$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7c805d5-58a4-453e-b16e-c677ccb6b46d/c993d273-204c-3af8-95dc-bc8d56df4008.roa File: c993d273-204c-3af8-95dc-bc8d56df4008.roa (raw, json) Hash identifier: 2QEKkbJTsrWRoEgBDdXbG2lYhmSXSFPogZryDthiCFc= Subject key identifier: C6:A9:48:97:B4:99:E8:55:A7:C4:9F:F3:CE:DD:FF:4C:85:99:91:5B Certificate issuer: /CN=b7c805d5-58a4-453e-b16e-c677ccb6b46d Certificate serial: 010D0C9F4328584B9E07BCC4ABD831CF4F88EEC0 Authority key identifier: C1:06:A2:F8:0D:B3:B7:93:4C:72:3B:1F:70:2A:B4:8F:48:52:AF:D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7c805d5-58a4-453e-b16e-c677ccb6b46d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7c805d5-58a4-453e-b16e-c677ccb6b46d/c993d273-204c-3af8-95dc-bc8d56df4008.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 395347 IP address blocks: 138.43.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7c805d5-58a4-453e-b16e-c677ccb6b46d/b7c805d5-58a4-453e-b16e-c677ccb6b46d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7c805d5-58a4-453e-b16e-c677ccb6b46d/b7c805d5-58a4-453e-b16e-c677ccb6b46d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7c805d5-58a4-453e-b16e-c677ccb6b46d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:bc:c4:ab:d8:31:cf:4f:88:ee:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7c805d5-58a4-453e-b16e-c677ccb6b46d Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=a9a53d21-cd1e-474f-9849-0c4ffa68f2f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:42:e0:f6:42:26:9a:78:ad:b7:1c:5b:cb:4e: 59:99:4e:b6:fd:59:35:32:68:db:c7:f2:8d:5d:07: 6a:8e:1b:6d:a9:1d:44:c5:d5:cf:37:29:48:73:85: 9c:e3:7a:e7:bc:71:eb:11:a7:5c:23:34:5f:c4:f6: 15:31:dd:46:26:25:59:29:ad:3d:a6:ce:df:4e:8e: 7d:b3:2b:c9:2d:31:56:22:6f:00:e4:9a:fa:6a:60: 1a:d9:1a:53:01:8c:49:de:3d:90:83:dc:ee:fe:cb: 83:b1:ec:66:57:bb:99:d2:64:8f:9e:5e:98:38:3b: bd:b4:a7:0c:1f:86:b7:c4:b2:f8:d6:de:fc:e4:21: 1c:8c:0c:25:25:28:f1:fa:4b:19:92:dc:86:67:d5: 33:a1:7c:bb:14:ce:41:bf:95:11:1d:27:70:d8:55: 97:5c:28:5c:6c:c3:bc:64:1b:9e:9e:c0:54:84:30: eb:f8:42:30:ff:44:4a:dc:6f:f1:19:4f:ed:09:ce: a0:38:7c:08:9d:97:5a:21:69:49:99:39:63:71:65: 12:e9:a1:2e:e6:70:00:24:fb:a9:4c:98:61:db:83: e6:45:e4:7c:b4:f4:4b:30:7a:8b:50:64:bc:00:36: 2a:ec:ac:8f:7c:97:b4:e6:60:be:32:50:23:b2:50: 1f:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:A9:48:97:B4:99:E8:55:A7:C4:9F:F3:CE:DD:FF:4C:85:99:91:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7c805d5-58a4-453e-b16e-c677ccb6b46d/c993d273-204c-3af8-95dc-bc8d56df4008.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7c805d5-58a4-453e-b16e-c677ccb6b46d/b7c805d5-58a4-453e-b16e-c677ccb6b46d.crl X509v3 Authority Key Identifier: keyid:C1:06:A2:F8:0D:B3:B7:93:4C:72:3B:1F:70:2A:B4:8F:48:52:AF:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7c805d5-58a4-453e-b16e-c677ccb6b46d.cer sbgp-ipAddrBlock: critical IPv4: 138.43.