$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c333d3c0-8247-33a6-8b3b-bb2705e38f3b.roa File: c333d3c0-8247-33a6-8b3b-bb2705e38f3b.roa (raw, json) Hash identifier: Ws0QFRSa4E0uqBMnvo4doQsfk1ciBwwY8mlc1m9eiAI= Subject key identifier: CF:B4:58:B7:A4:14:FD:4F:91:F9:96:C2:86:09:4F:53:3D:0B:64:DF Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEEAD4D29E9D61790B8F98C80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c333d3c0-8247-33a6-8b3b-bb2705e38f3b.roa Signing time: Thu 21 Aug 2025 17:32:20 +0000 ROA not before: Thu 21 Aug 2025 17:32:20 +0000 ROA not after: Wed 19 Nov 2025 18:32:20 +0000 asID: 31898 IP address blocks: 130.61.120.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:ad:4d:29:e9:d6:17:90:b8:f9:8c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 21 17:32:20 2025 GMT Not After : Nov 19 18:32:20 2025 GMT Subject: CN=9f03c445-0c87-44e5-8d0e-0b3d729b3e8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:89:19:c9:d6:84:a3:86:7f:c7:48:82:1d:f9: 80:58:db:03:7f:48:e5:bb:c6:e6:50:62:b3:b6:6b: 23:0f:58:c3:d1:22:c1:17:17:08:2e:3d:65:34:9e: dc:f6:9f:77:c3:8b:78:6d:fc:73:cf:60:ca:a7:db: cf:b0:fb:d0:19:d1:cf:0d:79:0c:b7:57:27:28:e6: 45:2e:92:a9:20:28:98:0e:96:78:ed:74:28:4d:89: 56:5e:63:a3:fb:7d:11:2f:ec:79:9b:0a:ff:da:84: f7:df:63:48:55:7a:8b:0a:12:9a:42:1f:3b:cb:65: b6:93:9a:78:86:3b:65:58:96:6e:29:c1:cb:8b:fd: 4f:ee:66:b2:60:a8:a5:c1:5c:bc:c5:cc:03:22:29: 19:1e:93:20:42:49:ac:93:2e:98:75:e4:3e:4d:5b: 19:75:7e:d6:18:8d:32:84:f5:99:da:fb:9d:48:8a: a0:f0:00:f6:7a:b4:66:98:71:c7:0d:e1:53:3f:13: fe:fb:7d:5a:0a:44:10:ac:d6:0d:5b:22:ee:b0:f3: 04:33:90:0c:d0:69:b0:b5:b2:9f:18:ad:a7:e9:58: 22:c2:dc:98:e0:4d:ff:f6:ab:4e:39:24:24:8b:4c: aa:69:22:51:1e:5f:64:a6:f8:a4:ae:5a:22:fc:d9: d9:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:B4:58:B7:A4:14:FD:4F:91:F9:96:C2:86:09:4F:53:3D:0B:64:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c333d3c0-8247-33a6-8b3b-bb2705e38f3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 130.61.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:c6:f9:99:51:21:38:61:de:9c:91:48:f8:4f:3d:52:7b:a2: 7b:f7:8a:ae:8b:f1:01:16:92:50:71:93:cb:f6:bc:11:b9:3b: a0:03:94:ed:ca:84:69:22:9f:2e:79:1d:70:49:13:d0:d6:ad: 6c:6a:db:f9:6f:7c:02:fb:3f:12:f6:22:69:12:c7:29:18:1d: 97:a7:f1:d8:14:f6:64:1d:21:07:ee:b5:5e:2f:58:f6:20:6c: df:a6:d0:70:7a:d1:69:4c:ff:a0:fa:83:09:9d:b0:17:04:60: 87:05:62:45:f5:ba:56:cd:b0:97:91:09:a0:ed:b9:12:7b:6c: 01:e3:3d:14:d1:6f:bd:8c:c7:c4:60:2d:f5:08:78:00:93:e0: 93:52:47:15:01:49:f4:e5:77:88:7d:92:db:42:dc:89:3c:37: d7:3e:45:4e:93:00:43:61:65:e2:8e:11:45:2a:55:26:9b:ba: c8:58:d8:83:66:1a:8c:76:81:ae:ce:20:8e:7b:6a:f0:81:f0: 37:93:85:ac:0a:8d:9e:3b:b3:69:5f:95:51:73:f0:ed:45:9a: 2b:03:93:19:b8:2c:73:61:88:8a:41:56:e0:1a:52:7a:26:7d: 23:5c:a3:a6:14:f0:bf:4a:ae:2d:a9:f2:38:eb:ef:1d:d7:2a: 1d:76:45:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErurU0p6dYXkLj5jIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMTE3MzIyMFoXDTI1MTExOTE4MzIyMFowLzEtMCsGA1UEAxMk OWYwM2M0NDUtMGM4Ny00NGU1LThkMGUtMGIzZDcyOWIzZThmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIkZydaEo4Z/x0iCHfmAWNsDf0jlu8bmUGKz tmsjD1jD0SLBFxcILj1lNJ7c9p93w4t4bfxzz2DKp9vPsPvQGdHPDXkMt1cnKOZF LpKpICiYDpZ47XQoTYlWXmOj+30RL+x5mwr/2oT332NIVXqLChKaQh87y2W2k5p4 hjtlWJZuKcHLi/1P7mayYKilwVy8xcwDIikZHpMgQkmsky6YdeQ+TVsZdX7WGI0y hPWZ2vudSIqg8AD2erRmmHHHDeFTPxP++31aCkQQrNYNWyLusPMEM5AM0GmwtbKf GK2n6VgiwtyY4E3/9qtOOSQki0yqaSJRHl9kpvikrloi/NnZgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM+0WLekFP1PkfmWwoYJT1M9C2TfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYzMzM2QzYzAtODI0Ny0z M2E2LThiM2ItYmIyNzA1ZTM4ZjNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDgj14MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIvG+ZlRIThh3pyRSPhPPVJ7onv3iq6L8QEWklBxk8v2vBG5O6ADlO3K hGkiny55HXBJE9DWrWxq2/lvfAL7PxL2ImkSxykYHZen8dgU9mQdIQfutV4vWPYg bN+m0HB60WlM/6D6gwmdsBcEYIcFYkX1ulbNsJeRCaDtuRJ7bAHjPRTRb72Mx8Rg LfUIeACT4JNSRxUBSfTld4h9kttC3Ik8N9c+RU6TAENhZeKOEUUqVSabushY2INm Gox2ga7OII57avCB8DeThawKjZ47s2lflVFz8O1FmisDkxm4LHNhiIpBVuAaUnom fSNco6YU8L9Kri2p8jjr7x3XKh12RQ0= -----END CERTIFICATE-----Generated at Sat Aug 23 15:43:32 2025 by rpki-client