$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/bf933f39-3d1b-3b4e-a17f-f9d650858405.roa File: bf933f39-3d1b-3b4e-a17f-f9d650858405.roa (raw, json) Hash identifier: akp/jqR36t7lw3RtZi6CSxaoFBV+lWFP5bauXWZberc= Subject key identifier: 46:F8:FA:67:B0:05:1E:C9:69:5C:9F:EE:33:1C:DA:9C:88:12:E1:CF Certificate issuer: /CN=ffc39f64-f356-459c-8bf7-d142a7a166f3 Certificate serial: 010D0C9F4328584B0312D97F3FD3E4C9ABCDCAC0 Authority key identifier: 4D:52:88:03:05:6C:F7:2A:7F:D0:E7:BC:30:7E:24:98:8D:2D:20:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/bf933f39-3d1b-3b4e-a17f-f9d650858405.roa Signing time: Fri 29 Aug 2025 00:53:06 +0000 ROA not before: Fri 29 Aug 2025 00:53:06 +0000 ROA not after: Thu 27 Nov 2025 01:53:06 +0000 asID: 18701 IP address blocks: 138.32.0.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 06 Sep 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:03:12:d9:7f:3f:d3:e4:c9:ab:cd:ca:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffc39f64-f356-459c-8bf7-d142a7a166f3 Validity Not Before: Aug 29 00:53:06 2025 GMT Not After : Nov 27 01:53:06 2025 GMT Subject: CN=245e6a94-80e2-4dfd-99c6-293af92dc7b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:e1:87:0c:13:3c:92:32:08:cb:2b:f0:95:0f: df:1f:54:2a:a1:51:b3:fb:ca:80:c1:b5:3a:be:a2: dc:00:58:af:3d:5d:e6:d6:29:49:c5:6d:31:39:76: 30:b9:c2:bb:e2:89:86:c4:30:a8:cf:89:62:9d:77: a8:87:e1:90:6f:73:d9:07:1e:c8:e7:e2:f3:0f:0f: 09:50:8d:1c:08:d6:a5:27:ae:99:c6:f7:5b:81:d6: c6:b2:d3:f8:cb:a0:65:40:2f:0e:e4:9f:03:48:12: 4e:0e:a9:0e:12:8f:3d:71:b8:c8:b4:b6:c2:56:b0: 28:0b:ec:85:77:46:4d:96:3b:ac:94:ad:4d:32:7f: 91:49:f6:16:ae:cc:0d:3c:52:2c:04:5d:70:5a:10: 56:66:6e:dd:5b:74:17:72:76:5b:f4:b0:a2:e7:bd: e4:e8:3a:e4:31:b7:f9:e6:67:16:87:26:61:6a:e1: b0:54:2c:f0:93:b8:d7:54:14:40:22:06:de:ca:79: 6c:6c:a5:6b:c3:fa:63:27:44:2a:7b:20:ad:25:ad: fc:1a:a5:a2:a9:5a:31:db:7f:22:cf:7c:57:30:ba: 94:2c:03:e1:d9:ff:be:d5:b8:52:c6:21:6b:a0:f2: 54:18:ef:2f:26:89:c1:e7:c7:d8:b6:98:3e:67:c7: 5d:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:F8:FA:67:B0:05:1E:C9:69:5C:9F:EE:33:1C:DA:9C:88:12:E1:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/bf933f39-3d1b-3b4e-a17f-f9d650858405.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.crl X509v3 Authority Key Identifier: keyid:4D:52:88:03:05:6C:F7:2A:7F:D0:E7:BC:30:7E:24:98:8D:2D:20:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer sbgp-ipAddrBlock: critical IPv4: 138.32.