$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/2e741c04-6a6c-325f-8a91-fa4bd0b8ffd8.roa File: 2e741c04-6a6c-325f-8a91-fa4bd0b8ffd8.roa (raw, json) Hash identifier: rehnmog2PlX9sletFPk0iPIzj9U/3FPb0jpW82mRJVE= Subject key identifier: AB:91:9B:9A:CB:B2:96:C5:B4:1E:54:6A:00:C4:CF:7A:9B:A7:E5:82 Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584AEF55C5F9FD0B426E54287800 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/2e741c04-6a6c-325f-8a91-fa4bd0b8ffd8.roa Signing time: Thu 21 Aug 2025 23:11:47 +0000 ROA not before: Thu 21 Aug 2025 23:11:47 +0000 ROA not after: Thu 20 Nov 2025 00:11:47 +0000 asID: 31898 IP address blocks: 138.1.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ef:55:c5:f9:fd:0b:42:6e:54:28:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Aug 21 23:11:47 2025 GMT Not After : Nov 20 00:11:47 2025 GMT Subject: CN=5759ba60-1c7f-4e2b-98fa-2460bde987af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:19:3c:9e:15:f6:3d:ea:74:d9:6f:ca:12:44: cf:0f:84:f0:a9:e0:50:4c:ac:3b:7d:f1:4d:96:3c: 7d:d8:d9:87:07:09:40:c9:6f:da:b3:c1:85:10:27: ca:06:b6:1b:e1:19:30:bc:a4:37:98:ba:0d:7d:60: 9f:39:ba:f3:1d:64:6c:c0:e1:3a:b2:f9:40:81:1f: b7:16:ed:f9:e2:cc:cf:ae:d9:11:35:a8:7c:4e:dc: 2f:2c:ca:f0:8b:fa:12:c5:38:f3:fa:30:5b:86:3c: 89:4a:71:e8:c0:57:22:05:1c:5b:f3:3b:26:8e:78: 98:f4:3f:cb:09:ac:42:ca:79:91:1d:e3:a8:1c:01: d0:3f:ac:fb:5e:40:89:6a:bb:56:40:e2:ac:af:4e: 51:bd:26:8c:f5:44:ae:21:4f:2c:bb:cf:37:68:d2: 77:8c:ba:8f:62:e9:9c:9a:45:18:5b:2b:f6:07:fe: 09:14:14:de:9d:07:02:4a:bc:7d:03:ec:80:09:0f: 02:9a:87:ec:39:d2:a4:62:12:1c:1e:6e:fc:94:3a: fc:ed:81:c7:31:b0:62:fb:41:e8:62:85:a3:51:30: 8f:48:fe:3e:8b:34:42:9f:ac:c6:5a:2c:c1:90:a4: 2a:02:ae:6f:41:d7:5e:5a:3c:84:b9:a3:53:95:86: e0:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:91:9B:9A:CB:B2:96:C5:B4:1E:54:6A:00:C4:CF:7A:9B:A7:E5:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/2e741c04-6a6c-325f-8a91-fa4bd0b8ffd8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 138.1.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:82:f4:5f:93:42:59:8d:fb:4c:91:70:cb:22:19:92:c1:42: 18:52:83:10:d3:f1:1a:bb:0b:ed:63:b5:02:c3:b2:b7:7d:39: 98:f0:de:ca:65:18:96:91:9b:14:d6:82:6c:25:f9:ef:5e:17: f3:7b:11:24:3a:2f:ec:72:a1:14:4c:9a:76:ec:8f:d6:73:b2: 7d:d5:df:6b:e1:9a:8a:da:2d:c5:87:d3:29:d5:09:c3:5f:88: c5:d2:ed:9c:9e:4d:d7:f1:dc:09:e4:5a:bf:80:e4:9e:f7:41: db:c9:a4:05:15:c5:75:c5:34:35:c8:2d:58:64:90:ee:10:70: e7:4b:ad:1c:29:43:db:40:d2:84:8f:2a:84:c4:30:eb:3b:ad: b7:74:cf:54:1e:fd:c8:c9:69:34:22:19:da:d4:f6:d7:4d:64: 95:1c:9d:d9:6c:90:af:f8:29:76:d1:98:98:53:d3:1d:eb:25: a9:bb:71:1c:35:ac:f0:57:7f:e4:24:03:59:51:b9:f6:1e:21: 02:9a:e7:f5:00:37:79:2e:59:4c:77:f4:74:55:e6:e8:38:a6: 4a:3f:58:e4:ef:f2:d1:d6:ae:00:d5:d6:87:d9:32:bc:96:b7: 47:45:0b:81:ee:c3:41:76:eb:19:b0:a5:e8:52:f6:2b:a2:bf: 6f:52:e8:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErvVcX5/QtCblQoeAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI1MDgyMTIzMTE0N1oXDTI1MTEyMDAwMTE0N1owLzEtMCsGA1UEAxMk NTc1OWJhNjAtMWM3Zi00ZTJiLTk4ZmEtMjQ2MGJkZTk4N2FmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhk8nhX2Pep02W/KEkTPD4TwqeBQTKw7ffFN ljx92NmHBwlAyW/as8GFECfKBrYb4RkwvKQ3mLoNfWCfObrzHWRswOE6svlAgR+3 Fu354szPrtkRNah8TtwvLMrwi/oSxTjz+jBbhjyJSnHowFciBRxb8zsmjniY9D/L CaxCynmRHeOoHAHQP6z7XkCJartWQOKsr05RvSaM9USuIU8su883aNJ3jLqPYumc mkUYWyv2B/4JFBTenQcCSrx9A+yACQ8CmofsOdKkYhIcHm78lDr87YHHMbBi+0Ho YoWjUTCPSP4+izRCn6zGWizBkKQqAq5vQddeWjyEuaNTlYbg/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKuRm5rLspbFtB5UagDEz3qbp+WCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvMmU3NDFjMDQtNmE2Yy0z MjVmLThhOTEtZmE0YmQwYjhmZmQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCigEUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC6C9F+TQlmN+0yRcMsiGZLBQhhSgxDT8Rq7C+1jtQLDsrd9OZjw3spl GJaRmxTWgmwl+e9eF/N7ESQ6L+xyoRRMmnbsj9Zzsn3V32vhmoraLcWH0ynVCcNf iMXS7ZyeTdfx3AnkWr+A5J73QdvJpAUVxXXFNDXILVhkkO4QcOdLrRwpQ9tA0oSP KoTEMOs7rbd0z1Qe/cjJaTQiGdrU9tdNZJUcndlskK/4KXbRmJhT0x3rJam7cRw1 rPBXf+QkA1lRufYeIQKa5/UAN3kuWUx39HRV5ug4pko/WOTv8tHWrgDV1ofZMryW t0dFC4Huw0F26xmwpehS9iuiv29S6FM= -----END CERTIFICATE-----Generated at Wed Nov 5 21:23:24 2025 by rpki-client