$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1d501fd6-2f1a-4d00-89c7-7dabc9364605/f0d32edb-710e-3329-b151-c1b86d956c94.roa File: f0d32edb-710e-3329-b151-c1b86d956c94.roa (raw, json) Hash identifier: HszU3depV9Ts1JYGPBzrY5agXTkwKxBrhxzq0ogdfGw= Subject key identifier: BC:03:9C:86:0D:9D:3F:45:33:D8:2E:B2:AB:B4:68:5A:60:70:04:E5 Certificate issuer: /CN=1d501fd6-2f1a-4d00-89c7-7dabc9364605 Certificate serial: 010D0C9F4328584A4110530950504F93938AE800 Authority key identifier: AE:99:FA:16:91:FD:C5:EA:4A:41:68:9F:07:16:B7:84:BA:08:07:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1d501fd6-2f1a-4d00-89c7-7dabc9364605.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1d501fd6-2f1a-4d00-89c7-7dabc9364605/f0d32edb-710e-3329-b151-c1b86d956c94.roa Signing time: Fri 20 Jun 2025 13:01:05 +0000 ROA not before: Fri 20 Jun 2025 13:01:05 +0000 ROA not after: Thu 18 Sep 2025 13:01:05 +0000 asID: 54048 IP address blocks: 130.250.200.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1d501fd6-2f1a-4d00-89c7-7dabc9364605/1d501fd6-2f1a-4d00-89c7-7dabc9364605.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1d501fd6-2f1a-4d00-89c7-7dabc9364605/1d501fd6-2f1a-4d00-89c7-7dabc9364605.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1d501fd6-2f1a-4d00-89c7-7dabc9364605.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:41:10:53:09:50:50:4f:93:93:8a:e8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d501fd6-2f1a-4d00-89c7-7dabc9364605 Validity Not Before: Jun 20 13:01:05 2025 GMT Not After : Sep 18 13:01:05 2025 GMT Subject: CN=c2da15f3-f9d2-4c19-9161-45675548325a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:9b:a3:7c:e2:ec:5b:2b:65:0a:b0:8a:05:dd: fe:e5:6b:53:8c:44:e7:66:8d:43:1b:f5:be:b9:20: 00:e8:15:15:6d:06:8a:3d:88:05:49:a2:f3:9f:83: 60:34:81:a7:46:ad:73:b8:a9:b2:d4:25:e2:41:50: 5a:a5:2f:f0:c1:16:6c:e3:b7:e4:e1:a8:59:53:3b: 57:f6:b6:20:13:51:52:db:80:93:f0:e0:6c:fe:44: 6c:9a:f4:94:ce:cb:b3:e0:14:32:43:57:8f:5d:9c: 43:96:e2:56:9b:2f:60:71:e9:35:c4:9f:6f:2d:e5: fe:a7:ce:8d:37:3c:d9:87:7c:ef:8a:ce:f7:c2:6f: c4:99:2d:dd:68:3f:90:ff:cb:08:aa:d6:8c:5b:b8: a7:cc:9f:2f:0d:24:df:c8:11:5b:90:5c:81:11:44: ee:9a:a7:56:f5:09:3a:15:b8:2a:49:68:b8:3b:20: d3:17:ce:02:f5:1a:75:36:89:02:a8:64:4f:97:ad: 1e:df:5a:6e:ca:c7:f8:60:ed:5c:cd:16:f2:20:0a: e7:5a:66:56:f6:c8:30:0c:43:06:9d:1a:99:cc:bf: 7b:bc:2b:1a:ee:2c:10:05:d3:19:3d:0c:95:6b:3f: 34:db:ee:98:6c:a2:be:10:2e:7f:3d:8d:0b:cc:27: d8:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:03:9C:86:0D:9D:3F:45:33:D8:2E:B2:AB:B4:68:5A:60:70:04:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1d501fd6-2f1a-4d00-89c7-7dabc9364605/f0d32edb-710e-3329-b151-c1b86d956c94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1d501fd6-2f1a-4d00-89c7-7dabc9364605/1d501fd6-2f1a-4d00-89c7-7dabc9364605.crl X509v3 Authority Key Identifier: keyid:AE:99:FA:16:91:FD:C5:EA:4A:41:68:9F:07:16:B7:84:BA:08:07:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1d501fd6-2f1a-4d00-89c7-7dabc9364605.cer sbgp-ipAddrBlock: critical IPv4: 130.250.