$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/762af5d8-04f6-3dec-a82b-5142c1164eb3.roa File: 762af5d8-04f6-3dec-a82b-5142c1164eb3.roa (raw, json) Hash identifier: GDJCmC6jnE1KG/LxOICq/bWP3qky5SxzhrdutT5OFDc= Subject key identifier: 93:F9:8D:09:94:57:23:9F:CF:09:3A:8B:94:36:6F:77:90:B6:80:F6 Certificate issuer: /CN=ffc39f64-f356-459c-8bf7-d142a7a166f3 Certificate serial: 010D0C9F4328584B0314FDCF1C2195C36A515700 Authority key identifier: 4D:52:88:03:05:6C:F7:2A:7F:D0:E7:BC:30:7E:24:98:8D:2D:20:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/762af5d8-04f6-3dec-a82b-5142c1164eb3.roa Signing time: Fri 29 Aug 2025 00:57:25 +0000 ROA not before: Fri 29 Aug 2025 00:57:25 +0000 ROA not after: Thu 27 Nov 2025 01:57:25 +0000 asID: 18701 IP address blocks: 138.32.96.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:03:14:fd:cf:1c:21:95:c3:6a:51:57:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffc39f64-f356-459c-8bf7-d142a7a166f3 Validity Not Before: Aug 29 00:57:25 2025 GMT Not After : Nov 27 01:57:25 2025 GMT Subject: CN=87696c9b-42ce-4844-9a02-dbebe3da1b55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:a7:53:f4:d3:88:2a:13:2f:89:79:94:91:a9: 0e:75:d2:12:bb:c3:30:ee:80:d3:42:e2:da:fa:e0: 91:bc:77:cf:3d:91:da:73:58:f2:e9:15:f5:58:95: 0f:5f:d3:3d:84:28:dc:25:fe:ec:84:72:6b:cc:77: 85:65:50:83:9e:ff:4e:fe:95:79:e6:70:14:a3:8f: a4:bc:a3:14:b5:9c:cb:dc:a9:97:53:be:07:c8:17: 61:31:d3:21:3b:76:ca:2a:b6:9b:8d:cd:20:37:bc: 73:b5:b2:8c:6e:93:8c:c3:4e:3a:ed:91:e9:e1:25: bc:2c:f3:fe:9e:2c:3a:03:76:6d:df:32:64:f6:4c: 02:0d:46:0d:3e:a3:95:02:7c:b2:19:56:22:07:ed: 78:2b:d9:58:fe:59:93:a9:e9:29:7c:b7:33:1a:b4: 50:ee:5b:3e:eb:64:0a:9e:c2:67:74:20:81:a5:55: 1b:4f:3f:0b:20:ae:0e:9c:e3:87:09:c9:4c:6c:5a: 42:b0:9c:3c:13:ea:2c:7a:35:1f:5b:64:87:fd:6f: d3:2c:0b:66:b6:f8:69:63:10:c3:72:0b:28:58:24: 1a:0e:10:b0:5c:58:5d:c3:5c:d6:30:d5:b4:53:6f: 6d:b7:f1:66:05:ed:65:f7:c3:1f:14:04:95:8a:92: d0:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:F9:8D:09:94:57:23:9F:CF:09:3A:8B:94:36:6F:77:90:B6:80:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/762af5d8-04f6-3dec-a82b-5142c1164eb3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.crl X509v3 Authority Key Identifier: keyid:4D:52:88:03:05:6C:F7:2A:7F:D0:E7:BC:30:7E:24:98:8D:2D:20:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer sbgp-ipAddrBlock: critical IPv4: 138.32.