$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa/37fd6b0c-fc80-340d-8f7b-960124f34643.roa File: 37fd6b0c-fc80-340d-8f7b-960124f34643.roa (raw, json) Hash identifier: prBdXS8ozIMMNmxM1TCe1s/OsA82aREuBhRLCdEWUsE= Subject key identifier: 96:EC:52:17:75:9C:A7:E7:1A:DE:B3:3F:C9:F6:CB:B6:E7:90:B3:21 Certificate issuer: /CN=58eef8b8-39c9-495c-b889-44faff13a8aa Certificate serial: 010D0C9F4328584B2496D3A9A65154EA7396ED00 Authority key identifier: DE:BF:6C:F6:E8:31:1E:71:6D:D2:54:66:13:3B:78:89:15:E9:01:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa/37fd6b0c-fc80-340d-8f7b-960124f34643.roa Signing time: Wed 10 Sep 2025 01:00:33 +0000 ROA not before: Wed 10 Sep 2025 01:00:33 +0000 ROA not after: Tue 09 Dec 2025 02:00:33 +0000 asID: 397016 IP address blocks: 130.250.138.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa/58eef8b8-39c9-495c-b889-44faff13a8aa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa/58eef8b8-39c9-495c-b889-44faff13a8aa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:24:96:d3:a9:a6:51:54:ea:73:96:ed:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58eef8b8-39c9-495c-b889-44faff13a8aa Validity Not Before: Sep 10 01:00:33 2025 GMT Not After : Dec 9 02:00:33 2025 GMT Subject: CN=690bd1fa-488b-4e29-9087-4a99027377b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:cf:47:08:7f:a4:80:b7:c0:fa:b1:c4:ab:b2: 5c:20:2d:7b:c1:bb:80:c9:98:19:5d:72:2c:51:4d: 6f:c3:1f:3f:72:cd:c9:b4:6e:38:b2:43:8b:d7:c0: 5f:d7:fb:fd:e5:cb:de:8f:09:b0:20:f4:40:f1:f0: 73:c6:cd:52:4b:89:48:ef:5d:52:13:8c:d3:5d:32: 10:11:68:66:9e:07:53:11:90:8a:ff:b3:b8:75:99: da:8c:42:e9:c0:cd:ca:b6:89:b0:5f:1c:7e:53:43: a5:63:bb:53:f2:62:d0:de:b3:8c:c0:be:cc:88:7d: 35:6f:54:bb:97:85:67:e2:c7:49:2d:48:5a:bf:91: ee:7c:5f:3e:22:10:1a:16:65:9a:b0:55:54:08:2e: df:4f:b0:1d:8a:95:65:43:8f:0a:a8:a5:ad:e2:75: d4:2f:4f:84:5a:ff:56:43:46:a3:dd:ad:cd:c6:0d: 5b:70:20:e0:5b:59:26:e1:6a:87:ca:b0:d6:96:48: 09:39:de:bc:b2:58:81:5d:77:04:2d:75:b6:55:c5: 16:00:b9:1c:05:dc:cb:42:a9:99:82:93:59:4c:c7: 23:ae:90:21:25:1e:72:14:99:5c:24:49:d5:a5:25: 04:e0:9a:e9:e6:6b:7f:81:64:31:de:b7:71:f9:33: 69:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:EC:52:17:75:9C:A7:E7:1A:DE:B3:3F:C9:F6:CB:B6:E7:90:B3:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa/37fd6b0c-fc80-340d-8f7b-960124f34643.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa/58eef8b8-39c9-495c-b889-44faff13a8aa.crl X509v3 Authority Key Identifier: keyid:DE:BF:6C:F6:E8:31:1E:71:6D:D2:54:66:13:3B:78:89:15:E9:01:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa.cer sbgp-ipAddrBlock: critical IPv4: 130.250.138.