$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4b439f01-1270-40c3-9c4f-92fda6473e3d/31a42a29-1dfe-34a8-ae78-fb73af442044.roa File: 31a42a29-1dfe-34a8-ae78-fb73af442044.roa (raw, json) Hash identifier: qxmmtU5UHYMtX9+RYqfZHyOZr7l6qEbyAMd4JYgTpG0= Subject key identifier: 52:A7:DC:C8:F4:28:E8:D4:91:A5:2B:01:71:6D:C4:3E:91:8C:8B:21 Certificate issuer: /CN=4b439f01-1270-40c3-9c4f-92fda6473e3d Certificate serial: 010D0C9F4328584AF2567E21DB07752E4962FB00 Authority key identifier: AF:8C:86:8A:48:9D:8C:9F:36:5D:5E:15:66:60:F3:77:2A:B8:BF:57 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4b439f01-1270-40c3-9c4f-92fda6473e3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4b439f01-1270-40c3-9c4f-92fda6473e3d/31a42a29-1dfe-34a8-ae78-fb73af442044.roa Signing time: Sat 23 Aug 2025 01:00:33 +0000 ROA not before: Sat 23 Aug 2025 01:00:33 +0000 ROA not after: Fri 21 Nov 2025 02:00:33 +0000 asID: 399347 IP address blocks: 130.250.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4b439f01-1270-40c3-9c4f-92fda6473e3d/4b439f01-1270-40c3-9c4f-92fda6473e3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4b439f01-1270-40c3-9c4f-92fda6473e3d/4b439f01-1270-40c3-9c4f-92fda6473e3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4b439f01-1270-40c3-9c4f-92fda6473e3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:56:7e:21:db:07:75:2e:49:62:fb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b439f01-1270-40c3-9c4f-92fda6473e3d Validity Not Before: Aug 23 01:00:33 2025 GMT Not After : Nov 21 02:00:33 2025 GMT Subject: CN=8ccaba5a-c0f1-4947-9cb7-631e9b214480 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:f5:5c:8c:c3:4d:5c:78:05:ec:97:02:b3:fe: c2:f2:c5:c5:cf:46:09:e3:6f:00:ab:b4:a1:fc:07: 63:a2:b9:09:86:43:cb:59:f5:14:fd:74:de:d4:6d: 93:c7:98:f8:f7:34:01:2a:11:75:49:0c:dd:08:0b: e1:53:dd:4f:e7:8a:06:f1:18:3b:1e:ee:18:1c:79: 9b:ea:ca:6b:7e:64:ab:f6:44:c0:26:af:a3:e4:b6: 01:ba:1a:26:fe:4b:9b:0a:41:32:1b:9c:47:f4:28: 05:e3:c3:36:35:48:d7:67:d9:77:e4:3f:67:2e:f2: c2:e1:f8:af:6c:14:1a:24:35:80:b6:9c:95:f6:47: da:92:86:0a:9a:2f:c2:e3:71:a9:44:02:3b:d3:6b: 8d:19:66:99:33:8f:0f:f7:f3:17:a5:a0:da:4a:ec: 3f:77:7f:a2:ee:78:34:48:7b:78:ef:32:29:14:19: 0d:5a:95:45:7e:a7:e1:6d:38:d6:af:2e:e1:62:b4: 86:2b:04:dd:3f:57:b6:6f:e4:23:ae:60:dd:1f:bc: a5:a9:f6:a2:b6:00:4a:cb:7d:f2:c3:87:58:6c:cc: 09:7a:86:b5:26:06:89:ad:75:e2:7a:30:31:e0:36: b5:74:08:e3:57:1f:ae:31:4b:2d:5c:ae:02:6b:23: 72:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:A7:DC:C8:F4:28:E8:D4:91:A5:2B:01:71:6D:C4:3E:91:8C:8B:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4b439f01-1270-40c3-9c4f-92fda6473e3d/31a42a29-1dfe-34a8-ae78-fb73af442044.