$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/296fd25a-2043-39e0-a6ad-cf4e1e62ff1f.roa File: 296fd25a-2043-39e0-a6ad-cf4e1e62ff1f.roa (raw, json) Hash identifier: Ie1lYLLuqSAM0oS5MZos4VTM8W+wBAMYGrz1EfF8qKk= Subject key identifier: 35:77:89:4C:C5:14:87:F3:50:98:51:AE:D8:D1:A0:E2:DF:47:2F:27 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEEAD5ECB6E73DCE641CDBD40 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/296fd25a-2043-39e0-a6ad-cf4e1e62ff1f.roa Signing time: Thu 21 Aug 2025 17:32:28 +0000 ROA not before: Thu 21 Aug 2025 17:32:28 +0000 ROA not after: Wed 19 Nov 2025 18:32:28 +0000 asID: 31898 IP address blocks: 130.61.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:ad:5e:cb:6e:73:dc:e6:41:cd:bd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 21 17:32:28 2025 GMT Not After : Nov 19 18:32:28 2025 GMT Subject: CN=04d9f697-18ce-4198-9f41-7ffbf2e1a3b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:ee:0d:ee:e8:b4:f7:af:1c:a2:7e:48:1a:f6: c3:29:2e:df:f5:2f:7e:07:a1:b4:28:77:6d:cd:a6: ad:67:a2:3a:c7:24:8c:c0:02:0d:ab:be:fe:dd:eb: 84:66:b8:1f:a3:bf:0d:52:94:9e:66:44:ab:83:77: 5a:d2:52:5c:2b:25:e6:a6:19:df:8f:43:a2:30:e6: 1e:5d:15:5b:73:55:fb:e6:30:16:72:bc:7a:5b:ef: d6:af:cb:72:ce:99:1f:67:b3:7f:e3:19:5f:9b:79: 99:17:0d:fa:f1:d1:80:53:dc:0f:d1:34:4d:44:c7: 1d:3c:b6:d7:45:51:05:e5:a3:fd:9a:ab:60:00:80: 6d:04:28:65:87:ee:b2:57:70:4f:5a:d1:ef:ff:d4: 3f:37:5a:d5:56:be:80:58:b8:cf:cd:54:bd:c4:58: 85:22:95:46:85:68:19:0d:79:7f:e4:b9:48:51:81: 93:2b:72:42:f5:2d:34:28:4e:14:a8:97:e6:58:f4: 2b:a6:c9:d2:41:02:e1:3a:e6:46:46:4e:42:16:1c: 70:a0:94:e3:f1:5b:72:cf:32:ca:af:a7:04:1a:27: c1:7a:e5:09:21:36:69:c4:48:95:43:3f:01:79:9f: ad:68:05:db:bf:cd:d5:18:12:87:b8:a9:43:d9:ac: c6:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:77:89:4C:C5:14:87:F3:50:98:51:AE:D8:D1:A0:E2:DF:47:2F:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/296fd25a-2043-39e0-a6ad-cf4e1e62ff1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 130.61.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:8c:5a:c8:6e:3e:b6:e4:58:78:f9:77:65:43:65:90:30:2a: be:e6:63:be:df:44:2f:67:09:47:df:c9:94:07:be:a1:b9:58: ed:21:2b:df:c9:7b:8d:1e:45:23:72:b4:0c:41:ae:15:61:5f: 03:a8:44:58:c1:fd:a7:e5:95:a9:80:cf:f8:06:d4:1a:88:48: 41:37:c3:5d:99:22:6d:80:41:bd:4c:f3:9e:f3:af:97:13:ca: 46:e5:03:c5:4f:c0:97:ba:1a:85:8e:af:18:7e:72:4c:5e:60: 80:fe:e1:75:c5:a2:61:57:ab:37:22:6f:46:f7:fe:ca:cd:49: 71:05:a1:e4:6d:5b:e8:6c:cf:5a:21:1a:ca:8b:0b:40:99:e5: 22:b2:f2:36:fa:64:4b:24:e7:f7:13:ad:1f:a8:36:e3:71:b3: 12:ab:c8:88:7f:ac:99:78:ba:f7:be:e2:7d:0e:e1:0b:75:19: af:2b:17:81:a3:5b:51:0d:61:6d:b4:af:82:bd:c8:54:9f:d2: a5:f1:81:69:29:1d:26:f8:ac:8f:02:38:2e:a9:3b:97:df:ff: 46:0c:5f:bb:29:04:82:a1:34:56:50:09:83:80:a3:fd:99:5c: 6d:3b:fb:24:c5:73:bc:67:47:0b:9a:39:a0:39:f7:37:4f:60: 4e:c7:b5:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErurV7LbnPc5kHNvUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMTE3MzIyOFoXDTI1MTExOTE4MzIyOFowLzEtMCsGA1UEAxMk MDRkOWY2OTctMThjZS00MTk4LTlmNDEtN2ZmYmYyZTFhM2IxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7e4N7ui0968con5IGvbDKS7f9S9+B6G0KHdt zaatZ6I6xySMwAINq77+3euEZrgfo78NUpSeZkSrg3da0lJcKyXmphnfj0OiMOYe XRVbc1X75jAWcrx6W+/Wr8tyzpkfZ7N/4xlfm3mZFw368dGAU9wP0TRNRMcdPLbX RVEF5aP9mqtgAIBtBChlh+6yV3BPWtHv/9Q/N1rVVr6AWLjPzVS9xFiFIpVGhWgZ DXl/5LlIUYGTK3JC9S00KE4UqJfmWPQrpsnSQQLhOuZGRk5CFhxwoJTj8VtyzzLK r6cEGifBeuUJITZpxEiVQz8BeZ+taAXbv83VGBKHuKlD2azGHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDV3iUzFFIfzUJhRrtjRoOLfRy8nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMjk2ZmQyNWEtMjA0My0z OWUwLWE2YWQtY2Y0ZTFlNjJmZjFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEgj0wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJSMWshuPrbkWHj5d2VDZZAwKr7mY77fRC9nCUffyZQHvqG5WO0hK9/J e40eRSNytAxBrhVhXwOoRFjB/afllamAz/gG1BqISEE3w12ZIm2AQb1M857zr5cT ykblA8VPwJe6GoWOrxh+ckxeYID+4XXFomFXqzcib0b3/srNSXEFoeRtW+hsz1oh GsqLC0CZ5SKy8jb6ZEsk5/cTrR+oNuNxsxKryIh/rJl4uve+4n0O4Qt1Ga8rF4Gj W1ENYW20r4K9yFSf0qXxgWkpHSb4rI8COC6pO5ff/0YMX7spBIKhNFZQCYOAo/2Z XG07+yTFc7xnRwuaOaA59zdPYE7HtRk= -----END CERTIFICATE-----Generated at Sat Aug 23 17:49:43 2025 by rpki-client