$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/221cdd91-10e9-41bb-8765-69edc6f1e631/89985742-301c-3ae6-9196-8515917104c8.roa File: 89985742-301c-3ae6-9196-8515917104c8.roa (raw, json) Hash identifier: tDmW8WtM1HsXLRgzoGrihQlMJt3/5XckZOAl3usEgXg= Subject key identifier: DF:F3:F5:23:51:65:AF:70:4F:A7:BC:64:37:F8:FF:1D:14:2F:39:C7 Certificate issuer: /CN=221cdd91-10e9-41bb-8765-69edc6f1e631 Certificate serial: 010D0C9F4328584B891762B99ADF298160E607C0 Authority key identifier: D4:0C:BD:52:74:20:06:4C:A1:FA:04:8B:7D:02:D2:8B:6E:9F:21:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/221cdd91-10e9-41bb-8765-69edc6f1e631.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/221cdd91-10e9-41bb-8765-69edc6f1e631/89985742-301c-3ae6-9196-8515917104c8.roa Signing time: Thu 16 Oct 2025 01:00:30 +0000 ROA not before: Thu 16 Oct 2025 01:00:30 +0000 ROA not after: Wed 14 Jan 2026 02:00:30 +0000 asID: 14618 IP address blocks: 130.50.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/221cdd91-10e9-41bb-8765-69edc6f1e631/221cdd91-10e9-41bb-8765-69edc6f1e631.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/221cdd91-10e9-41bb-8765-69edc6f1e631/221cdd91-10e9-41bb-8765-69edc6f1e631.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/221cdd91-10e9-41bb-8765-69edc6f1e631.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:89:17:62:b9:9a:df:29:81:60:e6:07:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=221cdd91-10e9-41bb-8765-69edc6f1e631 Validity Not Before: Oct 16 01:00:30 2025 GMT Not After : Jan 14 02:00:30 2026 GMT Subject: CN=42b13f06-9b8e-4923-93fc-b798c841ff3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:68:3a:cd:8d:2e:9a:7a:d8:20:9d:0b:32:08: e5:e6:45:cf:1f:b6:b6:e8:86:06:49:71:b3:05:d2: 41:62:4d:de:24:b5:44:de:07:2a:bc:ba:ca:98:48: 9b:ae:86:2d:14:a7:16:15:6f:50:2c:6d:40:7c:28: e9:4f:ab:b7:51:33:44:45:33:b1:49:0b:a3:96:f2: d3:77:59:af:19:93:6b:67:46:82:53:7d:24:c8:07: 87:52:4c:71:ed:d3:76:e8:49:02:af:56:a6:b5:06: 57:9c:34:3c:77:57:ad:e4:03:40:4c:2a:e5:c2:1d: 64:52:f9:e1:69:57:e3:b8:e4:22:06:ca:eb:8f:b6: e9:e4:4d:1e:08:bc:93:a6:59:e9:54:bb:4f:20:4c: 65:86:8a:a0:ef:28:22:0e:17:c7:95:72:9c:7c:dc: 20:7f:07:98:b4:9a:d1:e5:eb:20:03:23:aa:8c:48: 4f:4c:e2:04:38:67:88:38:ba:2c:0e:9e:4d:47:9d: c2:76:1c:8e:d1:1f:db:8d:19:ff:13:ba:cf:59:2f: 1b:b3:c8:4d:d2:85:18:f3:7c:7a:c6:23:3c:e7:c5: 93:98:a1:ef:44:c3:0b:55:8e:74:e2:6b:16:22:c8: d0:6b:15:f2:e9:f4:e3:56:e7:0d:d8:02:8d:b0:1d: 35:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:F3:F5:23:51:65:AF:70:4F:A7:BC:64:37:F8:FF:1D:14:2F:39:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/221cdd91-10e9-41bb-8765-69edc6f1e631/89985742-301c-3ae6-9196-8515917104c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/221cdd91-10e9-41bb-8765-69edc6f1e631/221cdd91-10e9-41bb-8765-69edc6f1e631.crl X509v3 Authority Key Identifier: keyid:D4:0C:BD:52:74:20:06:4C:A1:FA:04:8B:7D:02:D2:8B:6E:9F:21:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/221cdd91-10e9-41bb-8765-69edc6f1e631.cer sbgp-ipAddrBlock: critical IPv4: 130.50.