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:48:b4:29:4e:79:6a:23:d2:2e:a7:eb:6f:fd:bd:c6:d7:5f: 79:31:fb:4c:68:de:12:ce:fa:cb:e5:69:23:bb:17:61:a5:d2: 85:37:3e:d2:d9:8d:07:78:fd:9e:e0:c2:68:31:60:ca:dc:e4: a3:cd:1f:90:66:88:42:08:98:e7:c8:7f:37:3e:b3:26:92:af: fe:34:08:28:0d:fd:cd:8a:a3:b5:68:17:3a:1b:4f:dc:e2:ac: 31:01:4e:d4:3b:40:81:1a:19:f9:28:68:9a:f1:5a:94:43:b7: a3:60:ee:09:e5:52:bd:49:8f:83:b0:45:40:c4:df:25:c8:a4: 5c:a8:8a:63:31:fa:70:ca:74:7c:e4:58:72:a5:c7:59:6b:b5: d0:e7:46:95:4d:20:ad:86:ac:20:c3:1b:61:77:45:f0:d1:65: 09:61:99:d9:79:ef:02:fa:69:e4:73:be:13:ae:8f:8b:a0:0d: dd:12:20:ae:2f:17:ba:f7:d9:4d:cb:6c:43:ef:2d:67:fc:64: 8b:03:e4:87:3b:4b:7e:98:7a:3f:9a:b3:4b:17:cf:76:42:27: d1:7f:61:b6:25:a6:ef:02:d3:78:ab:86:85:75:9a:de:a8:5d: e6:b8:48:46:71:f7:99:2b:b1:e8:f1:bf:70:07:35:e1:cb:6b: 36:06:de:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsDFP3PHCGVw2pRVwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmZjMzlmNjQtZjM1Ni00NTljLThiZjctZDE0MmE3YTE2 NmYzMB4XDTI1MDgyOTAwNTcyNVoXDTI1MTEyNzAxNTcyNVowLzEtMCsGA1UEAxMk ODc2OTZjOWItNDJjZS00ODQ0LTlhMDItZGJlYmUzZGExYjU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjadT9NOIKhMviXmUkakOddISu8Mw7oDTQuLa +uCRvHfPPZHac1jy6RX1WJUPX9M9hCjcJf7shHJrzHeFZVCDnv9O/pV55nAUo4+k vKMUtZzL3KmXU74HyBdhMdMhO3bKKrabjc0gN7xztbKMbpOMw0467ZHp4SW8LPP+ niw6A3Zt3zJk9kwCDUYNPqOVAnyyGVYiB+14K9lY/lmTqekpfLczGrRQ7ls+62QK nsJndCCBpVUbTz8LIK4OnOOHCclMbFpCsJw8E+osejUfW2SH/W/TLAtmtvhpYxDD cgsoWCQaDhCwXFhdw1zWMNW0U29tt/FmBe1l98MfFASVipLQxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJP5jQmUVyOfzwk6i5Q2b3eQtoD2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mZmMz OWY2NC1mMzU2LTQ1OWMtOGJmNy1kMTQyYTdhMTY2ZjMvNzYyYWY1ZDgtMDRmNi0z ZGVjLWE4MmItNTE0MmMxMTY0ZWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZmZjMzlmNjQtZjM1Ni00NTljLThi ZjctZDE0MmE3YTE2NmYzL2ZmYzM5ZjY0LWYzNTYtNDU5Yy04YmY3LWQxNDJhN2Ex NjZmMy5jcmwwHwYDVR0jBBgwFoAUTVKIAwVs9yp/0Oe8MH4kmI0tICAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mZmMzOWY2NC1mMzU2LTQ1OWMtOGJmNy1kMTQy YTdhMTY2ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDiiBgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALlItClOeWoj0i6n62/9vcbXX3kx+0xo3hLO+svlaSO7F2Gl0oU3PtLZ jQd4/Z7gwmgxYMrc5KPNH5BmiEIImOfIfzc+syaSr/40CCgN/c2Ko7VoFzobT9zi rDEBTtQ7QIEaGfkoaJrxWpRDt6Ng7gnlUr1Jj4OwRUDE3yXIpFyoimMx+nDKdHzk WHKlx1lrtdDnRpVNIK2GrCDDG2F3RfDRZQlhmdl57wL6aeRzvhOuj4ugDd0SIK4v F7r32U3LbEPvLWf8ZIsD5Ic7S36Yej+as0sXz3ZCJ9F/YbYlpu8C03irhoV1mt6o Xea4SEZx95krsejxv3AHNeHLazYG3nw= -----END CERTIFICATE-----Generated at Thu Nov 6 00:19:12 2025 by rpki-client