$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/aa446a67-ee84-39d1-85f9-af00b56929c5.roa File: aa446a67-ee84-39d1-85f9-af00b56929c5.roa (raw, json) Hash identifier: sPHDz4NANYJYBEpOYl6SmVfoL9W0Ow41Wb7F8a8p824= Subject key identifier: 51:2D:1F:95:8F:A9:AB:A6:17:F0:89:68:EB:BB:AE:E7:99:3D:B3:07 Certificate issuer: /CN=ffc39f64-f356-459c-8bf7-d142a7a166f3 Certificate serial: 010D0C9F4328584AF7EBE8090CA4CE57908AD680 Authority key identifier: 4D:52:88:03:05:6C:F7:2A:7F:D0:E7:BC:30:7E:24:98:8D:2D:20:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/aa446a67-ee84-39d1-85f9-af00b56929c5.roa Signing time: Mon 25 Aug 2025 01:00:33 +0000 ROA not before: Mon 25 Aug 2025 01:00:33 +0000 ROA not after: Sun 23 Nov 2025 02:00:33 +0000 asID: 8075 IP address blocks: 138.32.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f7:eb:e8:09:0c:a4:ce:57:90:8a:d6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffc39f64-f356-459c-8bf7-d142a7a166f3 Validity Not Before: Aug 25 01:00:33 2025 GMT Not After : Nov 23 02:00:33 2025 GMT Subject: CN=88e20d25-f433-4f42-8166-71c0b1426f62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:bf:11:ed:31:91:3c:5e:54:90:b9:ad:ac:18: 28:7f:7c:1e:64:06:89:2e:0b:49:41:15:20:37:ba: c0:a1:02:79:11:e4:a6:6d:a1:56:5f:5c:f5:db:e7: af:0b:c5:d8:26:c3:68:b9:c4:9f:9a:f9:9e:b4:ca: f4:b5:e3:83:79:1e:7a:39:a1:0c:ce:4c:87:85:7e: 76:bb:ce:6c:bf:6b:90:98:53:be:9f:23:10:0d:63: 85:61:d8:b0:d7:dd:89:2c:8a:cb:52:d0:eb:30:ef: 86:8a:db:e6:de:3f:9c:39:be:fe:24:d2:16:45:88: 8d:83:a4:49:73:ad:a1:d5:df:a4:11:32:9c:f8:bf: 39:55:40:69:53:31:17:27:f5:a4:fe:52:8b:e9:c1: ec:f3:ea:dd:02:fc:df:78:ac:14:6d:5b:59:3c:63: 7a:b2:41:7b:49:ca:fc:46:f8:38:2b:41:79:e9:9f: 30:03:b3:f2:5b:6f:c6:8e:38:b0:0c:e4:a1:4a:35: 70:eb:73:13:35:c6:4d:9f:1d:39:4c:f8:78:62:d5: 72:fa:8a:a5:ef:e0:ef:d0:7c:16:b7:b3:a3:72:e1: fd:58:24:4c:c1:fb:d1:86:84:8a:ba:bd:d8:bb:80: cf:6d:9f:66:ba:40:bf:e3:67:78:d8:dc:3e:3b:78: 63:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:2D:1F:95:8F:A9:AB:A6:17:F0:89:68:EB:BB:AE:E7:99:3D:B3:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/aa446a67-ee84-39d1-85f9-af00b56929c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.crl X509v3 Authority Key Identifier: keyid:4D:52:88:03:05:6C:F7:2A:7F:D0:E7:BC:30:7E:24:98:8D:2D:20:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer sbgp-ipAddrBlock: critical IPv4: 138.32.