$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/6ca72908-2221-3ecd-8e5a-9b8fe27f2c2b.roa File: 6ca72908-2221-3ecd-8e5a-9b8fe27f2c2b.roa (raw, json) Hash identifier: YNN21IGD8YMcQ2yWQgbkCVr4U9QmsulPP/W96sGjMMM= Subject key identifier: 8B:8D:8D:6F:88:ED:29:DF:FE:F5:34:62:3E:76:FC:44:53:C3:8E:73 Certificate issuer: /CN=3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc Certificate serial: 010D0C9F4328584B4D11DAF99A3C529F14E48780 Authority key identifier: 56:34:70:D9:2B:60:85:B1:A7:7C:A0:97:7D:A5:7A:1D:B8:27:54:05 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/6ca72908-2221-3ecd-8e5a-9b8fe27f2c2b.roa Signing time: Wed 24 Sep 2025 13:00:41 +0000 ROA not before: Wed 24 Sep 2025 13:00:41 +0000 ROA not after: Tue 23 Dec 2025 14:00:41 +0000 asID: 10497 IP address blocks: 138.220.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4d:11:da:f9:9a:3c:52:9f:14:e4:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc Validity Not Before: Sep 24 13:00:41 2025 GMT Not After : Dec 23 14:00:41 2025 GMT Subject: CN=456f344d-1399-4830-a0da-0cd76ac890ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:18:93:0e:d2:fe:82:56:47:9b:b9:21:42:a3: 47:6f:a4:9f:0a:1f:1d:7b:08:ad:58:2d:06:20:91: 7d:c4:69:28:af:d0:a6:a2:9e:25:70:3c:08:a1:b7: ef:28:df:26:bd:33:28:0f:4a:6d:aa:f1:8a:80:29: 89:f0:da:7f:54:05:ea:0b:53:81:11:46:0d:60:0d: af:8d:a3:48:35:c4:1d:1c:b2:dc:fe:2a:35:1c:7c: 88:70:b5:69:2d:1e:e3:db:0b:b8:9d:83:d1:fd:5c: 18:f0:5f:60:2c:16:9a:dd:55:51:02:67:3c:3b:de: c8:e9:f0:f4:c4:b4:b0:08:cb:a8:a3:e5:6f:15:b8: 07:1d:b8:4a:10:a4:e8:29:cf:c5:fa:04:f7:2c:63: f0:f1:e3:af:f9:44:66:4b:a1:bf:47:d1:4f:e9:93: 3b:28:af:51:6a:ad:20:41:7f:11:0b:00:3d:ba:b2: 3a:ea:3b:e3:12:45:81:1e:4b:4f:6c:dc:4b:b6:43: 60:27:a0:9c:82:28:39:85:5b:db:5d:c3:7f:d3:eb: 9a:8f:6a:fa:fc:20:7f:0c:0e:2b:c8:d1:71:18:96: 79:e6:ab:91:3d:90:da:62:cf:83:cf:88:25:50:91: e4:16:62:77:98:eb:e0:44:bd:71:ff:a1:10:06:80: d6:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:8D:8D:6F:88:ED:29:DF:FE:F5:34:62:3E:76:FC:44:53:C3:8E:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/6ca72908-2221-3ecd-8e5a-9b8fe27f2c2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.crl X509v3 Authority Key Identifier: keyid:56:34:70:D9:2B:60:85:B1:A7:7C:A0:97:7D:A5:7A:1D:B8:27:54:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.cer sbgp-ipAddrBlock: critical IPv4: 138.220.