$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/4404fbee-4c6e-334b-84ec-f2864b80d137.roa File: 4404fbee-4c6e-334b-84ec-f2864b80d137.roa (raw, json) Hash identifier: DiVgdUZ7rYNRt1WZ4kU9dnn4+voQGbs6s3SkoOs1uE0= Subject key identifier: 28:2C:7E:77:04:03:F0:24:85:CA:47:84:5B:49:8B:A3:45:62:2B:03 Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584AF8C2138B4AC1C4B12B135170 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/4404fbee-4c6e-334b-84ec-f2864b80d137.roa Signing time: Mon 25 Aug 2025 08:12:16 +0000 ROA not before: Mon 25 Aug 2025 08:12:16 +0000 ROA not after: Sun 23 Nov 2025 09:12:16 +0000 asID: 31898 IP address blocks: 130.35.192.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f8:c2:13:8b:4a:c1:c4:b1:2b:13:51:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Aug 25 08:12:16 2025 GMT Not After : Nov 23 09:12:16 2025 GMT Subject: CN=032a7745-7084-414f-8cb3-480511509b10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c0:f7:8a:1e:98:e6:5e:66:7b:17:4f:6e:cc: 6f:2a:34:e9:46:41:18:49:96:a2:eb:c0:7c:7a:df: 6f:d5:20:46:70:ad:89:42:69:a1:9b:c3:99:0c:05: af:40:0a:95:56:23:d9:de:23:f7:03:65:aa:6f:af: 4e:11:79:e1:77:4e:a5:28:b4:2b:63:2d:7c:6f:ac: 61:e7:cb:0a:48:af:20:2a:45:bb:d1:86:d2:5c:86: 3c:d1:1d:a2:cb:08:9b:74:b1:21:9c:0d:e5:0d:ef: 7f:13:16:50:5c:59:20:94:48:e9:85:66:9a:66:1c: 74:60:d1:78:5b:87:e5:0a:a3:70:36:4e:cb:37:81: f2:e7:6e:59:13:d7:2f:e3:56:13:e3:8f:7c:42:62: e2:2d:17:01:b1:66:0d:1b:cb:cb:d7:12:d4:fa:b4: df:ae:33:8e:c7:85:dc:8f:3b:eb:94:43:14:81:50: 4e:b5:6b:ca:82:7d:79:97:5a:ec:bc:1d:fb:85:b2: 39:a7:fb:12:a1:a9:ff:dd:ff:98:9a:a4:4b:4a:62: ad:5d:e2:24:46:29:e7:1d:21:62:12:7c:eb:09:c1: 5c:dc:90:cf:b9:84:2b:8a:ce:d9:c3:17:22:e5:59: 0e:de:be:00:a5:03:db:85:f0:b9:3f:d1:a5:9e:8f: b7:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:2C:7E:77:04:03:F0:24:85:CA:47:84:5B:49:8B:A3:45:62:2B:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/4404fbee-4c6e-334b-84ec-f2864b80d137.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 130.35.192.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:43:39:12:4d:a7:96:69:45:2b:db:83:e2:61:5e:6d:45:d6: 69:39:cf:0c:94:09:d9:15:ba:d6:6f:76:40:09:b2:a4:c0:50: 2b:29:2e:8e:2c:8c:d6:9c:91:c9:92:be:ec:e0:a0:54:cf:b5: 3f:a1:b8:27:c8:99:c6:1f:7a:5c:dc:02:9b:07:01:6c:f4:43: 70:fb:47:28:94:45:ac:f0:ef:0f:f4:32:39:90:2b:be:d0:a9: f5:64:c5:da:18:1e:d1:28:16:37:2e:cf:45:eb:ea:3c:18:57: e1:7d:68:9b:5d:c8:0b:a5:cc:49:ae:53:12:d3:42:59:68:87: e2:85:27:94:ac:91:7b:96:1e:cb:d7:44:94:07:fe:71:1f:b1: 8a:b2:d1:99:ad:58:60:b7:90:30:8c:c7:02:0c:1e:5b:bc:68: d1:1e:9d:ec:38:5c:6a:05:0b:66:fa:40:e1:9f:8e:a1:51:f2: d1:83:3c:c1:0d:02:e7:7c:01:67:cc:27:ad:6d:ff:e3:cf:34: 8e:72:bf:ef:bb:41:f9:82:60:11:9d:28:ac:0b:20:47:f3:27: 61:f3:d8:26:f8:53:c4:15:56:e7:f6:fc:42:d8:ef:56:6a:45: 12:2a:61:15:38:2a:82:74:57:fa:fb:63:2b:71:f9:cf:57:14: 63:c2:f7:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr4whOLSsHEsSsTUXAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI1MDgyNTA4MTIxNloXDTI1MTEyMzA5MTIxNlowLzEtMCsGA1UEAxMk MDMyYTc3NDUtNzA4NC00MTRmLThjYjMtNDgwNTExNTA5YjEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8D3ih6Y5l5mexdPbsxvKjTpRkEYSZai68B8 et9v1SBGcK2JQmmhm8OZDAWvQAqVViPZ3iP3A2Wqb69OEXnhd06lKLQrYy18b6xh 58sKSK8gKkW70YbSXIY80R2iywibdLEhnA3lDe9/ExZQXFkglEjphWaaZhx0YNF4 W4flCqNwNk7LN4Hy525ZE9cv41YT4498QmLiLRcBsWYNG8vL1xLU+rTfrjOOx4Xc jzvrlEMUgVBOtWvKgn15l1rsvB37hbI5p/sSoan/3f+YmqRLSmKtXeIkRinnHSFi EnzrCcFc3JDPuYQris7Zwxci5VkO3r4ApQPbhfC5P9Glno+3sQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCgsfncEA/AkhcpHhFtJi6NFYisDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvNDQwNGZiZWUtNGM2ZS0z MzRiLTg0ZWMtZjI4NjRiODBkMTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgiPAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGRDORJNp5ZpRSvbg+JhXm1F1mk5zwyUCdkVutZvdkAJsqTAUCspLo4s jNackcmSvuzgoFTPtT+huCfImcYfelzcApsHAWz0Q3D7RyiURazw7w/0MjmQK77Q qfVkxdoYHtEoFjcuz0Xr6jwYV+F9aJtdyAulzEmuUxLTQlloh+KFJ5SskXuWHsvX RJQH/nEfsYqy0ZmtWGC3kDCMxwIMHlu8aNEenew4XGoFC2b6QOGfjqFR8tGDPMEN Aud8AWfMJ61t/+PPNI5yv++7QfmCYBGdKKwLIEfzJ2Hz2Cb4U8QVVuf2/ELY71Zq RRIqYRU4KoJ0V/r7Yytx+c9XFGPC91Q= -----END CERTIFICATE-----Generated at Wed Oct 8 21:28:34 2025 by rpki-client