$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/bd6ffe47-c0ff-3b86-a360-e53ee3ab2bab.roa File: bd6ffe47-c0ff-3b86-a360-e53ee3ab2bab.roa (raw, json) Hash identifier: pgL5is9BFdJ/34S4953eyJEbBXjevYVUtTFvqqRuMLY= Subject key identifier: 10:69:5A:C8:9A:AE:1C:00:26:93:38:00:A1:C4:47:25:C7:C1:6A:8A Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584AEEADB75EF9FFB9DAD47D6940 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/bd6ffe47-c0ff-3b86-a360-e53ee3ab2bab.roa Signing time: Thu 21 Aug 2025 17:33:10 +0000 ROA not before: Thu 21 Aug 2025 17:33:10 +0000 ROA not after: Wed 19 Nov 2025 18:33:10 +0000 asID: 31898 IP address blocks: 138.1.64.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:ad:b7:5e:f9:ff:b9:da:d4:7d:69:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Aug 21 17:33:10 2025 GMT Not After : Nov 19 18:33:10 2025 GMT Subject: CN=ef8482ab-a7eb-4cd4-ae35-511061ad7fbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:3a:0c:c2:bf:3a:dd:04:a6:36:48:ed:ea:56: 93:bd:da:81:50:bf:ee:1c:85:1b:0d:b5:c2:e7:94: f8:c7:5d:fa:81:55:70:da:70:81:61:9c:a2:73:9a: 67:b7:4f:c8:38:22:fe:6b:6f:61:95:e2:fc:df:ac: df:d6:53:de:07:83:b6:f0:ed:a4:a4:08:cc:90:aa: 85:a2:5d:2c:9e:c8:33:84:65:0f:6d:68:30:d7:f1: 99:7b:f8:60:8c:74:ac:97:af:ba:d4:85:8a:5c:68: cf:3d:83:f9:22:10:25:6b:8c:78:3d:1d:c5:e3:4f: 4f:2c:95:0a:31:1a:88:77:03:28:cb:d6:b9:08:58: d4:5e:46:9a:0e:69:6b:c8:15:d8:76:aa:69:b4:ee: de:19:8a:f5:04:19:c6:e0:4f:ad:8c:c0:14:dc:bc: 56:5b:de:9e:24:66:72:e6:2a:e7:0b:ed:ec:01:22: 9d:6c:26:ba:3a:1d:14:28:7c:c5:b6:94:25:f3:39: d8:0b:3a:56:11:a0:70:bc:aa:36:32:94:b9:ab:e9: 31:7d:f0:e3:73:d6:27:ae:d9:e7:c7:b9:c0:85:07: 14:a4:c7:55:b0:0a:d7:e8:7c:f0:e3:89:91:69:6b: b6:15:84:b3:16:5f:90:a8:ca:7f:5b:2d:f5:ef:de: 4b:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:69:5A:C8:9A:AE:1C:00:26:93:38:00:A1:C4:47:25:C7:C1:6A:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/bd6ffe47-c0ff-3b86-a360-e53ee3ab2bab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 138.1.64.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:de:f2:67:04:19:f0:9d:8d:93:ae:a3:b9:eb:aa:9e:ab:d9: a3:29:44:d8:2c:dd:2b:5f:b5:eb:83:bc:48:79:d5:bf:96:76: 78:8a:0c:26:37:29:76:f0:a1:6e:6a:53:98:fe:2c:05:14:a8: e1:85:19:14:11:d2:4a:ec:8b:cd:4f:d9:52:74:c9:3d:58:b7: 87:9b:35:05:cb:67:ad:41:57:b9:7f:b0:ed:d4:ba:69:24:93: f2:a3:7e:c0:0f:46:d2:0e:c6:50:a4:17:a4:63:89:20:67:16: 90:bd:02:d6:48:b0:31:2e:95:93:b0:0e:30:bf:68:f1:de:2b: bf:06:20:bb:47:4c:35:78:33:3c:22:f7:61:8c:7e:1a:3f:3b: 2d:d0:2a:dd:bc:dc:3a:75:cc:ed:34:f5:2b:39:59:ad:f9:d9: 3b:88:f6:3c:c0:5d:13:0e:45:e4:8b:e9:4a:74:31:de:52:fb: 4c:62:dd:5c:1c:58:bf:a4:67:62:e7:d1:95:1a:e0:d9:18:8c: 15:86:63:47:cd:87:cc:3d:bd:ec:c1:ed:12:45:2a:25:08:1a: 36:45:44:ea:4f:67:0c:f3:aa:f7:93:c5:1f:22:2d:8c:c4:89: 95:d5:d2:e7:91:9d:f4:f0:12:83:15:5e:ac:8e:98:6e:b8:1e: f8:b7:99:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErurbde+f+52tR9aUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI1MDgyMTE3MzMxMFoXDTI1MTExOTE4MzMxMFowLzEtMCsGA1UEAxMk ZWY4NDgyYWItYTdlYi00Y2Q0LWFlMzUtNTExMDYxYWQ3ZmJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhToMwr863QSmNkjt6laTvdqBUL/uHIUbDbXC 55T4x136gVVw2nCBYZyic5pnt0/IOCL+a29hleL836zf1lPeB4O28O2kpAjMkKqF ol0snsgzhGUPbWgw1/GZe/hgjHSsl6+61IWKXGjPPYP5IhAla4x4PR3F409PLJUK MRqIdwMoy9a5CFjUXkaaDmlryBXYdqpptO7eGYr1BBnG4E+tjMAU3LxWW96eJGZy 5irnC+3sASKdbCa6Oh0UKHzFtpQl8znYCzpWEaBwvKo2MpS5q+kxffDjc9Ynrtnn x7nAhQcUpMdVsArX6Hzw44mRaWu2FYSzFl+QqMp/Wy31795L2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBBpWsiarhwAJpM4AKHERyXHwWqKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvYmQ2ZmZlNDctYzBmZi0z Yjg2LWEzNjAtZTUzZWUzYWIyYmFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCigFAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH3e8mcEGfCdjZOuo7nrqp6r2aMpRNgs3StfteuDvEh51b+WdniKDCY3 KXbwoW5qU5j+LAUUqOGFGRQR0krsi81P2VJ0yT1Yt4ebNQXLZ61BV7l/sO3Uumkk k/KjfsAPRtIOxlCkF6RjiSBnFpC9AtZIsDEulZOwDjC/aPHeK78GILtHTDV4Mzwi 92GMfho/Oy3QKt283Dp1zO009Ss5Wa352TuI9jzAXRMOReSL6Up0Md5S+0xi3Vwc WL+kZ2Ln0ZUa4NkYjBWGY0fNh8w9vezB7RJFKiUIGjZFROpPZwzzqveTxR8iLYzE iZXV0ueRnfTwEoMVXqyOmG64Hvi3mZI= -----END CERTIFICATE-----Generated at Wed Nov 5 21:23:18 2025 by rpki-client