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:e1:2f:24:2c:3f:d9:53:76:2b:bc:9e:99:bd:1d:7b:13:1a: 3d:3f:1d:24:5a:f0:1d:88:3d:30:56:f5:b1:db:25:46:73:84: 10:fc:88:71:ec:33:b1:9b:31:2c:a6:d5:d9:01:b1:b4:8b:30: b7:99:d7:45:e3:57:fe:47:ee:3c:7c:23:96:b7:1d:a4:0e:9a: a9:1d:e7:c8:aa:4e:bf:15:58:19:be:23:dd:d1:ef:f4:9f:60: 3b:ce:ff:a8:00:fd:34:8e:00:43:4c:90:64:54:09:39:86:cf: 9e:f4:0d:af:95:ce:cc:36:10:70:ae:69:9e:26:d6:ab:5f:f0: 3a:03:d0:ac:a8:25:06:a4:e2:68:e2:aa:40:8b:03:ac:cb:4b: d4:5c:96:e4:5d:f3:35:32:10:05:c7:ad:d0:26:f4:85:df:97: 90:92:1c:3b:a5:24:1e:be:c0:3e:7f:18:87:27:bc:f0:c4:2a: 9d:1b:05:04:70:c0:ed:c7:ad:b5:5c:1f:b5:bb:29:57:eb:4a: 16:3f:26:ca:c1:ef:35:8e:e6:97:40:c2:71:52:bc:06:02:0a: 2f:83:a2:ed:4c:70:9e:29:c5:eb:4f:7e:e4:b3:ee:c0:fd:7e: d1:a9:ff:1f:0b:ce:3c:5d:50:0e:8b:67:66:e6:dc:79:b9:ed: 95:31:51:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr36+gJDKTOV5CK1oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmZjMzlmNjQtZjM1Ni00NTljLThiZjctZDE0MmE3YTE2 NmYzMB4XDTI1MDgyNTAxMDAzM1oXDTI1MTEyMzAyMDAzM1owLzEtMCsGA1UEAxMk ODhlMjBkMjUtZjQzMy00ZjQyLTgxNjYtNzFjMGIxNDI2ZjYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh78R7TGRPF5UkLmtrBgof3weZAaJLgtJQRUg N7rAoQJ5EeSmbaFWX1z12+evC8XYJsNoucSfmvmetMr0teODeR56OaEMzkyHhX52 u85sv2uQmFO+nyMQDWOFYdiw192JLIrLUtDrMO+Gitvm3j+cOb7+JNIWRYiNg6RJ c62h1d+kETKc+L85VUBpUzEXJ/Wk/lKL6cHs8+rdAvzfeKwUbVtZPGN6skF7Scr8 Rvg4K0F56Z8wA7PyW2/GjjiwDOShSjVw63MTNcZNnx05TPh4YtVy+oql7+Dv0HwW t7OjcuH9WCRMwfvRhoSKur3Yu4DPbZ9mukC/42d42Nw+O3hjbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFEtH5WPqaumF/CJaOu7rueZPbMHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mZmMz OWY2NC1mMzU2LTQ1OWMtOGJmNy1kMTQyYTdhMTY2ZjMvYWE0NDZhNjctZWU4NC0z OWQxLTg1ZjktYWYwMGI1NjkyOWM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZmZjMzlmNjQtZjM1Ni00NTljLThi ZjctZDE0MmE3YTE2NmYzL2ZmYzM5ZjY0LWYzNTYtNDU5Yy04YmY3LWQxNDJhN2Ex NjZmMy5jcmwwHwYDVR0jBBgwFoAUTVKIAwVs9yp/0Oe8MH4kmI0tICAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mZmMzOWY2NC1mMzU2LTQ1OWMtOGJmNy1kMTQy YTdhMTY2ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiiByMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFThLyQsP9lTdiu8npm9HXsTGj0/HSRa8B2IPTBW9bHbJUZzhBD8iHHs M7GbMSym1dkBsbSLMLeZ10XjV/5H7jx8I5a3HaQOmqkd58iqTr8VWBm+I93R7/Sf YDvO/6gA/TSOAENMkGRUCTmGz570Da+Vzsw2EHCuaZ4m1qtf8DoD0KyoJQak4mji qkCLA6zLS9RcluRd8zUyEAXHrdAm9IXfl5CSHDulJB6+wD5/GIcnvPDEKp0bBQRw wO3HrbVcH7W7KVfrShY/JsrB7zWO5pdAwnFSvAYCCi+Dou1McJ4pxetPfuSz7sD9 ftGp/x8LzjxdUA6LZ2bm3Hm57ZUxURw= -----END CERTIFICATE-----Generated at Wed Nov 5 07:09:02 2025 by rpki-client