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:7d:91:06:4a:af:8a:e8:09:ea:98:7e:90:e8:8f:89:9f:a1: 0b:c6:1c:a9:4d:96:1b:80:30:57:87:59:8b:02:e3:3b:3a:fc: ba:e2:56:f8:a0:78:fe:1c:6c:01:ef:97:19:14:ac:0a:2c:91: 6e:17:ae:68:b0:1c:1c:55:0e:b7:f6:ca:f2:ce:a0:2b:70:2f: 5e:bc:de:99:97:10:27:84:ee:97:2e:40:1a:44:83:3c:2f:d4: 4b:3b:c1:0a:33:fa:01:64:b5:18:32:ef:2a:81:65:73:98:50: cc:1d:77:af:88:28:39:64:da:ec:37:ac:2c:eb:9f:23:45:97: 7a:b4:73:cb:06:c2:6e:32:ed:e5:22:ec:36:58:52:07:83:1b: 24:28:68:43:b1:09:b0:8d:19:30:dc:4b:ae:e0:55:6a:d7:f9: 34:b8:0d:a7:e6:6d:82:56:80:c0:d2:a2:b3:7a:ed:ba:9e:27: b8:36:9d:a0:d9:7c:32:a7:e1:0b:8d:31:3a:3a:c3:d9:18:de: 50:1f:32:09:90:2a:11:80:f1:36:03:27:49:4a:18:3b:47:cc: cb:9d:b5:ab:62:8d:1f:b8:f7:f6:91:75:3c:d1:43:28:20:f8: bb:6f:19:55:3f:d9:46:97:3a:94:2c:84:c2:06:0d:27:c0:8f: f1:28:b9:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsDEtl/P9PkyavNysAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmZjMzlmNjQtZjM1Ni00NTljLThiZjctZDE0MmE3YTE2 NmYzMB4XDTI1MDgyOTAwNTMwNloXDTI1MTEyNzAxNTMwNlowLzEtMCsGA1UEAxMk MjQ1ZTZhOTQtODBlMi00ZGZkLTk5YzYtMjkzYWY5MmRjN2IwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoeGHDBM8kjIIyyvwlQ/fH1QqoVGz+8qAwbU6 vqLcAFivPV3m1ilJxW0xOXYwucK74omGxDCoz4linXeoh+GQb3PZBx7I5+LzDw8J UI0cCNalJ66ZxvdbgdbGstP4y6BlQC8O5J8DSBJODqkOEo89cbjItLbCVrAoC+yF d0ZNljuslK1NMn+RSfYWrswNPFIsBF1wWhBWZm7dW3QXcnZb9LCi573k6DrkMbf5 5mcWhyZhauGwVCzwk7jXVBRAIgbeynlsbKVrw/pjJ0QqeyCtJa38GqWiqVox238i z3xXMLqULAPh2f++1bhSxiFroPJUGO8vJonB58fYtpg+Z8ddOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEb4+mewBR7JaVyf7jMc2pyIEuHPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mZmMz OWY2NC1mMzU2LTQ1OWMtOGJmNy1kMTQyYTdhMTY2ZjMvYmY5MzNmMzktM2QxYi0z YjRlLWExN2YtZjlkNjUwODU4NDA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZmZjMzlmNjQtZjM1Ni00NTljLThi ZjctZDE0MmE3YTE2NmYzL2ZmYzM5ZjY0LWYzNTYtNDU5Yy04YmY3LWQxNDJhN2Ex NjZmMy5jcmwwHwYDVR0jBBgwFoAUTVKIAwVs9yp/0Oe8MH4kmI0tICAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mZmMzOWY2NC1mMzU2LTQ1OWMtOGJmNy1kMTQy YTdhMTY2ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDiiAAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACZ9kQZKr4roCeqYfpDoj4mfoQvGHKlNlhuAMFeHWYsC4zs6/LriVvig eP4cbAHvlxkUrAoskW4XrmiwHBxVDrf2yvLOoCtwL1683pmXECeE7pcuQBpEgzwv 1Es7wQoz+gFktRgy7yqBZXOYUMwdd6+IKDlk2uw3rCzrnyNFl3q0c8sGwm4y7eUi 7DZYUgeDGyQoaEOxCbCNGTDcS67gVWrX+TS4DafmbYJWgMDSorN67bqeJ7g2naDZ fDKn4QuNMTo6w9kY3lAfMgmQKhGA8TYDJ0lKGDtHzMudtatijR+49/aRdTzRQygg +LtvGVU/2UaXOpQshMIGDSfAj/EouWE= -----END CERTIFICATE-----Generated at Fri Sep 5 13:14:56 2025 by rpki-client