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:00:5a:8a:e6:2e:25:c8:a3:61:8e:2a:fe:fe:61:dc:c6:be: 32:c8:4f:0d:de:5e:fd:48:cb:90:e4:ed:b7:50:6f:24:61:2f: 25:2a:f3:30:0d:6b:75:ad:bd:aa:69:26:66:13:2a:30:eb:8c: 79:5d:86:7e:01:fa:41:98:2a:f6:c0:f9:ba:cc:fb:7a:d2:a9: 13:ff:a4:28:4a:98:fb:ae:77:9a:de:41:86:76:5f:4e:a0:78: 2f:0c:11:f7:01:1a:eb:31:33:78:0a:ce:39:6c:90:a5:76:d7: 0a:af:be:95:45:17:0e:8e:62:84:e4:b1:c4:ea:b7:eb:37:f9: 18:8a:48:b1:20:e4:f2:ba:ea:b8:d8:9d:ea:b8:e0:33:40:57: 68:18:a9:de:95:86:83:ea:64:ac:a0:a9:87:c2:1e:38:a2:34: db:04:d0:49:fa:eb:13:ea:76:6d:70:20:a2:bd:9a:c6:34:a2: 4c:91:e6:fc:0d:84:63:8a:ae:1d:b8:ac:a1:c9:b3:a6:13:e2: a1:19:c0:56:a6:6d:70:5e:db:1c:47:98:ea:2b:20:3c:bb:cd: 26:1f:01:bb:fe:c0:52:3d:c6:f5:7c:1d:b4:ac:13:e6:09:8e: 0e:c0:33:c2:95:df:bd:cb:23:75:09:d5:8b:0d:d7:30:91:49: 30:cd:ec:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuJF2K5mt8pgWDmB8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjIxY2RkOTEtMTBlOS00MWJiLTg3NjUtNjllZGM2ZjFl NjMxMB4XDTI1MTAxNjAxMDAzMFoXDTI2MDExNDAyMDAzMFowLzEtMCsGA1UEAxMk NDJiMTNmMDYtOWI4ZS00OTIzLTkzZmMtYjc5OGM4NDFmZjNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2g6zY0umnrYIJ0LMgjl5kXPH7a26IYGSXGz BdJBYk3eJLVE3gcqvLrKmEibroYtFKcWFW9QLG1AfCjpT6u3UTNERTOxSQujlvLT d1mvGZNrZ0aCU30kyAeHUkxx7dN26EkCr1amtQZXnDQ8d1et5ANATCrlwh1kUvnh aVfjuOQiBsrrj7bp5E0eCLyTplnpVLtPIExlhoqg7ygiDhfHlXKcfNwgfweYtJrR 5esgAyOqjEhPTOIEOGeIOLosDp5NR53CdhyO0R/bjRn/E7rPWS8bs8hN0oUY83x6 xiM858WTmKHvRMMLVY504msWIsjQaxXy6fTjVucN2AKNsB01aQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN/z9SNRZa9wT6e8ZDf4/x0ULznHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yMjFj ZGQ5MS0xMGU5LTQxYmItODc2NS02OWVkYzZmMWU2MzEvODk5ODU3NDItMzAxYy0z YWU2LTkxOTYtODUxNTkxNzEwNGM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjIxY2RkOTEtMTBlOS00MWJiLTg3 NjUtNjllZGM2ZjFlNjMxLzIyMWNkZDkxLTEwZTktNDFiYi04NzY1LTY5ZWRjNmYx ZTYzMS5jcmwwHwYDVR0jBBgwFoAU1Ay9UnQgBkyh+gSLfQLSi26fIUswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yMjFjZGQ5MS0xMGU5LTQxYmItODc2NS02OWVk YzZmMWU2MzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgjJ9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAYAWormLiXIo2GOKv7+YdzGvjLITw3eXv1Iy5Dk7bdQbyRhLyUq8zAN a3WtvappJmYTKjDrjHldhn4B+kGYKvbA+brM+3rSqRP/pChKmPuud5reQYZ2X06g eC8MEfcBGusxM3gKzjlskKV21wqvvpVFFw6OYoTkscTqt+s3+RiKSLEg5PK66rjY neq44DNAV2gYqd6VhoPqZKygqYfCHjiiNNsE0En66xPqdm1wIKK9msY0okyR5vwN hGOKrh24rKHJs6YT4qEZwFambXBe2xxHmOorIDy7zSYfAbv+wFI9xvV8HbSsE+YJ jg7AM8KV373LI3UJ1YsN1zCRSTDN7EA= -----END CERTIFICATE-----Generated at Mon Oct 20 04:48:54 2025 by rpki-client