$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338/df871738-5e35-3002-9112-c507cc9ddafc.roa File: df871738-5e35-3002-9112-c507cc9ddafc.roa (raw, json) Hash identifier: LcZeHjvUCSNGT/lYryKlmVI9fNkCs33n4CA2M4FT490= Subject key identifier: C4:64:88:EA:7D:28:5F:7F:89:A1:F7:72:82:C7:AC:AB:1A:EF:C7:4C Certificate issuer: /CN=a62aeef8-b35b-4ca6-b7a3-93be1a181338 Certificate serial: 010D0C9F4328584A66C06DB392B2147586E66300 Authority key identifier: 25:CE:5B:D6:D2:2A:6C:53:F9:97:25:F6:97:61:D6:F9:C6:B2:E8:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338/df871738-5e35-3002-9112-c507cc9ddafc.roa Signing time: Fri 04 Jul 2025 01:00:49 +0000 ROA not before: Fri 04 Jul 2025 01:00:49 +0000 ROA not after: Thu 02 Oct 2025 01:00:49 +0000 asID: 17326 IP address blocks: 138.129.16.0/22 maxlen: 22 138.129.64.0/18 maxlen: 18 138.129.96.0/19 maxlen: 19 138.129.128.0/17 maxlen: 17 138.129.217.0/24 maxlen: 24 138.129.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338/a62aeef8-b35b-4ca6-b7a3-93be1a181338.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338/a62aeef8-b35b-4ca6-b7a3-93be1a181338.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:66:c0:6d:b3:92:b2:14:75:86:e6:63:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a62aeef8-b35b-4ca6-b7a3-93be1a181338 Validity Not Before: Jul 4 01:00:49 2025 GMT Not After : Oct 2 01:00:49 2025 GMT Subject: CN=4af5236e-0f4b-45de-b4d1-ffc61ed59ef5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:67:4e:91:26:a1:b6:bc:20:00:53:f6:58:9a: ec:d3:7e:d3:df:fc:c2:53:91:74:0d:10:1f:cd:d8: df:5e:4b:7b:8c:f7:6c:a8:cf:f8:98:41:01:50:f0: 7b:15:8a:c6:d1:19:e2:30:16:e3:9e:06:15:f0:c9: 26:42:e5:29:68:b3:2a:b2:fb:8b:49:7e:0f:72:fa: 95:40:36:60:a7:d9:a7:cc:0e:7d:b2:bc:dc:ce:51: b5:b6:8c:b3:2a:7f:9e:b3:38:88:6a:5f:3d:45:af: 96:07:c0:88:1f:9f:35:fa:78:f5:c3:a3:dd:43:b7: 77:9e:e4:32:2b:ed:dc:16:9b:8d:9d:73:f4:ad:47: 58:23:b8:3a:f3:4f:10:f5:e0:93:fc:fe:04:10:5d: df:98:52:d0:d8:16:b3:47:93:21:65:0e:59:0d:61: 15:89:a6:91:9c:74:3f:aa:ca:20:5f:5a:4f:49:20: 56:44:5e:56:7e:c1:70:ff:70:bb:1b:67:b5:27:c4: 3b:f9:79:b3:c5:bb:64:c0:49:fb:fb:95:74:4a:5a: 9c:ab:7e:65:21:fa:ab:04:8c:7d:f7:99:5d:3d:b7: 6d:db:f9:e0:bf:f9:0c:4e:3f:ea:07:07:3e:11:a1: bf:d5:af:79:58:f9:7c:05:f8:92:14:d4:06:4a:86: d7:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:64:88:EA:7D:28:5F:7F:89:A1:F7:72:82:C7:AC:AB:1A:EF:C7:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338/df871738-5e35-3002-9112-c507cc9ddafc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338/a62aeef8-b35b-4ca6-b7a3-93be1a181338.crl X509v3 Authority Key Identifier: keyid:25:CE:5B:D6:D2:2A:6C:53:F9:97:25:F6:97:61:D6:F9:C6:B2:E8:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338.cer sbgp-ipAddrBlock: critical IPv4: 138.129.16.0/22 138.129.64.0-138.129.255.