$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/4338433f-a208-3589-9c69-6c3b1db06a76.roa File: 4338433f-a208-3589-9c69-6c3b1db06a76.roa (raw, json) Hash identifier: YIfe5NLAC/xmZg7Od3nmGjt2uBUcHfX3hAIzWi/Z6Js= Subject key identifier: C1:61:78:40:D8:56:87:17:91:78:E4:F5:ED:7E:2D:41:B0:FC:B7:63 Certificate issuer: /CN=fe86722c-27ec-4059-a1ef-757cf5e15715 Certificate serial: 010D0C9F4328584AD7D10D2EA5319259E39D0AE8 Authority key identifier: 9C:AE:A3:9B:81:AD:00:D5:A0:53:43:BF:27:13:EF:FF:47:D6:B8:F7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/4338433f-a208-3589-9c69-6c3b1db06a76.roa Signing time: Wed 13 Aug 2025 13:00:41 +0000 ROA not before: Wed 13 Aug 2025 13:00:41 +0000 ROA not after: Tue 11 Nov 2025 14:00:41 +0000 asID: 21976 IP address blocks: 130.156.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/fe86722c-27ec-4059-a1ef-757cf5e15715.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/fe86722c-27ec-4059-a1ef-757cf5e15715.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d7:d1:0d:2e:a5:31:92:59:e3:9d:0a:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe86722c-27ec-4059-a1ef-757cf5e15715 Validity Not Before: Aug 13 13:00:41 2025 GMT Not After : Nov 11 14:00:41 2025 GMT Subject: CN=4d47ce01-db93-4614-ab9f-c1da5a3efc5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:3f:5f:d9:75:b0:5f:99:5e:1f:70:03:15:59: 6f:8d:15:72:35:2a:8c:64:9b:86:3f:26:c8:07:32: 32:63:59:1f:ee:01:17:02:bf:7b:98:a1:d0:b8:b3: 08:83:94:8c:9f:b4:0e:d9:ca:e1:16:8e:bc:63:98: 2a:99:53:e8:8b:10:58:65:f4:67:0d:8e:2b:cb:76: b8:52:08:20:9c:60:67:f5:ee:be:f7:9f:05:a4:0e: 01:f9:a0:3c:d4:4d:4e:aa:e0:0c:0d:4f:7b:c9:e3: de:65:28:66:c3:c2:5c:80:b9:c3:66:fd:f1:7d:ce: e4:13:cb:8a:f3:67:8f:db:35:66:af:25:c4:0f:3b: 8d:e2:08:44:87:61:04:fe:99:79:86:7d:4a:46:39: e4:9f:32:4a:22:a0:df:15:2f:d0:e5:76:15:74:cc: 75:d7:09:e5:f9:c7:a5:01:7f:ca:65:bb:d0:9e:98: 16:6a:03:ff:25:4e:bb:8e:ce:c3:fe:cc:9b:23:8c: eb:bf:96:2e:c0:cd:34:05:00:51:5d:dd:c0:91:e4: 1f:02:52:c9:e1:3b:81:85:e7:a9:b7:41:83:72:1f: df:83:aa:0b:b7:31:0e:5f:a2:5e:a3:ce:25:4e:b1: 87:ca:c1:a8:8a:1f:62:5e:d2:e0:6d:cb:02:99:04: 84:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:61:78:40:D8:56:87:17:91:78:E4:F5:ED:7E:2D:41:B0:FC:B7:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/4338433f-a208-3589-9c69-6c3b1db06a76.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/fe86722c-27ec-4059-a1ef-757cf5e15715.crl X509v3 Authority Key Identifier: keyid:9C:AE:A3:9B:81:AD:00:D5:A0:53:43:BF:27:13:EF:FF:47:D6:B8:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715.cer sbgp-ipAddrBlock: critical IPv4: 130.156.