$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f0571202-5873-37e0-8260-4a7a83ddbf16.roa File: f0571202-5873-37e0-8260-4a7a83ddbf16.roa (raw, json) Hash identifier: 0pfBtW2DOAx0gpFCIFI3KW7she9jJMRu9WblOBgF9uA= Subject key identifier: 92:99:AC:D8:E9:E0:1F:78:5B:B3:AC:07:15:94:AF:05:87:B1:53:7F Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B5F37657D695C568EB2A46180 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f0571202-5873-37e0-8260-4a7a83ddbf16.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 396982 IP address blocks: 130.211.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:65:7d:69:5c:56:8e:b2:a4:61:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=6090f88e-53ae-45d3-83d2-92167e2f35fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:12:68:3d:83:75:9d:d5:58:b7:a1:03:0a:1f: c4:b3:f8:26:c0:b9:7e:1d:16:1f:53:e7:9f:c0:ac: fa:e2:32:b2:a1:1e:9e:a0:e8:b8:1b:99:f4:4a:a9: 2d:51:cc:34:0e:ef:5a:5f:04:8d:9f:de:21:27:f9: 0a:9a:c2:5a:40:98:4f:75:37:4b:28:b6:d0:7d:94: 65:80:3c:7c:b4:48:d0:90:3f:04:a2:6d:1a:33:67: 26:04:23:a4:49:e2:68:7f:f2:f0:0d:91:81:8c:81: 2d:5f:48:48:81:4b:ad:f2:ba:80:8b:b4:cb:8b:40: 9c:bc:b2:d0:dc:d4:51:35:f2:2c:8f:eb:22:3f:ca: a9:13:8d:e1:fd:39:4a:5f:c3:a8:fd:7a:14:bc:2c: 5a:4f:b0:cd:4b:b9:f3:db:61:f0:1c:bc:08:bc:5e: 15:5f:ed:5f:32:42:4f:9a:48:0a:80:c9:27:62:59: a1:bb:9a:f7:86:07:4d:17:b3:76:69:95:ab:c2:04: 09:a5:c7:b9:d0:10:33:b1:63:a6:28:41:9c:87:3e: aa:df:d0:ac:1f:52:f1:bc:2d:d1:05:05:e1:db:70: f2:05:31:a0:8f:95:d2:16:c1:0e:f1:87:2b:7c:ed: 09:04:e6:6f:cf:62:4c:15:19:26:00:ca:a6:08:cf: f2:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:99:AC:D8:E9:E0:1F:78:5B:B3:AC:07:15:94:AF:05:87:B1:53:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f0571202-5873-37e0-8260-4a7a83ddbf16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 130.211.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:c4:df:05:cb:0b:c2:a7:ed:44:1d:fc:33:bc:81:fc:ff:9b: 4e:b2:3b:8d:9e:ee:f7:16:8e:d6:ce:e0:fd:11:d9:dd:a3:73: 55:db:a3:1c:39:2b:59:96:59:ca:2e:91:c1:5d:9b:d3:fc:e7: d8:1c:14:2a:de:cd:60:19:fa:b8:55:3c:73:c9:ec:1b:d2:da: 08:a6:50:c5:75:fe:2f:6a:54:85:c5:19:e5:a3:9f:82:0d:c1: 28:62:d8:aa:cf:64:6a:80:2f:10:db:e7:8b:45:59:1b:3d:6b: 1b:9c:2e:1a:d5:4d:e9:7c:c3:e1:1e:9b:01:75:18:02:e4:2e: cc:18:5a:aa:7b:2b:61:5a:2f:74:09:ec:2a:b6:f1:9f:99:7e: 45:e2:8c:4d:82:ad:05:22:65:58:55:1f:cb:f7:85:04:1f:45: 30:7d:1e:53:8e:7d:68:08:07:60:36:61:f4:55:1e:ed:24:a4: 1d:ab:55:6f:47:6d:65:a4:a9:2b:40:e1:46:b1:dc:50:e3:ab: f1:4a:6f:f0:e8:a5:14:72:88:8c:2c:f5:09:84:ab:36:95:85: 00:bf:1e:53:73:01:1a:44:3d:29:68:4f:9b:4a:89:95:ce:b4: 53:45:12:cf:3b:bb:0d:ed:4a:87:85:07:52:31:67:94:b7:ce: af:65:66:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfN2V9aVxWjrKkYYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk NjA5MGY4OGUtNTNhZS00NWQzLTgzZDItOTIxNjdlMmYzNWZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohJoPYN1ndVYt6EDCh/Es/gmwLl+HRYfU+ef wKz64jKyoR6eoOi4G5n0SqktUcw0Du9aXwSNn94hJ/kKmsJaQJhPdTdLKLbQfZRl gDx8tEjQkD8Eom0aM2cmBCOkSeJof/LwDZGBjIEtX0hIgUut8rqAi7TLi0CcvLLQ 3NRRNfIsj+siP8qpE43h/TlKX8Oo/XoUvCxaT7DNS7nz22HwHLwIvF4VX+1fMkJP mkgKgMknYlmhu5r3hgdNF7N2aZWrwgQJpce50BAzsWOmKEGchz6q39CsH1LxvC3R BQXh23DyBTGgj5XSFsEO8YcrfO0JBOZvz2JMFRkmAMqmCM/ymQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJKZrNjp4B94W7OsBxWUrwWHsVN/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZjA1NzEyMDItNTg3My0z N2UwLTgyNjAtNGE3YTgzZGRiZjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEgtMgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAfE3wXLC8Kn7UQd/DO8gfz/m06yO42e7vcWjtbO4P0R2d2jc1Xboxw5 K1mWWcoukcFdm9P859gcFCrezWAZ+rhVPHPJ7BvS2gimUMV1/i9qVIXFGeWjn4IN wShi2KrPZGqALxDb54tFWRs9axucLhrVTel8w+EemwF1GALkLswYWqp7K2FaL3QJ 7Cq28Z+ZfkXijE2CrQUiZVhVH8v3hQQfRTB9HlOOfWgIB2A2YfRVHu0kpB2rVW9H bWWkqStA4Uax3FDjq/FKb/DopRRyiIws9QmEqzaVhQC/HlNzARpEPSloT5tKiZXO tFNFEs87uw3tSoeFB1IxZ5S3zq9lZuM= -----END CERTIFICATE-----Generated at Mon Oct 20 21:22:06 2025 by rpki-client