$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fba57140-a369-4a3a-8edc-69732d179924/5d629a60-c4e4-3081-8e50-b5df715469cc.roa File: 5d629a60-c4e4-3081-8e50-b5df715469cc.roa (raw, json) Hash identifier: O8Ge15abiJ2mSZ+0JcWQF4i0kJu6CdeGmziJcpmSmFI= Subject key identifier: BA:49:67:8F:9D:EC:28:13:DC:C0:EA:55:10:C1:AB:02:41:08:5D:0E Certificate issuer: /CN=fba57140-a369-4a3a-8edc-69732d179924 Certificate serial: 010D0C9F4328584BB5C2535CCED1016F41D4A500 Authority key identifier: 0D:62:F8:D3:71:60:6D:A8:44:A4:7C:AB:CE:08:71:66:07:93:95:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fba57140-a369-4a3a-8edc-69732d179924.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fba57140-a369-4a3a-8edc-69732d179924/5d629a60-c4e4-3081-8e50-b5df715469cc.roa Signing time: Sat 01 Nov 2025 01:00:30 +0000 ROA not before: Sat 01 Nov 2025 01:00:30 +0000 ROA not after: Fri 30 Jan 2026 02:00:30 +0000 asID: 201542 IP address blocks: 134.199.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fba57140-a369-4a3a-8edc-69732d179924/fba57140-a369-4a3a-8edc-69732d179924.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fba57140-a369-4a3a-8edc-69732d179924/fba57140-a369-4a3a-8edc-69732d179924.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fba57140-a369-4a3a-8edc-69732d179924.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b5:c2:53:5c:ce:d1:01:6f:41:d4:a5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fba57140-a369-4a3a-8edc-69732d179924 Validity Not Before: Nov 1 01:00:30 2025 GMT Not After : Jan 30 02:00:30 2026 GMT Subject: CN=8aa64bf1-be41-4e2a-8525-d704e6e67277 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:86:99:d9:75:13:d1:62:03:e9:99:08:c6:7f: 8c:f6:aa:59:38:79:54:8a:d7:45:93:3a:e5:35:e1: de:ec:81:f1:7c:44:48:18:b0:65:dd:2f:17:a8:86: 9a:72:a0:bb:2a:fc:c3:c6:78:d7:89:15:44:8a:cb: a5:f4:07:db:03:c2:f2:61:da:69:5a:8e:99:55:f7: 45:60:12:fb:2f:9a:21:01:a1:ba:47:84:dc:05:c7: ee:3d:9d:c6:8f:30:cf:10:d9:f4:1a:96:a0:e9:64: fa:2d:bf:3a:8e:b1:29:22:5d:4b:60:ec:82:70:53: e5:a8:55:f6:33:77:c5:be:4d:dc:02:67:07:72:98: 76:2c:01:6c:8c:66:42:37:ec:23:2d:b1:85:16:34: 8d:82:de:af:29:0d:bd:f4:22:c6:b3:0f:96:76:54: 76:a7:97:a9:54:e1:dd:93:38:9b:88:b5:b6:4f:a9: 6f:7f:1d:24:61:81:39:af:d1:39:08:b8:fc:e8:c1: 35:16:da:ab:be:86:86:b8:dd:7b:ef:d7:be:f2:c2: 36:5d:0f:91:81:0e:5c:c5:2b:87:74:9c:8f:80:a7: 89:96:c7:2b:68:0a:34:ac:4a:be:63:e9:be:ed:8c: 6d:c0:cb:57:56:43:15:36:07:a5:f0:8a:3c:89:92: 64:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:49:67:8F:9D:EC:28:13:DC:C0:EA:55:10:C1:AB:02:41:08:5D:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fba57140-a369-4a3a-8edc-69732d179924/5d629a60-c4e4-3081-8e50-b5df715469cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fba57140-a369-4a3a-8edc-69732d179924/fba57140-a369-4a3a-8edc-69732d179924.crl X509v3 Authority Key Identifier: keyid:0D:62:F8:D3:71:60:6D:A8:44:A4:7C:AB:CE:08:71:66:07:93:95:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fba57140-a369-4a3a-8edc-69732d179924.cer sbgp-ipAddrBlock: critical IPv4: 134.199.