$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/28735348-6cda-374a-978a-a2aabf659d86.roa File: 28735348-6cda-374a-978a-a2aabf659d86.roa (raw, json) Hash identifier: SeyUGY1rm3FQbmG7+MgPpE5pLRoFkY2OQOGXwb6JE/4= Subject key identifier: CB:DB:98:52:DB:B2:59:9D:F2:25:C3:11:7F:00:6C:67:C9:CE:F3:7B Certificate issuer: /CN=ffc39f64-f356-459c-8bf7-d142a7a166f3 Certificate serial: 010D0C9F4328584AF2567F3BB8CF8A710F2EEC40 Authority key identifier: 4D:52:88:03:05:6C:F7:2A:7F:D0:E7:BC:30:7E:24:98:8D:2D:20:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/28735348-6cda-374a-978a-a2aabf659d86.roa Signing time: Sat 23 Aug 2025 01:00:33 +0000 ROA not before: Sat 23 Aug 2025 01:00:33 +0000 ROA not after: Fri 21 Nov 2025 02:00:33 +0000 asID: 8075 IP address blocks: 138.32.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:56:7f:3b:b8:cf:8a:71:0f:2e:ec:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffc39f64-f356-459c-8bf7-d142a7a166f3 Validity Not Before: Aug 23 01:00:33 2025 GMT Not After : Nov 21 02:00:33 2025 GMT Subject: CN=3af5bb1a-99a9-48df-b0ee-079d689c6007 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:5a:7d:55:0d:f1:c4:51:6e:3e:a1:33:37:09: ec:f4:a8:64:29:4d:09:7a:bd:03:4d:37:05:3f:67: ab:58:3a:da:02:31:e7:08:6e:c9:68:5e:ae:f3:6e: 95:ec:d8:23:6e:27:c9:cc:0e:db:7f:05:52:15:f8: 31:5e:de:78:9d:69:88:c0:07:c5:60:de:09:b3:f4: fb:74:3b:26:cf:fb:6a:cc:03:27:80:5d:c5:a7:f2: a5:6e:3b:d6:8e:8e:45:50:27:36:2e:c9:c5:89:cf: be:e5:c1:fd:4d:e1:13:f3:c6:2e:b7:aa:59:4f:6e: ad:ae:c3:1e:fe:99:f7:e2:d5:b9:e9:49:3b:b8:b6: bf:40:1a:c7:e4:b4:6b:bb:51:2f:5d:0a:65:dd:3f: fe:bf:e8:fd:f2:a9:21:68:9f:42:33:cb:ea:eb:e8: d1:b8:18:bb:65:af:1b:e6:fe:d8:0e:b2:ca:d7:58: 92:37:f8:e9:5a:7d:0d:c1:11:81:3a:4f:6f:63:a8: 75:0a:47:16:7a:3d:35:51:64:4e:26:cd:9f:b9:80: c1:fd:9c:a4:32:79:8d:dd:ab:a1:44:7e:6a:3f:d2: 5a:b4:64:0c:50:e7:dd:1e:bb:bb:84:fe:c2:74:56: d1:f1:d4:46:47:05:03:21:90:03:b8:c0:f0:ae:c5: 0f:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:DB:98:52:DB:B2:59:9D:F2:25:C3:11:7F:00:6C:67:C9:CE:F3:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/28735348-6cda-374a-978a-a2aabf659d86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.crl X509v3 Authority Key Identifier: keyid:4D:52:88:03:05:6C:F7:2A:7F:D0:E7:BC:30:7E:24:98:8D:2D:20:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer sbgp-ipAddrBlock: critical IPv4: 138.32.