$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/898d80f8-2b61-317a-8bb0-4e06fc2c2c52.roa File: 898d80f8-2b61-317a-8bb0-4e06fc2c2c52.roa (raw, json) Hash identifier: iAtDFusDkyAi0UHfUqrdTo62ikP7N1ZVhEdeplOZRRQ= Subject key identifier: 1B:8A:B1:2A:D6:A3:6B:B7:7B:82:C1:1E:0D:45:66:77:C5:6E:27:A5 Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584AF8C25B42A6E1C378B9C61640 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/898d80f8-2b61-317a-8bb0-4e06fc2c2c52.roa Signing time: Mon 25 Aug 2025 08:12:50 +0000 ROA not before: Mon 25 Aug 2025 08:12:50 +0000 ROA not after: Sun 23 Nov 2025 09:12:50 +0000 asID: 31898 IP address blocks: 130.35.220.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f8:c2:5b:42:a6:e1:c3:78:b9:c6:16:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Aug 25 08:12:50 2025 GMT Not After : Nov 23 09:12:50 2025 GMT Subject: CN=70bf49b5-3ddc-4478-a5f9-bb6ecd4fefbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:27:2d:16:ef:68:bf:5a:b8:25:a9:50:74:5c: 63:6b:b7:49:a1:2b:c9:7a:69:57:60:3f:56:3e:04: 92:70:08:20:71:e2:d1:31:8a:65:18:44:10:2a:50: 23:dc:3c:62:9d:64:8d:83:c4:13:87:28:d2:b3:19: 60:d7:79:ed:23:7c:44:78:73:5c:9b:73:cb:ac:e6: 68:49:75:c9:5a:31:8c:57:9d:17:a7:cb:1d:bc:7a: 08:67:4a:fa:af:8b:7a:9a:9d:38:4e:e6:b9:c3:4b: b9:c1:a0:dc:fe:25:18:5e:6e:7f:3a:53:13:58:20: 5b:6f:69:bf:83:43:05:a6:d7:7f:6c:f1:32:e8:e2: 67:09:df:e7:34:5d:93:aa:48:b4:99:da:5a:e5:52: 3f:52:11:b2:23:30:e5:56:3a:ac:95:8e:68:67:74: ad:c1:e0:20:5a:de:ef:c3:50:7a:88:d9:ed:85:b6: 35:db:ca:9f:e8:80:f7:1c:df:b6:95:c7:68:cf:93: e0:df:c1:c3:84:f8:77:28:ae:74:29:80:91:39:15: 50:66:f5:c9:06:d5:ea:d0:8d:f7:d2:c5:e5:75:55: 05:4a:9f:df:ab:94:8a:02:ea:8a:db:44:2a:e8:fb: 75:d7:07:5b:42:1a:ba:1c:b8:72:5f:ad:91:e1:e8: f4:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:8A:B1:2A:D6:A3:6B:B7:7B:82:C1:1E:0D:45:66:77:C5:6E:27:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/898d80f8-2b61-317a-8bb0-4e06fc2c2c52.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 130.35.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:a5:db:08:a2:26:2c:1c:7c:84:56:4f:b5:45:80:ad:ad:4c: 0f:b1:56:56:25:c9:f1:d1:b7:ad:ae:41:d0:7e:42:05:62:cd: f5:78:20:60:ea:8f:4c:23:78:67:e6:3a:d8:68:b0:7a:e1:74: 8e:fd:d8:fc:11:3d:8d:c6:87:56:d0:23:36:75:26:0c:6b:f4: 9b:53:6e:38:bf:1d:05:fa:99:f5:45:68:c7:fa:d4:5a:b9:b1: 6e:be:a4:7d:a8:1e:94:b7:fa:3c:f2:a8:e3:c7:f7:27:1c:e9: 46:f1:4f:06:09:dc:1a:04:ee:30:0b:78:2a:71:e0:b9:ed:15: cb:20:5b:b0:00:91:85:e6:77:0f:b7:14:25:51:22:fe:cb:79: c3:ad:41:45:d7:67:62:63:12:11:04:33:b8:48:37:98:e4:36: bc:5f:af:5b:a1:10:5f:30:8c:da:5b:fb:98:a6:38:df:6f:de: 90:04:1d:59:c3:e0:47:fa:e8:e4:76:3f:83:9d:3b:38:78:6c: 32:3f:f6:2b:38:5a:0d:3a:da:42:2a:8d:ea:1d:cf:fb:6a:69: 6e:7b:7d:1c:ee:c2:41:e6:85:3f:fa:ff:79:47:32:79:0b:1a: cc:99:f1:b3:74:33:d1:39:40:6d:a7:17:a5:26:98:6d:e2:a7: aa:6f:95:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr4wltCpuHDeLnGFkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI1MDgyNTA4MTI1MFoXDTI1MTEyMzA5MTI1MFowLzEtMCsGA1UEAxMk NzBiZjQ5YjUtM2RkYy00NDc4LWE1ZjktYmI2ZWNkNGZlZmJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCctFu9ov1q4JalQdFxja7dJoSvJemlXYD9W PgSScAggceLRMYplGEQQKlAj3DxinWSNg8QThyjSsxlg13ntI3xEeHNcm3PLrOZo SXXJWjGMV50Xp8sdvHoIZ0r6r4t6mp04Tua5w0u5waDc/iUYXm5/OlMTWCBbb2m/ g0MFptd/bPEy6OJnCd/nNF2Tqki0mdpa5VI/UhGyIzDlVjqslY5oZ3StweAgWt7v w1B6iNnthbY128qf6ID3HN+2lcdoz5Pg38HDhPh3KK50KYCRORVQZvXJBtXq0I33 0sXldVUFSp/fq5SKAuqK20Qq6Pt11wdbQhq6HLhyX62R4ej0NQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBuKsSrWo2u3e4LBHg1FZnfFbielMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvODk4ZDgwZjgtMmI2MS0z MTdhLThiYjAtNGUwNmZjMmMyYzUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgiPcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABKl2wiiJiwcfIRWT7VFgK2tTA+xVlYlyfHRt62uQdB+QgVizfV4IGDq j0wjeGfmOthosHrhdI792PwRPY3Gh1bQIzZ1Jgxr9JtTbji/HQX6mfVFaMf61Fq5 sW6+pH2oHpS3+jzyqOPH9ycc6UbxTwYJ3BoE7jALeCpx4LntFcsgW7AAkYXmdw+3 FCVRIv7LecOtQUXXZ2JjEhEEM7hIN5jkNrxfr1uhEF8wjNpb+5imON9v3pAEHVnD 4Ef66OR2P4OdOzh4bDI/9is4Wg062kIqjeodz/tqaW57fRzuwkHmhT/6/3lHMnkL GsyZ8bN0M9E5QG2nF6UmmG3ip6pvlbw= -----END CERTIFICATE-----Generated at Wed Oct 8 19:40:09 2025 by rpki-client