$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/7c4c76d3-6da0-31ae-a50b-06e45682b420.roa File: 7c4c76d3-6da0-31ae-a50b-06e45682b420.roa (raw, json) Hash identifier: Gz8V3CP0xa2nncGwcjfd0y9ed9Y+4o6iJv/TKTjzhDM= Subject key identifier: AC:BF:17:C4:9D:F4:90:46:8F:40:90:B8:F1:DF:CA:49:DE:DB:F4:7D Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584AF8C28460187884A01D316F80 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/7c4c76d3-6da0-31ae-a50b-06e45682b420.roa Signing time: Mon 25 Aug 2025 08:13:10 +0000 ROA not before: Mon 25 Aug 2025 08:13:10 +0000 ROA not after: Sun 23 Nov 2025 09:13:10 +0000 asID: 31898 IP address blocks: 130.35.24.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f8:c2:84:60:18:78:84:a0:1d:31:6f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Aug 25 08:13:10 2025 GMT Not After : Nov 23 09:13:10 2025 GMT Subject: CN=488273fe-0267-4e5c-85f3-a1b75ccd634a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:28:61:15:33:ed:27:dc:51:f3:b9:60:7d:e1: dd:2d:3c:32:3f:b1:c4:12:6b:a5:f7:a0:08:a3:df: 8a:24:3f:ac:df:a1:7e:5c:65:a5:99:38:0d:2e:8c: e3:b1:f5:cb:15:53:f8:58:c9:90:04:97:ea:d1:23: cb:b1:57:0c:32:7b:c8:08:70:80:e4:4d:55:42:1e: 0b:0f:d6:39:65:20:67:14:f3:fc:93:63:67:98:74: 4b:cb:c3:e9:1a:96:37:d4:fa:8e:29:23:a9:53:3c: af:71:a3:2c:5f:df:45:43:4d:92:b2:7c:95:97:16: 1b:84:18:cd:81:af:7b:63:11:ba:bb:bd:43:7b:ba: 3c:17:22:45:03:2d:26:d3:ba:f3:d1:23:ff:c0:41: bf:60:88:c5:44:bf:a6:ed:e3:0a:56:82:e6:41:ef: dd:4d:2f:56:ea:10:d7:a2:21:ad:ba:b0:3c:33:6f: 20:ea:88:f8:de:f6:c7:4f:09:bd:e9:be:24:16:e7: 29:ce:e3:bd:de:52:30:d2:0c:4d:97:24:35:0c:6a: f5:27:cd:0b:30:6e:4b:1d:98:e0:bb:31:4c:22:4d: df:a7:90:86:c0:15:aa:eb:07:52:10:9d:cf:5f:b0: 3c:e5:75:40:80:15:74:e9:ba:d7:ab:89:42:b0:07: 3a:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:BF:17:C4:9D:F4:90:46:8F:40:90:B8:F1:DF:CA:49:DE:DB:F4:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/7c4c76d3-6da0-31ae-a50b-06e45682b420.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 130.35.24.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:c5:a7:b7:55:7a:a3:14:fe:8e:7c:1d:1c:9c:de:1c:6f:48: fb:da:59:a0:0a:52:33:f5:2a:64:5f:a4:88:94:e8:d3:cd:2d: 10:34:c9:44:1c:63:ca:0f:d3:a6:b0:26:1c:68:da:61:43:7b: 14:dd:e4:be:9e:db:7c:79:fe:6e:e6:97:d5:92:65:a4:21:eb: 8b:e1:07:69:2e:86:79:e9:46:bf:12:4f:7f:48:c8:55:0c:11: 70:0e:3e:a8:93:00:2d:a5:45:75:11:ad:c0:db:cd:ca:e4:c2: 05:d2:9f:88:1a:9e:4a:86:e3:fc:4b:ad:d3:5a:5c:3f:31:5a: 1f:f4:03:d8:2f:f5:c7:32:cb:97:38:1a:f3:48:b4:b5:95:ca: 3c:3c:af:c9:0c:d6:08:2e:29:9a:2a:e5:62:f5:7b:9d:38:a3: f9:9b:18:fa:94:44:e8:7b:49:a0:a3:8a:f6:34:35:6b:bc:ad: 35:25:1b:7a:1c:11:fa:e8:f8:a4:67:cb:bf:e6:30:f2:69:c7: 10:c3:9b:74:9b:05:b8:d6:e5:01:3d:61:16:f9:93:b3:f9:ff: 06:18:bd:82:37:07:8c:84:21:64:f2:d6:62:5d:e2:46:16:70: b8:95:c9:4d:4d:cd:57:3a:37:75:4c:de:27:12:ed:f4:8c:c6: fc:e6:d5:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr4woRgGHiEoB0xb4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI1MDgyNTA4MTMxMFoXDTI1MTEyMzA5MTMxMFowLzEtMCsGA1UEAxMk NDg4MjczZmUtMDI2Ny00ZTVjLTg1ZjMtYTFiNzVjY2Q2MzRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjihhFTPtJ9xR87lgfeHdLTwyP7HEEmul96AI o9+KJD+s36F+XGWlmTgNLozjsfXLFVP4WMmQBJfq0SPLsVcMMnvICHCA5E1VQh4L D9Y5ZSBnFPP8k2NnmHRLy8PpGpY31PqOKSOpUzyvcaMsX99FQ02SsnyVlxYbhBjN ga97YxG6u71De7o8FyJFAy0m07rz0SP/wEG/YIjFRL+m7eMKVoLmQe/dTS9W6hDX oiGturA8M28g6oj43vbHTwm96b4kFucpzuO93lIw0gxNlyQ1DGr1J80LMG5LHZjg uzFMIk3fp5CGwBWq6wdSEJ3PX7A85XVAgBV06brXq4lCsAc6cwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKy/F8Sd9JBGj0CQuPHfykne2/R9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvN2M0Yzc2ZDMtNmRhMC0z MWFlLWE1MGItMDZlNDU2ODJiNDIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgiMYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJfFp7dVeqMU/o58HRyc3hxvSPvaWaAKUjP1KmRfpIiU6NPNLRA0yUQc Y8oP06awJhxo2mFDexTd5L6e23x5/m7ml9WSZaQh64vhB2kuhnnpRr8ST39IyFUM EXAOPqiTAC2lRXURrcDbzcrkwgXSn4gankqG4/xLrdNaXD8xWh/0A9gv9ccyy5c4 GvNItLWVyjw8r8kM1gguKZoq5WL1e504o/mbGPqUROh7SaCjivY0NWu8rTUlG3oc Efro+KRny7/mMPJpxxDDm3SbBbjW5QE9YRb5k7P5/wYYvYI3B4yEIWTy1mJd4kYW cLiVyU1NzVc6N3VM3icS7fSMxvzm1eI= -----END CERTIFICATE-----Generated at Wed Oct 8 21:12:29 2025 by rpki-client