$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/2796dd83-8ecf-3782-aabc-8431faeba93e.roa File: 2796dd83-8ecf-3782-aabc-8431faeba93e.roa (raw, json) Hash identifier: +ZYQ0/HtZO7mebR830AEHHAUzAHCvbLB1p3hnDGaiOU= Subject key identifier: A4:1A:E7:1C:EF:89:AD:A8:08:3D:E9:58:07:83:72:7C:AA:95:63:0E Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584AF8C1D9A8F414BD0329F4314A Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/2796dd83-8ecf-3782-aabc-8431faeba93e.roa Signing time: Mon 25 Aug 2025 08:11:49 +0000 ROA not before: Mon 25 Aug 2025 08:11:49 +0000 ROA not after: Sun 23 Nov 2025 09:11:49 +0000 asID: 31898 IP address blocks: 130.35.156.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f8:c1:d9:a8:f4:14:bd:03:29:f4:31:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Aug 25 08:11:49 2025 GMT Not After : Nov 23 09:11:49 2025 GMT Subject: CN=d8972c2f-e51b-4d23-9d96-f29fa0fb786c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:d3:be:6c:7c:70:7e:2c:ba:f9:31:12:ef:83: e0:b4:d0:95:90:d5:23:88:2e:5a:96:dc:ac:48:0c: 89:4b:cb:41:0b:be:b0:4f:17:d6:59:bb:eb:59:8e: b2:05:f4:39:56:ac:ed:c3:94:25:25:a6:02:49:dd: d8:d9:fd:0e:30:25:29:3d:6f:3a:fa:01:13:90:e9: ee:98:37:fe:a6:2a:a6:4c:78:3d:e4:99:ff:51:8a: 79:42:7b:75:c1:d1:72:92:f6:fd:e0:6b:f7:b6:fa: 96:04:e1:0f:00:6f:90:b8:28:b9:2a:17:8a:af:41: 03:97:08:45:4d:c8:60:fd:ed:e6:c8:9e:ca:5d:9b: a2:0d:da:ba:e4:aa:8a:98:22:36:9a:0c:f7:22:73: 9f:aa:fa:34:bf:ab:c7:a2:30:23:17:cf:f6:9e:a9: 7f:f1:35:dc:ed:e2:1c:f3:a0:d8:dc:9b:dd:ff:80: e3:1d:41:15:5f:6f:71:91:17:e5:9f:f6:10:64:85: 58:f6:28:44:a1:c6:d7:ad:6e:7b:fb:d1:49:ca:19: 83:4f:bd:a0:dc:8d:ca:b4:7a:f9:8f:aa:81:17:1c: 8c:de:1c:a8:c6:1b:d1:53:1d:f8:d0:2a:4d:42:ae: 66:e5:35:e9:19:9c:c3:69:b8:ef:70:57:44:19:15: 0e:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:1A:E7:1C:EF:89:AD:A8:08:3D:E9:58:07:83:72:7C:AA:95:63:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/2796dd83-8ecf-3782-aabc-8431faeba93e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 130.35.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:fd:bc:c7:8d:a1:dd:4c:cb:4f:fc:02:f3:79:47:0f:44:20: 70:31:be:67:35:39:19:d3:16:38:e4:a3:4c:ee:75:a9:a1:5f: 6e:05:c7:e1:d7:dd:32:0e:d4:9b:e3:c0:f7:3f:1b:8f:26:71: c5:b5:64:cc:7a:db:96:23:d8:b7:41:22:57:6a:5e:c2:09:2b: c3:d4:e7:53:f1:1d:a1:88:0a:d6:84:d2:bf:c8:99:60:20:70: 60:4b:37:6d:32:98:98:67:0d:37:ac:cd:04:09:8b:5f:93:85: d0:0a:d8:71:ca:4e:b7:d9:fe:d3:1f:44:ec:81:29:71:13:f6: 47:83:52:ea:4d:87:94:2a:d9:42:7c:48:2d:b6:27:c1:0f:8d: bf:44:e7:f6:b0:70:73:26:29:ad:ce:3c:cd:61:a6:62:76:03: c2:5c:cf:c4:ba:87:36:da:f0:f0:11:b5:2c:26:dc:2c:8d:7e: d5:b1:2a:d2:83:24:13:ed:49:e3:65:86:27:6c:5f:b8:8b:8f: 06:00:21:39:45:38:c1:78:df:35:2f:db:37:b7:a0:af:ad:47: d1:bb:eb:0f:b5:21:b2:cf:42:47:55:79:8a:14:6f:8e:9d:ce: 0e:98:23:68:f4:f2:da:34:85:67:fa:ec:5b:29:b1:39:48:30: 34:f6:a6:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr4wdmo9BS9Ayn0MUowDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI1MDgyNTA4MTE0OVoXDTI1MTEyMzA5MTE0OVowLzEtMCsGA1UEAxMk ZDg5NzJjMmYtZTUxYi00ZDIzLTlkOTYtZjI5ZmEwZmI3ODZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztO+bHxwfiy6+TES74PgtNCVkNUjiC5altys SAyJS8tBC76wTxfWWbvrWY6yBfQ5Vqztw5QlJaYCSd3Y2f0OMCUpPW86+gETkOnu mDf+piqmTHg95Jn/UYp5Qnt1wdFykvb94Gv3tvqWBOEPAG+QuCi5KheKr0EDlwhF Tchg/e3myJ7KXZuiDdq65KqKmCI2mgz3InOfqvo0v6vHojAjF8/2nql/8TXc7eIc 86DY3Jvd/4DjHUEVX29xkRfln/YQZIVY9ihEocbXrW57+9FJyhmDT72g3I3KtHr5 j6qBFxyM3hyoxhvRUx340CpNQq5m5TXpGZzDabjvcFdEGRUOWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKQa5xzvia2oCD3pWAeDcnyqlWMOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvMjc5NmRkODMtOGVjZi0z NzgyLWFhYmMtODQzMWZhZWJhOTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgiOcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIT9vMeNod1My0/8AvN5Rw9EIHAxvmc1ORnTFjjko0zudamhX24Fx+HX 3TIO1JvjwPc/G48mccW1ZMx625Yj2LdBIldqXsIJK8PU51PxHaGICtaE0r/ImWAg cGBLN20ymJhnDTeszQQJi1+ThdAK2HHKTrfZ/tMfROyBKXET9keDUupNh5Qq2UJ8 SC22J8EPjb9E5/awcHMmKa3OPM1hpmJ2A8Jcz8S6hzba8PARtSwm3CyNftWxKtKD JBPtSeNlhidsX7iLjwYAITlFOMF43zUv2ze3oK+tR9G76w+1IbLPQkdVeYoUb46d zg6YI2j08to0hWf67FspsTlIMDT2prw= -----END CERTIFICATE-----Generated at Wed Oct 8 19:40:04 2025 by rpki-client