$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/87503a20-f7b9-3382-a7ed-ac6a649f71d5.roa File: 87503a20-f7b9-3382-a7ed-ac6a649f71d5.roa (raw, json) Hash identifier: xtBnYrQWzr7Zk1EpDTiwd0dEj7yoHtfr87OXxvlVHvw= Subject key identifier: 8C:F5:A7:71:D7:74:EB:36:D9:4C:55:F8:12:90:BC:74:23:7B:C8:CF Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584ADDF911548F69255FAC666C00 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/87503a20-f7b9-3382-a7ed-ac6a649f71d5.roa Signing time: Fri 15 Aug 2025 17:56:15 +0000 ROA not before: Fri 15 Aug 2025 17:56:15 +0000 ROA not after: Thu 13 Nov 2025 18:56:15 +0000 asID: 31898 IP address blocks: 138.2.112.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:dd:f9:11:54:8f:69:25:5f:ac:66:6c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Aug 15 17:56:15 2025 GMT Not After : Nov 13 18:56:15 2025 GMT Subject: CN=a13c6b82-815b-4175-b75d-85a420555985 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:5e:e6:11:f6:15:e4:6d:ef:f4:45:55:41:35: 4f:49:79:38:46:a7:23:3a:83:b8:3b:26:a4:1a:ab: 53:ae:e4:c8:5d:a7:5e:cc:ad:ed:48:c7:16:3e:25: a6:6b:8b:dc:53:d0:6f:7a:8b:16:b6:d0:d1:0d:7d: 3c:da:aa:be:05:7d:50:e9:38:6a:20:8a:31:bb:62: 41:0f:d6:35:5c:41:6c:05:26:3e:11:1d:1e:56:d2: 5b:a9:e1:11:d1:fd:2f:b1:7c:11:09:1a:81:ff:22: ee:39:a3:08:38:81:96:a3:05:ef:47:f6:e6:c3:46: 7f:d3:e1:84:e5:41:91:44:86:ed:2a:78:b5:ce:4f: 67:3a:39:90:32:86:dd:ca:94:4f:40:f2:ab:98:d8: 70:ab:97:35:a7:93:f4:c5:67:ff:ab:3e:1e:51:36: 69:ba:eb:50:09:db:f4:f9:1f:46:83:56:53:a7:6c: 8b:e9:06:d5:7a:9c:19:da:c1:79:2b:ef:6f:5f:86: f1:12:6e:4a:d8:2a:f0:64:e6:6e:15:df:c1:ff:bd: 11:e6:c1:b8:c6:da:c4:0a:a7:98:a4:a4:1c:02:7a: bd:1e:30:52:c8:7d:33:a4:b0:a1:2e:31:b4:ea:c4: 7d:3e:23:71:15:01:31:f9:14:a6:22:85:0b:db:0d: 15:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:F5:A7:71:D7:74:EB:36:D9:4C:55:F8:12:90:BC:74:23:7B:C8:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/87503a20-f7b9-3382-a7ed-ac6a649f71d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 138.2.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:a1:ac:9b:f7:c0:03:fe:2e:4d:ff:39:13:5b:16:66:81:4d: cf:f7:6c:83:cf:e9:91:bc:70:74:4d:39:af:45:ab:a8:5a:9a: 45:38:a0:57:16:14:3b:c4:f6:5f:c8:5d:f1:0e:5d:aa:47:4f: b0:00:ee:7b:3a:fd:3d:80:8b:58:e1:25:20:15:a0:23:1d:12: ce:d9:23:71:37:4f:a2:60:80:a7:34:0a:c5:1d:f7:b6:ef:0e: f0:5c:13:00:80:80:e8:b7:64:ac:82:83:dc:78:dc:a0:25:87: f4:f4:18:14:9c:10:35:f2:ee:68:fe:41:6c:68:76:96:8d:de: 4d:a4:76:e1:81:f1:7e:01:e4:7f:28:6c:4f:f6:eb:3a:26:6e: 98:50:58:c3:52:8b:9c:51:86:45:42:05:bb:73:91:ac:ee:18: 90:b4:ea:4d:2f:e9:2c:b5:2f:66:d8:90:28:0b:c9:63:73:1f: 34:39:f8:47:96:8f:76:4a:e6:cb:0b:69:28:bc:03:a0:6f:4d: 34:4c:3f:dc:67:52:a6:8a:96:ba:2a:86:af:ba:b0:36:33:ec: 5f:38:9f:7a:5e:42:b4:78:19:82:68:62:89:f0:5a:d2:e2:9e: bc:60:6c:22:e6:3d:d0:e8:cc:3e:44:a5:35:53:d7:03:b1:b9: a8:24:4d:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErd+RFUj2klX6xmbAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI1MDgxNTE3NTYxNVoXDTI1MTExMzE4NTYxNVowLzEtMCsGA1UEAxMk YTEzYzZiODItODE1Yi00MTc1LWI3NWQtODVhNDIwNTU1OTg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAql7mEfYV5G3v9EVVQTVPSXk4RqcjOoO4Oyak GqtTruTIXadezK3tSMcWPiWma4vcU9BveosWttDRDX082qq+BX1Q6ThqIIoxu2JB D9Y1XEFsBSY+ER0eVtJbqeER0f0vsXwRCRqB/yLuOaMIOIGWowXvR/bmw0Z/0+GE 5UGRRIbtKni1zk9nOjmQMobdypRPQPKrmNhwq5c1p5P0xWf/qz4eUTZpuutQCdv0 +R9Gg1ZTp2yL6QbVepwZ2sF5K+9vX4bxEm5K2CrwZOZuFd/B/70R5sG4xtrECqeY pKQcAnq9HjBSyH0zpLChLjG06sR9PiNxFQEx+RSmIoUL2w0VnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIz1p3HXdOs22UxV+BKQvHQje8jPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvODc1MDNhMjAtZjdiOS0z MzgyLWE3ZWQtYWM2YTY0OWY3MWQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEigJwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB6hrJv3wAP+Lk3/ORNbFmaBTc/3bIPP6ZG8cHRNOa9Fq6hamkU4oFcW FDvE9l/IXfEOXapHT7AA7ns6/T2Ai1jhJSAVoCMdEs7ZI3E3T6JggKc0CsUd97bv DvBcEwCAgOi3ZKyCg9x43KAlh/T0GBScEDXy7mj+QWxodpaN3k2kduGB8X4B5H8o bE/26zombphQWMNSi5xRhkVCBbtzkazuGJC06k0v6Sy1L2bYkCgLyWNzHzQ5+EeW j3ZK5ssLaSi8A6BvTTRMP9xnUqaKlroqhq+6sDYz7F84n3peQrR4GYJoYonwWtLi nrxgbCLmPdDozD5EpTVT1wOxuagkTbo= -----END CERTIFICATE-----Generated at Wed Aug 20 08:03:48 2025 by rpki-client