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:7d:b3:7e:07:85:62:d5:a4:6f:91:6d:73:86:5a:57:59:0d: bb:56:4b:88:9c:f9:ff:fb:82:7c:06:57:ee:39:3d:72:91:91: e9:3c:67:e8:9d:0d:39:41:03:4b:92:30:34:65:c6:22:3f:41: 58:cc:68:2b:f2:e8:54:17:97:0f:02:d5:6e:14:df:04:60:b9: 73:8d:db:05:54:f1:8e:95:ee:9b:00:1b:d1:9d:bf:28:d7:25: c9:ee:4d:34:59:87:f5:6a:21:cc:e4:7d:40:88:5f:7c:46:c0: b0:10:06:43:0a:ce:e8:ac:7d:82:4e:0b:3b:51:bb:f3:15:ef: fe:ee:85:26:a9:ee:eb:08:ae:bc:04:f7:88:81:cc:bc:5a:98: ee:89:9b:65:40:be:b1:52:e3:fc:c5:e0:b1:2d:93:2f:2c:34: a6:ba:8c:cf:db:4f:99:f3:89:e9:ca:3a:28:f3:f1:16:24:cf: 82:0b:76:3e:56:f6:9f:42:0b:4b:97:ea:d2:e6:0d:99:0e:59: f5:bd:31:e3:e8:39:23:c6:f5:a0:f5:44:6b:d9:0c:77:20:11: cd:ee:6f:61:c0:ab:57:6c:6e:c5:61:5a:ea:d8:0f:23:cf:e5: ec:36:f3:9e:ef:59:07:93:c2:85:ee:9b:ea:6f:2b:9a:6c:26: 65:b3:e4:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErX0Q0upTGSWeOdCugwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmU4NjcyMmMtMjdlYy00MDU5LWExZWYtNzU3Y2Y1ZTE1 NzE1MB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk NGQ0N2NlMDEtZGI5My00NjE0LWFiOWYtYzFkYTVhM2VmYzViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqT9f2XWwX5leH3ADFVlvjRVyNSqMZJuGPybI BzIyY1kf7gEXAr97mKHQuLMIg5SMn7QO2crhFo68Y5gqmVPoixBYZfRnDY4ry3a4 UgggnGBn9e6+958FpA4B+aA81E1OquAMDU97yePeZShmw8JcgLnDZv3xfc7kE8uK 82eP2zVmryXEDzuN4ghEh2EE/pl5hn1KRjnknzJKIqDfFS/Q5XYVdMx11wnl+cel AX/KZbvQnpgWagP/JU67js7D/sybI4zrv5YuwM00BQBRXd3AkeQfAlLJ4TuBheep t0GDch/fg6oLtzEOX6Jeo84lTrGHysGoih9iXtLgbcsCmQSE1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMFheEDYVocXkXjk9e1+LUGw/LdjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mZTg2 NzIyYy0yN2VjLTQwNTktYTFlZi03NTdjZjVlMTU3MTUvNDMzODQzM2YtYTIwOC0z NTg5LTljNjktNmMzYjFkYjA2YTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZmU4NjcyMmMtMjdlYy00MDU5LWEx ZWYtNzU3Y2Y1ZTE1NzE1L2ZlODY3MjJjLTI3ZWMtNDA1OS1hMWVmLTc1N2NmNWUx NTcxNS5jcmwwHwYDVR0jBBgwFoAUnK6jm4GtANWgU0O/JxPv/0fWuPcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9mZTg2NzIyYy0yN2VjLTQwNTktYTFlZi03NTdj ZjVlMTU3MTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgpwUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACh9s34HhWLVpG+RbXOGWldZDbtWS4ic+f/7gnwGV+45PXKRkek8Z+id DTlBA0uSMDRlxiI/QVjMaCvy6FQXlw8C1W4U3wRguXON2wVU8Y6V7psAG9GdvyjX JcnuTTRZh/VqIczkfUCIX3xGwLAQBkMKzuisfYJOCztRu/MV7/7uhSap7usIrrwE 94iBzLxamO6Jm2VAvrFS4/zF4LEtky8sNKa6jM/bT5nzienKOijz8RYkz4ILdj5W 9p9CC0uX6tLmDZkOWfW9MePoOSPG9aD1RGvZDHcgEc3ub2HAq1dsbsVhWurYDyPP 5ew2857vWQeTwoXum+pvK5psJmWz5P4= -----END CERTIFICATE-----Generated at Sun Aug 24 02:55:42 2025 by rpki-client