$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4/2289cf57-959f-3a84-8712-d7d38208f851.roa File: 2289cf57-959f-3a84-8712-d7d38208f851.roa (raw, json) Hash identifier: eBekNLSAIeYeeQnbHpO9/4nE17RzfpZCoDVjyfsqAC8= Subject key identifier: F8:5D:48:C5:AC:76:EC:38:C4:2A:A0:AB:87:AF:3C:83:96:72:31:52 Certificate issuer: /CN=1cfb66bc-dcfd-4c7e-bd00-38e923719ab4 Certificate serial: 010D0C9F4328584AD3A0F5C7DA264B8E8D13D400 Authority key identifier: 3A:40:F3:76:43:CD:0A:7A:FA:BD:DA:79:7D:F1:84:CA:E8:00:4D:8C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4/2289cf57-959f-3a84-8712-d7d38208f851.roa Signing time: Tue 12 Aug 2025 01:00:32 +0000 ROA not before: Tue 12 Aug 2025 01:00:32 +0000 ROA not after: Mon 10 Nov 2025 02:00:32 +0000 asID: 31775 IP address blocks: 130.44.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d3:a0:f5:c7:da:26:4b:8e:8d:13:d4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cfb66bc-dcfd-4c7e-bd00-38e923719ab4 Validity Not Before: Aug 12 01:00:32 2025 GMT Not After : Nov 10 02:00:32 2025 GMT Subject: CN=0fbca5c1-25d2-4b41-a157-6fc04ab2a137 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:c4:50:5e:d5:e5:cc:63:94:d8:80:40:b2:51: de:b5:51:ac:af:cb:ab:78:e3:3b:f4:43:fc:e0:de: 43:e3:44:45:75:ab:98:82:ef:43:4d:28:5a:91:3e: b5:2a:28:ef:7f:22:b6:a0:34:09:0f:04:ea:85:8f: 27:c2:43:6d:02:5c:be:a8:ea:a1:86:04:2c:90:8a: 43:87:9e:94:bc:e0:98:a5:c1:03:47:bc:25:00:fb: cc:70:07:75:2e:a1:44:fa:74:83:67:22:a6:31:40: 94:a0:21:70:29:61:41:3d:5b:a6:a0:03:fa:54:11: e8:ee:4d:e2:63:82:c8:d0:36:d6:82:a9:90:7c:14: cb:61:11:72:b3:63:28:83:0b:03:7c:c2:5b:0c:80: 87:d5:04:46:f8:6d:30:35:af:2f:21:2d:eb:fb:66: ef:a4:64:b9:40:4c:d5:6d:11:45:fc:c2:5c:bc:6b: cb:57:6b:76:58:44:1b:e5:0c:b6:a5:57:f2:85:10: 9d:0b:61:a6:34:83:3f:b1:b5:5d:93:c4:a0:e0:eb: c1:3a:0d:f5:ff:6a:e2:9e:a8:70:b8:5e:ae:17:10: dc:f7:67:c2:cf:1f:3c:c7:57:fb:95:b5:c1:d2:fb: 75:42:fe:7d:a9:0e:e1:d1:c6:20:03:72:a4:d2:96: 84:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:5D:48:C5:AC:76:EC:38:C4:2A:A0:AB:87:AF:3C:83:96:72:31:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4/2289cf57-959f-3a84-8712-d7d38208f851.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4.crl X509v3 Authority Key Identifier: keyid:3A:40:F3:76:43:CD:0A:7A:FA:BD:DA:79:7D:F1:84:CA:E8:00:4D:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4.cer sbgp-ipAddrBlock: critical IPv4: 130.44.