$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/61e58f86-7769-3387-930a-92d295890166.roa File: 61e58f86-7769-3387-930a-92d295890166.roa (raw, json) Hash identifier: Dk/ru66ouBR6YeWwMv7L4FU7XfjANKZjiSIzTuFMZ6A= Subject key identifier: AA:4C:A6:75:7E:8E:BC:66:65:78:D4:E2:DF:FE:7C:48:EE:60:F5:83 Certificate issuer: /CN=ffc39f64-f356-459c-8bf7-d142a7a166f3 Certificate serial: 010D0C9F4328584B031C02876F5C3733ED71AD80 Authority key identifier: 4D:52:88:03:05:6C:F7:2A:7F:D0:E7:BC:30:7E:24:98:8D:2D:20:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/61e58f86-7769-3387-930a-92d295890166.roa Signing time: Fri 29 Aug 2025 01:11:34 +0000 ROA not before: Fri 29 Aug 2025 01:11:34 +0000 ROA not after: Thu 27 Nov 2025 02:11:34 +0000 asID: 18701 IP address blocks: 138.32.28.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 06 Sep 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:03:1c:02:87:6f:5c:37:33:ed:71:ad:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffc39f64-f356-459c-8bf7-d142a7a166f3 Validity Not Before: Aug 29 01:11:34 2025 GMT Not After : Nov 27 02:11:34 2025 GMT Subject: CN=af321259-4495-4483-94aa-eaf76d505c83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:65:a6:42:3f:b8:4a:01:89:13:be:7c:bc:b3: b5:68:3c:2b:f8:2d:87:9d:86:c9:f7:5a:7a:b2:df: fc:c2:5c:a5:5d:06:3f:9e:2d:79:a4:53:f0:e9:26: 82:9e:39:e0:f5:62:9b:47:e3:c6:dd:eb:1f:25:be: bf:6f:19:55:d4:0e:18:e6:43:e3:11:9c:30:62:7f: e0:c8:73:d9:0b:ba:f1:a3:4a:3e:12:db:12:55:25: 0a:35:c9:64:32:47:bb:3d:ae:97:76:fc:4b:23:e1: 5a:e2:9d:ae:e5:b7:48:d3:ba:f9:f5:67:7e:a0:28: 7c:d3:55:50:f2:1e:10:25:4f:8e:bc:fc:bb:7f:ec: 75:7b:e1:b2:5b:17:ee:66:95:d8:a2:cf:d1:0f:03: 7c:10:49:d8:a9:f2:60:12:79:30:6d:23:94:8b:22: 18:2c:ec:91:2c:e4:1e:a6:a3:09:79:8d:52:dd:45: a8:b3:61:f5:50:e2:be:a4:79:5a:86:d4:ea:b5:42: 27:d7:c5:c0:af:d9:96:2a:80:9e:8d:02:e8:eb:61: 7e:05:16:cb:4b:fc:79:ea:77:9f:c8:1c:d4:61:eb: 65:50:c0:c2:b1:8d:3c:f6:a3:13:a6:08:c6:3b:7c: 41:20:59:36:8a:f7:ec:a1:65:78:ee:de:17:4a:b5: 0f:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:4C:A6:75:7E:8E:BC:66:65:78:D4:E2:DF:FE:7C:48:EE:60:F5:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/61e58f86-7769-3387-930a-92d295890166.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.crl X509v3 Authority Key Identifier: keyid:4D:52:88:03:05:6C:F7:2A:7F:D0:E7:BC:30:7E:24:98:8D:2D:20:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer sbgp-ipAddrBlock: critical IPv4: 138.32.