$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338/d1c2980a-1dad-3fe0-8a48-38729cd5ba6d.roa File: d1c2980a-1dad-3fe0-8a48-38729cd5ba6d.roa (raw, json) Hash identifier: 4hxcQImvQWrcm8u7sk/JBLugOHadnj8VaYbuznMxxwk= Subject key identifier: 20:50:C5:FE:60:0B:0A:26:74:EF:11:B9:38:2B:26:AB:1A:8F:8D:24 Certificate issuer: /CN=a62aeef8-b35b-4ca6-b7a3-93be1a181338 Certificate serial: 010D0C9F4328584AF0F151C310E65078A15DAF00 Authority key identifier: 25:CE:5B:D6:D2:2A:6C:53:F9:97:25:F6:97:61:D6:F9:C6:B2:E8:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338/d1c2980a-1dad-3fe0-8a48-38729cd5ba6d.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 15267 IP address blocks: 138.129.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338/a62aeef8-b35b-4ca6-b7a3-93be1a181338.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338/a62aeef8-b35b-4ca6-b7a3-93be1a181338.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:51:c3:10:e6:50:78:a1:5d:af:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a62aeef8-b35b-4ca6-b7a3-93be1a181338 Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=d689d829-90d8-4270-9af9-9a5d1c1e7c49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:56:4f:74:b5:c2:e6:14:a6:5c:5a:42:74:46: a1:87:c0:b8:8e:99:53:6b:0e:c5:88:83:d4:ae:0f: ba:63:2b:6f:37:9c:5e:40:30:c2:a3:75:8f:5c:1b: ac:be:e9:60:09:f4:32:41:77:92:64:07:66:5a:0b: d8:11:c6:02:48:3e:4c:09:cd:a1:e7:ed:50:96:57: b7:b5:2f:9c:59:4d:1e:bb:57:13:16:b9:94:da:7d: 91:d8:56:7f:91:44:1b:95:d5:31:b2:b0:5d:5e:b8: a5:fc:2d:90:61:6e:7f:92:bc:0b:c8:a9:9f:54:ef: eb:b8:78:da:66:75:e4:b3:95:d0:34:32:aa:c4:df: 34:92:4e:47:19:eb:4c:80:29:e5:64:36:76:e8:c1: c9:26:5c:65:28:2f:05:a4:15:f2:63:ef:05:be:c3: ac:e1:06:04:d5:04:66:48:24:1e:fd:9b:80:2e:e7: d5:f3:e5:38:76:ce:a1:da:6d:d7:44:15:6f:00:39: 1b:a3:61:e9:2a:cb:1e:05:b4:dd:6a:aa:d9:7d:d8: dd:da:e5:aa:4e:17:1f:5f:51:88:b6:c3:ea:d3:fd: 80:06:b5:52:df:be:61:4f:dc:df:b8:03:12:e7:35: 63:06:45:69:76:57:b7:1c:fd:56:ce:aa:1f:fa:bd: 8a:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:50:C5:FE:60:0B:0A:26:74:EF:11:B9:38:2B:26:AB:1A:8F:8D:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338/d1c2980a-1dad-3fe0-8a48-38729cd5ba6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338/a62aeef8-b35b-4ca6-b7a3-93be1a181338.crl X509v3 Authority Key Identifier: keyid:25:CE:5B:D6:D2:2A:6C:53:F9:97:25:F6:97:61:D6:F9:C6:B2:E8:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338.cer sbgp-ipAddrBlock: critical IPv4: 138.129.