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:a1:02:dc:a5:2d:83:95:e5:47:58:21:1b:ac:9b:75:1b:ef: 80:09:27:83:07:64:fa:c9:08:dc:b2:73:8d:8b:63:56:45:51: 43:49:5e:c2:1e:1f:dd:6f:03:28:a8:cf:88:1b:d4:de:c7:f2: 7d:e9:ed:ce:e7:c1:8a:1b:7a:10:1e:83:cc:1f:14:a3:26:9a: a9:f4:1e:f0:40:6b:d5:4a:0e:f3:55:a2:c6:5a:1d:a0:eb:f3: 47:8f:50:0c:24:26:64:ae:ef:e0:02:b6:74:05:2a:8a:24:0c: db:56:f7:c6:3e:ee:bf:74:df:38:07:51:e2:af:db:5f:ff:f2: 97:80:7f:a4:a7:da:6c:0d:d2:b4:0d:34:a5:d7:49:6a:f6:be: c8:21:76:4a:cc:45:49:33:62:74:f2:13:63:f6:e2:34:dd:42: e5:16:d4:e5:49:58:11:54:7d:a5:5e:37:7e:fa:90:d6:e5:84: f8:c6:b0:a1:30:d4:d6:7b:93:df:e1:8a:e2:cb:ab:db:ac:39: 69:b1:61:94:d0:48:95:81:2f:64:0c:1d:1f:50:4e:8a:82:e9: 7b:63:25:75:4b:78:42:f0:06:a8:0a:60:93:6f:18:c5:ed:7e: ac:2d:e1:f3:f9:51:8e:f9:d9:36:aa:ab:bc:a8:44:d4:f1:22: 5b:3c:e8:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErToPXH2iZLjo0T1AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWNmYjY2YmMtZGNmZC00YzdlLWJkMDAtMzhlOTIzNzE5 YWI0MB4XDTI1MDgxMjAxMDAzMloXDTI1MTExMDAyMDAzMlowLzEtMCsGA1UEAxMk MGZiY2E1YzEtMjVkMi00YjQxLWExNTctNmZjMDRhYjJhMTM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsRQXtXlzGOU2IBAslHetVGsr8ureOM79EP8 4N5D40RFdauYgu9DTShakT61KijvfyK2oDQJDwTqhY8nwkNtAly+qOqhhgQskIpD h56UvOCYpcEDR7wlAPvMcAd1LqFE+nSDZyKmMUCUoCFwKWFBPVumoAP6VBHo7k3i Y4LI0DbWgqmQfBTLYRFys2MogwsDfMJbDICH1QRG+G0wNa8vIS3r+2bvpGS5QEzV bRFF/MJcvGvLV2t2WEQb5Qy2pVfyhRCdC2GmNIM/sbVdk8Sg4OvBOg31/2rinqhw uF6uFxDc92fCzx88x1f7lbXB0vt1Qv59qQ7h0cYgA3Kk0paEPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPhdSMWsduw4xCqgq4evPIOWcjFSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xY2Zi NjZiYy1kY2ZkLTRjN2UtYmQwMC0zOGU5MjM3MTlhYjQvMjI4OWNmNTctOTU5Zi0z YTg0LTg3MTItZDdkMzgyMDhmODUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWNmYjY2YmMtZGNmZC00YzdlLWJk MDAtMzhlOTIzNzE5YWI0LzFjZmI2NmJjLWRjZmQtNGM3ZS1iZDAwLTM4ZTkyMzcx OWFiNC5jcmwwHwYDVR0jBBgwFoAUOkDzdkPNCnr6vdp5ffGEyugATYwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xY2ZiNjZiYy1kY2ZkLTRjN2UtYmQwMC0zOGU5 MjM3MTlhYjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgiwYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAmhAtylLYOV5UdYIRusm3Ub74AJJ4MHZPrJCNyyc42LY1ZFUUNJXsIe H91vAyioz4gb1N7H8n3p7c7nwYobehAeg8wfFKMmmqn0HvBAa9VKDvNVosZaHaDr 80ePUAwkJmSu7+ACtnQFKookDNtW98Y+7r903zgHUeKv21//8peAf6Sn2mwN0rQN NKXXSWr2vsghdkrMRUkzYnTyE2P24jTdQuUW1OVJWBFUfaVeN376kNblhPjGsKEw 1NZ7k9/hiuLLq9usOWmxYZTQSJWBL2QMHR9QToqC6XtjJXVLeELwBqgKYJNvGMXt fqwt4fP5UY752Taqq7yoRNTxIls86FA= -----END CERTIFICATE-----Generated at Sun Aug 24 00:30:39 2025 by rpki-client