$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/13195ded-ae5c-3a67-b230-d2c9ab3feb7c.roa File: 13195ded-ae5c-3a67-b230-d2c9ab3feb7c.roa (raw, json) Hash identifier: CYXqhQ1V0TRSYXj0i056omxwudgI6n3XVIE0ojMe0Dc= Subject key identifier: 99:13:77:CF:31:38:1B:5C:49:E3:8A:32:03:89:08:A9:31:8B:58:15 Certificate issuer: /CN=750923cb-8ed4-4954-b4bb-8250cc11c580 Certificate serial: 010D0C9F4328584BB45D35408EBFD39B6FF0F780 Authority key identifier: 57:CF:84:96:EF:DD:54:0D:0A:E1:07:C6:47:92:9F:03:A3:12:30:EB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/13195ded-ae5c-3a67-b230-d2c9ab3feb7c.roa Signing time: Fri 31 Oct 2025 13:00:39 +0000 ROA not before: Fri 31 Oct 2025 13:00:39 +0000 ROA not after: Thu 29 Jan 2026 14:00:39 +0000 asID: 33182 IP address blocks: 138.128.160.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/750923cb-8ed4-4954-b4bb-8250cc11c580.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/750923cb-8ed4-4954-b4bb-8250cc11c580.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:5d:35:40:8e:bf:d3:9b:6f:f0:f7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=750923cb-8ed4-4954-b4bb-8250cc11c580 Validity Not Before: Oct 31 13:00:39 2025 GMT Not After : Jan 29 14:00:39 2026 GMT Subject: CN=2b996d45-6bc0-4a8c-aa73-3e5a2d4a2254 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:cd:41:57:95:4c:ab:08:a7:94:f3:b5:4d:bf: cb:7d:78:16:24:62:9e:d4:45:80:5d:0c:f5:98:59: d8:61:e1:da:2d:b7:d0:f9:97:2f:c1:85:cf:d3:d6: bd:0b:18:80:09:a9:dc:d9:f9:f8:12:46:94:5f:c3: 37:c3:21:54:99:73:75:d1:35:b4:fe:9e:7c:5f:02: 6c:96:c8:45:01:79:78:ca:69:a4:76:c8:e5:8d:d5: 71:31:e6:f1:00:a6:80:49:db:8d:18:f7:c4:e9:83: 24:44:fb:21:d1:bd:62:fd:b0:d8:27:0f:eb:61:15: 43:d2:a2:0d:b2:e4:0f:70:fa:36:ca:1b:f0:28:31: 3c:ff:ba:49:26:a0:9e:b9:4e:41:bd:18:77:2c:f0: 80:19:2c:bf:b4:20:bf:89:88:d5:17:fd:4c:6d:f4: 0d:04:81:b4:15:b3:a3:19:e0:66:56:e4:15:0d:48: b7:7c:68:59:e1:53:21:f6:a3:6d:e6:95:5a:d3:85: 71:b4:89:0b:cb:3b:f8:0e:17:a1:1d:51:5d:22:54: 99:12:54:a0:4f:d8:01:1f:f8:34:5e:9c:61:b6:a8: a8:fa:6b:c9:d7:83:a1:a9:18:8f:03:89:09:9f:13: a9:51:ae:36:64:c8:46:11:b9:78:40:bb:c7:62:36: 33:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:13:77:CF:31:38:1B:5C:49:E3:8A:32:03:89:08:A9:31:8B:58:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/13195ded-ae5c-3a67-b230-d2c9ab3feb7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/750923cb-8ed4-4954-b4bb-8250cc11c580.crl X509v3 Authority Key Identifier: keyid:57:CF:84:96:EF:DD:54:0D:0A:E1:07:C6:47:92:9F:03:A3:12:30:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580.cer sbgp-ipAddrBlock: critical IPv4: 138.128.160.