$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/00d0b6a2-2b87-31f9-a337-3a3dc5647dc0.roa File: 00d0b6a2-2b87-31f9-a337-3a3dc5647dc0.roa (raw, json) Hash identifier: LoyPMhWumDMn41vXAtjJ4bWncT311UeSIx1nTA28ocE= Subject key identifier: 5C:6F:A5:07:14:EA:0E:57:9E:61:6E:33:B9:00:C3:61:5E:60:F1:7D Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584AF014D957660446ABAD41AFA0 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/00d0b6a2-2b87-31f9-a337-3a3dc5647dc0.roa Signing time: Fri 22 Aug 2025 05:36:46 +0000 ROA not before: Fri 22 Aug 2025 05:36:46 +0000 ROA not after: Thu 20 Nov 2025 06:36:46 +0000 asID: 31898 IP address blocks: 138.1.32.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:14:d9:57:66:04:46:ab:ad:41:af:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Aug 22 05:36:46 2025 GMT Not After : Nov 20 06:36:46 2025 GMT Subject: CN=7501ed40-2627-4dd7-8075-52d274137add Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:f8:40:7b:2c:1a:9e:72:c9:30:2c:f2:e6:aa: 50:24:dc:73:3d:2d:4f:6e:6b:eb:15:0f:d3:38:5d: c1:ac:de:4c:28:c6:d6:48:47:af:7f:4d:bc:6b:4f: bc:9f:87:91:6f:21:10:05:1e:1d:22:ad:dc:4d:15: 71:23:78:33:1f:ff:a2:2f:33:69:ec:c5:1f:13:45: 1f:91:c2:27:f0:bb:c1:70:5c:65:79:72:71:d9:23: 8d:e4:4d:28:26:12:6d:3f:ae:44:b6:7c:49:99:e5: f4:79:36:1a:ad:5b:48:85:3c:db:5f:fd:72:2c:80: 81:c2:ec:64:f3:fd:4d:56:3c:48:8e:21:e4:17:09: 6e:aa:37:63:50:14:3c:20:6a:ca:76:e8:6a:ec:6b: d1:88:57:eb:7f:2c:f3:2e:fc:46:36:42:b1:1d:a1: fe:96:c9:56:34:1e:75:59:ff:39:bd:88:d5:a2:3f: c9:a2:81:92:c1:7f:7e:c7:cd:e2:9b:40:96:2c:4c: 0f:11:44:a0:11:d5:16:0a:46:d5:de:40:55:7f:76: dc:c3:16:14:ec:db:0a:db:87:74:de:66:7e:f8:c9: 68:a3:c4:47:57:a2:b2:dc:4c:09:e8:08:18:2d:80: 7a:1b:ad:58:65:37:1d:4d:26:8e:4c:05:ab:75:5b: 97:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:6F:A5:07:14:EA:0E:57:9E:61:6E:33:B9:00:C3:61:5E:60:F1:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/00d0b6a2-2b87-31f9-a337-3a3dc5647dc0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 138.1.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:ab:38:92:32:ea:a1:e1:72:3c:ff:c1:64:90:70:71:e1:03: 01:1d:bc:5e:36:d1:98:61:a1:de:c9:4a:f1:00:8e:4f:52:78: 9c:30:6e:f7:c7:97:7d:38:30:ff:eb:d4:c9:09:da:6c:3c:7d: 4c:fd:fa:e0:88:9d:33:71:c9:04:ca:9e:00:59:1a:e7:04:50: cd:9b:45:8e:54:f0:88:10:89:e1:b3:06:81:2b:a1:f9:82:1b: c2:7a:aa:e1:8d:c5:38:e9:94:f9:5d:62:72:42:a8:fd:e6:cf: 50:cf:f3:92:58:39:b9:6a:e0:04:dc:d6:e4:67:31:bc:42:13: 35:4f:e6:3b:4c:d5:4b:19:23:84:d2:69:be:95:4e:da:3e:45: 4f:78:5e:12:ba:d3:b9:f5:e2:f2:17:89:0e:17:26:17:c4:45: 53:27:3f:3b:7b:00:60:01:5d:63:7a:28:9d:7d:1e:8e:76:27: a3:43:96:73:64:f9:86:c9:22:8e:46:5a:25:ab:f5:80:90:b6: 61:b6:b0:16:73:77:09:ab:de:07:9c:e5:9d:d4:fd:0c:1b:77: a4:d0:d6:04:a8:bd:8d:f7:f6:47:92:7d:32:5f:a8:b8:51:fa: 97:52:91:c2:fa:27:90:5c:38:36:b8:bd:27:ae:26:8f:df:b1: 37:c4:e1:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErwFNlXZgRGq61Br6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI1MDgyMjA1MzY0NloXDTI1MTEyMDA2MzY0NlowLzEtMCsGA1UEAxMk NzUwMWVkNDAtMjYyNy00ZGQ3LTgwNzUtNTJkMjc0MTM3YWRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5fhAeywannLJMCzy5qpQJNxzPS1PbmvrFQ/T OF3BrN5MKMbWSEevf028a0+8n4eRbyEQBR4dIq3cTRVxI3gzH/+iLzNp7MUfE0Uf kcIn8LvBcFxleXJx2SON5E0oJhJtP65EtnxJmeX0eTYarVtIhTzbX/1yLICBwuxk 8/1NVjxIjiHkFwluqjdjUBQ8IGrKduhq7GvRiFfrfyzzLvxGNkKxHaH+lslWNB51 Wf85vYjVoj/JooGSwX9+x83im0CWLEwPEUSgEdUWCkbV3kBVf3bcwxYU7NsK24d0 3mZ++Mloo8RHV6Ky3EwJ6AgYLYB6G61YZTcdTSaOTAWrdVuX3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFxvpQcU6g5XnmFuM7kAw2FeYPF9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvMDBkMGI2YTItMmI4Ny0z MWY5LWEzMzctM2EzZGM1NjQ3ZGMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDigEgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGurOJIy6qHhcjz/wWSQcHHhAwEdvF420Zhhod7JSvEAjk9SeJwwbvfH l304MP/r1MkJ2mw8fUz9+uCInTNxyQTKngBZGucEUM2bRY5U8IgQieGzBoErofmC G8J6quGNxTjplPldYnJCqP3mz1DP85JYOblq4ATc1uRnMbxCEzVP5jtM1UsZI4TS ab6VTto+RU94XhK607n14vIXiQ4XJhfERVMnPzt7AGABXWN6KJ19Ho52J6NDlnNk +YbJIo5GWiWr9YCQtmG2sBZzdwmr3gec5Z3U/Qwbd6TQ1gSovY339keSfTJfqLhR +pdSkcL6J5BcODa4vSeuJo/fsTfE4R4= -----END CERTIFICATE-----Generated at Wed Nov 5 18:11:47 2025 by rpki-client