$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/661fbe9f-e9fc-361c-bc88-1a82252c4398.roa File: 661fbe9f-e9fc-361c-bc88-1a82252c4398.roa (raw, json) Hash identifier: opxJ0WCV054H9PmXkIr0OlKw4sL4GJjrnqfVMKJvBpI= Subject key identifier: DD:9E:F7:E9:86:03:B6:93:44:FB:EE:DD:49:9F:AF:1B:04:90:9D:D3 Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584AF8C2508976C1D65E29A8CF80 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/661fbe9f-e9fc-361c-bc88-1a82252c4398.roa Signing time: Mon 25 Aug 2025 08:12:45 +0000 ROA not before: Mon 25 Aug 2025 08:12:45 +0000 ROA not after: Sun 23 Nov 2025 09:12:45 +0000 asID: 31898 IP address blocks: 130.35.216.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f8:c2:50:89:76:c1:d6:5e:29:a8:cf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Aug 25 08:12:45 2025 GMT Not After : Nov 23 09:12:45 2025 GMT Subject: CN=c61d42bc-b628-4f28-90de-fc63874d7d47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:7a:85:a2:b2:40:3e:0f:4a:e1:e4:51:49:0c: f5:bd:19:cc:f6:ee:52:6c:11:fa:b7:97:a0:05:9d: 53:c8:4b:8e:a0:f6:be:11:e8:7c:e7:16:48:dc:ff: 67:76:50:04:bf:80:91:46:a4:7d:85:6b:49:1b:70: 54:5e:e0:02:ba:5f:e2:a9:06:80:17:67:49:f9:3a: 54:3e:77:ef:53:af:05:45:98:c1:63:0f:67:59:e8: c6:a7:14:37:51:15:85:3f:23:ef:a2:19:90:5e:f9: cd:ad:6b:55:40:da:bb:60:07:e3:32:06:69:d8:3a: 26:53:53:e1:18:82:c0:ad:e0:4f:91:46:95:ca:9b: 86:d3:eb:bd:a1:71:63:00:24:83:24:4f:7f:91:c9: 8c:b4:47:f3:9d:3b:72:3a:d3:7a:5c:de:60:2a:16: db:a8:ab:f6:80:f2:41:fe:19:ab:ca:c0:99:b7:f7: bb:01:70:a4:43:2c:a6:f4:0d:18:71:6f:98:0c:ae: 3d:d5:62:ff:5b:80:a8:c1:35:71:ff:64:59:63:a5: b6:97:87:fd:a5:f0:c1:ec:ca:9a:17:87:00:6b:98: 9f:70:d3:32:da:3b:0a:bb:ab:b4:e8:f2:9d:f5:f7: 32:b2:12:53:29:50:af:1b:f0:44:3b:09:b8:14:0f: 05:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:9E:F7:E9:86:03:B6:93:44:FB:EE:DD:49:9F:AF:1B:04:90:9D:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/661fbe9f-e9fc-361c-bc88-1a82252c4398.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 130.35.216.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:6f:bd:bf:66:e9:9c:26:ea:59:29:c5:83:28:46:73:72:05: 20:f5:ab:a1:5c:c1:78:76:d1:e5:21:b8:d0:b0:c7:f0:3e:48: 79:12:ff:d7:ca:df:84:3b:a1:81:e5:40:18:ae:96:40:6d:32: 5f:f8:6b:f7:ba:2f:d4:fa:2e:90:75:20:42:a6:a8:82:16:70: 60:7c:3e:36:dd:4f:31:e3:72:b4:0d:27:76:bb:30:1e:6d:09: aa:05:4b:33:ba:52:3b:12:a8:a5:09:62:b8:58:85:c6:ff:06: 19:18:d8:73:2d:ea:93:cf:5c:78:c8:01:f1:78:7b:27:fc:0f: 0d:12:23:f3:06:15:b3:92:bb:4b:68:d9:dc:1e:5e:74:15:63: 19:fe:2d:14:ec:0a:1c:70:14:bc:f3:8c:e9:20:bf:fd:de:57: 23:59:e0:80:d6:15:bd:a3:0e:54:85:03:2b:7e:1c:9d:88:ba: 39:60:24:a2:6a:c1:7b:85:02:38:db:87:b4:73:2e:af:b4:c1: 2a:c7:10:5e:c9:2c:32:3d:9a:5f:0a:73:8b:14:d2:a9:be:9b: aa:a0:5a:a7:e7:3b:d8:7d:c6:9e:2a:13:3c:6d:66:31:7c:95: 2d:0a:88:aa:06:08:ba:3d:cf:55:59:09:a8:74:15:68:fa:2f: 8d:b9:b1:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr4wlCJdsHWXimoz4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI1MDgyNTA4MTI0NVoXDTI1MTEyMzA5MTI0NVowLzEtMCsGA1UEAxMk YzYxZDQyYmMtYjYyOC00ZjI4LTkwZGUtZmM2Mzg3NGQ3ZDQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXqForJAPg9K4eRRSQz1vRnM9u5SbBH6t5eg BZ1TyEuOoPa+Eeh85xZI3P9ndlAEv4CRRqR9hWtJG3BUXuACul/iqQaAF2dJ+TpU PnfvU68FRZjBYw9nWejGpxQ3URWFPyPvohmQXvnNrWtVQNq7YAfjMgZp2DomU1Ph GILAreBPkUaVypuG0+u9oXFjACSDJE9/kcmMtEfznTtyOtN6XN5gKhbbqKv2gPJB /hmrysCZt/e7AXCkQyym9A0YcW+YDK491WL/W4CowTVx/2RZY6W2l4f9pfDB7Mqa F4cAa5ifcNMy2jsKu6u06PKd9fcyshJTKVCvG/BEOwm4FA8FnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN2e9+mGA7aTRPvu3UmfrxsEkJ3TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvNjYxZmJlOWYtZTlmYy0z NjFjLWJjODgtMWE4MjI1MmM0Mzk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgiPYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABpvvb9m6Zwm6lkpxYMoRnNyBSD1q6FcwXh20eUhuNCwx/A+SHkS/9fK 34Q7oYHlQBiulkBtMl/4a/e6L9T6LpB1IEKmqIIWcGB8PjbdTzHjcrQNJ3a7MB5t CaoFSzO6UjsSqKUJYrhYhcb/BhkY2HMt6pPPXHjIAfF4eyf8Dw0SI/MGFbOSu0to 2dweXnQVYxn+LRTsChxwFLzzjOkgv/3eVyNZ4IDWFb2jDlSFAyt+HJ2IujlgJKJq wXuFAjjbh7RzLq+0wSrHEF7JLDI9ml8Kc4sU0qm+m6qgWqfnO9h9xp4qEzxtZjF8 lS0KiKoGCLo9z1VZCah0FWj6L425sVg= -----END CERTIFICATE-----Generated at Wed Oct 8 21:12:31 2025 by rpki-client