$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b052c0e7-788b-47d1-8126-ea94da7ceca7/101cb1f5-06f3-388e-9112-acc85f64d6c9.roa File: 101cb1f5-06f3-388e-9112-acc85f64d6c9.roa (raw, json) Hash identifier: qoKOopogWvbQOxhutWE9eyGAs9EVf7fVqgwWh+NC92M= Subject key identifier: AC:CF:0F:44:FF:95:43:48:EB:E0:F8:BB:4F:EA:24:BF:6D:56:B4:30 Certificate issuer: /CN=b052c0e7-788b-47d1-8126-ea94da7ceca7 Certificate serial: 010D0C9F4328584ADD6677B90ADBB4D361494F60 Authority key identifier: A2:CA:80:7C:4E:97:6F:F1:9F:0E:FA:60:F0:60:96:4F:A5:8B:FA:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b052c0e7-788b-47d1-8126-ea94da7ceca7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b052c0e7-788b-47d1-8126-ea94da7ceca7/101cb1f5-06f3-388e-9112-acc85f64d6c9.roa Signing time: Fri 15 Aug 2025 13:00:41 +0000 ROA not before: Fri 15 Aug 2025 13:00:41 +0000 ROA not after: Thu 13 Nov 2025 14:00:41 +0000 asID: 16509 IP address blocks: 130.150.200.0/21 maxlen: 21 130.150.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b052c0e7-788b-47d1-8126-ea94da7ceca7/b052c0e7-788b-47d1-8126-ea94da7ceca7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b052c0e7-788b-47d1-8126-ea94da7ceca7/b052c0e7-788b-47d1-8126-ea94da7ceca7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b052c0e7-788b-47d1-8126-ea94da7ceca7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:dd:66:77:b9:0a:db:b4:d3:61:49:4f:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b052c0e7-788b-47d1-8126-ea94da7ceca7 Validity Not Before: Aug 15 13:00:41 2025 GMT Not After : Nov 13 14:00:41 2025 GMT Subject: CN=888a71b2-e31c-4079-a24f-55c08c34b957 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:f0:3b:e7:c2:83:76:f8:87:db:38:8e:45:2a: 94:9f:f4:32:7a:70:12:95:73:25:3b:1c:8b:34:da: 4e:5b:92:f8:ce:52:17:54:96:07:ca:b4:9d:72:b1: fe:49:e7:8a:bb:72:d8:2f:c2:f5:ec:52:e0:41:28: 45:20:1c:64:7f:34:a6:f0:60:c4:3c:18:18:1e:75: 9b:41:f5:a4:8f:9f:bc:ab:cf:e0:ea:18:0a:51:72: 2e:14:bd:9b:17:56:dd:d1:1d:92:ea:e4:43:e0:5c: a0:bd:81:66:eb:83:04:d8:70:8c:8d:99:49:28:1d: 0a:25:e2:05:be:62:63:d8:ae:2c:c6:59:28:54:ce: 34:03:83:1c:50:f3:fb:a4:54:a3:9c:ad:3d:5d:a8: 82:d9:5f:69:10:72:14:ca:fc:c9:22:fd:08:01:54: fe:7e:b1:ee:d3:1d:5a:cb:8e:de:1e:b0:d6:b4:b9: 91:27:65:5b:e6:38:57:f7:01:1f:92:2c:fa:8a:35: 56:0d:00:6d:fa:15:9e:79:5b:49:ae:80:9e:c3:f3: 91:57:c2:19:8d:32:04:78:3b:84:2e:0d:c2:3e:01: 06:55:ba:73:7e:48:fd:cd:0b:2c:5c:f5:e2:34:c7: b7:13:90:81:d6:d5:84:e2:d9:81:6c:5d:17:31:cd: cc:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:CF:0F:44:FF:95:43:48:EB:E0:F8:BB:4F:EA:24:BF:6D:56:B4:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b052c0e7-788b-47d1-8126-ea94da7ceca7/101cb1f5-06f3-388e-9112-acc85f64d6c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b052c0e7-788b-47d1-8126-ea94da7ceca7/b052c0e7-788b-47d1-8126-ea94da7ceca7.crl X509v3 Authority Key Identifier: keyid:A2:CA:80:7C:4E:97:6F:F1:9F:0E:FA:60:F0:60:96:4F:A5:8B:FA:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b052c0e7-788b-47d1-8126-ea94da7ceca7.cer sbgp-ipAddrBlock: critical IPv4: 130.150.200.0/21 130.150.