$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/d5fd832c-a195-3503-924b-73624a4aef1e.roa File: d5fd832c-a195-3503-924b-73624a4aef1e.roa (raw, json) Hash identifier: KEVCbCzbWaZt/pVnMcwQuW07PKcRXTX0BnYzOH65nyI= Subject key identifier: 77:CD:24:BB:E3:27:9B:EE:9E:E9:FF:F0:1A:2E:C7:23:9E:B5:2E:4C Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584BAA97B86C826247F8775E4500 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/d5fd832c-a195-3503-924b-73624a4aef1e.roa Signing time: Tue 28 Oct 2025 01:00:31 +0000 ROA not before: Tue 28 Oct 2025 01:00:31 +0000 ROA not after: Mon 26 Jan 2026 02:00:31 +0000 asID: 31898 IP address blocks: 138.2.64.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:aa:97:b8:6c:82:62:47:f8:77:5e:45:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Oct 28 01:00:31 2025 GMT Not After : Jan 26 02:00:31 2026 GMT Subject: CN=8d98879f-f8fb-4922-9dcd-3400ff8dbc04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:74:73:ef:dc:30:40:2e:03:17:50:58:0b:af: 00:b8:b0:ab:cf:f3:65:9e:01:57:23:c3:59:23:14: b5:4b:71:6f:45:ee:ca:ef:3a:70:60:92:db:e2:94: f5:c0:bf:2f:c9:08:6b:84:d8:a5:8f:77:14:7e:95: c1:92:0d:97:c0:0f:97:94:40:9b:f2:9e:bd:3a:2c: 9e:f5:22:3f:e5:d7:29:ee:83:28:f0:f1:0c:06:f8: 91:e4:81:14:d2:f4:b4:bd:7b:47:68:de:2f:88:8b: ca:9e:1a:aa:b3:e6:ae:23:80:7b:50:98:01:aa:b4: 74:3f:ca:6a:d5:ae:e9:bc:d3:65:ce:46:a9:28:56: 26:62:e3:a0:6d:b5:6a:c7:98:c5:6f:ff:7c:2a:32: de:e1:2b:ec:e6:96:3f:34:95:26:9b:fc:c6:14:67: b5:82:af:ce:f0:e3:d8:49:e5:fd:5c:0b:94:f7:be: 6d:52:b4:b5:35:8f:e3:b0:40:be:ce:1f:26:e4:fa: 8c:1e:e3:62:6a:6b:43:a8:78:a6:9a:6e:d3:ba:d1: 27:09:45:7c:e3:a8:1b:94:44:05:d6:0f:bc:d2:5e: bb:bf:c3:49:08:d0:3d:08:14:72:45:d8:f8:ad:04: b6:7e:8c:f2:54:45:c0:a1:bf:8d:4d:fd:e2:ce:fd: 66:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:CD:24:BB:E3:27:9B:EE:9E:E9:FF:F0:1A:2E:C7:23:9E:B5:2E:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/d5fd832c-a195-3503-924b-73624a4aef1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 138.2.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:b9:46:e4:b8:89:99:71:cb:59:55:6e:ce:84:57:63:58:46: 4c:a2:11:b5:de:93:02:b3:fa:78:d1:0f:24:15:f5:fc:03:03: 91:ad:44:c0:21:24:64:a7:d5:22:b1:77:41:bf:05:19:73:6b: 85:92:ca:f1:3e:6c:72:80:6d:3d:7a:69:e3:13:5d:31:5d:d6: e1:05:50:b3:df:53:6f:42:33:a0:85:67:d9:64:38:c6:3f:7b: 9c:1b:a2:e6:9a:36:68:27:83:da:83:3f:ad:b1:7b:4d:48:f0: 00:67:e1:d2:cd:2c:b8:39:5c:f5:26:29:e9:bf:88:ce:87:0d: 67:d3:bf:c7:89:e3:45:b6:70:cf:d2:ca:e8:db:a3:c1:a7:47: 5a:dc:37:55:3a:d4:bb:6b:f4:4d:dd:63:08:31:b0:c3:0f:d6: f4:fb:cc:f3:f8:01:75:85:22:38:18:b6:66:09:a8:c5:52:f5: 54:58:dc:ed:d1:f1:48:7d:16:00:9d:7c:f5:ca:2d:77:43:43: 2f:dc:d3:61:30:b5:b8:9b:b2:23:49:ea:a4:52:9a:62:21:81: 11:c2:6b:9a:f5:49:90:ac:d1:85:5f:ea:02:48:a3:f2:01:3b: 54:71:a5:76:69:4c:71:55:6a:dc:e5:a3:05:1e:a7:21:e2:1a: cb:95:3f:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuql7hsgmJH+HdeRQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI1MTAyODAxMDAzMVoXDTI2MDEyNjAyMDAzMVowLzEtMCsGA1UEAxMk OGQ5ODg3OWYtZjhmYi00OTIyLTlkY2QtMzQwMGZmOGRiYzA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgXRz79wwQC4DF1BYC68AuLCrz/NlngFXI8NZ IxS1S3FvRe7K7zpwYJLb4pT1wL8vyQhrhNilj3cUfpXBkg2XwA+XlECb8p69Oiye 9SI/5dcp7oMo8PEMBviR5IEU0vS0vXtHaN4viIvKnhqqs+auI4B7UJgBqrR0P8pq 1a7pvNNlzkapKFYmYuOgbbVqx5jFb/98KjLe4Svs5pY/NJUmm/zGFGe1gq/O8OPY SeX9XAuU975tUrS1NY/jsEC+zh8m5PqMHuNiamtDqHimmm7TutEnCUV846gblEQF 1g+80l67v8NJCNA9CBRyRdj4rQS2fozyVEXAob+NTf3izv1m5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHfNJLvjJ5vunun/8BouxyOetS5MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvZDVmZDgzMmMtYTE5NS0z NTAzLTkyNGItNzM2MjRhNGFlZjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFigJAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACm5RuS4iZlxy1lVbs6EV2NYRkyiEbXekwKz+njRDyQV9fwDA5GtRMAh JGSn1SKxd0G/BRlza4WSyvE+bHKAbT16aeMTXTFd1uEFULPfU29CM6CFZ9lkOMY/ e5wbouaaNmgng9qDP62xe01I8ABn4dLNLLg5XPUmKem/iM6HDWfTv8eJ40W2cM/S yujbo8GnR1rcN1U61Ltr9E3dYwgxsMMP1vT7zPP4AXWFIjgYtmYJqMVS9VRY3O3R 8Uh9FgCdfPXKLXdDQy/c02EwtbibsiNJ6qRSmmIhgRHCa5r1SZCs0YVf6gJIo/IB O1RxpXZpTHFVatzlowUepyHiGsuVP5A= -----END CERTIFICATE-----Generated at Wed Nov 5 21:23:02 2025 by rpki-client