$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/b991e82a-2e7a-3467-997c-589f9374fc62.roa File: b991e82a-2e7a-3467-997c-589f9374fc62.roa (raw, json) Hash identifier: 5wDeNyFKn91euuI2fN23sqvPNj8KrGhKJV56LP6kgvE= Subject key identifier: BF:B2:AB:99:5E:F8:F9:43:BA:76:9C:63:72:F6:63:E9:56:AD:3F:B2 Certificate issuer: /CN=ffc39f64-f356-459c-8bf7-d142a7a166f3 Certificate serial: 010D0C9F4328584B38219B8B1E1E1B833BE928C0 Authority key identifier: 4D:52:88:03:05:6C:F7:2A:7F:D0:E7:BC:30:7E:24:98:8D:2D:20:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/b991e82a-2e7a-3467-997c-589f9374fc62.roa Signing time: Wed 17 Sep 2025 01:00:33 +0000 ROA not before: Wed 17 Sep 2025 01:00:33 +0000 ROA not after: Tue 16 Dec 2025 02:00:33 +0000 asID: 16509 IP address blocks: 138.32.104.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:38:21:9b:8b:1e:1e:1b:83:3b:e9:28:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffc39f64-f356-459c-8bf7-d142a7a166f3 Validity Not Before: Sep 17 01:00:33 2025 GMT Not After : Dec 16 02:00:33 2025 GMT Subject: CN=2b563f09-7f6f-4fb8-8339-787bca216cd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:fb:81:73:3d:76:4b:cb:f6:1a:4e:d9:a5:b2: c1:b4:e5:32:93:81:65:b2:f7:28:7e:f6:40:db:a5: e4:40:12:6f:f4:f3:86:80:df:9d:b8:81:36:f0:c3: e5:83:15:b6:70:7b:87:ba:88:3c:3a:5d:08:7d:c4: 3d:0f:6b:9b:b4:ff:be:46:ab:fc:de:8a:7f:b6:eb: ab:3d:0c:d7:9a:2d:a6:07:53:23:2a:00:8e:45:5b: ba:6d:02:fb:32:a0:1e:88:68:63:1b:6f:13:a3:b3: 13:c2:8c:ee:90:cd:33:f0:0b:38:fd:3f:e4:40:08: 14:bd:cf:e1:df:b8:69:bc:8d:8b:00:1e:fd:bf:73: 89:2b:d7:1b:41:4d:b9:b5:94:ee:bc:68:97:66:47: 6a:db:e5:c2:f6:fa:dc:fb:a2:b5:84:3c:59:5e:c5: 94:eb:c1:ee:b8:e2:3b:34:a3:dd:1d:10:00:82:58: 28:e6:97:35:c2:df:dc:bb:c1:33:1d:95:4d:d4:d6: 68:ee:dc:f8:90:ef:c9:12:62:70:29:cc:66:ea:29: 54:23:6f:92:4b:71:3f:05:5b:a6:fd:95:ab:f9:17: aa:a8:04:7b:55:83:8d:2b:a4:da:c8:f4:a5:a7:55: 4e:61:89:51:21:76:92:9c:ab:67:51:7b:16:4b:1e: cf:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:B2:AB:99:5E:F8:F9:43:BA:76:9C:63:72:F6:63:E9:56:AD:3F:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/b991e82a-2e7a-3467-997c-589f9374fc62.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.crl X509v3 Authority Key Identifier: keyid:4D:52:88:03:05:6C:F7:2A:7F:D0:E7:BC:30:7E:24:98:8D:2D:20:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer sbgp-ipAddrBlock: critical IPv4: 138.32.104.