$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/499c620f-9409-3f5d-9b60-aa448c224932.roa File: 499c620f-9409-3f5d-9b60-aa448c224932.roa (raw, json) Hash identifier: Fn0nwCkx2ztZaUSO1U1otXIzxvGtaKIC11tN1jRGnOE= Subject key identifier: BB:24:7C:DA:3F:A9:8F:55:3F:84:C2:68:01:48:1C:F2:AF:C7:C3:E7 Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584AF8C1E225B6E5F9A939E8A6C0 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/499c620f-9409-3f5d-9b60-aa448c224932.roa Signing time: Mon 25 Aug 2025 08:11:53 +0000 ROA not before: Mon 25 Aug 2025 08:11:53 +0000 ROA not after: Sun 23 Nov 2025 09:11:53 +0000 asID: 31898 IP address blocks: 130.35.16.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f8:c1:e2:25:b6:e5:f9:a9:39:e8:a6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Aug 25 08:11:53 2025 GMT Not After : Nov 23 09:11:53 2025 GMT Subject: CN=ce69de51-aef5-470a-8ade-f3e1e6a62872 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:4a:ad:7c:0c:43:8f:9e:af:2c:25:a8:8c:02: 2f:f8:68:5c:2a:2f:6a:23:d2:a4:7c:89:23:f6:79: f0:6c:d4:58:30:21:88:df:9c:4b:86:8c:b2:7b:67: 35:a6:fd:53:1f:bc:04:fb:1c:ab:ae:86:5d:7a:84: 48:80:9c:be:12:ed:0a:2c:0b:7b:77:ed:2e:b7:05: be:89:2a:b7:1c:11:c7:65:d2:7f:7d:3a:05:32:29: 67:84:13:e6:cb:8f:b9:15:b0:77:8a:ee:70:48:ab: 75:ef:0f:d5:57:5a:cf:7b:90:e7:31:74:28:ee:c1: bf:f6:bf:1b:14:e7:f4:db:63:25:86:86:36:61:89: cd:47:e5:1f:f5:21:78:f5:39:82:94:28:52:7f:3e: 11:63:c2:71:b7:3c:23:f4:7a:ae:65:6f:7c:42:b9: 59:7d:b9:d2:1c:7e:04:cb:23:ed:75:24:f3:5e:49: ee:3b:88:0c:d9:f6:30:33:ca:a9:e4:a7:d1:5c:b2: ab:6a:f8:eb:c0:97:56:8c:6f:fb:6d:c9:28:18:62: e5:36:85:2f:2e:2e:cd:7b:95:8c:28:54:b0:2e:f8: 72:c6:21:d3:9e:f5:f6:f7:7b:90:c5:59:e5:fe:bd: 7f:bb:d4:4a:69:c6:c7:23:61:01:1a:b1:f9:bb:f8: 27:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:24:7C:DA:3F:A9:8F:55:3F:84:C2:68:01:48:1C:F2:AF:C7:C3:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/499c620f-9409-3f5d-9b60-aa448c224932.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 130.35.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:4e:66:93:f6:e6:8e:f1:70:0f:86:de:1f:57:06:ea:71:37: 06:28:9d:5f:bd:77:c2:2c:f9:44:62:9a:d5:c5:09:a6:43:cf: 7f:7d:9a:aa:ad:b2:bb:be:4f:2a:b9:a0:d4:0e:9b:95:ea:14: 86:a4:14:78:d9:3e:a5:ae:b4:bc:9e:24:fc:ba:d2:ab:be:51: 2c:26:17:92:71:3a:cf:b9:d8:3d:f8:9e:44:0f:31:95:56:07: 94:27:e5:96:dc:cb:56:8b:6f:85:77:38:71:97:84:45:ba:96: c0:57:b6:38:6a:9c:f0:c7:2d:03:ca:f2:69:56:b8:a5:88:9b: 7f:53:8b:43:6f:e5:d6:52:25:10:c5:55:ef:b6:1e:fe:20:fd: ed:c6:11:c0:33:62:41:96:a1:79:6c:9b:3a:60:0c:51:48:d5: d2:28:43:ec:20:4a:e7:eb:07:5f:51:1a:69:c1:4a:a4:81:3f: 50:a7:57:63:c5:b4:8b:41:3f:3c:9f:61:c9:07:e0:23:7f:ac: f3:e0:9e:4b:68:f0:0d:a3:3d:b9:0d:cb:e0:02:14:e9:51:79: 38:26:4c:90:6f:ea:49:38:18:52:75:31:30:9b:61:b0:4f:68: af:28:3c:50:1d:25:bc:df:5d:a8:24:75:f2:fd:2e:65:b2:ba: c8:16:ff:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr4weIltuX5qTnopsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI1MDgyNTA4MTE1M1oXDTI1MTEyMzA5MTE1M1owLzEtMCsGA1UEAxMk Y2U2OWRlNTEtYWVmNS00NzBhLThhZGUtZjNlMWU2YTYyODcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUqtfAxDj56vLCWojAIv+GhcKi9qI9KkfIkj 9nnwbNRYMCGI35xLhoyye2c1pv1TH7wE+xyrroZdeoRIgJy+Eu0KLAt7d+0utwW+ iSq3HBHHZdJ/fToFMilnhBPmy4+5FbB3iu5wSKt17w/VV1rPe5DnMXQo7sG/9r8b FOf022MlhoY2YYnNR+Uf9SF49TmClChSfz4RY8Jxtzwj9HquZW98QrlZfbnSHH4E yyPtdSTzXknuO4gM2fYwM8qp5KfRXLKravjrwJdWjG/7bckoGGLlNoUvLi7Ne5WM KFSwLvhyxiHTnvX293uQxVnl/r1/u9RKacbHI2EBGrH5u/gnGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLskfNo/qY9VP4TCaAFIHPKvx8PnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvNDk5YzYyMGYtOTQwOS0z ZjVkLTliNjAtYWE0NDhjMjI0OTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgiMQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI9OZpP25o7xcA+G3h9XBupxNwYonV+9d8Is+URimtXFCaZDz399mqqt sru+Tyq5oNQOm5XqFIakFHjZPqWutLyeJPy60qu+USwmF5JxOs+52D34nkQPMZVW B5Qn5Zbcy1aLb4V3OHGXhEW6lsBXtjhqnPDHLQPK8mlWuKWIm39Ti0Nv5dZSJRDF Ve+2Hv4g/e3GEcAzYkGWoXlsmzpgDFFI1dIoQ+wgSufrB19RGmnBSqSBP1CnV2PF tItBPzyfYckH4CN/rPPgnkto8A2jPbkNy+ACFOlReTgmTJBv6kk4GFJ1MTCbYbBP aK8oPFAdJbzfXagkdfL9LmWyusgW/x8= -----END CERTIFICATE-----Generated at Wed Oct 8 19:39:57 2025 by rpki-client