$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/d5fd832c-a195-3503-924b-73624a4aef1e.roa File: d5fd832c-a195-3503-924b-73624a4aef1e.roa (raw, json) Hash identifier: EOE1VB7VBDRXP+dbQiIqBy66TNxR7Ax/vMScR6MFx+I= Subject key identifier: 6F:EC:49:F1:D1:00:5A:29:C7:D9:66:6B:43:18:01:D0:79:EF:04:86 Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584ACA762293E989AFA7F3AC5A40 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/d5fd832c-a195-3503-924b-73624a4aef1e.roa Signing time: Fri 08 Aug 2025 18:12:05 +0000 ROA not before: Fri 08 Aug 2025 18:12:05 +0000 ROA not after: Thu 06 Nov 2025 19:12:05 +0000 asID: 31898 IP address blocks: 138.2.64.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ca:76:22:93:e9:89:af:a7:f3:ac:5a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Aug 8 18:12:05 2025 GMT Not After : Nov 6 19:12:05 2025 GMT Subject: CN=f8fcea01-ff31-4f6f-9979-d3ba299a3d7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:b0:3f:96:18:26:b6:d9:75:18:89:ac:36:2a: d2:25:c8:31:f8:62:82:8f:25:ef:dd:ee:3e:65:51: df:54:14:75:61:17:b2:73:e7:46:d7:05:1e:e2:46: 1c:fa:a7:38:73:b2:69:d0:e4:ba:a3:73:e8:f3:07: cd:62:ea:1c:72:a3:16:3c:63:d6:cb:42:fb:50:51: 96:0f:74:57:62:02:7b:e6:49:b2:cf:f1:93:e0:e9: cf:1a:0e:84:df:f1:03:5a:11:e8:2c:b4:21:3d:79: 3c:7d:2d:32:1b:f2:e0:70:a5:bd:b7:45:9d:d9:d6: 53:00:e9:00:e8:31:e7:83:ef:ad:5c:df:2a:26:1b: 16:81:f8:08:ea:57:47:a4:6d:04:de:77:60:4e:ca: 68:9d:1a:1e:f1:9a:7b:25:08:7d:33:84:f8:89:02: e0:bf:ed:22:24:b0:7c:24:67:de:bd:88:30:af:7c: 2e:ff:cd:24:48:81:84:68:ec:93:09:b8:d6:17:df: cc:b4:79:81:4d:84:6c:cf:29:3a:6e:b7:d6:bf:12: ee:d6:47:52:26:8c:2f:a1:af:ab:a5:ad:c6:6c:de: b7:40:22:5d:80:a6:89:07:44:94:51:8f:7e:5f:e4: 7d:7e:14:e0:03:28:9e:c5:9c:9e:a6:62:e1:b3:46: cc:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:EC:49:F1:D1:00:5A:29:C7:D9:66:6B:43:18:01:D0:79:EF:04:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/d5fd832c-a195-3503-924b-73624a4aef1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 138.2.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:03:2f:23:5f:86:f9:be:48:7a:92:b7:c5:d9:d0:7c:c0:15: 39:ce:d2:aa:58:d1:29:13:84:67:68:52:18:2a:49:0d:27:92: d1:15:b4:bf:34:89:6c:ef:c9:93:83:02:c0:82:e4:7c:25:b6: 7d:91:ec:38:d6:67:39:48:44:09:71:3a:7b:1a:9a:30:22:f0: 63:e7:e9:b5:c9:15:79:78:53:8c:1a:1b:6d:f1:67:99:7c:80: 00:44:79:34:e2:22:fa:12:fe:91:ac:5a:5c:a9:34:59:4f:c1: 31:d9:0c:d5:9b:19:5e:e0:36:45:70:2d:35:7e:ab:81:72:1d: 1f:1e:34:28:83:e3:48:e1:d1:e6:11:a6:4b:b3:3a:74:9a:f2: 44:b3:b6:4a:0a:2f:12:c0:55:c5:44:d4:5b:52:e1:78:b9:80: a8:46:3d:94:9d:b4:77:6d:ca:a4:dd:ef:a3:9e:fb:25:0b:5f: 42:e7:b4:2e:6c:f8:1d:99:c2:fd:3e:da:b2:f3:d4:98:47:cf: 59:7a:fe:5b:8c:26:2b:e0:12:0d:06:50:56:81:85:6f:9f:07: 36:64:9b:65:84:4e:8f:9a:f1:41:c4:08:74:63:28:f1:f9:d0: 9d:29:29:67:bd:62:bd:1b:8e:07:5c:44:6f:22:31:5f:2f:3b: b9:8c:29:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErKdiKT6Ymvp/OsWkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI1MDgwODE4MTIwNVoXDTI1MTEwNjE5MTIwNVowLzEtMCsGA1UEAxMk ZjhmY2VhMDEtZmYzMS00ZjZmLTk5NzktZDNiYTI5OWEzZDdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg7A/lhgmttl1GImsNirSJcgx+GKCjyXv3e4+ ZVHfVBR1YReyc+dG1wUe4kYc+qc4c7Jp0OS6o3Po8wfNYuoccqMWPGPWy0L7UFGW D3RXYgJ75kmyz/GT4OnPGg6E3/EDWhHoLLQhPXk8fS0yG/LgcKW9t0Wd2dZTAOkA 6DHng++tXN8qJhsWgfgI6ldHpG0E3ndgTsponRoe8Zp7JQh9M4T4iQLgv+0iJLB8 JGfevYgwr3wu/80kSIGEaOyTCbjWF9/MtHmBTYRszyk6brfWvxLu1kdSJowvoa+r pa3GbN63QCJdgKaJB0SUUY9+X+R9fhTgAyiexZyepmLhs0bMzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG/sSfHRAFopx9lma0MYAdB57wSGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvZDVmZDgzMmMtYTE5NS0z NTAzLTkyNGItNzM2MjRhNGFlZjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFigJAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADkDLyNfhvm+SHqSt8XZ0HzAFTnO0qpY0SkThGdoUhgqSQ0nktEVtL80 iWzvyZODAsCC5Hwltn2R7DjWZzlIRAlxOnsamjAi8GPn6bXJFXl4U4waG23xZ5l8 gABEeTTiIvoS/pGsWlypNFlPwTHZDNWbGV7gNkVwLTV+q4FyHR8eNCiD40jh0eYR pkuzOnSa8kSztkoKLxLAVcVE1FtS4Xi5gKhGPZSdtHdtyqTd76Oe+yULX0LntC5s +B2Zwv0+2rLz1JhHz1l6/luMJivgEg0GUFaBhW+fBzZkm2WETo+a8UHECHRjKPH5 0J0pKWe9Yr0bjgdcRG8iMV8vO7mMKZw= -----END CERTIFICATE-----Generated at Wed Aug 20 08:02:06 2025 by rpki-client