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c0:c7:0e:a3:90:0d:d7:45:22:ce:cb:e3:07:de:38:bb:cf:9c: f8:17:ce:41:d5:0c:58:b1:1d:53:b1:e9:92:e4:4e:60:39:7e: 9c:fa:f2:cf:53:48:77:2a:7d:9e:6f:a5:61:69:f5:83:e7:01: 40:94:d6:ad:23:d1:1d:3b:1e:80:cb:b2:82:7e:43:16:fe:08: 65:29:f7:10:4e:ab:ce:f4:88:bd:81:39:a2:c0:ed:e5:52:c5: e6:21:ab:fc:73:6e:69:96:1e:4f:4b:c8:47:04:0c:2e:0b:87: 80:a4:ea:43:42:d3:bd:9a:a1:fc:07:17:7a:86:9d:54:6f:8e: 05:1a:6c:10:4a:e5:4c:15:68:8d:41:eb:c5:71:54:7f:e1:dc: 6e:66:54:3d:d1:4e:ff:1c:5c:12:e4:5f:4d:c6:93:bc:f2:08: 62:35:05:c5:37:5d:3a:f3:83:81:3b:de:28:f5:f2:4f:f1:08: 87:d5:f0:87:50:f7:3e:99:76:ee:af:c7:d6:19:1b:d8:2f:cb: 08:97:39:d9:7b:a7:fe:7b:02:09:e0:d7:c3:0a:91:f0:03:a4: b0:1f:3c:19:52:26:6f:40:68:f9:79:95:9b:5d:26:d4:4b:f2: 6c:62:2e:f4:af:3b:4c:10:76:16:27:a9:01:d8:a6:b1:2b:04: 3b:8d:bc:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsDHAKHb1w3M+1xrYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmZjMzlmNjQtZjM1Ni00NTljLThiZjctZDE0MmE3YTE2 NmYzMB4XDTI1MDgyOTAxMTEzNFoXDTI1MTEyNzAyMTEzNFowLzEtMCsGA1UEAxMk YWYzMjEyNTktNDQ5NS00NDgzLTk0YWEtZWFmNzZkNTA1YzgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWWmQj+4SgGJE758vLO1aDwr+C2HnYbJ91p6 st/8wlylXQY/ni15pFPw6SaCnjng9WKbR+PG3esfJb6/bxlV1A4Y5kPjEZwwYn/g yHPZC7rxo0o+EtsSVSUKNclkMke7Pa6XdvxLI+Fa4p2u5bdI07r59Wd+oCh801VQ 8h4QJU+OvPy7f+x1e+GyWxfuZpXYos/RDwN8EEnYqfJgEnkwbSOUiyIYLOyRLOQe pqMJeY1S3UWos2H1UOK+pHlahtTqtUIn18XAr9mWKoCejQLo62F+BRbLS/x56nef yBzUYetlUMDCsY089qMTpgjGO3xBIFk2ivfsoWV47t4XSrUPuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKpMpnV+jrxmZXjU4t/+fEjuYPWDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mZmMz OWY2NC1mMzU2LTQ1OWMtOGJmNy1kMTQyYTdhMTY2ZjMvNjFlNThmODYtNzc2OS0z Mzg3LTkzMGEtOTJkMjk1ODkwMTY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZmZjMzlmNjQtZjM1Ni00NTljLThi ZjctZDE0MmE3YTE2NmYzL2ZmYzM5ZjY0LWYzNTYtNDU5Yy04YmY3LWQxNDJhN2Ex NjZmMy5jcmwwHwYDVR0jBBgwFoAUTVKIAwVs9yp/0Oe8MH4kmI0tICAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mZmMzOWY2NC1mMzU2LTQ1OWMtOGJmNy1kMTQy YTdhMTY2ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCiiAcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMDHDqOQDddFIs7L4wfeOLvPnPgXzkHVDFixHVOx6ZLkTmA5fpz68s9T SHcqfZ5vpWFp9YPnAUCU1q0j0R07HoDLsoJ+Qxb+CGUp9xBOq870iL2BOaLA7eVS xeYhq/xzbmmWHk9LyEcEDC4Lh4Ck6kNC072aofwHF3qGnVRvjgUabBBK5UwVaI1B 68VxVH/h3G5mVD3RTv8cXBLkX03Gk7zyCGI1BcU3XTrzg4E73ij18k/xCIfV8IdQ 9z6Zdu6vx9YZG9gvywiXOdl7p/57Agng18MKkfADpLAfPBlSJm9AaPl5lZtdJtRL 8mxiLvSvO0wQdhYnqQHYprErBDuNvNw= -----END CERTIFICATE-----Generated at Fri Sep 5 13:20:58 2025 by rpki-client