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:de:1a:6c:72:c9:f6:a6:f0:94:ed:68:cc:fd:1d:52:25:26: 30:10:34:6a:52:b8:49:02:99:24:b9:1c:c3:cf:92:08:81:69: 11:27:13:30:09:0a:03:9a:41:d8:07:18:d6:17:60:16:18:bb: 36:3e:4a:b9:00:26:6a:ca:54:c6:02:ec:e7:94:20:68:f8:ec: b6:cd:5b:fd:92:20:f5:95:c3:9f:38:e1:f0:e5:55:05:17:9d: 91:53:4a:a9:26:1f:94:77:8f:bc:92:26:e7:15:55:5c:12:ff: 15:73:dc:ae:99:ae:8a:3d:b6:e1:ce:e6:c9:17:73:e1:88:7f: 95:cf:85:ff:61:67:2e:82:4b:31:9a:73:14:9f:a7:93:93:b1: 3b:dd:56:96:f5:c8:a1:21:a6:23:8c:e4:50:8a:c5:3c:67:43: d8:5a:69:38:13:d9:c5:42:ab:80:73:5e:81:13:11:52:d7:bf: c7:4f:01:fd:bd:11:38:9c:a9:66:ae:72:af:35:e6:1d:91:49: f8:c6:a7:b2:ae:66:8a:fd:47:82:96:6a:7a:7e:f2:34:66:33: b2:06:51:75:03:81:e7:1e:7b:7c:1d:6a:4a:07:2f:d3:43:af: 28:8a:78:00:ab:6c:31:9c:f9:de:4b:64:55:e3:bb:cc:bf:7f: 9c:e9:d4:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs4IZuLHh4bgzvpKMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmZjMzlmNjQtZjM1Ni00NTljLThiZjctZDE0MmE3YTE2 NmYzMB4XDTI1MDkxNzAxMDAzM1oXDTI1MTIxNjAyMDAzM1owLzEtMCsGA1UEAxMk MmI1NjNmMDktN2Y2Zi00ZmI4LTgzMzktNzg3YmNhMjE2Y2QwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPuBcz12S8v2Gk7ZpbLBtOUyk4FlsvcofvZA 26XkQBJv9POGgN+duIE28MPlgxW2cHuHuog8Ol0IfcQ9D2ubtP++Rqv83op/tuur PQzXmi2mB1MjKgCORVu6bQL7MqAeiGhjG28To7MTwozukM0z8As4/T/kQAgUvc/h 37hpvI2LAB79v3OJK9cbQU25tZTuvGiXZkdq2+XC9vrc+6K1hDxZXsWU68HuuOI7 NKPdHRAAglgo5pc1wt/cu8EzHZVN1NZo7tz4kO/JEmJwKcxm6ilUI2+SS3E/BVum /ZWr+ReqqAR7VYONK6TayPSlp1VOYYlRIXaSnKtnUXsWSx7PswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL+yq5le+PlDunacY3L2Y+lWrT+yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mZmMz OWY2NC1mMzU2LTQ1OWMtOGJmNy1kMTQyYTdhMTY2ZjMvYjk5MWU4MmEtMmU3YS0z NDY3LTk5N2MtNTg5ZjkzNzRmYzYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZmZjMzlmNjQtZjM1Ni00NTljLThi ZjctZDE0MmE3YTE2NmYzL2ZmYzM5ZjY0LWYzNTYtNDU5Yy04YmY3LWQxNDJhN2Ex NjZmMy5jcmwwHwYDVR0jBBgwFoAUTVKIAwVs9yp/0Oe8MH4kmI0tICAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mZmMzOWY2NC1mMzU2LTQ1OWMtOGJmNy1kMTQy YTdhMTY2ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCiiBoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACzeGmxyyfam8JTtaMz9HVIlJjAQNGpSuEkCmSS5HMPPkgiBaREnEzAJ CgOaQdgHGNYXYBYYuzY+SrkAJmrKVMYC7OeUIGj47LbNW/2SIPWVw5844fDlVQUX nZFTSqkmH5R3j7ySJucVVVwS/xVz3K6Zroo9tuHO5skXc+GIf5XPhf9hZy6CSzGa cxSfp5OTsTvdVpb1yKEhpiOM5FCKxTxnQ9haaTgT2cVCq4BzXoETEVLXv8dPAf29 ETicqWaucq815h2RSfjGp7KuZor9R4KWanp+8jRmM7IGUXUDgecee3wdakoHL9ND ryiKeACrbDGc+d5LZFXju8y/f5zp1LA= -----END CERTIFICATE-----Generated at Mon Oct 20 20:42:08 2025 by rpki-client