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:21:89:65:0f:a6:71:2b:eb:52:c0:e5:02:d1:b5:c4:ec:31: 2a:b8:02:9b:16:18:b1:ee:e4:da:fe:a1:7c:ee:d1:a0:7a:53: d4:8d:13:1a:55:bf:f6:ca:6c:61:44:eb:ba:e6:11:8d:5a:39: 18:89:2f:46:37:c2:b2:85:80:03:6b:5c:53:ab:b2:58:25:2f: c0:f5:69:12:8f:4b:95:e4:4a:66:1b:0b:9a:a9:c3:90:55:28: c0:5b:c7:a2:9c:54:f1:b1:11:45:7b:30:47:73:eb:91:50:02: 55:d1:81:c1:11:79:24:6d:f8:ce:51:47:78:e5:03:63:a3:6e: b4:f4:cd:a1:db:5f:40:0c:6b:7e:17:be:9c:0c:21:a8:3a:6d: b2:1e:8b:ca:d2:e8:47:a5:1f:2a:e2:92:58:75:39:47:f6:e0: 85:40:b4:12:b3:c8:04:da:21:32:ff:7f:48:14:a9:88:b4:6b: 72:89:14:0e:f3:47:b3:75:57:bd:9e:a0:cf:7e:b8:4e:a3:83: 6c:97:96:5b:f6:fc:56:e9:2c:9e:0d:7f:42:0b:fd:8c:f2:77: 0a:f2:49:74:c2:85:81:96:2f:0d:42:be:c8:47:d5:0e:e8:00: e9:f0:64:60:17:04:ff:86:bc:6e:80:f1:b3:c6:ec:8d:d0:fb: f1:b9:ad:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEskltOpplFU6nOW7QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNThlZWY4YjgtMzljOS00OTVjLWI4ODktNDRmYWZmMTNh OGFhMB4XDTI1MDkxMDAxMDAzM1oXDTI1MTIwOTAyMDAzM1owLzEtMCsGA1UEAxMk NjkwYmQxZmEtNDg4Yi00ZTI5LTkwODctNGE5OTAyNzM3N2I1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAic9HCH+kgLfA+rHEq7JcIC17wbuAyZgZXXIs UU1vwx8/cs3JtG44skOL18Bf1/v95cvejwmwIPRA8fBzxs1SS4lI711SE4zTXTIQ EWhmngdTEZCK/7O4dZnajELpwM3KtomwXxx+U0OlY7tT8mLQ3rOMwL7MiH01b1S7 l4Vn4sdJLUhav5HufF8+IhAaFmWasFVUCC7fT7AdipVlQ48KqKWt4nXUL0+EWv9W Q0aj3a3Nxg1bcCDgW1km4WqHyrDWlkgJOd68sliBXXcELXW2VcUWALkcBdzLQqmZ gpNZTMcjrpAhJR5yFJlcJEnVpSUE4Jrp5mt/gWQx3rdx+TNpRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJbsUhd1nKfnGt6zP8n2y7bnkLMhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81OGVl ZjhiOC0zOWM5LTQ5NWMtYjg4OS00NGZhZmYxM2E4YWEvMzdmZDZiMGMtZmM4MC0z NDBkLThmN2ItOTYwMTI0ZjM0NjQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNThlZWY4YjgtMzljOS00OTVjLWI4 ODktNDRmYWZmMTNhOGFhLzU4ZWVmOGI4LTM5YzktNDk1Yy1iODg5LTQ0ZmFmZjEz YThhYS5jcmwwHwYDVR0jBBgwFoAU3r9s9ugxHnFt0lRmEzt4iRXpAS0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81OGVlZjhiOC0zOWM5LTQ5NWMtYjg4OS00NGZh ZmYxM2E4YWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgvqKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAchiWUPpnEr61LA5QLRtcTsMSq4ApsWGLHu5Nr+oXzu0aB6U9SNExpV v/bKbGFE67rmEY1aORiJL0Y3wrKFgANrXFOrslglL8D1aRKPS5XkSmYbC5qpw5BV KMBbx6KcVPGxEUV7MEdz65FQAlXRgcEReSRt+M5RR3jlA2OjbrT0zaHbX0AMa34X vpwMIag6bbIei8rS6EelHyriklh1OUf24IVAtBKzyATaITL/f0gUqYi0a3KJFA7z R7N1V72eoM9+uE6jg2yXllv2/FbpLJ4Nf0IL/YzydwrySXTChYGWLw1CvshH1Q7o AOnwZGAXBP+GvG6A8bPG7I3Q+/G5rcY= -----END CERTIFICATE-----Generated at Mon Oct 20 22:03:01 2025 by rpki-client