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:cc:d7:bc:34:1b:dd:3e:6b:1a:a1:d2:6a:ec:5c:c9:63:e4: fd:71:c1:8c:54:3b:ce:21:c5:14:0f:07:b1:fe:5c:5b:36:c7: 51:a1:04:3d:d1:35:c4:c9:cf:e2:5c:1c:3e:22:9a:52:d0:30: 00:53:d7:ae:85:00:70:17:e3:95:52:f7:33:70:48:1f:d4:70: 49:6a:aa:82:9f:f0:4a:a2:37:2c:2e:c1:d8:8a:4e:29:84:1f: 50:4f:39:d8:bb:72:0e:22:3d:a3:af:c2:1f:ff:ad:93:81:1e: 5b:90:1d:26:54:8f:88:e6:c9:5d:35:73:ea:b2:b5:6a:bd:c4: d4:4e:3c:1b:4e:a9:05:e6:c3:0a:f1:9d:f5:b4:a9:e9:52:3b: ec:9e:45:fd:fd:c3:5c:94:65:09:3b:a0:7d:dc:60:8a:f4:ea: c0:54:fd:77:4e:33:ab:47:87:35:5c:c5:d8:3d:41:66:8f:2d: a1:61:b7:f2:13:94:9f:22:08:4c:a1:df:f5:28:28:6c:72:bb: 82:cf:50:28:7a:51:0f:7d:81:03:ce:f6:a2:b4:bc:53:d5:fa: 0f:2a:97:2a:86:26:bc:9b:e6:ac:3b:c7:da:11:17:9b:63:1e: 7b:88:4b:02:60:d8:d4:f9:53:9d:9d:42:07:3d:53:a1:c4:47: 31:0e:23:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB7zEq9gxz0+I7sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjdjODA1ZDUtNThhNC00NTNlLWIxNmUtYzY3N2NjYjZi NDZkMB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk YTlhNTNkMjEtY2QxZS00NzRmLTk4NDktMGM0ZmZhNjhmMmY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnELg9kImmnittxxby05ZmU62/Vk1Mmjbx/KN XQdqjhttqR1ExdXPNylIc4Wc43rnvHHrEadcIzRfxPYVMd1GJiVZKa09ps7fTo59 syvJLTFWIm8A5Jr6amAa2RpTAYxJ3j2Qg9zu/suDsexmV7uZ0mSPnl6YODu9tKcM H4a3xLL41t785CEcjAwlJSjx+ksZktyGZ9UzoXy7FM5Bv5URHSdw2FWXXChcbMO8 ZBuensBUhDDr+EIw/0RK3G/xGU/tCc6gOHwInZdaIWlJmTljcWUS6aEu5nAAJPup TJhh24PmReR8tPRLMHqLUGS8ADYq7KyPfJe05mC+MlAjslAfDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMapSJe0mehVp8Sf887d/0yFmZFbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iN2M4 MDVkNS01OGE0LTQ1M2UtYjE2ZS1jNjc3Y2NiNmI0NmQvYzk5M2QyNzMtMjA0Yy0z YWY4LTk1ZGMtYmM4ZDU2ZGY0MDA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYjdjODA1ZDUtNThhNC00NTNlLWIx NmUtYzY3N2NjYjZiNDZkL2I3YzgwNWQ1LTU4YTQtNDUzZS1iMTZlLWM2NzdjY2I2 YjQ2ZC5jcmwwHwYDVR0jBBgwFoAUwQai+A2zt5NMcjsfcCq0j0hSr9AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9iN2M4MDVkNS01OGE0LTQ1M2UtYjE2ZS1jNjc3 Y2NiNmI0NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCiivwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKXM17w0G90+axqh0mrsXMlj5P1xwYxUO84hxRQPB7H+XFs2x1GhBD3R NcTJz+JcHD4imlLQMABT166FAHAX45VS9zNwSB/UcElqqoKf8EqiNywuwdiKTimE H1BPOdi7cg4iPaOvwh//rZOBHluQHSZUj4jmyV01c+qytWq9xNROPBtOqQXmwwrx nfW0qelSO+yeRf39w1yUZQk7oH3cYIr06sBU/XdOM6tHhzVcxdg9QWaPLaFht/IT lJ8iCEyh3/UoKGxyu4LPUCh6UQ99gQPO9qK0vFPV+g8qlyqGJryb5qw7x9oRF5tj HnuISwJg2NT5U52dQgc9U6HERzEOIz0= -----END CERTIFICATE-----Generated at Wed Nov 5 15:10:08 2025 by rpki-client