$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cdcf5f2d-c821-3925-9895-3e8f727a3b0a.roa File: cdcf5f2d-c821-3925-9895-3e8f727a3b0a.roa (raw, json) Hash identifier: 2kVh81HTsggqDNzjK1pd1Y6xTvPzJBV7kngL4yzPMA8= Subject key identifier: 0C:FD:D6:68:69:C1:9A:4A:E8:F7:51:FB:03:5F:1F:0B:00:CC:7B:05 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEEAD649DA9F540F78F079F80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cdcf5f2d-c821-3925-9895-3e8f727a3b0a.roa Signing time: Thu 21 Aug 2025 17:32:31 +0000 ROA not before: Thu 21 Aug 2025 17:32:31 +0000 ROA not after: Wed 19 Nov 2025 18:32:31 +0000 asID: 31898 IP address blocks: 130.61.64.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:ad:64:9d:a9:f5:40:f7:8f:07:9f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 21 17:32:31 2025 GMT Not After : Nov 19 18:32:31 2025 GMT Subject: CN=df05dd39-c3fb-4b20-9fb6-7926f34e79b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e3:79:11:2e:13:eb:68:3e:87:d9:b5:7f:5d: 59:0d:b9:e1:79:c4:4f:79:fb:82:bc:c3:67:2e:f1: 70:3e:45:cc:9f:c4:40:8f:2c:06:a9:24:cf:fa:96: 60:00:6f:7f:60:91:b8:0d:41:41:b3:2c:45:ad:40: 3e:3c:53:d1:72:5e:c0:f4:06:5f:e4:f4:d6:e4:29: 64:c5:57:94:aa:5f:f7:cd:cb:ff:2e:78:82:04:e6: 19:81:d2:a3:f8:a0:35:2b:d7:19:07:25:44:e2:82: 8b:ec:14:bb:6e:fa:c3:0b:b8:20:ae:8e:2a:f6:1a: 41:3f:ce:e0:d2:01:08:64:13:1f:d5:e9:60:11:36: 8c:f3:8f:33:ed:24:77:16:7b:88:15:10:e8:93:41: 50:f0:76:b6:44:a7:f8:7e:36:5c:c4:41:86:d4:45: 33:3b:2c:76:68:bc:fe:39:52:a1:b6:27:b6:4a:61: c3:3b:30:23:b6:42:d6:5e:7a:18:43:5b:0e:dc:34: b2:9d:9d:57:14:91:44:41:8e:75:a4:c7:9c:40:1a: 66:4c:e0:5f:e4:61:d8:9b:7c:ba:36:d6:8a:a7:cf: 57:ce:c7:b2:83:00:36:8e:4f:55:6b:b3:02:4d:4d: 54:2c:5c:22:04:25:0a:50:ca:6b:47:8b:97:7d:3b: 69:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:FD:D6:68:69:C1:9A:4A:E8:F7:51:FB:03:5F:1F:0B:00:CC:7B:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cdcf5f2d-c821-3925-9895-3e8f727a3b0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 130.61.64.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:9e:bd:dd:84:02:86:bf:95:fc:19:bc:23:13:37:5d:93:b5: f1:70:fa:45:a1:17:59:23:3c:81:26:8a:46:9c:c4:1b:1f:c5: f3:6d:3c:f3:81:fa:37:90:d4:34:1c:f9:22:7b:ff:a5:3f:c7: a1:e6:11:1a:6a:64:04:37:f3:54:cb:f6:7f:d8:34:8e:d3:e3: fe:63:81:d0:8c:ec:dd:e3:c3:28:31:12:14:9f:66:6f:78:7c: 81:b3:0d:68:dd:a6:05:0b:21:6e:19:91:4b:4b:36:35:be:02: 25:76:0d:2c:22:e0:d7:29:5c:e1:72:7e:68:c4:af:48:ea:9b: a2:a7:74:48:ba:bf:b4:6c:b7:75:1f:2e:69:f3:ec:46:b3:63: 0e:49:81:9b:09:ee:03:cf:c2:03:e1:85:6a:74:4a:75:15:56: 9a:c4:6a:12:70:3a:21:d5:c4:cc:35:3f:cd:68:48:e6:35:93: 73:84:10:aa:63:d2:0a:03:b6:be:d9:f3:21:82:ab:de:c1:51: 6e:3d:7d:7d:07:97:9d:da:93:88:04:9b:33:b8:3d:e9:61:08: c5:5e:fc:28:b1:ea:42:75:c8:34:a7:ed:03:4a:ae:91:9c:d3: 90:91:2b:21:40:ad:ac:89:08:09:cf:93:06:2f:eb:33:2e:ab: 96:7f:01:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErurWSdqfVA948Hn4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMTE3MzIzMVoXDTI1MTExOTE4MzIzMVowLzEtMCsGA1UEAxMk ZGYwNWRkMzktYzNmYi00YjIwLTlmYjYtNzkyNmYzNGU3OWIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtON5ES4T62g+h9m1f11ZDbnhecRPefuCvMNn LvFwPkXMn8RAjywGqSTP+pZgAG9/YJG4DUFBsyxFrUA+PFPRcl7A9AZf5PTW5Clk xVeUql/3zcv/LniCBOYZgdKj+KA1K9cZByVE4oKL7BS7bvrDC7ggro4q9hpBP87g 0gEIZBMf1elgETaM848z7SR3FnuIFRDok0FQ8Ha2RKf4fjZcxEGG1EUzOyx2aLz+ OVKhtie2SmHDOzAjtkLWXnoYQ1sO3DSynZ1XFJFEQY51pMecQBpmTOBf5GHYm3y6 NtaKp89XzseygwA2jk9Va7MCTU1ULFwiBCUKUMprR4uXfTtp5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAz91mhpwZpK6PdR+wNfHwsAzHsFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvY2RjZjVmMmQtYzgyMS0z OTI1LTk4OTUtM2U4ZjcyN2EzYjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDgj1AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFeevd2EAoa/lfwZvCMTN12TtfFw+kWhF1kjPIEmikacxBsfxfNtPPOB +jeQ1DQc+SJ7/6U/x6HmERpqZAQ381TL9n/YNI7T4/5jgdCM7N3jwygxEhSfZm94 fIGzDWjdpgULIW4ZkUtLNjW+AiV2DSwi4NcpXOFyfmjEr0jqm6KndEi6v7Rst3Uf Lmnz7EazYw5JgZsJ7gPPwgPhhWp0SnUVVprEahJwOiHVxMw1P81oSOY1k3OEEKpj 0goDtr7Z8yGCq97BUW49fX0Hl53ak4gEmzO4PelhCMVe/Cix6kJ1yDSn7QNKrpGc 05CRKyFArayJCAnPkwYv6zMuq5Z/AbY= -----END CERTIFICATE-----Generated at Sat Aug 23 15:29:32 2025 by rpki-client