$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/05c6ae77-158f-331e-a870-c2b38881abea.roa File: 05c6ae77-158f-331e-a870-c2b38881abea.roa (raw, json) Hash identifier: Uj7HuwK/kF7zkcZyj2QH4Qs7CoO4o5kw6tWQr05YvGU= Subject key identifier: 74:62:0F:53:AE:E4:8D:CA:0A:6F:07:32:30:7B:B9:82:33:5E:00:61 Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584AEEADB2051CFD9B60EAB40B80 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/05c6ae77-158f-331e-a870-c2b38881abea.roa Signing time: Thu 21 Aug 2025 17:33:07 +0000 ROA not before: Thu 21 Aug 2025 17:33:07 +0000 ROA not after: Wed 19 Nov 2025 18:33:07 +0000 asID: 31898 IP address blocks: 138.1.4.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:ad:b2:05:1c:fd:9b:60:ea:b4:0b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Aug 21 17:33:07 2025 GMT Not After : Nov 19 18:33:07 2025 GMT Subject: CN=04d81690-a498-476b-89d8-e5e6ddecfe9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:0d:1b:fb:ec:ad:02:76:51:ed:ca:a3:ba:c4: fa:26:dd:a0:fd:2e:45:bb:2a:84:34:bc:42:4d:67: 8b:f5:d4:7f:3b:4d:96:9c:5f:f1:fc:ef:d4:30:fa: 0a:b3:0f:39:04:b8:53:cd:67:cf:88:ee:c3:42:f5: 2a:d2:52:96:cc:fa:ca:f6:0d:90:2a:b0:75:7e:d9: eb:93:88:e6:a9:fc:87:8f:bb:93:15:28:6d:46:b3: f8:9c:fd:e6:a3:72:74:19:c7:a9:a5:bb:da:0c:59: c9:31:25:59:f2:bd:f8:dd:a4:25:76:92:a8:d5:30: 78:e7:81:6c:32:8f:d0:04:90:4e:57:53:a7:a2:d6: 0a:ec:2d:75:c9:32:ff:98:3e:62:69:8e:22:95:fa: be:1b:1c:81:ac:a3:9a:c6:43:0a:e4:96:db:e0:93: c8:2e:dd:ef:86:8e:7a:a3:93:79:e6:1e:33:9d:df: 2e:85:d2:ab:b2:be:e3:33:03:78:3c:40:57:ac:aa: f0:1b:09:10:bb:9d:c1:88:c0:a8:86:60:08:9f:a5: 25:25:b5:bb:10:5b:12:30:06:7d:7e:32:8f:ef:3b: 5c:68:3e:25:47:9d:d1:2c:aa:c3:91:ad:d1:47:b5: bf:d9:40:ab:be:f3:9d:ae:f0:c7:4f:dd:ec:b5:b2: 98:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:62:0F:53:AE:E4:8D:CA:0A:6F:07:32:30:7B:B9:82:33:5E:00:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/05c6ae77-158f-331e-a870-c2b38881abea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 138.1.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:94:88:7a:f4:11:c0:a7:61:dc:96:4d:92:3f:ed:0b:79:19: cd:58:02:9b:c1:ba:a1:9a:36:a3:56:b8:ef:16:d3:6c:bb:1f: 2f:b9:ef:e0:00:22:98:13:73:73:f6:20:7b:7d:df:3f:a6:e3: 42:46:81:90:92:0e:95:7e:71:75:ac:d9:b3:b0:b9:ef:03:b9: ef:ac:9d:78:7b:2c:76:8a:42:4a:59:e3:39:c4:80:81:f1:1c: a2:a3:dd:f0:fb:76:a3:90:86:ae:7e:61:79:eb:62:67:c5:b9: 94:02:eb:79:ce:fe:b5:4d:a1:46:e4:74:62:96:39:a7:95:0e: 2b:4d:a6:02:0f:ac:3f:17:95:86:67:5d:5c:7a:f6:7c:29:bf: b6:0a:cd:69:90:a5:b7:cf:ce:5d:e9:2a:d8:17:6f:f1:99:2d: 03:e3:96:8b:d4:36:a8:c8:52:b3:aa:74:d0:cf:09:fc:35:d4: ab:f4:ae:25:92:05:23:17:1d:da:95:e3:a8:07:ca:4f:94:9e: f9:35:7d:4f:2e:a8:6a:0a:6d:61:e1:02:d8:2d:7b:bd:74:94: 80:ad:a2:b8:22:ed:7f:01:c5:04:15:84:d8:db:71:90:1c:89: 7c:b6:49:73:9e:5b:76:2c:cc:98:ca:27:95:95:be:6e:d0:0a: 3d:9a:8f:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErurbIFHP2bYOq0C4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI1MDgyMTE3MzMwN1oXDTI1MTExOTE4MzMwN1owLzEtMCsGA1UEAxMk MDRkODE2OTAtYTQ5OC00NzZiLTg5ZDgtZTVlNmRkZWNmZTljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiw0b++ytAnZR7cqjusT6Jt2g/S5FuyqENLxC TWeL9dR/O02WnF/x/O/UMPoKsw85BLhTzWfPiO7DQvUq0lKWzPrK9g2QKrB1ftnr k4jmqfyHj7uTFShtRrP4nP3mo3J0GceppbvaDFnJMSVZ8r343aQldpKo1TB454Fs Mo/QBJBOV1OnotYK7C11yTL/mD5iaY4ilfq+GxyBrKOaxkMK5Jbb4JPILt3vho56 o5N55h4znd8uhdKrsr7jMwN4PEBXrKrwGwkQu53BiMCohmAIn6UlJbW7EFsSMAZ9 fjKP7ztcaD4lR53RLKrDka3RR7W/2UCrvvOdrvDHT93stbKYbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHRiD1Ou5I3KCm8HMjB7uYIzXgBhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvMDVjNmFlNzctMTU4Zi0z MzFlLWE4NzAtYzJiMzg4ODFhYmVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCigEEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHKUiHr0EcCnYdyWTZI/7Qt5Gc1YApvBuqGaNqNWuO8W02y7Hy+57+AA IpgTc3P2IHt93z+m40JGgZCSDpV+cXWs2bOwue8Due+snXh7LHaKQkpZ4znEgIHx HKKj3fD7dqOQhq5+YXnrYmfFuZQC63nO/rVNoUbkdGKWOaeVDitNpgIPrD8XlYZn XVx69nwpv7YKzWmQpbfPzl3pKtgXb/GZLQPjlovUNqjIUrOqdNDPCfw11Kv0riWS BSMXHdqV46gHyk+Unvk1fU8uqGoKbWHhAtgte710lICtorgi7X8BxQQVhNjbcZAc iXy2SXOeW3YszJjKJ5WVvm7QCj2aj8s= -----END CERTIFICATE-----Generated at Wed Nov 5 12:09:18 2025 by rpki-client