$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4eaf84bd-1592-3106-aa09-82a8aae56ca8.roa File: 4eaf84bd-1592-3106-aa09-82a8aae56ca8.roa (raw, json) Hash identifier: sKZkpXvgzJOc5+omtgItKi/RcvQkUVU6NfSx9LTdt+g= Subject key identifier: 06:3F:93:52:49:C0:1E:E6:54:23:43:39:48:3A:39:E9:73:A3:9E:B3 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEEAD6B2F468CDCA357FB5280 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4eaf84bd-1592-3106-aa09-82a8aae56ca8.roa Signing time: Thu 21 Aug 2025 17:32:34 +0000 ROA not before: Thu 21 Aug 2025 17:32:34 +0000 ROA not after: Wed 19 Nov 2025 18:32:34 +0000 asID: 31898 IP address blocks: 130.61.72.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:ad:6b:2f:46:8c:dc:a3:57:fb:52:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 21 17:32:34 2025 GMT Not After : Nov 19 18:32:34 2025 GMT Subject: CN=2f2bc547-472d-412a-9142-8cae267385b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:f4:91:88:9e:2d:de:f8:76:93:90:36:cf:2f: fc:62:77:04:f6:0e:e7:dc:93:6d:91:cd:de:1b:d2: 2a:04:98:04:47:49:ca:5e:da:5d:f8:13:30:16:4e: ca:75:f7:51:46:8a:38:73:43:1f:45:2c:e6:ec:1f: 72:c8:92:00:a0:00:0e:a7:c4:81:7f:88:c1:00:da: 24:e2:1a:b9:77:32:76:a6:8b:1c:9e:f8:5e:f2:23: bd:50:3c:52:2f:cd:37:b1:4b:b3:cf:8c:7a:43:28: bd:e8:23:b0:11:b0:0e:77:3e:90:a2:08:35:b1:2d: ba:59:61:1c:f1:a7:26:46:25:69:3a:e7:33:00:da: 52:5c:8c:a8:2c:1f:b1:fe:dc:83:31:f2:51:9d:64: e1:bd:d4:97:ed:7b:b1:08:1f:24:f5:32:6d:04:3f: 2d:06:44:b1:5d:1e:2a:e2:a1:b0:1c:e8:e5:c4:ff: 28:ad:27:ba:6e:a3:72:6e:64:69:35:59:cf:a4:fc: e4:3f:e0:8a:02:4f:e4:af:b3:10:17:3a:81:7b:18: cb:1e:fb:c1:95:96:78:b2:30:9a:44:ad:2a:8c:24: 30:44:3f:62:b7:df:dd:05:b0:b0:28:e0:80:e2:48: c7:58:18:dd:2d:7c:3b:1b:f2:06:47:db:f0:68:64: 61:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:3F:93:52:49:C0:1E:E6:54:23:43:39:48:3A:39:E9:73:A3:9E:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4eaf84bd-1592-3106-aa09-82a8aae56ca8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 130.61.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:dd:79:d4:7b:90:56:5f:bd:a1:76:b6:4a:41:4c:c0:7e:66: 4f:f4:04:cc:d3:0d:d7:c4:aa:55:08:08:00:03:bc:f1:24:c7: 8e:dc:ac:8f:a9:7f:04:81:a8:21:92:d5:ea:61:0e:d0:46:b1: d3:7a:80:0a:d9:1c:64:38:db:5d:ba:9b:87:c7:6d:ca:bb:bd: 8f:09:f6:3c:21:aa:b5:b6:f5:27:e7:39:91:40:10:19:55:29: 33:5d:3c:61:1f:c9:96:03:00:c7:a5:80:6a:1a:53:23:40:9c: 18:7f:a0:e2:a2:c7:92:32:9a:90:48:00:7c:e4:30:97:5e:31: 79:a9:3d:f8:3e:32:6d:74:ba:ed:3e:13:e1:45:a9:9e:b4:88: 4b:c8:97:b6:2f:ec:7d:53:95:47:71:3c:6f:58:35:2f:3e:03: fc:a0:0c:6f:f8:57:5b:30:fa:9d:3f:50:1b:34:1e:d6:1e:80: 2d:4e:71:18:60:2d:29:3a:6c:00:4b:d6:54:74:3d:98:4c:2e: 16:72:d4:91:92:c3:67:71:6d:b2:5e:7c:e2:7d:ce:13:5a:85: 0e:47:9d:78:df:09:24:8f:b8:ab:d6:e0:5e:ba:43:50:c3:c4: 18:c3:95:5c:b3:2e:55:64:87:6c:f4:56:18:d0:a6:5b:46:04: 1a:17:a0:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErurWsvRozco1f7UoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMTE3MzIzNFoXDTI1MTExOTE4MzIzNFowLzEtMCsGA1UEAxMk MmYyYmM1NDctNDcyZC00MTJhLTkxNDItOGNhZTI2NzM4NWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifSRiJ4t3vh2k5A2zy/8YncE9g7n3JNtkc3e G9IqBJgER0nKXtpd+BMwFk7KdfdRRoo4c0MfRSzm7B9yyJIAoAAOp8SBf4jBANok 4hq5dzJ2poscnvhe8iO9UDxSL803sUuzz4x6Qyi96COwEbAOdz6Qogg1sS26WWEc 8acmRiVpOuczANpSXIyoLB+x/tyDMfJRnWThvdSX7XuxCB8k9TJtBD8tBkSxXR4q 4qGwHOjlxP8orSe6bqNybmRpNVnPpPzkP+CKAk/kr7MQFzqBexjLHvvBlZZ4sjCa RK0qjCQwRD9it9/dBbCwKOCA4kjHWBjdLXw7G/IGR9vwaGRhfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAY/k1JJwB7mVCNDOUg6Oelzo56zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNGVhZjg0YmQtMTU5Mi0z MTA2LWFhMDktODJhOGFhZTU2Y2E4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDgj1IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHndedR7kFZfvaF2tkpBTMB+Zk/0BMzTDdfEqlUICAADvPEkx47crI+p fwSBqCGS1ephDtBGsdN6gArZHGQ42126m4fHbcq7vY8J9jwhqrW29SfnOZFAEBlV KTNdPGEfyZYDAMelgGoaUyNAnBh/oOKix5IympBIAHzkMJdeMXmpPfg+Mm10uu0+ E+FFqZ60iEvIl7Yv7H1TlUdxPG9YNS8+A/ygDG/4V1sw+p0/UBs0HtYegC1OcRhg LSk6bABL1lR0PZhMLhZy1JGSw2dxbbJefOJ9zhNahQ5HnXjfCSSPuKvW4F66Q1DD xBjDlVyzLlVkh2z0VhjQpltGBBoXoPI= -----END CERTIFICATE-----Generated at Sat Aug 23 17:54:59 2025 by rpki-client