be:2c:f5: 76:8d:a2:52:cc:36:c8:4f:fb:60:e5:ef:ec:08:80:79:b5:54: b3:6b:06:8c:ab:73:fb:d2:1d:57:1d:e1:db:45:a4:4c:8a:bc: 12:60:c3:90:ee:21:13:7c:26:69:57:94:8d:aa:12:43:3e:10: 05:b0:f7:61:29:ff:05:b0:9d:76:9d:b1:43:cf:c6:f4:04:93: e8:b9:06:69:20:80:be:2c:62:81:14:10:4a:2c:bb:5b:30:7a: 6f:81:48:94:3e:f5:54:19:f1:19:de:49:af:56:6d:0d:76:82: 75:bb:47:4f:c7:97:2e:7a:0a:e4:8a:c2:89:e3:29:6d:ff:fb: d0:f1:28:ae:e1:ac:ec:43:de:4c:47:2c:f1:a5:50:12:a1:29: d3:49:b8:88:df:c3:69:37:dc:5a:c6:8d:71:19:2c:2c:8a:fc: 9f:25:ba:91:53:bc:08:b7:b4:24:38:54:b4:73:03:83:85:70: b9:c7:4a:42:96:65:af:49:9c:33:70:23:a1:6c:0d:5a:eb:d2: 15:5e:d3:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0lq9sE28AZP1JQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWIzNWM0ODctMzYyOS00ZGU0LThjZTEtODBmOWViNjA0 MjhhMB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk NjI0YzdkZWEtNGNlMi00YmFhLWE1YTQtNGM3MDc5NDhkZmM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYx9de4+NkKe8EXmY7BSWbsDGMMqORLDwpVV IX2C8dqrLViogGGjnoDekxLvpbZwBto6OlqsWICyOxycya14gj6nGHX99ZhuHiAW FQmTYe1rmu8yULytJmO//7nnPQZ4JkT9YpoShk2iQBiScGpnG4a0b1oO+QvlT/5H ERqul8TXRWmmxELhN3o/O3UnzRKWEQz8kLLS0xNZSs4xE9BoHqjNphsHw6TV8OyI khYcBZWFzgWE83lPNA5LStU0t4Tb1fXjcPyHIAw1+DbNQD3ROLrEvaz3kVchYJTr DKdIB6LH2DRO3C7Z24SEjGY2T5sggVx7HR7zbpiCGOhajkXykwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP55BaaMlCk8BqUbQzWUwLoQOf0EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYjM1 YzQ4Ny0zNjI5LTRkZTQtOGNlMS04MGY5ZWI2MDQyOGEvZTg4NzRkYmItYmVmNi0z YWE5LWFmMzMtZTA0NTVmY2Q5ZmQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWIzNWM0ODctMzYyOS00ZGU0LThj ZTEtODBmOWViNjA0MjhhL2FiMzVjNDg3LTM2MjktNGRlNC04Y2UxLTgwZjllYjYw NDI4YS5jcmwwHwYDVR0jBBgwFoAUVkWcBHOQ3q4/V88gNSyZ2RhNiscwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYjM1YzQ4Ny0zNjI5LTRkZTQtOGNlMS04MGY5 ZWI2MDQyOGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFiuVAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFSP7rpJVWRvyKPoBJSXkoPx2FPM/byB4ZvXhJu2Cld2hxLPmcnWEY+Q A420yIuDGqh0hb4s9XaNolLMNshP+2Dl7+wIgHm1VLNrBoyrc/vSHVcd4dtFpEyK vBJgw5DuIRN8JmlXlI2qEkM+EAWw92Ep/wWwnXadsUPPxvQEk+i5BmkggL4sYoEU EEosu1swem+BSJQ+9VQZ8RneSa9WbQ12gnW7R0/Hly56CuSKwonjKW3/+9DxKK7h rOxD3kxHLPGlUBKhKdNJuIjfw2k33FrGjXEZLCyK/J8lupFTvAi3tCQ4VLRzA4OF cLnHSkKWZa9JnDNwI6FsDVrr0hVe04s= -----END CERTIFICATE-----Generated at Mon Nov 3 08:51:28 2025 by rpki-client