$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/64e02dcf-7a28-30ed-a910-b55ee71cce0c.roa File: 64e02dcf-7a28-30ed-a910-b55ee71cce0c.roa (raw, json) Hash identifier: liscPQoJn5vVOIxylyfTNh4UtMevg6xcA5yQjfNfNZU= Subject key identifier: B3:B9:C8:39:AD:75:21:90:49:D9:AA:0C:D9:75:77:45:0A:BC:A0:28 Certificate issuer: /CN=9de5b47f-bd49-4614-b658-9980cfd17769 Certificate serial: 010D0C9F4328584AECC137994D3C2411C48448D8 Authority key identifier: 8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/64e02dcf-7a28-30ed-a910-b55ee71cce0c.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 26282 IP address blocks: 130.119.1.0/24 maxlen: 24 130.119.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:37:99:4d:3c:24:11:c4:84:48:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9de5b47f-bd49-4614-b658-9980cfd17769 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=313d2dc6-b446-4bdd-a61b-f0135cc22a80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:32:c1:46:43:7c:34:e5:ee:47:94:49:82:33: 87:20:2d:0c:79:61:39:7c:36:1e:db:2f:f6:56:58: e6:79:89:88:6e:24:81:f4:ee:4e:61:68:c9:b0:0e: 21:c5:fb:fe:b7:57:b7:e2:30:c0:ca:6c:24:54:68: fa:11:4e:e2:ed:f4:6f:e9:2a:ef:c3:66:5a:24:1b: a4:85:e7:f8:d8:e8:46:26:8a:6d:bd:6a:93:90:41: 87:b6:f4:ad:18:82:22:e7:8f:6a:be:83:2e:00:c6: 3e:44:16:47:26:d5:73:fc:4e:91:d6:d0:ed:65:96: 5c:b1:56:fb:bf:3c:c9:2a:01:e3:c0:89:f7:d4:a3: db:dd:a1:b9:c2:5a:16:3a:b0:f9:4e:ab:8d:0a:2d: 37:47:e9:39:0a:57:76:ef:32:30:aa:45:0e:0a:2d: f9:f1:03:d4:cf:4b:17:c8:3a:1b:62:ab:d8:76:a4: 10:22:a7:58:af:0b:49:54:6e:3f:dc:b0:bd:36:be: b3:af:68:08:be:67:6c:c8:ec:6f:c1:37:32:ee:b2: 31:3b:17:f9:b7:8c:8e:90:c5:ac:b1:15:e6:2f:72: 89:21:b8:e0:97:82:24:06:0d:37:10:e1:93:c2:0c: 5f:2d:45:dc:b1:ae:a6:83:35:aa:3c:20:4b:cb:fd: a9:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:B9:C8:39:AD:75:21:90:49:D9:AA:0C:D9:75:77:45:0A:BC:A0:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/64e02dcf-7a28-30ed-a910-b55ee71cce0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl X509v3 Authority Key Identifier: keyid:8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer sbgp-ipAddrBlock: critical IPv4: 130.119.1.0-130.119.2.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:b5:ea:47:cf:9c:da:35:b1:81:6f:50:cd:33:8d:6a:77:c3: a1:aa:55:49:23:a9:0a:3e:b0:f9:ba:35:df:8b:03:b1:de:c3: c4:21:0f:7d:56:50:aa:8a:af:27:6e:7e:29:c5:fe:bf:a1:67: 3f:9b:e6:e0:64:d1:91:54:2f:a4:43:0d:e0:65:34:d1:e9:1b: b4:a2:b6:b4:8a:ea:90:ef:98:d0:31:92:17:d5:cf:ce:20:16: 7a:47:cc:ec:13:2a:21:ac:80:fe:92:21:af:82:93:0e:ee:c6: 49:b2:02:92:3c:b0:92:d6:42:36:c4:c4:37:ae:ea:67:dd:fe: 8b:02:68:86:eb:f2:d6:a4:4a:0d:7b:4f:a5:48:8e:16:28:c7: d3:6a:98:ab:d9:d6:20:df:21:93:6b:64:c2:f9:60:25:e0:f8: 21:db:bb:1f:19:cf:90:b2:9b:6d:80:da:9d:76:df:2f:e8:8a: f9:03:00:ef:67:e8:42:86:d2:64:ca:49:18:0e:08:1e:a3:43: eb:34:67:6a:d0:9a:06:0e:bc:c7:5a:5e:8c:ea:f8:df:3b:07: 9e:53:0b:a2:39:73:cb:6e:cd:5b:46:0b:4e:1c:11:10:f7:35: 1c:15:d7:c7:48:4f:ac:4b:38:15:6c:15:da:93:64:22:7d:b0: e6:9c:af:84 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWErswTeZTTwkEcSESNgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWRlNWI0N2YtYmQ0OS00NjE0LWI2NTgtOTk4MGNmZDE3 NzY5MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk MzEzZDJkYzYtYjQ0Ni00YmRkLWE2MWItZjAxMzVjYzIyYTgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjLBRkN8NOXuR5RJgjOHIC0MeWE5fDYe2y/2 VljmeYmIbiSB9O5OYWjJsA4hxfv+t1e34jDAymwkVGj6EU7i7fRv6Srvw2ZaJBuk hef42OhGJoptvWqTkEGHtvStGIIi549qvoMuAMY+RBZHJtVz/E6R1tDtZZZcsVb7 vzzJKgHjwIn31KPb3aG5wloWOrD5TquNCi03R+k5Cld27zIwqkUOCi358QPUz0sX yDobYqvYdqQQIqdYrwtJVG4/3LC9Nr6zr2gIvmdsyOxvwTcy7rIxOxf5t4yOkMWs sRXmL3KJIbjgl4IkBg03EOGTwgxfLUXcsa6mgzWqPCBLy/2p/QIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFLO5yDmtdSGQSdmqDNl1d0UKvKAoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85ZGU1 YjQ3Zi1iZDQ5LTQ2MTQtYjY1OC05OTgwY2ZkMTc3NjkvNjRlMDJkY2YtN2EyOC0z MGVkLWE5MTAtYjU1ZWU3MWNjZTBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOWRlNWI0N2YtYmQ0OS00NjE0LWI2 NTgtOTk4MGNmZDE3NzY5LzlkZTViNDdmLWJkNDktNDYxNC1iNjU4LTk5ODBjZmQx Nzc2OS5jcmwwHwYDVR0jBBgwFoAUjxiLGO21eSNV+7m/BlYK0+IBpDcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85ZGU1YjQ3Zi1iZDQ5LTQ2MTQtYjY1OC05OTgw Y2ZkMTc3NjkuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACCdwED BACCdwIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAA7XqR8+c2jWxgW9QzTONanfDoapVSSOpCj6w+bo134sD sd7DxCEPfVZQqoqvJ25+KcX+v6FnP5vm4GTRkVQvpEMN4GU00ekbtKK2tIrqkO+Y 0DGSF9XPziAWekfM7BMqIayA/pIhr4KTDu7GSbICkjywktZCNsTEN67qZ93+iwJo huvy1qRKDXtPpUiOFijH02qYq9nWIN8hk2tkwvlgJeD4Idu7HxnPkLKbbYDanXbf L+iK+QMA72foQobSZMpJGA4IHqND6zRnatCaBg68x1pejOr43zsHnlMLojlzy27N W0YLThwREPc1HBXXx0hPrEs4FWwV2pNkIn2w5pyvhA== -----END CERTIFICATE-----Generated at Sat Aug 23 21:58:46 2025 by rpki-client