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:15:85:cf:ac:b7:d0:98:d9:b0:bf:4e:67:8c:73:63:25:0e: 1d:a7:01:86:e5:25:f3:a5:bf:c6:da:40:6c:18:87:52:c8:67: 3a:c7:b4:53:d7:88:59:f0:11:8b:28:93:5d:7f:df:40:09:25: f9:f2:30:16:63:75:ed:ff:01:24:91:c5:8f:d5:c8:45:d3:70: 4f:79:c4:3a:8a:80:f7:ce:2c:29:7e:fb:49:5c:92:ec:46:4a: 24:95:c5:01:be:88:d2:ab:04:dc:3a:a0:37:10:a8:c8:6f:b9: c7:28:dc:81:f5:ec:8a:19:8c:9e:40:d6:fe:c2:bc:18:6a:6f: 06:2a:ff:ef:c7:08:50:90:1f:b9:68:d6:d0:7d:5b:bb:9a:ff: 30:27:44:03:25:20:22:fe:a4:de:8a:4f:1b:e9:3d:4f:c7:15: 03:9f:e3:17:06:c2:51:c9:51:0e:62:36:b8:07:56:62:1b:56: 1c:4b:91:05:65:8b:af:14:0c:9a:cd:cb:f8:ec:ef:0f:03:5b: f6:26:eb:15:08:a4:8f:27:e4:de:59:1b:c4:4d:3c:a2:29:ba: c8:7c:12:4e:08:dd:32:5e:a1:95:9d:4e:57:21:c1:8e:1a:d1: c8:3b:f7:a4:f9:10:6d:a1:75:05:79:22:b2:40:37:65:10:ac: c3:dc:88:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEryVn87uM+KcQ8u7EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmZjMzlmNjQtZjM1Ni00NTljLThiZjctZDE0MmE3YTE2 NmYzMB4XDTI1MDgyMzAxMDAzM1oXDTI1MTEyMTAyMDAzM1owLzEtMCsGA1UEAxMk M2FmNWJiMWEtOTlhOS00OGRmLWIwZWUtMDc5ZDY4OWM2MDA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAglp9VQ3xxFFuPqEzNwns9KhkKU0Jer0DTTcF P2erWDraAjHnCG7JaF6u826V7NgjbifJzA7bfwVSFfgxXt54nWmIwAfFYN4Js/T7 dDsmz/tqzAMngF3Fp/KlbjvWjo5FUCc2LsnFic++5cH9TeET88Yut6pZT26trsMe /pn34tW56Uk7uLa/QBrH5LRru1EvXQpl3T/+v+j98qkhaJ9CM8vq6+jRuBi7Za8b 5v7YDrLK11iSN/jpWn0NwRGBOk9vY6h1CkcWej01UWROJs2fuYDB/ZykMnmN3auh RH5qP9JatGQMUOfdHru7hP7CdFbR8dRGRwUDIZADuMDwrsUPYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMvbmFLbslmd8iXDEX8AbGfJzvN7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mZmMz OWY2NC1mMzU2LTQ1OWMtOGJmNy1kMTQyYTdhMTY2ZjMvMjg3MzUzNDgtNmNkYS0z NzRhLTk3OGEtYTJhYWJmNjU5ZDg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZmZjMzlmNjQtZjM1Ni00NTljLThi ZjctZDE0MmE3YTE2NmYzL2ZmYzM5ZjY0LWYzNTYtNDU5Yy04YmY3LWQxNDJhN2Ex NjZmMy5jcmwwHwYDVR0jBBgwFoAUTVKIAwVs9yp/0Oe8MH4kmI0tICAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mZmMzOWY2NC1mMzU2LTQ1OWMtOGJmNy1kMTQy YTdhMTY2ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiiBtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK4Vhc+st9CY2bC/TmeMc2MlDh2nAYblJfOlv8baQGwYh1LIZzrHtFPX iFnwEYsok11/30AJJfnyMBZjde3/ASSRxY/VyEXTcE95xDqKgPfOLCl++0lckuxG SiSVxQG+iNKrBNw6oDcQqMhvucco3IH17IoZjJ5A1v7CvBhqbwYq/+/HCFCQH7lo 1tB9W7ua/zAnRAMlICL+pN6KTxvpPU/HFQOf4xcGwlHJUQ5iNrgHVmIbVhxLkQVl i68UDJrNy/js7w8DW/Ym6xUIpI8n5N5ZG8RNPKIpush8Ek4I3TJeoZWdTlchwY4a 0cg796T5EG2hdQV5IrJAN2UQrMPciKk= -----END CERTIFICATE-----Generated at Wed Nov 5 08:48:02 2025 by rpki-client