$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35fbc5b3-479b-405d-8578-f7c792a1f375/98d614dc-607e-3732-aa86-1eb4ea2f52a7.roa File: 98d614dc-607e-3732-aa86-1eb4ea2f52a7.roa (raw, json) Hash identifier: e9ur1CV1aCEzcsuv2pbkxxIbbDPfhilRzdZn1VetpM4= Subject key identifier: 3B:14:6C:5B:CA:90:6F:50:8E:6D:34:FE:64:99:69:F6:6C:90:E7:CC Certificate issuer: /CN=35fbc5b3-479b-405d-8578-f7c792a1f375 Certificate serial: 010D0C9F4328584B891777037974055AE9871200 Authority key identifier: 0C:96:56:30:07:2E:19:B2:B9:4C:5C:16:F7:22:7E:2C:86:C4:6F:88 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35fbc5b3-479b-405d-8578-f7c792a1f375.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35fbc5b3-479b-405d-8578-f7c792a1f375/98d614dc-607e-3732-aa86-1eb4ea2f52a7.roa Signing time: Thu 16 Oct 2025 01:00:30 +0000 ROA not before: Thu 16 Oct 2025 01:00:30 +0000 ROA not after: Wed 14 Jan 2026 02:00:30 +0000 asID: 397071 IP address blocks: 130.51.100.0/24 maxlen: 24 130.51.101.0/24 maxlen: 24 130.51.102.0/24 maxlen: 24 130.51.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35fbc5b3-479b-405d-8578-f7c792a1f375/35fbc5b3-479b-405d-8578-f7c792a1f375.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35fbc5b3-479b-405d-8578-f7c792a1f375/35fbc5b3-479b-405d-8578-f7c792a1f375.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35fbc5b3-479b-405d-8578-f7c792a1f375.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:89:17:77:03:79:74:05:5a:e9:87:12:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35fbc5b3-479b-405d-8578-f7c792a1f375 Validity Not Before: Oct 16 01:00:30 2025 GMT Not After : Jan 14 02:00:30 2026 GMT Subject: CN=126157a5-d3d1-4605-83f3-def777daf10b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:c2:96:b1:77:59:8e:1e:63:95:00:ca:04:ab: 2c:7b:16:cb:b1:61:0e:c2:19:43:e8:f4:09:17:98: ac:b2:bc:6c:b1:f7:1b:4d:23:72:56:3b:0f:4c:5a: 64:77:6e:2a:26:8b:fb:98:a0:eb:d2:72:62:85:be: 14:17:19:11:77:33:4e:e4:c8:ec:00:49:78:fe:f7: e5:24:2b:cd:89:e4:39:9f:f6:8b:bd:47:67:10:a4: a2:79:09:9b:8a:5e:3a:c2:dd:ee:ca:3b:33:4e:c5: 6e:9c:cd:08:9c:ba:6f:94:b3:79:94:e3:9f:f5:e1: b4:5c:57:09:a1:2e:36:ba:32:5d:11:e1:ab:f7:68: ea:f4:ee:b0:ec:68:8d:37:dc:71:31:c7:5d:af:cc: d0:e1:99:10:c5:75:3d:0b:02:23:01:42:58:d1:21: d7:cb:cd:ca:77:e3:46:eb:9d:47:60:81:1d:2e:cd: 22:e2:89:bb:cc:31:aa:e0:1c:6c:e9:71:12:55:f5: f0:1b:55:44:8a:0a:6c:4c:e2:dd:49:80:3c:3f:e5: f7:f4:8b:6c:66:9b:06:39:19:a2:af:e7:96:09:f8: 19:8f:18:fb:33:fd:59:c6:59:c1:4d:5e:a7:e1:b3: 81:d5:cf:b7:5f:1d:39:d9:92:be:e4:78:6e:e6:83: 71:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:14:6C:5B:CA:90:6F:50:8E:6D:34:FE:64:99:69:F6:6C:90:E7:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35fbc5b3-479b-405d-8578-f7c792a1f375/98d614dc-607e-3732-aa86-1eb4ea2f52a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35fbc5b3-479b-405d-8578-f7c792a1f375/35fbc5b3-479b-405d-8578-f7c792a1f375.crl X509v3 Authority Key Identifier: keyid:0C:96:56:30:07:2E:19:B2:B9:4C:5C:16:F7:22:7E:2C:86:C4:6F:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35fbc5b3-479b-405d-8578-f7c792a1f375.cer sbgp-ipAddrBlock: critical IPv4: 130.51.100.