$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/1fa45883-9415-3840-9fe3-657d50bbe43d.roa File: 1fa45883-9415-3840-9fe3-657d50bbe43d.roa (raw, json) Hash identifier: gQ0R4Jmp8QfICZ2eH8y9np9URpHqJv7yfessKyF9H3A= Subject key identifier: 9C:E0:45:E1:D0:F2:8D:33:90:15:9B:AF:ED:6D:AA:06:BF:A6:57:3B Certificate issuer: /CN=ffc39f64-f356-459c-8bf7-d142a7a166f3 Certificate serial: 010D0C9F4328584B031339ECEDEF1CC8A2139D80 Authority key identifier: 4D:52:88:03:05:6C:F7:2A:7F:D0:E7:BC:30:7E:24:98:8D:2D:20:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/1fa45883-9415-3840-9fe3-657d50bbe43d.roa Signing time: Fri 29 Aug 2025 00:53:52 +0000 ROA not before: Fri 29 Aug 2025 00:53:52 +0000 ROA not after: Thu 27 Nov 2025 01:53:52 +0000 asID: 15269 IP address blocks: 138.32.8.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:03:13:39:ec:ed:ef:1c:c8:a2:13:9d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffc39f64-f356-459c-8bf7-d142a7a166f3 Validity Not Before: Aug 29 00:53:52 2025 GMT Not After : Nov 27 01:53:52 2025 GMT Subject: CN=92f3586a-54af-406a-9fef-1e71ff0b4d38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:4a:95:00:ed:ef:3d:c8:c6:dc:e4:06:a1:77: ae:c3:bc:38:47:10:45:10:56:44:70:d0:df:d2:83: 79:f0:ca:93:11:b7:34:3f:53:9f:5f:9d:61:bd:49: 01:56:16:3e:c3:6c:31:07:ab:dd:51:f8:59:8f:30: ee:3e:59:a7:76:90:f0:56:52:34:48:83:4b:d6:8c: 03:e7:2d:4a:42:89:b9:40:15:ea:51:ff:85:ee:d3: d9:b1:93:5b:42:b4:5e:0f:ab:71:b9:12:94:9f:6c: e6:5e:b6:48:44:13:8c:e5:57:07:a4:e9:e4:de:46: c7:73:a1:36:1f:01:48:84:5e:62:5a:51:50:6b:a5: 9f:bb:10:37:80:ba:6d:f4:f0:82:5c:d0:ea:d2:cc: 72:2f:a1:4c:ac:2d:fd:e6:97:67:f7:e3:aa:01:18: 4f:16:ce:4b:6b:ed:42:18:d0:f6:e5:5a:83:60:42: c3:1c:7e:23:61:75:23:06:36:b7:13:11:eb:42:cd: cd:64:02:b0:8c:04:73:c4:ae:4d:8f:1e:18:02:c4: eb:7e:d4:43:ca:cc:16:55:62:2f:f5:14:39:7c:64: bf:4e:64:05:87:8c:f8:44:f5:be:4c:7d:bb:7f:e2: b5:65:63:e5:09:50:6a:7f:cc:8a:cc:87:0e:60:68: 53:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:E0:45:E1:D0:F2:8D:33:90:15:9B:AF:ED:6D:AA:06:BF:A6:57:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/1fa45883-9415-3840-9fe3-657d50bbe43d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.crl X509v3 Authority Key Identifier: keyid:4D:52:88:03:05:6C:F7:2A:7F:D0:E7:BC:30:7E:24:98:8D:2D:20:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer sbgp-ipAddrBlock: critical IPv4: 138.32.