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:5a:f8:db:58:ff:ac:34:4e:b7:23:4c:98:0b:b5:ad:f3:f4: 48:6f:e5:1e:b7:e3:45:92:35:59:8c:49:a9:7f:8a:80:bd:78: e0:1d:22:e7:3c:62:0a:98:41:cf:55:dc:db:38:1e:9a:bd:cf: b6:32:40:a0:40:63:2a:0c:94:67:39:b2:20:45:95:c6:15:30: 07:51:b0:7f:0f:5d:55:f3:1b:e8:5e:0c:da:9d:69:3c:f8:85: 4a:ea:81:27:ff:4a:3d:b8:5a:c7:d6:de:cc:9d:d4:09:2e:03: 4e:2c:3a:bd:06:2b:34:66:ea:eb:10:d8:47:84:8e:7e:12:05: 8f:1c:ac:7c:4b:d0:7a:a8:bc:89:1d:85:1b:91:6b:74:70:d6: 59:15:5c:0e:f3:0a:bf:8d:65:e8:83:1a:55:d1:d7:15:68:7f: 29:2f:61:4f:cf:46:94:77:6f:e2:ab:ba:a8:9a:cc:a7:65:1a: cf:8b:8b:81:88:e2:5b:c8:f1:fa:24:0d:75:69:f1:25:56:0f: d5:6f:9a:62:55:6d:18:02:bb:18:ef:00:d9:8e:00:70:80:c3: 23:85:0b:52:40:0d:b2:39:5c:78:86:69:8f:a9:46:15:3e:8d: 06:bf:c4:2f:fa:d4:71:ec:3d:ab:cb:76:be:9e:52:73:7e:22: 96:1b:cb:5b -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEtNEdr5mjxSnxTkh4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2I2MzVmZGQtODFhNy00YzVkLThmOTAtOWU3NTEzYjNk Y2RjMB4XDTI1MDkyNDEzMDA0MVoXDTI1MTIyMzE0MDA0MVowLzEtMCsGA1UEAxMk NDU2ZjM0NGQtMTM5OS00ODMwLWEwZGEtMGNkNzZhYzg5MGFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxiTDtL+glZHm7khQqNHb6SfCh8dewitWC0G IJF9xGkor9Cmop4lcDwIobfvKN8mvTMoD0ptqvGKgCmJ8Np/VAXqC1OBEUYNYA2v jaNINcQdHLLc/io1HHyIcLVpLR7j2wu4nYPR/VwY8F9gLBaa3VVRAmc8O97I6fD0 xLSwCMuoo+VvFbgHHbhKEKToKc/F+gT3LGPw8eOv+URmS6G/R9FP6ZM7KK9Raq0g QX8RCwA9urI66jvjEkWBHktPbNxLtkNgJ6Ccgig5hVvbXcN/0+uaj2r6/CB/DA4r yNFxGJZ55quRPZDaYs+Dz4glUJHkFmJ3mOvgRL1x/6EQBoDW9QIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFIuNjW+I7Snf/vU0Yj52/ERTw45zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zYjYz NWZkZC04MWE3LTRjNWQtOGY5MC05ZTc1MTNiM2RjZGMvNmNhNzI5MDgtMjIyMS0z ZWNkLThlNWEtOWI4ZmUyN2YyYzJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2I2MzVmZGQtODFhNy00YzVkLThm OTAtOWU3NTEzYjNkY2RjLzNiNjM1ZmRkLTgxYTctNGM1ZC04ZjkwLTllNzUxM2Iz ZGNkYy5jcmwwHwYDVR0jBBgwFoAUVjRw2StghbGnfKCXfaV6HbgnVAUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zYjYzNWZkZC04MWE3LTRjNWQtOGY5MC05ZTc1 MTNiM2RjZGMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAitwwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAVFr421j/rDROtyNMmAu1rfP0SG/lHrfjRZI1WYxJqX+KgL144B0i5zxi CphBz1Xc2zgemr3PtjJAoEBjKgyUZzmyIEWVxhUwB1Gwfw9dVfMb6F4M2p1pPPiF SuqBJ/9KPbhax9bezJ3UCS4DTiw6vQYrNGbq6xDYR4SOfhIFjxysfEvQeqi8iR2F G5FrdHDWWRVcDvMKv41l6IMaVdHXFWh/KS9hT89GlHdv4qu6qJrMp2Uaz4uLgYji W8jx+iQNdWnxJVYP1W+aYlVtGAK7GO8A2Y4AcIDDI4ULUkANsjlceIZpj6lGFT6N Br/EL/rUcew9q8t2vp5Sc34ilhvLWw== -----END CERTIFICATE-----Generated at Wed Nov 5 22:13:00 2025 by rpki-client