$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/dad674c5-ebd7-3788-b544-2d295a8ac901.roa File: dad674c5-ebd7-3788-b544-2d295a8ac901.roa (raw, json) Hash identifier: CR9wiUj7MTy5cRe6wuKL8DbEzCK+ty3RU5iA2ygQfVg= Subject key identifier: 81:CD:C9:AD:98:53:C9:52:A9:F5:B7:ED:FC:20:91:76:34:6E:A7:97 Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584AF01420EDFAE2E18B28B18C60 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/dad674c5-ebd7-3788-b544-2d295a8ac901.roa Signing time: Fri 22 Aug 2025 05:35:19 +0000 ROA not before: Fri 22 Aug 2025 05:35:19 +0000 ROA not after: Thu 20 Nov 2025 06:35:19 +0000 asID: 31898 IP address blocks: 130.35.136.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:14:20:ed:fa:e2:e1:8b:28:b1:8c:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Aug 22 05:35:19 2025 GMT Not After : Nov 20 06:35:19 2025 GMT Subject: CN=2fa00beb-03dc-4d66-b81a-023fe79d351f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:2c:bc:80:08:b9:a2:21:42:e7:30:fc:29:40: bd:b1:80:57:c1:8d:6a:94:0f:f0:61:8a:97:de:8a: e7:dd:85:5f:c4:96:2c:ce:e1:14:35:13:00:a0:02: de:2a:7e:6f:22:dc:6c:54:c2:0c:88:32:c5:53:ec: 55:7a:ce:f0:29:4a:30:0b:cf:86:ba:1a:39:d7:f3: 17:b8:dc:2b:02:96:f0:cb:68:62:3f:8b:20:93:27: b7:07:ba:5e:b8:2f:a2:07:dd:8f:f1:ed:d8:cf:75: 33:6d:50:0b:dc:2b:0f:73:19:86:24:d1:25:a1:88: 51:3c:1b:cf:b3:c8:82:3e:74:61:c1:1b:09:22:62: 24:70:9c:b2:06:2d:f9:da:1c:f0:be:80:3d:8c:fb: 2f:b5:b0:a7:77:77:01:eb:4a:eb:ae:96:39:5c:7b: 08:e2:f1:0b:0e:2b:36:b8:6a:f3:f6:8d:1f:f3:b7: 72:a9:d7:79:7b:3a:23:3f:45:f6:af:38:f3:38:5c: 55:20:0d:29:5e:40:78:e6:bb:20:fb:55:32:8c:dc: 2d:1f:d6:9e:8f:34:3b:05:05:45:5c:27:f2:3e:c0: ba:1c:7b:e1:0c:90:c3:e7:64:e0:f9:23:f0:81:8d: 50:59:b3:ca:15:66:04:bb:c0:69:fa:f0:a5:e2:02: 4f:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:CD:C9:AD:98:53:C9:52:A9:F5:B7:ED:FC:20:91:76:34:6E:A7:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/dad674c5-ebd7-3788-b544-2d295a8ac901.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 130.35.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:4d:9d:47:f6:58:48:1f:cf:6c:24:b6:fc:30:3b:6d:ae:69: 08:7a:6f:22:27:5b:05:e2:17:59:dd:6b:06:a2:4c:6d:b9:ad: a7:17:ca:dd:53:09:7b:a7:84:1a:fc:cd:cd:34:ff:eb:b7:86: bd:ba:4b:bc:2d:3d:19:50:c3:a6:20:7e:36:6e:bc:58:20:e3: 98:94:d2:db:18:fb:fe:04:5b:4a:e7:ee:9d:2e:0b:b3:80:68: ac:85:ee:93:73:19:da:44:67:c0:c6:e7:25:2a:bc:2d:38:9c: 51:97:14:d9:ae:4f:c4:2d:e7:26:c2:a5:9c:a6:c8:2d:3f:70: 8d:99:56:98:3d:25:42:56:6b:44:7c:9a:85:46:e0:61:02:21: 1e:de:66:6e:25:60:74:df:53:4d:77:96:dc:79:5b:b8:ec:3f: fc:eb:a6:2e:0a:ef:18:b5:66:a7:da:2d:91:cf:b6:e6:ef:7b: f9:e7:b3:e9:88:44:84:d4:a2:df:5e:9b:bd:7e:c7:e0:2b:ee: 81:07:35:c7:65:51:d1:e1:c6:88:e0:98:a5:28:a3:6e:7f:c6: 24:cc:f2:4d:9a:47:48:3e:96:33:f0:85:5c:37:a6:3b:7c:47: 8a:71:64:0a:46:ff:11:90:c7:79:dc:35:15:15:ff:bf:eb:e8: d0:c4:f5:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErwFCDt+uLhiyixjGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI1MDgyMjA1MzUxOVoXDTI1MTEyMDA2MzUxOVowLzEtMCsGA1UEAxMk MmZhMDBiZWItMDNkYy00ZDY2LWI4MWEtMDIzZmU3OWQzNTFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkyy8gAi5oiFC5zD8KUC9sYBXwY1qlA/wYYqX 3orn3YVfxJYszuEUNRMAoALeKn5vItxsVMIMiDLFU+xVes7wKUowC8+Guho51/MX uNwrApbwy2hiP4sgkye3B7peuC+iB92P8e3Yz3UzbVAL3CsPcxmGJNEloYhRPBvP s8iCPnRhwRsJImIkcJyyBi352hzwvoA9jPsvtbCnd3cB60rrrpY5XHsI4vELDis2 uGrz9o0f87dyqdd5ezojP0X2rzjzOFxVIA0pXkB45rsg+1UyjNwtH9aejzQ7BQVF XCfyPsC6HHvhDJDD52Tg+SPwgY1QWbPKFWYEu8Bp+vCl4gJPdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIHNya2YU8lSqfW37fwgkXY0bqeXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvZGFkNjc0YzUtZWJkNy0z Nzg4LWI1NDQtMmQyOTVhOGFjOTAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgiOIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKdNnUf2WEgfz2wktvwwO22uaQh6byInWwXiF1ndawaiTG25racXyt1T CXunhBr8zc00/+u3hr26S7wtPRlQw6YgfjZuvFgg45iU0tsY+/4EW0rn7p0uC7OA aKyF7pNzGdpEZ8DG5yUqvC04nFGXFNmuT8Qt5ybCpZymyC0/cI2ZVpg9JUJWa0R8 moVG4GECIR7eZm4lYHTfU013ltx5W7jsP/zrpi4K7xi1ZqfaLZHPtubve/nns+mI RITUot9em71+x+Ar7oEHNcdlUdHhxojgmKUoo25/xiTM8k2aR0g+ljPwhVw3pjt8 R4pxZApG/xGQx3ncNRUV/7/r6NDE9Rg= -----END CERTIFICATE-----Generated at Sat Aug 23 16:38:35 2025 by rpki-client