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:1a:5a:df:65:92:9b:2f:60:8a:b0:a2:53:85:ff:ff:ff:19: cc:0f:9c:e3:f8:b9:b8:60:09:bf:2a:ba:3d:17:1a:55:e8:26: 49:6e:0f:ad:80:29:b7:56:13:f1:fa:1f:6d:29:f2:d3:dc:06: c7:74:33:76:ae:f1:81:90:89:20:da:2c:e9:13:2b:d4:00:be: fa:1f:a9:ee:e5:5a:54:5f:17:aa:a1:2a:25:b0:19:f7:3a:69: b3:2b:63:f0:09:b4:e8:92:f4:97:18:21:98:0e:34:81:50:63: 1d:ed:a2:53:9c:7c:e1:3a:2b:cd:9e:a5:6d:e3:a1:fe:02:eb: 1b:e3:66:ad:6c:82:b4:b0:ba:8e:e3:f8:9a:a7:9e:ec:ca:85: 4f:70:fd:63:f3:5d:4f:7b:b8:ad:c7:21:9c:2f:fb:43:07:d5: 03:8b:39:65:a7:5c:1a:5c:5a:b1:33:86:a7:65:33:81:82:4d: c6:f0:19:d5:5d:27:b3:de:bc:dc:e2:5b:04:f3:0a:65:8f:d3: 4e:6e:b9:9d:2e:cd:d4:9d:08:4f:d6:1b:30:24:ee:11:0d:f8: 13:61:d7:27:64:91:e7:d8:af:92:c0:25:89:0e:e2:d0:d2:94: 22:25:84:c7:8d:41:50:fa:0d:11:95:c1:43:d2:ee:3e:b0:e1: a8:7f:21:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu1wlNcztEBb0HUpQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmJhNTcxNDAtYTM2OS00YTNhLThlZGMtNjk3MzJkMTc5 OTI0MB4XDTI1MTEwMTAxMDAzMFoXDTI2MDEzMDAyMDAzMFowLzEtMCsGA1UEAxMk OGFhNjRiZjEtYmU0MS00ZTJhLTg1MjUtZDcwNGU2ZTY3Mjc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhIaZ2XUT0WID6ZkIxn+M9qpZOHlUitdFkzrl NeHe7IHxfERIGLBl3S8XqIaacqC7KvzDxnjXiRVEisul9AfbA8LyYdppWo6ZVfdF YBL7L5ohAaG6R4TcBcfuPZ3GjzDPENn0Gpag6WT6Lb86jrEpIl1LYOyCcFPlqFX2 M3fFvk3cAmcHcph2LAFsjGZCN+wjLbGFFjSNgt6vKQ299CLGsw+WdlR2p5epVOHd kzibiLW2T6lvfx0kYYE5r9E5CLj86ME1FtqrvoaGuN1779e+8sI2XQ+RgQ5cxSuH dJyPgKeJlscraAo0rEq+Y+m+7YxtwMtXVkMVNgel8Io8iZJklwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLpJZ4+d7CgT3MDqVRDBqwJBCF0OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9mYmE1 NzE0MC1hMzY5LTRhM2EtOGVkYy02OTczMmQxNzk5MjQvNWQ2MjlhNjAtYzRlNC0z MDgxLThlNTAtYjVkZjcxNTQ2OWNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZmJhNTcxNDAtYTM2OS00YTNhLThl ZGMtNjk3MzJkMTc5OTI0L2ZiYTU3MTQwLWEzNjktNGEzYS04ZWRjLTY5NzMyZDE3 OTkyNC5jcmwwHwYDVR0jBBgwFoAUDWL403FgbahEpHyrzghxZgeTlQMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9mYmE1NzE0MC1hMzY5LTRhM2EtOGVkYy02OTcz MmQxNzk5MjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAhscmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACQaWt9lkpsvYIqwolOF////GcwPnOP4ubhgCb8quj0XGlXoJkluD62A KbdWE/H6H20p8tPcBsd0M3au8YGQiSDaLOkTK9QAvvofqe7lWlRfF6qhKiWwGfc6 abMrY/AJtOiS9JcYIZgONIFQYx3tolOcfOE6K82epW3jof4C6xvjZq1sgrSwuo7j +JqnnuzKhU9w/WPzXU97uK3HIZwv+0MH1QOLOWWnXBpcWrEzhqdlM4GCTcbwGdVd J7PevNziWwTzCmWP005uuZ0uzdSdCE/WGzAk7hEN+BNh1ydkkefYr5LAJYkO4tDS lCIlhMeNQVD6DRGVwUPS7j6w4ah/IaM= -----END CERTIFICATE-----Generated at Wed Nov 5 14:40:56 2025 by rpki-client