$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/cf435177-d899-3b98-b125-e7e093fe112a.roa File: cf435177-d899-3b98-b125-e7e093fe112a.roa (raw, json) Hash identifier: nL2v4ADIdOWgqs4MFrt4oW9H1CrENuWFi78SBoMe45Y= Subject key identifier: 43:9D:66:8B:A0:40:99:6C:C0:FC:C0:8E:BC:89:3A:88:5F:02:43:96 Certificate issuer: /CN=fe86722c-27ec-4059-a1ef-757cf5e15715 Certificate serial: 010D0C9F4328584AF0F137995FA9A6747C12AD7E Authority key identifier: 9C:AE:A3:9B:81:AD:00:D5:A0:53:43:BF:27:13:EF:FF:47:D6:B8:F7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/cf435177-d899-3b98-b125-e7e093fe112a.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 21976 IP address blocks: 130.156.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/fe86722c-27ec-4059-a1ef-757cf5e15715.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/fe86722c-27ec-4059-a1ef-757cf5e15715.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:37:99:5f:a9:a6:74:7c:12:ad:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe86722c-27ec-4059-a1ef-757cf5e15715 Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=e32809fe-97c8-47da-88a1-45a8da271aa5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:85:2a:05:68:31:c2:3f:b2:bf:38:27:ce:71: 2f:1a:e3:ba:21:9b:15:a5:f3:c3:9d:a3:cb:b8:68: 6b:ac:a3:1c:a8:78:0c:a1:64:37:12:69:d3:2e:f7: a2:93:2a:40:cd:fd:53:05:bb:7d:ea:cf:98:47:ae: 07:4d:62:2b:9c:70:07:92:52:24:39:55:0e:cd:96: 85:81:13:2b:ed:91:9b:6d:41:ad:3b:c9:3e:1a:11: 0d:72:0b:bb:c5:78:57:ee:9b:48:7c:dc:d2:a2:13: 95:c1:eb:51:e0:bf:33:2c:8d:f0:3a:ea:d8:47:2c: 0d:4b:c9:b1:1c:fa:22:4c:0e:4f:6a:66:00:9b:85: d9:d8:cf:1b:94:47:a3:59:02:16:22:36:5e:2c:65: 90:72:52:be:fc:9d:3f:bd:cd:6f:80:9e:de:b3:5f: e2:27:30:cf:75:4b:cb:66:9b:70:71:41:67:e7:69: 9b:09:35:8a:0b:1e:4f:62:33:e7:f9:39:51:e4:04: 14:98:8f:40:2c:9e:88:88:be:da:40:a0:2e:3c:32: 5b:86:ce:57:be:4d:b2:ed:7b:d6:c7:41:05:22:5c: 0a:9c:d7:3d:71:6f:22:20:5c:3c:ca:88:41:21:46: 33:a8:58:9e:4a:6c:d3:47:c6:25:e5:65:4b:0f:44: bb:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:9D:66:8B:A0:40:99:6C:C0:FC:C0:8E:BC:89:3A:88:5F:02:43:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/cf435177-d899-3b98-b125-e7e093fe112a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/fe86722c-27ec-4059-a1ef-757cf5e15715.crl X509v3 Authority Key Identifier: keyid:9C:AE:A3:9B:81:AD:00:D5:A0:53:43:BF:27:13:EF:FF:47:D6:B8:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715.cer sbgp-ipAddrBlock: critical IPv4: 130.156.