$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/1656c190-f3a3-3533-a64a-a5b4f175f7d2.roa File: 1656c190-f3a3-3533-a64a-a5b4f175f7d2.roa (raw, json) Hash identifier: h9jaIr2WYZG5C5H3lg5hu7oHu6W1i1tJLj6qqq65xpA= Subject key identifier: B5:E2:E7:6A:7B:56:3F:08:86:73:25:09:00:70:02:1D:ED:8D:1F:1B Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584AF013FEFC214D91C77D63D200 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/1656c190-f3a3-3533-a64a-a5b4f175f7d2.roa Signing time: Fri 22 Aug 2025 05:35:03 +0000 ROA not before: Fri 22 Aug 2025 05:35:03 +0000 ROA not after: Thu 20 Nov 2025 06:35:03 +0000 asID: 31898 IP address blocks: 130.35.0.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:13:fe:fc:21:4d:91:c7:7d:63:d2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Aug 22 05:35:03 2025 GMT Not After : Nov 20 06:35:03 2025 GMT Subject: CN=38d3c8d8-f448-44e5-9b82-3f71d63d9187 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c9:7d:94:ef:f3:87:99:ad:07:ec:e2:ba:47: e1:d5:fa:6f:84:ac:2a:d5:ec:91:a8:a0:df:40:8d: 03:d0:0d:5b:c0:08:17:e8:a1:8d:80:e6:de:5b:b4: bf:97:4b:a8:79:b5:fc:1f:6b:19:78:c7:ad:05:db: 39:e6:ec:bd:1d:22:58:a9:d2:31:41:08:19:53:f8: 55:0d:bc:57:3c:7a:70:87:70:46:86:3b:42:29:5b: c0:52:84:91:cc:88:0f:69:c8:ec:c5:9a:9e:f2:aa: 4d:54:8e:a0:de:b0:70:b1:2c:e0:6b:77:a0:bd:47: 9c:a5:c0:06:51:69:e3:49:e7:5a:8d:10:36:18:ea: 54:0a:22:3f:57:9b:91:f5:f3:89:1a:cb:12:41:25: a5:fd:7b:79:3c:89:93:65:0c:84:c1:76:2a:5a:9e: f7:ce:d3:47:ed:bb:7f:a5:84:e5:00:d2:53:a3:87: 1b:6e:c3:e4:8f:8b:d2:91:0f:1a:25:1d:b8:b6:21: 1c:5a:cf:d7:94:80:c5:f9:b5:9c:a5:98:bd:ca:61: 28:87:11:66:44:92:e7:11:39:1f:c6:6a:7a:59:c7: 40:d9:29:42:92:00:fc:55:6c:0d:f8:7c:57:25:fe: 21:69:c2:dc:d3:9e:ca:92:ae:77:1d:8f:39:75:e8: 23:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:E2:E7:6A:7B:56:3F:08:86:73:25:09:00:70:02:1D:ED:8D:1F:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/1656c190-f3a3-3533-a64a-a5b4f175f7d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 130.35.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:9e:b5:2d:c5:38:48:ad:eb:28:f6:01:a4:cc:1e:43:50:88: 3a:10:9d:ff:0b:e1:c3:9a:a8:30:e8:53:0d:87:ed:4a:fe:00: b4:9f:db:6d:b0:81:42:83:68:7d:4c:ba:3c:e4:d1:a8:26:7b: 58:c6:0b:e9:9e:05:61:75:12:4e:ef:b4:89:ec:c0:00:4a:c5: ae:cb:fa:45:67:5b:44:56:d5:30:3a:6c:f1:d1:46:e0:37:02: 63:4f:73:17:b1:de:41:67:47:e6:3a:0f:34:de:1d:1c:5f:47: 5e:9b:fc:69:7e:df:26:b9:a9:ca:2b:0a:75:57:69:cd:64:5a: c7:2e:dd:a3:8c:9c:de:57:8b:aa:53:d9:bc:6f:f4:59:f9:11: 28:7f:11:78:cf:17:50:4c:3d:41:a5:81:e3:4f:64:4f:ee:77: a2:b9:87:35:d6:28:2f:db:f3:ca:3f:5f:59:f4:d3:2c:9e:38: c4:71:3f:93:d0:90:df:98:bd:75:ee:ad:a4:7d:2b:a4:35:4b: ff:8f:28:e5:4b:ee:bd:2e:14:73:6b:0a:2e:7d:be:40:0e:7d: 49:8c:0f:8f:c1:08:6d:f3:b4:a4:76:7e:c7:33:e5:6a:e0:bd: 71:46:b9:e9:77:1d:02:4e:ff:4b:1e:4f:71:07:49:df:f3:b3: 67:84:4f:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErwE/78IU2Rx31j0gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI1MDgyMjA1MzUwM1oXDTI1MTEyMDA2MzUwM1owLzEtMCsGA1UEAxMk MzhkM2M4ZDgtZjQ0OC00NGU1LTliODItM2Y3MWQ2M2Q5MTg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsl9lO/zh5mtB+ziukfh1fpvhKwq1eyRqKDf QI0D0A1bwAgX6KGNgObeW7S/l0uoebX8H2sZeMetBds55uy9HSJYqdIxQQgZU/hV DbxXPHpwh3BGhjtCKVvAUoSRzIgPacjsxZqe8qpNVI6g3rBwsSzga3egvUecpcAG UWnjSedajRA2GOpUCiI/V5uR9fOJGssSQSWl/Xt5PImTZQyEwXYqWp73ztNH7bt/ pYTlANJTo4cbbsPkj4vSkQ8aJR24tiEcWs/XlIDF+bWcpZi9ymEohxFmRJLnETkf xmp6WcdA2SlCkgD8VWwN+HxXJf4hacLc057Kkq53HY85degjNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLXi52p7Vj8IhnMlCQBwAh3tjR8bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvMTY1NmMxOTAtZjNhMy0z NTMzLWE2NGEtYTViNGYxNzVmN2QyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgiMAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ+etS3FOEit6yj2AaTMHkNQiDoQnf8L4cOaqDDoUw2H7Ur+ALSf222w gUKDaH1Mujzk0agme1jGC+meBWF1Ek7vtInswABKxa7L+kVnW0RW1TA6bPHRRuA3 AmNPcxex3kFnR+Y6DzTeHRxfR16b/Gl+3ya5qcorCnVXac1kWscu3aOMnN5Xi6pT 2bxv9Fn5ESh/EXjPF1BMPUGlgeNPZE/ud6K5hzXWKC/b88o/X1n00yyeOMRxP5PQ kN+YvXXuraR9K6Q1S/+PKOVL7r0uFHNrCi59vkAOfUmMD4/BCG3ztKR2fscz5Wrg vXFGuel3HQJO/0seT3EHSd/zs2eET3M= -----END CERTIFICATE-----Generated at Sat Aug 23 15:54:11 2025 by rpki-client