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:3c:66:36:62:6e:bd:73:3c:ae:cc:01:4c:14:09:1b:dc:94: a0:32:38:01:29:13:65:d9:3b:ca:73:e6:1d:db:10:24:65:96: 8b:9b:78:87:0f:c3:07:e8:ee:9c:4d:1c:cd:72:e0:41:c1:ae: 52:1d:98:49:9b:cb:66:64:b3:9b:8d:b2:3b:e1:6b:80:a0:81: 2d:1f:3e:d1:c9:d9:8e:c8:bf:ab:1f:a8:5f:94:ee:3f:4d:77: 78:58:85:45:04:f8:cd:72:4d:2a:9c:84:52:9b:cd:64:6c:0c: 8d:3f:9d:bc:cc:39:95:3d:19:86:a3:1f:70:53:12:6a:f5:2b: 2e:a8:0a:c4:1b:20:f0:a2:50:b0:47:55:7a:7b:08:b9:11:41: a7:3d:77:5c:6e:50:44:53:7b:4c:95:87:f0:55:ae:a9:95:f0: 3a:fe:ee:c3:51:9e:06:17:eb:ad:ee:2c:47:ce:e8:de:9c:26: 17:bf:b6:2b:fd:15:1c:45:d1:5d:08:2c:97:3e:4d:84:5f:86: e3:a3:ab:c4:ac:71:95:ca:3d:03:68:4d:c3:0c:fd:80:74:5b: a8:dd:0b:70:04:94:8f:fa:8f:fe:c3:44:4f:57:b8:5b:bb:e9: 35:ed:4a:d8:63:59:dd:c5:d1:ce:7f:b2:5c:0b:bb:f2:88:95: df:0d:27:46 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEpmwG2zkrIUdYbmYwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTYyYWVlZjgtYjM1Yi00Y2E2LWI3YTMtOTNiZTFhMTgx MzM4MB4XDTI1MDcwNDAxMDA0OVoXDTI1MTAwMjAxMDA0OVowLzEtMCsGA1UEAxMk NGFmNTIzNmUtMGY0Yi00NWRlLWI0ZDEtZmZjNjFlZDU5ZWY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWdOkSahtrwgAFP2WJrs037T3/zCU5F0DRAf zdjfXkt7jPdsqM/4mEEBUPB7FYrG0RniMBbjngYV8MkmQuUpaLMqsvuLSX4PcvqV QDZgp9mnzA59srzczlG1toyzKn+esziIal89Ra+WB8CIH581+nj1w6PdQ7d3nuQy K+3cFpuNnXP0rUdYI7g6808Q9eCT/P4EEF3fmFLQ2BazR5MhZQ5ZDWEViaaRnHQ/ qsogX1pPSSBWRF5WfsFw/3C7G2e1J8Q7+XmzxbtkwEn7+5V0Slqcq35lIfqrBIx9 95ldPbdt2/ngv/kMTj/qBwc+EaG/1a95WPl8BfiSFNQGSobX4wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFMRkiOp9KF9/iaH3coLHrKsa78dMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNjJh ZWVmOC1iMzViLTRjYTYtYjdhMy05M2JlMWExODEzMzgvZGY4NzE3MzgtNWUzNS0z MDAyLTkxMTItYzUwN2NjOWRkYWZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYTYyYWVlZjgtYjM1Yi00Y2E2LWI3 YTMtOTNiZTFhMTgxMzM4L2E2MmFlZWY4LWIzNWItNGNhNi1iN2EzLTkzYmUxYTE4 MTMzOC5jcmwwHwYDVR0jBBgwFoAUJc5b1tIqbFP5lyX2l2HW+cay6IcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hNjJhZWVmOC1iMzViLTRjYTYtYjdhMy05M2Jl MWExODEzMzguY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAATATAwQCioEQMAsD BAaKgUADAwGKgDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAWPGY2Ym69czyuzAFMFAkb3JSgMjgBKRNl2TvK c+Yd2xAkZZaLm3iHD8MH6O6cTRzNcuBBwa5SHZhJm8tmZLObjbI74WuAoIEtHz7R ydmOyL+rH6hflO4/TXd4WIVFBPjNck0qnIRSm81kbAyNP528zDmVPRmGox9wUxJq 9SsuqArEGyDwolCwR1V6ewi5EUGnPXdcblBEU3tMlYfwVa6plfA6/u7DUZ4GF+ut 7ixHzujenCYXv7Yr/RUcRdFdCCyXPk2EX4bjo6vErHGVyj0DaE3DDP2AdFuo3Qtw BJSP+o/+w0RPV7hbu+k17UrYY1ndxdHOf7JcC7vyiJXfDSdG -----END CERTIFICATE-----Generated at Wed Aug 6 09:37:11 2025 by rpki-client