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:f0:d5:13:59:d6:ae:9a:1b:e4:da:ed:8c:da:c4:26:7b:b6: 79:84:80:e7:6a:fb:0b:05:a8:f4:56:99:b4:19:7e:65:6a:3b: c8:d8:14:f1:84:b0:95:53:e8:e0:b1:55:b5:b3:3a:c5:09:69: 94:1e:cd:3b:35:55:7c:d8:79:6d:f2:cd:fc:78:99:e6:36:77: 34:41:09:08:39:c4:1e:5c:d9:4d:93:7c:30:41:5c:3e:a5:4f: 0b:5c:48:71:ed:02:ee:ee:53:b3:96:3c:f6:25:9f:10:39:cb: 8f:b6:ee:d2:21:e4:ef:c3:d1:f2:c4:03:5e:d0:82:c2:c4:b0: d7:5d:84:3c:06:00:64:69:77:1c:38:6c:7c:24:8a:8c:65:fb: 2d:c2:93:35:25:03:b2:86:47:c2:63:11:20:4f:62:4b:5b:bd: c7:ca:d0:f0:2d:d2:e4:25:ca:c7:2a:a7:3e:62:3b:d2:1d:d7: 42:61:dc:a1:d3:48:c8:87:c7:39:8c:7c:3b:9c:10:6b:55:f6: de:cf:c3:8f:c6:2b:a7:14:6f:ef:90:f4:c3:ed:06:bf:64:a6: 89:20:67:79:9a:0e:3c:b8:4c:f4:c1:f9:ca:09:c3:c1:65:71: 55:31:64:7d:d4:a5:83:06:12:d5:5e:3f:14:c7:de:cc:e9:30: f2:21:30:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsDEzns7e8cyKITnYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmZjMzlmNjQtZjM1Ni00NTljLThiZjctZDE0MmE3YTE2 NmYzMB4XDTI1MDgyOTAwNTM1MloXDTI1MTEyNzAxNTM1MlowLzEtMCsGA1UEAxMk OTJmMzU4NmEtNTRhZi00MDZhLTlmZWYtMWU3MWZmMGI0ZDM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUqVAO3vPcjG3OQGoXeuw7w4RxBFEFZEcNDf 0oN58MqTEbc0P1OfX51hvUkBVhY+w2wxB6vdUfhZjzDuPlmndpDwVlI0SINL1owD 5y1KQom5QBXqUf+F7tPZsZNbQrReD6txuRKUn2zmXrZIRBOM5VcHpOnk3kbHc6E2 HwFIhF5iWlFQa6WfuxA3gLpt9PCCXNDq0sxyL6FMrC395pdn9+OqARhPFs5La+1C GND25VqDYELDHH4jYXUjBja3ExHrQs3NZAKwjARzxK5Njx4YAsTrftRDyswWVWIv 9RQ5fGS/TmQFh4z4RPW+TH27f+K1ZWPlCVBqf8yKzIcOYGhTeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJzgReHQ8o0zkBWbr+1tqga/plc7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mZmMz OWY2NC1mMzU2LTQ1OWMtOGJmNy1kMTQyYTdhMTY2ZjMvMWZhNDU4ODMtOTQxNS0z ODQwLTlmZTMtNjU3ZDUwYmJlNDNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZmZjMzlmNjQtZjM1Ni00NTljLThi ZjctZDE0MmE3YTE2NmYzL2ZmYzM5ZjY0LWYzNTYtNDU5Yy04YmY3LWQxNDJhN2Ex NjZmMy5jcmwwHwYDVR0jBBgwFoAUTVKIAwVs9yp/0Oe8MH4kmI0tICAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mZmMzOWY2NC1mMzU2LTQ1OWMtOGJmNy1kMTQy YTdhMTY2ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDiiAIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFfw1RNZ1q6aG+Ta7YzaxCZ7tnmEgOdq+wsFqPRWmbQZfmVqO8jYFPGE sJVT6OCxVbWzOsUJaZQezTs1VXzYeW3yzfx4meY2dzRBCQg5xB5c2U2TfDBBXD6l TwtcSHHtAu7uU7OWPPYlnxA5y4+27tIh5O/D0fLEA17QgsLEsNddhDwGAGRpdxw4 bHwkioxl+y3CkzUlA7KGR8JjESBPYktbvcfK0PAt0uQlyscqpz5iO9Id10Jh3KHT SMiHxzmMfDucEGtV9t7Pw4/GK6cUb++Q9MPtBr9kpokgZ3maDjy4TPTB+coJw8Fl cVUxZH3UpYMGEtVePxTH3szpMPIhMEI= -----END CERTIFICATE-----Generated at Mon Oct 20 20:45:02 2025 by rpki-client