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:d5:59:cc:bb:a4:5f:c5:f6:bb:0b:ea:9e:b1:6b:c8:e0:f4: 5d:24:96:46:5e:d4:74:23:f0:e7:31:db:b2:a9:13:8a:b6:7c: 19:5b:00:67:11:11:49:59:09:24:8b:a0:97:e5:ee:e0:33:07: d5:08:53:12:25:8d:3a:78:c0:ca:ab:a6:1d:59:aa:fd:f7:82: 59:c8:87:fc:ad:22:ef:45:d5:78:d5:d6:1b:60:ae:d3:c5:e7: a5:6a:3a:40:dd:cf:44:b8:f1:19:77:df:5b:07:67:d5:6f:3c: c0:5e:ae:ef:78:c1:36:63:da:32:ee:5c:41:a8:fa:69:c6:7b: 84:10:cb:85:04:bd:11:8b:6e:a4:09:dc:8f:c1:1c:6c:bb:ab: 7d:14:bf:64:7d:77:7b:db:9c:2b:48:47:fe:2b:7d:f3:94:65: 7d:11:9d:6a:20:34:27:82:27:cb:18:04:19:64:e2:d1:00:69: 5e:67:a2:39:b9:18:1b:36:c0:22:f7:cb:cc:f1:94:a7:35:48: 13:27:2c:d5:fe:4f:ca:2a:ec:5f:c6:71:68:05:f1:d0:fe:dd: ce:5e:c4:3e:86:f9:e1:8a:6c:52:45:10:20:31:07:70:96:d8: cb:8c:21:b7:a4:07:19:49:44:c9:3d:b4:a6:6f:05:19:c0:85: 20:30:77:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErw8TeZX6mmdHwSrX4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmU4NjcyMmMtMjdlYy00MDU5LWExZWYtNzU3Y2Y1ZTE1 NzE1MB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk ZTMyODA5ZmUtOTdjOC00N2RhLTg4YTEtNDVhOGRhMjcxYWE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYUqBWgxwj+yvzgnznEvGuO6IZsVpfPDnaPL uGhrrKMcqHgMoWQ3EmnTLveikypAzf1TBbt96s+YR64HTWIrnHAHklIkOVUOzZaF gRMr7ZGbbUGtO8k+GhENcgu7xXhX7ptIfNzSohOVwetR4L8zLI3wOurYRywNS8mx HPoiTA5PamYAm4XZ2M8blEejWQIWIjZeLGWQclK+/J0/vc1vgJ7es1/iJzDPdUvL ZptwcUFn52mbCTWKCx5PYjPn+TlR5AQUmI9ALJ6IiL7aQKAuPDJbhs5Xvk2y7XvW x0EFIlwKnNc9cW8iIFw8yohBIUYzqFieSmzTR8Yl5WVLD0S75QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEOdZougQJlswPzAjryJOohfAkOWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mZTg2 NzIyYy0yN2VjLTQwNTktYTFlZi03NTdjZjVlMTU3MTUvY2Y0MzUxNzctZDg5OS0z Yjk4LWIxMjUtZTdlMDkzZmUxMTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZmU4NjcyMmMtMjdlYy00MDU5LWEx ZWYtNzU3Y2Y1ZTE1NzE1L2ZlODY3MjJjLTI3ZWMtNDA1OS1hMWVmLTc1N2NmNWUx NTcxNS5jcmwwHwYDVR0jBBgwFoAUnK6jm4GtANWgU0O/JxPv/0fWuPcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9mZTg2NzIyYy0yN2VjLTQwNTktYTFlZi03NTdj ZjVlMTU3MTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgpwrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAITVWcy7pF/F9rsL6p6xa8jg9F0klkZe1HQj8Ocx27KpE4q2fBlbAGcR EUlZCSSLoJfl7uAzB9UIUxIljTp4wMqrph1Zqv33glnIh/ytIu9F1XjV1htgrtPF 56VqOkDdz0S48Rl331sHZ9VvPMBeru94wTZj2jLuXEGo+mnGe4QQy4UEvRGLbqQJ 3I/BHGy7q30Uv2R9d3vbnCtIR/4rffOUZX0RnWogNCeCJ8sYBBlk4tEAaV5nojm5 GBs2wCL3y8zxlKc1SBMnLNX+T8oq7F/GcWgF8dD+3c5exD6G+eGKbFJFECAxB3CW 2MuMIbekBxlJRMk9tKZvBRnAhSAwd04= -----END CERTIFICATE-----Generated at Sun Aug 24 02:56:46 2025 by rpki-client