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:62:63:67:88:fa:eb:f8:99:ef:5c:a0:d9:a0:e6:b9:c9:93: d2:f9:1d:45:4b:72:cc:55:e5:fa:60:d1:d6:38:c4:81:21:72: 13:92:c6:fb:41:e1:2f:36:e5:90:82:f9:7b:ed:98:f7:b4:c9: d8:07:da:dc:d4:89:fb:4c:f1:cf:2d:08:72:65:bd:55:a3:5f: bd:c2:a9:7f:e2:1a:07:09:dd:bd:24:15:f8:86:4c:7a:d0:14: 57:6a:d8:19:7e:e2:84:bd:87:a0:cd:c0:f6:3a:2f:45:ad:11: 57:9b:33:f3:a6:60:74:dc:82:53:1b:e5:43:5f:6a:60:e9:0e: 9b:5f:f9:14:00:27:48:8f:f5:52:d7:63:b9:84:c8:fc:b7:c6: a5:8b:8b:cd:0a:98:cd:a6:51:0e:17:10:20:0d:61:90:10:4b: 36:e4:06:08:bc:8f:cc:0b:b2:88:23:27:d0:92:db:7a:0a:87: af:46:44:46:49:47:b9:09:55:7b:60:17:14:7f:d4:70:cc:d9: af:af:f6:d6:34:85:82:7e:80:29:50:ed:27:25:8b:ff:bf:ab: b6:a2:6e:16:57:05:72:ee:f9:e0:70:83:e0:b4:2a:10:aa:e6: 5f:2d:62:3b:62:ad:c2:1a:85:31:73:57:13:0b:44:1d:65:4f: f6:35:24:d8 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWErdZne5Ctu002FJT2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjA1MmMwZTctNzg4Yi00N2QxLTgxMjYtZWE5NGRhN2Nl Y2E3MB4XDTI1MDgxNTEzMDA0MVoXDTI1MTExMzE0MDA0MVowLzEtMCsGA1UEAxMk ODg4YTcxYjItZTMxYy00MDc5LWEyNGYtNTVjMDhjMzRiOTU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvA758KDdviH2ziORSqUn/QyenASlXMlOxyL NNpOW5L4zlIXVJYHyrSdcrH+SeeKu3LYL8L17FLgQShFIBxkfzSm8GDEPBgYHnWb QfWkj5+8q8/g6hgKUXIuFL2bF1bd0R2S6uRD4FygvYFm64ME2HCMjZlJKB0KJeIF vmJj2K4sxlkoVM40A4McUPP7pFSjnK09XaiC2V9pEHIUyvzJIv0IAVT+frHu0x1a y47eHrDWtLmRJ2Vb5jhX9wEfkiz6ijVWDQBt+hWeeVtJroCew/ORV8IZjTIEeDuE Lg3CPgEGVbpzfkj9zQssXPXiNMe3E5CB1tWE4tmBbF0XMc3M8wIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFKzPD0T/lUNI6+D4u0/qJL9tVrQwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iMDUy YzBlNy03ODhiLTQ3ZDEtODEyNi1lYTk0ZGE3Y2VjYTcvMTAxY2IxZjUtMDZmMy0z ODhlLTkxMTItYWNjODVmNjRkNmM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjA1MmMwZTctNzg4Yi00N2QxLTgx MjYtZWE5NGRhN2NlY2E3L2IwNTJjMGU3LTc4OGItNDdkMS04MTI2LWVhOTRkYTdj ZWNhNy5jcmwwHwYDVR0jBBgwFoAUosqAfE6Xb/GfDvpg8GCWT6WL+icwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iMDUyYzBlNy03ODhiLTQ3ZDEtODEyNi1lYTk0 ZGE3Y2VjYTcuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDgpbIAwQC gpbwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBALNiY2eI+uv4me9coNmg5rnJk9L5HUVLcsxV5fpg0dY4xIEh chOSxvtB4S825ZCC+XvtmPe0ydgH2tzUiftM8c8tCHJlvVWjX73CqX/iGgcJ3b0k FfiGTHrQFFdq2Bl+4oS9h6DNwPY6L0WtEVebM/OmYHTcglMb5UNfamDpDptf+RQA J0iP9VLXY7mEyPy3xqWLi80KmM2mUQ4XECANYZAQSzbkBgi8j8wLsogjJ9CS23oK h69GREZJR7kJVXtgFxR/1HDM2a+v9tY0hYJ+gClQ7Scli/+/q7aibhZXBXLu+eBw g+C0KhCq5l8tYjtircIahTFzVxMLRB1lT/Y1JNg= -----END CERTIFICATE-----Generated at Sat Aug 23 12:24:47 2025 by rpki-client