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4b439f01-1270-40c3-9c4f-92fda6473e3d/4b439f01-1270-40c3-9c4f-92fda6473e3d.crl X509v3 Authority Key Identifier: keyid:AF:8C:86:8A:48:9D:8C:9F:36:5D:5E:15:66:60:F3:77:2A:B8:BF:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4b439f01-1270-40c3-9c4f-92fda6473e3d.cer sbgp-ipAddrBlock: critical IPv4: 130.250.226.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:73:67:68:c3:de:5b:9d:00:28:80:ac:25:29:17:cb:03:e4: 5e:f0:90:d6:e7:f7:90:f3:cf:f2:b1:4e:e4:40:22:e4:63:eb: 3e:97:f4:9f:ec:36:2d:e0:c7:d7:03:bc:c3:68:15:02:1a:64: 99:7e:c7:46:01:d7:03:c0:81:40:dc:51:c3:1d:e1:39:b6:a4: 77:48:f8:4e:12:bf:31:5a:1e:f7:1a:25:bc:8d:b1:c2:45:bd: 97:07:77:b1:6b:25:c7:97:24:73:be:b9:0c:10:08:5d:77:24: d3:08:96:94:94:dd:c2:0b:bc:7f:e9:19:8f:d9:79:80:e7:2d: f5:8d:51:4b:1b:59:0f:88:be:9d:35:4a:0e:d7:a8:b0:c5:de: 01:2a:4c:15:c2:8d:70:84:99:cd:82:0f:be:bc:50:2d:d0:b0: 95:e4:12:0a:ae:3c:5d:cd:9e:b6:b5:97:2a:b0:de:24:e6:d9: 33:6a:34:25:64:ad:18:62:96:0d:16:e8:23:39:b5:9b:7c:b4: d5:3b:ef:67:0b:c0:c5:4b:1a:af:ce:30:cf:e5:87:b0:37:62: a2:fd:df:6b:9a:ea:c6:a2:1f:3a:78:40:5c:2e:de:79:0e:8f: f3:d9:b9:0c:1d:d1:37:a4:8c:50:ca:2f:7a:88:ac:76:9f:01: bc:4f:f6:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEryVn4h2wd1Lkli+wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGI0MzlmMDEtMTI3MC00MGMzLTljNGYtOTJmZGE2NDcz ZTNkMB4XDTI1MDgyMzAxMDAzM1oXDTI1MTEyMTAyMDAzM1owLzEtMCsGA1UEAxMk OGNjYWJhNWEtYzBmMS00OTQ3LTljYjctNjMxZTliMjE0NDgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPVcjMNNXHgF7JcCs/7C8sXFz0YJ428Aq7Sh /AdjorkJhkPLWfUU/XTe1G2Tx5j49zQBKhF1SQzdCAvhU91P54oG8Rg7Hu4YHHmb 6sprfmSr9kTAJq+j5LYBuhom/kubCkEyG5xH9CgF48M2NUjXZ9l35D9nLvLC4fiv bBQaJDWAtpyV9kfakoYKmi/C43GpRAI702uNGWaZM48P9/MXpaDaSuw/d3+i7ng0 SHt47zIpFBkNWpVFfqfhbTjWry7hYrSGKwTdP1e2b+QjrmDdH7ylqfaitgBKy33y w4dYbMwJeoa1JgaJrXXiejAx4Da1dAjjVx+uMUstXK4CayNyhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFKn3Mj0KOjUkaUrAXFtxD6RjIshMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80YjQz OWYwMS0xMjcwLTQwYzMtOWM0Zi05MmZkYTY0NzNlM2QvMzFhNDJhMjktMWRmZS0z NGE4LWFlNzgtZmI3M2FmNDQyMDQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNGI0MzlmMDEtMTI3MC00MGMzLTlj NGYtOTJmZGE2NDczZTNkLzRiNDM5ZjAxLTEyNzAtNDBjMy05YzRmLTkyZmRhNjQ3 M2UzZC5jcmwwHwYDVR0jBBgwFoAUr4yGikidjJ82XV4VZmDzdyq4v1cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80YjQzOWYwMS0xMjcwLTQwYzMtOWM0Zi05MmZk YTY0NzNlM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgvriMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGpzZ2jD3ludACiArCUpF8sD5F7wkNbn95Dzz/KxTuRAIuRj6z6X9J/s Ni3gx9cDvMNoFQIaZJl+x0YB1wPAgUDcUcMd4Tm2pHdI+E4SvzFaHvcaJbyNscJF vZcHd7FrJceXJHO+uQwQCF13JNMIlpSU3cILvH/pGY/ZeYDnLfWNUUsbWQ+Ivp01 Sg7XqLDF3gEqTBXCjXCEmc2CD768UC3QsJXkEgquPF3Nnra1lyqw3iTm2TNqNCVk rRhilg0W6CM5tZt8tNU772cLwMVLGq/OMM/lh7A3YqL932ua6saiHzp4QFwu3nkO j/PZuQwd0TekjFDKL3qIrHafAbxP9jY= -----END CERTIFICATE-----Generated at Sat Aug 23 20:57:22 2025 by rpki-client