$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/38f0c563-e46d-302a-9059-c1c007b4ebd8.roa File: 38f0c563-e46d-302a-9059-c1c007b4ebd8.roa (raw, json) Hash identifier: HV78yViaaB4cNS2+KnEipEgFkgb8MaOZbpdku8uhqMk= Subject key identifier: 0F:32:ED:A9:7D:6E:EF:D2:32:A9:A4:18:FB:91:03:82:AE:03:F8:FC Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEEAD388E2F58D8BE1929E000 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/38f0c563-e46d-302a-9059-c1c007b4ebd8.roa Signing time: Thu 21 Aug 2025 17:32:10 +0000 ROA not before: Thu 21 Aug 2025 17:32:10 +0000 ROA not after: Wed 19 Nov 2025 18:32:10 +0000 asID: 31898 IP address blocks: 130.162.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:ad:38:8e:2f:58:d8:be:19:29:e0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 21 17:32:10 2025 GMT Not After : Nov 19 18:32:10 2025 GMT Subject: CN=af7b79b6-a789-477d-ad65-0e2ddc38bc27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ce:88:86:0f:e9:da:aa:04:d0:86:7f:85:6d: dc:15:97:bf:2b:af:3e:02:a3:89:86:a0:4e:11:b2: 39:37:77:6a:e8:97:f2:67:40:46:7b:37:f6:ce:4a: c4:67:ee:a7:cf:cf:ff:e7:05:94:58:c1:5d:fe:1a: 8a:3a:03:5e:5f:71:71:f3:ab:2c:93:59:6f:1a:d5: ff:2b:cd:47:71:57:69:d1:f0:26:74:db:2a:59:cc: 58:c0:78:01:a1:8c:c5:40:3f:9b:86:a4:cf:2e:72: d3:d9:f5:6d:75:11:ed:bf:36:37:e3:57:66:8b:79: 59:c3:90:7d:0b:fb:e1:f4:fb:21:37:56:7a:5f:a7: 8d:f4:7b:bb:9a:33:a5:da:70:1c:f6:f9:e2:04:eb: 46:4b:39:d4:5e:6f:24:7a:09:6b:99:44:96:4f:fb: ef:f3:d1:0f:33:c9:9b:eb:fa:eb:ed:3c:9d:63:79: 73:17:ca:0d:d3:30:c9:91:68:b6:49:d7:4b:57:61: 6c:10:cd:10:50:b9:0a:2b:13:cc:51:35:aa:3d:c7: 54:9e:eb:b5:ff:cc:2a:d5:5d:16:f5:f1:af:a6:ad: 97:49:c9:7f:6c:64:21:e9:b3:5e:9a:07:d8:6e:45: 7a:69:dc:98:7d:d9:91:02:83:50:38:dc:ce:97:5e: c5:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:32:ED:A9:7D:6E:EF:D2:32:A9:A4:18:FB:91:03:82:AE:03:F8:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/38f0c563-e46d-302a-9059-c1c007b4ebd8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 130.162.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:e3:20:e8:d6:b3:41:6e:ca:8f:bf:9d:bc:b5:b3:0f:b1:e8: 2e:24:7b:ce:06:b7:62:41:83:b6:55:a1:14:f1:9d:fe:15:cd: aa:4c:d0:17:5e:96:5b:25:04:61:e5:cf:e0:2d:2a:fa:2d:f0: 4a:d5:0a:03:3a:ff:b1:3a:98:85:9e:6b:d8:2a:c6:19:84:8e: 42:cb:24:f1:17:ac:0f:17:89:d8:3d:5d:25:0a:ee:a2:23:18: ae:2f:b2:62:7f:9e:53:55:b2:a0:91:6f:5b:c1:7d:c4:0e:65: 01:a3:eb:39:19:f2:fc:97:b1:ed:86:2d:61:20:3b:42:47:35: a9:44:d9:3f:0f:57:44:e3:89:d0:91:7e:2a:04:da:1c:4d:ad: 45:47:39:41:00:4f:5e:b6:c8:cd:61:ef:7a:75:7f:af:ba:ca: 84:06:41:05:47:93:c6:fb:23:d0:4b:ef:09:63:24:42:8d:3e: a7:2a:00:eb:e6:b7:4e:eb:16:74:34:4b:d5:87:9b:43:29:bd: 75:e9:f2:9d:c6:da:78:37:98:fe:b7:af:2e:92:07:3b:68:8a: b2:47:62:56:08:6b:b7:c0:db:08:a7:bd:1e:46:e6:a8:f2:4b: 54:7f:bb:c5:37:5a:f1:ac:ec:e0:3e:30:77:0b:6c:cf:d0:5e: c0:bd:bb:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErurTiOL1jYvhkp4AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMTE3MzIxMFoXDTI1MTExOTE4MzIxMFowLzEtMCsGA1UEAxMk YWY3Yjc5YjYtYTc4OS00NzdkLWFkNjUtMGUyZGRjMzhiYzI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqM6Ihg/p2qoE0IZ/hW3cFZe/K68+AqOJhqBO EbI5N3dq6JfyZ0BGezf2zkrEZ+6nz8//5wWUWMFd/hqKOgNeX3Fx86ssk1lvGtX/ K81HcVdp0fAmdNsqWcxYwHgBoYzFQD+bhqTPLnLT2fVtdRHtvzY341dmi3lZw5B9 C/vh9PshN1Z6X6eN9Hu7mjOl2nAc9vniBOtGSznUXm8keglrmUSWT/vv89EPM8mb 6/rr7TydY3lzF8oN0zDJkWi2SddLV2FsEM0QULkKKxPMUTWqPcdUnuu1/8wq1V0W 9fGvpq2XScl/bGQh6bNemgfYbkV6adyYfdmRAoNQONzOl17FMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA8y7al9bu/SMqmkGPuRA4KuA/j8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMzhmMGM1NjMtZTQ2ZC0z MDJhLTkwNTktYzFjMDA3YjRlYmQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFgqIgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADbjIOjWs0Fuyo+/nby1sw+x6C4ke84Gt2JBg7ZVoRTxnf4VzapM0Bde llslBGHlz+AtKvot8ErVCgM6/7E6mIWea9gqxhmEjkLLJPEXrA8Xidg9XSUK7qIj GK4vsmJ/nlNVsqCRb1vBfcQOZQGj6zkZ8vyXse2GLWEgO0JHNalE2T8PV0TjidCR fioE2hxNrUVHOUEAT162yM1h73p1f6+6yoQGQQVHk8b7I9BL7wljJEKNPqcqAOvm t07rFnQ0S9WHm0MpvXXp8p3G2ng3mP63ry6SBztoirJHYlYIa7fA2winvR5G5qjy S1R/u8U3WvGs7OA+MHcLbM/QXsC9u1s= -----END CERTIFICATE-----Generated at Sat Aug 23 15:38:29 2025 by rpki-client