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:fd:a5:e3:42:05:8c:48:b0:55:ce:ae:14:2e:8f:0a:99:42: 8e:7b:ac:26:a0:fd:64:b3:2f:38:95:e0:b0:a6:2c:5e:25:38: 36:c2:13:b8:cd:35:9c:af:1d:90:7a:9d:f4:16:c5:e4:e5:09: b4:ed:82:be:91:98:e4:e2:3c:79:35:09:a1:ac:82:9e:f5:19: 94:75:8f:8c:59:1c:3a:a1:57:42:b4:73:36:f9:7c:79:e3:1d: cf:67:bb:8e:84:73:48:2b:c4:16:33:f4:68:21:9d:2f:58:0e: 2a:9a:cd:1c:65:b9:4b:cb:27:f9:e1:73:a1:3a:03:e4:09:95: ee:0f:84:b3:29:3f:01:c6:a4:d0:22:c1:db:58:32:93:ee:09: 5a:a5:c4:38:0b:3e:70:47:ae:c7:c0:82:c3:c6:87:47:d2:91: 0c:ee:34:74:86:97:03:b8:b9:d5:2b:4e:a0:cd:fe:95:26:4e: b1:8f:66:f7:33:ba:30:d4:a3:0c:bd:1d:ee:46:f3:52:1e:90: ed:22:7a:2c:fe:08:dd:83:73:35:12:42:70:2d:5f:5a:57:c7: ef:5d:e2:27:96:a3:b1:78:f3:26:43:af:6d:d4:72:06:5c:40: 91:c1:04:4a:cc:f6:39:db:1e:11:2a:32:36:68:dc:7a:78:b9: 5e:ce:69:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErw8VHDEOZQeKFdrwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTYyYWVlZjgtYjM1Yi00Y2E2LWI3YTMtOTNiZTFhMTgx MzM4MB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk ZDY4OWQ4MjktOTBkOC00MjcwLTlhZjktOWE1ZDFjMWU3YzQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVZPdLXC5hSmXFpCdEahh8C4jplTaw7FiIPU rg+6YytvN5xeQDDCo3WPXBusvulgCfQyQXeSZAdmWgvYEcYCSD5MCc2h5+1Qlle3 tS+cWU0eu1cTFrmU2n2R2FZ/kUQbldUxsrBdXril/C2QYW5/krwLyKmfVO/ruHja ZnXks5XQNDKqxN80kk5HGetMgCnlZDZ26MHJJlxlKC8FpBXyY+8FvsOs4QYE1QRm SCQe/ZuALufV8+U4ds6h2m3XRBVvADkbo2HpKsseBbTdaqrZfdjd2uWqThcfX1GI tsPq0/2ABrVS375hT9zfuAMS5zVjBkVpdle3HP1Wzqof+r2KVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCBQxf5gCwomdO8RuTgrJqsaj40kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNjJh ZWVmOC1iMzViLTRjYTYtYjdhMy05M2JlMWExODEzMzgvZDFjMjk4MGEtMWRhZC0z ZmUwLThhNDgtMzg3MjljZDViYTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYTYyYWVlZjgtYjM1Yi00Y2E2LWI3 YTMtOTNiZTFhMTgxMzM4L2E2MmFlZWY4LWIzNWItNGNhNi1iN2EzLTkzYmUxYTE4 MTMzOC5jcmwwHwYDVR0jBBgwFoAUJc5b1tIqbFP5lyX2l2HW+cay6IcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hNjJhZWVmOC1iMzViLTRjYTYtYjdhMy05M2Jl MWExODEzMzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDioEYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFn9peNCBYxIsFXOrhQujwqZQo57rCag/WSzLziV4LCmLF4lODbCE7jN NZyvHZB6nfQWxeTlCbTtgr6RmOTiPHk1CaGsgp71GZR1j4xZHDqhV0K0czb5fHnj Hc9nu46Ec0grxBYz9GghnS9YDiqazRxluUvLJ/nhc6E6A+QJle4PhLMpPwHGpNAi wdtYMpPuCVqlxDgLPnBHrsfAgsPGh0fSkQzuNHSGlwO4udUrTqDN/pUmTrGPZvcz ujDUowy9He5G81IekO0ieiz+CN2DczUSQnAtX1pXx+9d4ieWo7F48yZDr23UcgZc QJHBBErM9jnbHhEqMjZo3Hp4uV7OaWY= -----END CERTIFICATE-----Generated at Wed Nov 5 04:37:31 2025 by rpki-client