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:19:cf:33:3d:32:5c:0d:1e:36:b7:f5:c6:50:95:78:3d:47: 3e:0c:b6:32:d6:84:79:b5:a5:32:00:90:00:cb:c8:e7:14:3e: f5:f3:8f:a8:c1:96:2b:52:2d:6a:80:7d:80:86:11:a1:f9:c1: 5d:e7:59:73:39:c0:08:3a:a6:fc:2d:d9:4d:22:e4:bb:da:f3: cb:83:0c:19:27:e1:b5:f8:9c:0b:de:22:a4:c5:2a:47:40:e9: 23:77:fd:7e:6f:e7:8a:43:54:7a:e6:f1:04:52:47:f0:7b:9a: f8:f0:47:0b:84:9d:b6:33:07:ec:9b:20:c4:16:a4:33:4f:d0: 5a:22:79:17:11:dd:aa:4d:86:ff:d0:d4:bc:a6:d3:a8:4f:67: c8:1a:7e:06:a0:0d:f9:26:8d:14:ef:1b:d3:0c:9e:ad:d1:12: c7:2b:d4:1c:93:3b:c6:79:8e:71:e1:1f:61:0b:a3:00:27:23: 52:7a:ad:f2:4e:a9:b8:06:9c:62:be:38:0b:6d:51:a5:c6:d9: 26:d9:0f:e7:ff:0f:fd:ce:60:84:7e:d9:5f:64:1c:4f:ad:12: e7:0b:39:c0:15:fe:39:42:1b:c0:3c:f7:49:2c:13:ee:b1:b4: 41:31:78:bb:85:07:0f:59:18:48:24:bf:00:34:bf:a4:24:5b: be:05:a2:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpBEFMJUFBPk5OK6AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQ1MDFmZDYtMmYxYS00ZDAwLTg5YzctN2RhYmM5MzY0 NjA1MB4XDTI1MDYyMDEzMDEwNVoXDTI1MDkxODEzMDEwNVowLzEtMCsGA1UEAxMk YzJkYTE1ZjMtZjlkMi00YzE5LTkxNjEtNDU2NzU1NDgzMjVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA05ujfOLsWytlCrCKBd3+5WtTjETnZo1DG/W+ uSAA6BUVbQaKPYgFSaLzn4NgNIGnRq1zuKmy1CXiQVBapS/wwRZs47fk4ahZUztX 9rYgE1FS24CT8OBs/kRsmvSUzsuz4BQyQ1ePXZxDluJWmy9gcek1xJ9vLeX+p86N NzzZh3zvis73wm/EmS3daD+Q/8sIqtaMW7inzJ8vDSTfyBFbkFyBEUTumqdW9Qk6 FbgqSWi4OyDTF84C9Rp1NokCqGRPl60e31puysf4YO1czRbyIArnWmZW9sgwDEMG nRqZzL97vCsa7iwQBdMZPQyVaz802+6YbKK+EC5/PY0LzCfYywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLwDnIYNnT9FM9gusqu0aFpgcATlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xZDUw MWZkNi0yZjFhLTRkMDAtODljNy03ZGFiYzkzNjQ2MDUvZjBkMzJlZGItNzEwZS0z MzI5LWIxNTEtYzFiODZkOTU2Yzk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWQ1MDFmZDYtMmYxYS00ZDAwLTg5 YzctN2RhYmM5MzY0NjA1LzFkNTAxZmQ2LTJmMWEtNGQwMC04OWM3LTdkYWJjOTM2 NDYwNS5jcmwwHwYDVR0jBBgwFoAUrpn6FpH9xepKQWifBxa3hLoIBxMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xZDUwMWZkNi0yZjFhLTRkMDAtODljNy03ZGFi YzkzNjQ2MDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgvrIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEAZzzM9MlwNHja39cZQlXg9Rz4MtjLWhHm1pTIAkADLyOcUPvXzj6jB litSLWqAfYCGEaH5wV3nWXM5wAg6pvwt2U0i5Lva88uDDBkn4bX4nAveIqTFKkdA 6SN3/X5v54pDVHrm8QRSR/B7mvjwRwuEnbYzB+ybIMQWpDNP0FoieRcR3apNhv/Q 1Lym06hPZ8gafgagDfkmjRTvG9MMnq3REscr1ByTO8Z5jnHhH2ELowAnI1J6rfJO qbgGnGK+OAttUaXG2SbZD+f/D/3OYIR+2V9kHE+tEucLOcAV/jlCG8A890ksE+6x tEExeLuFBw9ZGEgkvwA0v6QkW74FoiI= -----END CERTIFICATE-----Generated at Tue Jul 1 02:56:56 2025 by rpki-client