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:68:a7:13:c2:6b:b9:7e:93:52:9f:e2:0d:c3:f2:0d:5d:45: 5e:ef:a9:b7:a9:fd:3e:97:ef:49:6b:8f:d1:21:a8:64:3e:09: fe:74:3f:8a:26:21:f4:25:e8:68:f4:2b:0f:81:b6:3d:09:3e: 3b:91:cc:b6:a6:d6:28:3c:e1:b6:4e:7a:36:a9:75:d1:04:10: 10:79:fc:13:ef:d6:74:30:5b:72:32:86:d2:ab:a3:4e:fe:36: 65:9e:00:52:d3:62:e2:ef:0f:c3:4f:ac:5a:0c:2e:b5:18:da: 46:13:2f:07:40:f0:21:6d:c5:51:65:a5:c6:c6:54:2b:1d:85: 40:09:19:58:0b:b5:dd:e6:3a:c4:e4:97:15:5d:54:82:2f:ad: 72:24:5d:4a:a0:ae:c1:85:98:2a:60:25:12:93:14:a0:23:a6: 3a:da:b3:a5:33:0b:ed:1d:c3:07:2d:7a:2e:1c:d4:3a:51:47: 05:6a:a1:08:74:d5:a1:dc:47:bf:0b:e5:fc:65:fc:99:bb:f6: 61:e4:a2:6a:66:88:df:92:fe:12:81:03:48:76:c5:e6:82:da: 4d:02:a4:7d:58:99:46:15:35:cc:cb:1f:97:3f:f0:a9:56:1e: c7:b7:c8:f2:ed:fd:58:86:5d:5a:3c:5c:45:d9:20:fe:69:c2: 82:45:cd:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu0XTVAjr/Tm2/w94AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzUwOTIzY2ItOGVkNC00OTU0LWI0YmItODI1MGNjMTFj NTgwMB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk MmI5OTZkNDUtNmJjMC00YThjLWFhNzMtM2U1YTJkNGEyMjU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtc1BV5VMqwinlPO1Tb/LfXgWJGKe1EWAXQz1 mFnYYeHaLbfQ+ZcvwYXP09a9CxiACanc2fn4EkaUX8M3wyFUmXN10TW0/p58XwJs lshFAXl4ymmkdsjljdVxMebxAKaASduNGPfE6YMkRPsh0b1i/bDYJw/rYRVD0qIN suQPcPo2yhvwKDE8/7pJJqCeuU5BvRh3LPCAGSy/tCC/iYjVF/1MbfQNBIG0FbOj GeBmVuQVDUi3fGhZ4VMh9qNt5pVa04VxtIkLyzv4DhehHVFdIlSZElSgT9gBH/g0 Xpxhtqio+mvJ14OhqRiPA4kJnxOpUa42ZMhGEbl4QLvHYjYzwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJkTd88xOBtcSeOKMgOJCKkxi1gVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83NTA5 MjNjYi04ZWQ0LTQ5NTQtYjRiYi04MjUwY2MxMWM1ODAvMTMxOTVkZWQtYWU1Yy0z YTY3LWIyMzAtZDJjOWFiM2ZlYjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNzUwOTIzY2ItOGVkNC00OTU0LWI0 YmItODI1MGNjMTFjNTgwLzc1MDkyM2NiLThlZDQtNDk1NC1iNGJiLTgyNTBjYzEx YzU4MC5jcmwwHwYDVR0jBBgwFoAUV8+Elu/dVA0K4QfGR5KfA6MSMOswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83NTA5MjNjYi04ZWQ0LTQ5NTQtYjRiYi04MjUw Y2MxMWM1ODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFioCgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACtopxPCa7l+k1Kf4g3D8g1dRV7vqbep/T6X70lrj9EhqGQ+Cf50P4om IfQl6Gj0Kw+Btj0JPjuRzLam1ig84bZOejapddEEEBB5/BPv1nQwW3IyhtKro07+ NmWeAFLTYuLvD8NPrFoMLrUY2kYTLwdA8CFtxVFlpcbGVCsdhUAJGVgLtd3mOsTk lxVdVIIvrXIkXUqgrsGFmCpgJRKTFKAjpjras6UzC+0dwwctei4c1DpRRwVqoQh0 1aHcR78L5fxl/Jm79mHkompmiN+S/hKBA0h2xeaC2k0CpH1YmUYVNczLH5c/8KlW Hse3yPLt/ViGXVo8XEXZIP5pwoJFzVk= -----END CERTIFICATE-----Generated at Wed Nov 5 05:08:17 2025 by rpki-client