$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/976764a1-92d4-30a0-8e82-b8b040c5e4ab.roa File: 976764a1-92d4-30a0-8e82-b8b040c5e4ab.roa (raw, json) Hash identifier: Cf83h+IiXTZ14i5yJ7S6VTGGXzjiiALw/VuZIjlRp5g= Subject key identifier: 94:24:49:46:EE:BB:53:DB:12:07:74:94:21:82:D3:90:44:F7:BA:3A Certificate issuer: /CN=ffc39f64-f356-459c-8bf7-d142a7a166f3 Certificate serial: 010D0C9F4328584B031B65B9EEDA85645035B080 Authority key identifier: 4D:52:88:03:05:6C:F7:2A:7F:D0:E7:BC:30:7E:24:98:8D:2D:20:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/976764a1-92d4-30a0-8e82-b8b040c5e4ab.roa Signing time: Fri 29 Aug 2025 01:10:20 +0000 ROA not before: Fri 29 Aug 2025 01:10:20 +0000 ROA not after: Thu 27 Nov 2025 02:10:20 +0000 asID: 18701 IP address blocks: 138.32.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 06 Sep 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:03:1b:65:b9:ee:da:85:64:50:35:b0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffc39f64-f356-459c-8bf7-d142a7a166f3 Validity Not Before: Aug 29 01:10:20 2025 GMT Not After : Nov 27 02:10:20 2025 GMT Subject: CN=7d017ba6-4526-4650-9829-df633cb59516 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:60:bf:12:80:e0:1b:39:03:cd:1e:c7:cb:c8: 60:60:80:46:9b:5a:56:14:39:54:14:b6:bd:02:c3: 46:cf:3d:ee:dd:d5:bf:77:e2:f1:a0:73:3c:b8:69: 6d:93:e2:38:ba:02:d3:9a:3f:52:ff:57:46:20:cc: 50:2d:d7:7f:d4:ff:84:14:9f:95:26:34:90:cc:58: 33:d8:c3:03:d9:60:54:d2:53:d8:14:1d:bb:10:db: db:00:c9:86:11:7f:ab:07:69:d8:5d:78:a3:22:33: 29:88:b5:5f:ff:3a:0f:18:82:9c:ae:5c:ad:87:7b: ae:7b:45:e6:94:a7:73:f3:aa:66:32:01:98:bf:ab: 5e:90:1d:fd:f9:2d:16:10:ba:aa:51:b5:e2:d5:42: cb:3b:85:96:f0:74:94:b2:19:28:f8:1d:be:ad:58: 7c:0e:8d:e1:7b:ef:27:0e:99:1e:ed:ae:e2:02:c1: df:47:3c:22:e8:9f:7c:70:00:b9:a3:d5:a8:ae:3d: 09:26:69:13:5e:26:69:cb:86:bf:69:c8:34:d7:54: f3:9c:7c:c2:52:b0:e9:ed:3d:d1:cf:a9:67:1d:bf: fe:1f:1a:51:49:b8:bd:3a:88:52:c0:c1:03:5b:e5: 0e:d3:b1:85:3c:e5:26:45:ea:49:9b:bd:1a:b7:47: 8a:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:24:49:46:EE:BB:53:DB:12:07:74:94:21:82:D3:90:44:F7:BA:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/976764a1-92d4-30a0-8e82-b8b040c5e4ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.crl X509v3 Authority Key Identifier: keyid:4D:52:88:03:05:6C:F7:2A:7F:D0:E7:BC:30:7E:24:98:8D:2D:20:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer sbgp-ipAddrBlock: critical IPv4: 138.32.