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:b7:81:eb:61:54:4d:45:b4:78:e7:2c:d5:94:bf:68:54:37: 11:70:d4:a0:e5:93:bd:2d:a7:28:3b:76:04:df:ab:97:a4:1a: 87:e4:c9:b7:52:6d:91:59:12:32:60:7e:3e:37:ec:61:07:ef: 58:7c:9b:62:15:c0:4f:d5:82:88:f7:72:82:74:52:7c:7f:eb: 4e:fe:12:39:72:d7:df:6d:f9:90:39:be:09:ef:99:c4:cc:50: 03:b5:59:1b:24:7a:14:6e:21:2d:c4:d4:aa:c9:da:ef:15:8d: 3b:a0:db:09:a7:d3:35:8b:50:1c:32:a4:2d:f0:8b:1b:55:1c: 39:d3:15:ed:d4:ee:74:92:84:a6:1c:8c:f8:a3:af:8a:04:b0: 1e:f7:62:9e:f4:27:e4:a6:66:f9:4a:1b:d9:63:08:a1:72:99: e3:4c:ee:05:15:e1:3a:ee:0b:13:72:5f:76:a1:f9:b3:2e:6a: d3:b3:88:6e:30:48:c9:03:21:b7:31:a2:42:62:bf:a4:b3:90: 96:f8:e1:81:3c:2f:43:bb:5d:3a:3d:00:65:68:9d:db:b9:49: 90:fc:ad:0f:ae:0c:3b:64:a9:a5:9b:42:11:c8:e0:d9:03:6e: 33:81:b5:a5:a9:3d:54:b0:9d:d9:a5:7b:5b:26:52:d7:43:a4: e4:06:3c:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuJF3cDeXQFWumHEgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVmYmM1YjMtNDc5Yi00MDVkLTg1NzgtZjdjNzkyYTFm Mzc1MB4XDTI1MTAxNjAxMDAzMFoXDTI2MDExNDAyMDAzMFowLzEtMCsGA1UEAxMk MTI2MTU3YTUtZDNkMS00NjA1LTgzZjMtZGVmNzc3ZGFmMTBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAksKWsXdZjh5jlQDKBKssexbLsWEOwhlD6PQJ F5issrxssfcbTSNyVjsPTFpkd24qJov7mKDr0nJihb4UFxkRdzNO5MjsAEl4/vfl JCvNieQ5n/aLvUdnEKSieQmbil46wt3uyjszTsVunM0InLpvlLN5lOOf9eG0XFcJ oS42ujJdEeGr92jq9O6w7GiNN9xxMcddr8zQ4ZkQxXU9CwIjAUJY0SHXy83Kd+NG 651HYIEdLs0i4om7zDGq4Bxs6XESVfXwG1VEigpsTOLdSYA8P+X39ItsZpsGORmi r+eWCfgZjxj7M/1ZxlnBTV6n4bOB1c+3Xx052ZK+5Hhu5oNxTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDsUbFvKkG9Qjm00/mSZafZskOfMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zNWZi YzViMy00NzliLTQwNWQtODU3OC1mN2M3OTJhMWYzNzUvOThkNjE0ZGMtNjA3ZS0z NzMyLWFhODYtMWViNGVhMmY1MmE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzVmYmM1YjMtNDc5Yi00MDVkLTg1 NzgtZjdjNzkyYTFmMzc1LzM1ZmJjNWIzLTQ3OWItNDA1ZC04NTc4LWY3Yzc5MmEx ZjM3NS5jcmwwHwYDVR0jBBgwFoAUDJZWMAcuGbK5TFwW9yJ+LIbEb4gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zNWZiYzViMy00NzliLTQwNWQtODU3OC1mN2M3 OTJhMWYzNzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgjNkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABq3gethVE1FtHjnLNWUv2hUNxFw1KDlk70tpyg7dgTfq5ekGofkybdS bZFZEjJgfj437GEH71h8m2IVwE/Vgoj3coJ0Unx/607+Ejly199t+ZA5vgnvmcTM UAO1WRskehRuIS3E1KrJ2u8VjTug2wmn0zWLUBwypC3wixtVHDnTFe3U7nSShKYc jPijr4oEsB73Yp70J+SmZvlKG9ljCKFymeNM7gUV4TruCxNyX3ah+bMuatOziG4w SMkDIbcxokJiv6SzkJb44YE8L0O7XTo9AGVondu5SZD8rQ+uDDtkqaWbQhHI4NkD bjOBtaWpPVSwndmle1smUtdDpOQGPFU= -----END CERTIFICATE-----Generated at Mon Oct 20 10:39:16 2025 by rpki-client