$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2df29342-5617-35c3-931f-39813eb37d1e.roa File: 2df29342-5617-35c3-931f-39813eb37d1e.roa (raw, json) Hash identifier: N58GCwEwkH5Xh8jBsH4ThDxwhH0wwW382BWTbqPJtU8= Subject key identifier: BA:4B:04:F2:77:63:85:AD:D1:16:13:10:2C:FA:77:EF:56:08:F0:0C Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEEAD70DB0B3024125B17D380 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2df29342-5617-35c3-931f-39813eb37d1e.roa Signing time: Thu 21 Aug 2025 17:32:37 +0000 ROA not before: Thu 21 Aug 2025 17:32:37 +0000 ROA not after: Wed 19 Nov 2025 18:32:37 +0000 asID: 31898 IP address blocks: 130.61.80.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:ad:70:db:0b:30:24:12:5b:17:d3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 21 17:32:37 2025 GMT Not After : Nov 19 18:32:37 2025 GMT Subject: CN=e5c4cbfd-0c17-496a-8a65-2c8ac9f433b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:53:e8:88:cd:16:45:22:a8:ba:57:b1:fc:59: 10:d3:6d:86:84:73:3b:8d:d0:79:42:9f:0e:02:98: bc:67:7e:3e:63:7b:02:62:e9:0d:c5:9d:71:1b:df: 94:93:bf:90:21:d4:1d:c2:90:b1:40:2b:92:f2:34: a1:e6:bd:46:98:6f:4a:4f:71:4c:51:47:a8:a6:f8: b1:62:dd:2d:fb:8e:55:7e:5a:39:bb:d8:68:0b:4f: 44:d2:99:ca:76:9a:ea:b2:8c:b6:19:6f:43:9f:7a: 8e:1d:cd:0e:58:bb:cb:3c:e1:ad:bb:9a:50:f1:db: e9:0e:1c:31:52:42:dc:42:1c:e9:21:5c:00:2f:7b: 68:c0:17:1a:f0:ba:ba:ca:d5:ae:ec:31:c4:8f:ce: 4e:f0:ea:c9:16:45:02:1d:d2:ac:e8:45:3f:97:3a: c2:d5:29:f6:f7:bd:54:b2:fa:47:65:a2:e1:0b:86: 28:07:49:91:40:73:9a:59:6b:a3:08:a3:8a:94:01: e9:61:ff:54:92:48:82:61:8c:68:42:ee:6c:50:f3: 67:1a:ef:84:fa:09:fe:95:10:af:d1:64:8c:db:4a: 0b:d0:dd:5b:00:30:75:36:80:5f:ba:88:9e:33:9e: 64:77:3c:2b:04:2e:2a:01:6b:c8:7b:e3:fb:18:13: f7:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:4B:04:F2:77:63:85:AD:D1:16:13:10:2C:FA:77:EF:56:08:F0:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2df29342-5617-35c3-931f-39813eb37d1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 130.61.80.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:73:eb:6f:e3:0e:89:b9:54:16:ba:0e:8d:49:e4:6b:f1:32: 3f:cf:d9:2d:68:ea:9e:26:f3:91:59:23:66:a6:cf:fe:61:8c: 3f:44:37:01:29:82:6a:a8:97:41:c0:ca:1c:96:70:cf:0e:b3: e5:d6:92:a3:f8:2f:a3:f6:d2:54:13:91:cd:9e:6e:f4:14:b8: 9d:52:21:12:e9:93:71:09:79:a0:c3:29:1d:3b:ae:46:6f:7c: ad:17:cc:20:6e:dd:35:65:ee:71:e2:3a:c7:7e:16:e8:fa:82: a7:68:d2:f7:17:a2:9d:3a:0e:86:15:23:73:b9:5e:f9:72:53: 62:f2:a6:d5:1a:31:ad:7d:89:21:7a:64:16:c5:e6:75:be:37: fa:80:17:9d:5a:b1:0e:3d:6c:2e:8d:b4:5a:07:03:d8:f6:d5: 7a:c1:ec:f9:50:ea:d3:ee:f9:b1:18:4e:34:25:a5:18:2b:dd: d9:d9:dd:0c:22:c2:ca:7b:ad:af:40:cb:0b:5b:ac:82:e5:4d: e6:e4:ad:cb:4f:b4:38:4a:21:2b:dd:6c:29:fa:bd:b1:de:fd: 8c:83:27:c5:de:07:37:d9:69:5b:3b:ea:22:12:59:95:49:af: 2b:26:0c:82:d6:7e:b2:0f:ff:60:71:7e:13:0f:8f:08:9d:0a: 9e:74:e7:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErurXDbCzAkElsX04AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMTE3MzIzN1oXDTI1MTExOTE4MzIzN1owLzEtMCsGA1UEAxMk ZTVjNGNiZmQtMGMxNy00OTZhLThhNjUtMmM4YWM5ZjQzM2IxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlPoiM0WRSKoulex/FkQ022GhHM7jdB5Qp8O Api8Z34+Y3sCYukNxZ1xG9+Uk7+QIdQdwpCxQCuS8jSh5r1GmG9KT3FMUUeopvix Yt0t+45Vflo5u9hoC09E0pnKdprqsoy2GW9Dn3qOHc0OWLvLPOGtu5pQ8dvpDhwx UkLcQhzpIVwAL3towBca8Lq6ytWu7DHEj85O8OrJFkUCHdKs6EU/lzrC1Sn2971U svpHZaLhC4YoB0mRQHOaWWujCKOKlAHpYf9UkkiCYYxoQu5sUPNnGu+E+gn+lRCv 0WSM20oL0N1bADB1NoBfuoieM55kdzwrBC4qAWvIe+P7GBP3vQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLpLBPJ3Y4Wt0RYTECz6d+9WCPAMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMmRmMjkzNDItNTYxNy0z NWMzLTkzMWYtMzk4MTNlYjM3ZDFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDgj1QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH5z62/jDom5VBa6Do1J5GvxMj/P2S1o6p4m85FZI2amz/5hjD9ENwEp gmqol0HAyhyWcM8Os+XWkqP4L6P20lQTkc2ebvQUuJ1SIRLpk3EJeaDDKR07rkZv fK0XzCBu3TVl7nHiOsd+Fuj6gqdo0vcXop06DoYVI3O5XvlyU2LyptUaMa19iSF6 ZBbF5nW+N/qAF51asQ49bC6NtFoHA9j21XrB7PlQ6tPu+bEYTjQlpRgr3dnZ3Qwi wsp7ra9AywtbrILlTebkrctPtDhKISvdbCn6vbHe/YyDJ8XeBzfZaVs76iISWZVJ rysmDILWfrIP/2BxfhMPjwidCp50528= -----END CERTIFICATE-----Generated at Sat Aug 23 17:59:51 2025 by rpki-client