$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/9e34ec51-e0ea-37a3-a13e-58c3020191b5.roa File: 9e34ec51-e0ea-37a3-a13e-58c3020191b5.roa (raw, json) Hash identifier: QAEgSUsKdqUomA2VZzsCF1prKIc7LJlBNDKulZitmuk= Subject key identifier: 89:14:0B:D0:7C:5A:AA:73:58:A9:75:D0:A3:A3:FD:C6:91:94:F0:7B Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584AF01442D1CEADAA3939D30F80 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/9e34ec51-e0ea-37a3-a13e-58c3020191b5.roa Signing time: Fri 22 Aug 2025 05:35:35 +0000 ROA not before: Fri 22 Aug 2025 05:35:35 +0000 ROA not after: Thu 20 Nov 2025 06:35:35 +0000 asID: 31898 IP address blocks: 130.35.8.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:14:42:d1:ce:ad:aa:39:39:d3:0f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Aug 22 05:35:35 2025 GMT Not After : Nov 20 06:35:35 2025 GMT Subject: CN=c280f238-eb27-41be-80d8-9e885f342844 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:9c:e1:2a:c5:84:ce:95:7b:81:c0:ed:c6:db: 66:07:ab:8a:0d:3c:c5:ef:86:95:8d:98:59:94:e7: b6:bb:99:e4:08:49:4d:8f:d8:bc:10:87:37:22:e1: 7b:a9:5f:e1:53:a0:d9:d3:58:6d:0c:e1:d9:24:c9: a2:e5:72:9f:3f:8d:f8:82:65:c1:cf:57:77:62:81: 6a:89:c5:fc:2e:2c:07:65:1e:d5:7e:b1:0d:f6:10: c9:e1:03:c9:1a:b7:fb:81:01:9e:f7:ae:68:75:08: c9:a9:b7:a6:5c:17:ca:93:6e:ec:db:29:af:51:6c: 8d:54:1c:91:f8:66:26:25:1e:f0:50:4c:1b:0c:0b: ab:63:f3:a9:5e:33:c5:3f:ba:1c:ce:af:78:2a:90: 84:76:1e:67:15:b4:f5:44:97:34:02:2f:d2:db:a8: 70:64:47:98:6b:16:5a:93:4a:31:0c:36:bc:ba:20: f5:c0:d4:9f:5b:a6:b2:38:d9:05:37:75:19:7b:13: 2c:3b:86:89:1f:ec:36:57:f7:1e:3c:00:ef:8e:87: b0:2f:1c:2c:83:4b:af:c8:21:7e:c7:4e:4d:99:3f: 2e:c4:b1:e1:7d:f8:dc:36:5a:38:e2:a4:dc:81:10: 74:31:ad:19:ab:ae:21:61:b3:78:bd:48:b7:48:ad: 7e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:14:0B:D0:7C:5A:AA:73:58:A9:75:D0:A3:A3:FD:C6:91:94:F0:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/9e34ec51-e0ea-37a3-a13e-58c3020191b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 130.35.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:0f:d2:9c:5e:88:18:ec:b6:68:ed:2b:a6:82:a4:de:9a:0b: b6:72:eb:7f:da:ca:d1:93:9b:7d:90:f1:4d:45:e7:a6:bc:4d: aa:63:ae:6d:f6:e1:f7:89:64:61:38:d5:7b:22:9d:1a:1f:89: 5e:bd:d1:61:f0:91:56:cd:6f:02:6d:87:79:74:42:68:ef:eb: 3d:54:94:01:dd:af:20:e6:c2:ce:c6:f6:c5:e2:2f:b2:32:5d: 0a:b9:38:f9:b4:c4:3b:f5:43:1a:44:d1:d0:43:ca:b7:8b:40: 0f:4f:09:ca:7d:75:a8:ff:94:19:21:b7:fc:0a:04:8b:d2:3d: c1:14:59:bb:27:27:ee:a8:d7:df:e8:90:61:b1:8c:2e:e6:01: 48:77:a2:e3:1e:b4:9f:2e:ff:41:3f:60:18:89:7c:4f:8b:2c: ed:cd:60:ac:19:c5:3e:ef:64:9a:e2:dc:b5:23:bb:1f:c1:08: 65:68:dd:a7:e6:ff:96:82:ad:79:2a:bd:ab:b7:26:31:5f:83: 59:73:eb:24:1b:71:50:e4:bb:98:28:76:4e:16:53:77:05:c0: 71:b8:aa:11:f4:db:db:96:ce:4e:4e:b9:02:ad:d0:b2:19:39: 55:40:da:bf:63:66:3f:4a:a7:52:b3:28:85:da:12:46:68:2c: 45:c6:57:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErwFELRzq2qOTnTD4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI1MDgyMjA1MzUzNVoXDTI1MTEyMDA2MzUzNVowLzEtMCsGA1UEAxMk YzI4MGYyMzgtZWIyNy00MWJlLTgwZDgtOWU4ODVmMzQyODQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5zhKsWEzpV7gcDtxttmB6uKDTzF74aVjZhZ lOe2u5nkCElNj9i8EIc3IuF7qV/hU6DZ01htDOHZJMmi5XKfP434gmXBz1d3YoFq icX8LiwHZR7VfrEN9hDJ4QPJGrf7gQGe965odQjJqbemXBfKk27s2ymvUWyNVByR +GYmJR7wUEwbDAurY/OpXjPFP7oczq94KpCEdh5nFbT1RJc0Ai/S26hwZEeYaxZa k0oxDDa8uiD1wNSfW6ayONkFN3UZexMsO4aJH+w2V/cePADvjoewLxwsg0uvyCF+ x05NmT8uxLHhffjcNlo44qTcgRB0Ma0Zq64hYbN4vUi3SK1+FwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIkUC9B8WqpzWKl10KOj/caRlPB7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvOWUzNGVjNTEtZTBlYS0z N2EzLWExM2UtNThjMzAyMDE5MWI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgiMIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGEP0pxeiBjstmjtK6aCpN6aC7Zy63/aytGTm32Q8U1F56a8Tapjrm32 4feJZGE41XsinRofiV690WHwkVbNbwJth3l0Qmjv6z1UlAHdryDmws7G9sXiL7Iy XQq5OPm0xDv1QxpE0dBDyreLQA9PCcp9daj/lBkht/wKBIvSPcEUWbsnJ+6o19/o kGGxjC7mAUh3ouMetJ8u/0E/YBiJfE+LLO3NYKwZxT7vZJri3LUjux/BCGVo3afm /5aCrXkqvau3JjFfg1lz6yQbcVDku5godk4WU3cFwHG4qhH029uWzk5OuQKt0LIZ OVVA2r9jZj9Kp1KzKIXaEkZoLEXGV+g= -----END CERTIFICATE-----Generated at Sat Aug 23 18:56:17 2025 by rpki-client