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:42:aa:08:ec:c7:ba:40:39:5e:98:f8:fa:fc:3a:6a:30:07: a5:bd:c4:d6:a3:48:69:85:1f:63:01:86:b1:22:89:00:f8:c7: 6c:7e:a9:98:18:6b:ce:01:0a:7a:dc:82:ea:1a:a6:9c:1a:7e: 2d:de:62:17:a2:55:a4:36:fa:ca:44:9e:ab:bd:77:e5:e8:54: b9:51:19:96:e2:dd:24:bc:50:16:7e:79:e0:b4:ff:03:f8:28: c9:9d:13:32:50:c7:2c:08:d5:ff:2c:0a:b4:1c:2f:d9:ad:bc: c7:53:23:45:cd:a7:01:e6:21:61:61:02:48:b9:4b:13:cc:ef: 49:c4:4c:22:51:bb:03:78:5e:41:6d:6d:58:0d:c2:ac:7c:f0: c1:06:be:f4:d9:51:4a:a4:d3:62:39:42:02:e1:27:74:ab:7e: 4b:d1:28:fb:7f:f8:71:f5:62:24:23:ac:13:6a:2a:95:a3:0a: 57:2d:a4:10:85:21:81:e9:0a:2f:37:39:e0:f3:0a:01:66:86: 8b:94:6f:8e:eb:3d:4d:d2:08:21:c2:4b:af:ec:ea:41:aa:3b: 0f:f1:96:02:2e:24:1b:70:b9:45:54:7d:1e:c3:db:83:65:d4: 1a:56:98:59:91:3c:01:65:b7:f1:10:d7:a3:d3:96:26:86:8e: ad:ca:9a:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsDG2W57tqFZFA1sIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmZjMzlmNjQtZjM1Ni00NTljLThiZjctZDE0MmE3YTE2 NmYzMB4XDTI1MDgyOTAxMTAyMFoXDTI1MTEyNzAyMTAyMFowLzEtMCsGA1UEAxMk N2QwMTdiYTYtNDUyNi00NjUwLTk4MjktZGY2MzNjYjU5NTE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWC/EoDgGzkDzR7Hy8hgYIBGm1pWFDlUFLa9 AsNGzz3u3dW/d+LxoHM8uGltk+I4ugLTmj9S/1dGIMxQLdd/1P+EFJ+VJjSQzFgz 2MMD2WBU0lPYFB27ENvbAMmGEX+rB2nYXXijIjMpiLVf/zoPGIKcrlyth3uue0Xm lKdz86pmMgGYv6tekB39+S0WELqqUbXi1ULLO4WW8HSUshko+B2+rVh8Do3he+8n Dpke7a7iAsHfRzwi6J98cAC5o9Worj0JJmkTXiZpy4a/acg011TznHzCUrDp7T3R z6lnHb/+HxpRSbi9OohSwMEDW+UO07GFPOUmRepJm70at0eKTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJQkSUbuu1PbEgd0lCGC05BE97o6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mZmMz OWY2NC1mMzU2LTQ1OWMtOGJmNy1kMTQyYTdhMTY2ZjMvOTc2NzY0YTEtOTJkNC0z MGEwLThlODItYjhiMDQwYzVlNGFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZmZjMzlmNjQtZjM1Ni00NTljLThi ZjctZDE0MmE3YTE2NmYzL2ZmYzM5ZjY0LWYzNTYtNDU5Yy04YmY3LWQxNDJhN2Ex NjZmMy5jcmwwHwYDVR0jBBgwFoAUTVKIAwVs9yp/0Oe8MH4kmI0tICAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mZmMzOWY2NC1mMzU2LTQ1OWMtOGJmNy1kMTQy YTdhMTY2ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCiiAUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGBCqgjsx7pAOV6Y+Pr8OmowB6W9xNajSGmFH2MBhrEiiQD4x2x+qZgY a84BCnrcguoappwafi3eYheiVaQ2+spEnqu9d+XoVLlRGZbi3SS8UBZ+eeC0/wP4 KMmdEzJQxywI1f8sCrQcL9mtvMdTI0XNpwHmIWFhAki5SxPM70nETCJRuwN4XkFt bVgNwqx88MEGvvTZUUqk02I5QgLhJ3SrfkvRKPt/+HH1YiQjrBNqKpWjClctpBCF IYHpCi83OeDzCgFmhouUb47rPU3SCCHCS6/s6kGqOw/xlgIuJBtwuUVUfR7D24Nl 1BpWmFmRPAFlt/EQ16PTliaGjq3KmqI= -----END CERTIFICATE-----Generated at Fri Sep 5 13:14:59 2025 by rpki-client