$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/1d4b96fc-a744-3cbc-82de-6885987d36e1.roa File: 1d4b96fc-a744-3cbc-82de-6885987d36e1.roa (raw, json) Hash identifier: Xx1unoI/Qz/zplwfchICE+ZIdNbSclvP26T28HT00Ro= Subject key identifier: E8:4C:2A:73:FA:59:32:59:F8:99:63:BA:85:01:F4:57:60:25:9C:AC Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584AF01429725598DB8A8FC71500 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/1d4b96fc-a744-3cbc-82de-6885987d36e1.roa Signing time: Fri 22 Aug 2025 05:35:23 +0000 ROA not before: Fri 22 Aug 2025 05:35:23 +0000 ROA not after: Thu 20 Nov 2025 06:35:23 +0000 asID: 31898 IP address blocks: 130.35.140.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:14:29:72:55:98:db:8a:8f:c7:15:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Aug 22 05:35:23 2025 GMT Not After : Nov 20 06:35:23 2025 GMT Subject: CN=e69591ea-4237-44cb-9619-142501803af9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e9:c1:d4:55:4b:64:7d:6a:e8:49:c5:73:63: ae:15:87:42:4f:73:8a:b6:d8:d7:1e:bf:60:05:2a: ba:26:6c:ff:46:69:02:1f:4a:f9:1d:39:b6:5d:87: fa:36:09:6c:4d:9a:b7:21:fb:f2:16:6e:ad:c0:aa: 81:16:e7:d0:fe:57:7c:02:4d:b3:9e:9f:e5:57:c8: e3:c1:e1:a1:06:00:0d:39:bc:87:32:cd:6b:78:f8: c6:8a:db:18:9a:1b:9b:34:4c:ec:7a:ee:5e:0d:c5: b5:0f:f8:4a:e0:da:a2:38:89:90:e0:df:47:80:a5: a4:bd:d8:96:42:1b:34:a4:ee:a1:f0:e4:31:fe:cb: 0b:a1:99:d0:e0:4e:26:bc:a3:32:8c:d1:e1:b2:66: fb:98:8f:3d:c3:6b:85:05:0e:1a:b6:9c:e4:19:f4: bf:02:09:d2:a1:19:bc:00:0f:10:25:ed:3d:3a:9a: be:b4:04:8d:58:9b:ed:e4:61:91:ee:6d:70:83:b7: d0:85:19:79:37:36:d3:4b:f6:30:5b:1d:dd:f0:c7: 5a:24:d4:5e:86:6b:8d:c5:a1:25:5f:e2:4a:74:e1: 33:b9:0a:25:4d:c3:39:57:e1:2b:cd:84:62:3b:9e: 05:6b:3f:f4:07:44:0d:1c:95:06:e2:0f:17:10:7b: 9b:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:4C:2A:73:FA:59:32:59:F8:99:63:BA:85:01:F4:57:60:25:9C:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/1d4b96fc-a744-3cbc-82de-6885987d36e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 130.35.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:ef:8e:b2:65:2a:18:50:19:ff:d2:f8:d8:35:68:5a:4e:d6: 27:31:e7:7d:93:54:7b:f2:0d:0b:2b:b2:c4:2c:5a:a1:77:3d: 0e:f7:6d:e0:d9:67:48:28:bc:56:34:a8:2b:d4:11:a5:f6:65: 87:f2:9a:9b:1f:af:37:ba:25:6f:cf:8b:f7:b7:0e:75:19:d8: 3b:84:f7:4d:5d:a4:74:ee:47:f1:b9:7c:b8:4e:dd:56:20:a5: bc:5f:3c:e6:43:50:c6:1f:e6:66:21:99:e1:a4:01:d5:55:65: cc:90:b6:45:f5:7e:a2:e8:4c:44:59:eb:95:c3:69:d9:3b:40: 2b:72:f6:77:5a:00:ec:e3:66:9f:3e:5d:bf:7f:d8:f6:a9:34: 02:52:e2:15:79:4f:c2:1d:2b:9a:7f:2e:0d:82:47:74:2c:92: 81:97:3b:37:7b:24:53:e3:c4:e4:0a:8a:f5:50:d4:bf:8d:c1: 5f:ab:bf:8d:7e:40:15:22:8f:af:f9:4a:4b:c0:5a:e4:dd:91: 00:d4:25:bf:1d:d2:75:91:d9:d8:b3:bf:1a:fe:8f:9e:05:e8: 74:60:95:b3:a2:7f:5e:13:c0:f0:18:f6:72:d2:f4:44:11:5e: f4:09:36:e3:ff:84:d9:f0:84:6f:1f:db:c8:7c:a1:b2:94:1a: 9d:59:b0:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErwFClyVZjbio/HFQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI1MDgyMjA1MzUyM1oXDTI1MTEyMDA2MzUyM1owLzEtMCsGA1UEAxMk ZTY5NTkxZWEtNDIzNy00NGNiLTk2MTktMTQyNTAxODAzYWY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwunB1FVLZH1q6EnFc2OuFYdCT3OKttjXHr9g BSq6Jmz/RmkCH0r5HTm2XYf6NglsTZq3IfvyFm6twKqBFufQ/ld8Ak2znp/lV8jj weGhBgANObyHMs1rePjGitsYmhubNEzseu5eDcW1D/hK4NqiOImQ4N9HgKWkvdiW Qhs0pO6h8OQx/ssLoZnQ4E4mvKMyjNHhsmb7mI89w2uFBQ4atpzkGfS/AgnSoRm8 AA8QJe09Opq+tASNWJvt5GGR7m1wg7fQhRl5NzbTS/YwWx3d8MdaJNRehmuNxaEl X+JKdOEzuQolTcM5V+ErzYRiO54Faz/0B0QNHJUG4g8XEHubfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOhMKnP6WTJZ+JljuoUB9FdgJZysMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvMWQ0Yjk2ZmMtYTc0NC0z Y2JjLTgyZGUtNjg4NTk4N2QzNmUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgiOMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEzvjrJlKhhQGf/S+Ng1aFpO1icx532TVHvyDQsrssQsWqF3PQ73beDZ Z0govFY0qCvUEaX2ZYfympsfrze6JW/Pi/e3DnUZ2DuE901dpHTuR/G5fLhO3VYg pbxfPOZDUMYf5mYhmeGkAdVVZcyQtkX1fqLoTERZ65XDadk7QCty9ndaAOzjZp8+ Xb9/2PapNAJS4hV5T8IdK5p/Lg2CR3QskoGXOzd7JFPjxOQKivVQ1L+NwV+rv41+ QBUij6/5SkvAWuTdkQDUJb8d0nWR2dizvxr+j54F6HRglbOif14TwPAY9nLS9EQR XvQJNuP/hNnwhG8f28h8obKUGp1ZsNI= -----END CERTIFICATE-----Generated at Sat Aug 23 21:05:10 2025 by rpki-client