$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/9a68d362-d4fb-37ce-b577-e446d82d6d77.roa File: 9a68d362-d4fb-37ce-b577-e446d82d6d77.roa (raw, json) Hash identifier: pklTFtfHTuMUg7nePZVhHkDMu6RV8Mu21P0DxyOKSUg= Subject key identifier: 9A:34:6C:A8:CC:F2:D7:F8:06:F3:05:11:1C:41:72:D1:B9:99:A2:3E Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584AF8C247F2A9AAAD0D55DFBAB8 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/9a68d362-d4fb-37ce-b577-e446d82d6d77.roa Signing time: Mon 25 Aug 2025 08:12:41 +0000 ROA not before: Mon 25 Aug 2025 08:12:41 +0000 ROA not after: Sun 23 Nov 2025 09:12:41 +0000 asID: 31898 IP address blocks: 130.35.212.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f8:c2:47:f2:a9:aa:ad:0d:55:df:ba:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Aug 25 08:12:41 2025 GMT Not After : Nov 23 09:12:41 2025 GMT Subject: CN=94535d1b-d971-416e-a01e-8b52a7ae976f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:35:c6:f4:64:7e:bb:56:83:28:f3:38:f4:87: 70:dd:67:fb:a7:38:df:9e:21:a1:c0:6d:4b:7c:41: 04:f1:0d:ab:86:64:e5:f8:0a:fc:aa:22:e7:b6:f5: 01:ca:a4:6b:ed:9a:6d:d4:1f:80:64:c2:e4:db:ff: 82:ef:5e:b1:95:0c:89:a6:a1:6c:69:09:b6:1b:02: db:87:a4:28:7e:6e:d3:36:65:d2:d8:5f:92:9c:a6: 11:e1:a5:00:4b:11:e2:05:7e:5b:01:da:a4:32:2d: b5:91:22:19:2b:57:ed:89:49:07:9b:31:67:bb:a9: 2b:84:3a:60:96:ff:02:dc:14:fa:4b:b4:5f:76:fb: f4:df:a6:8d:a4:80:92:6c:2b:09:39:f7:a4:f2:1a: fa:a0:ad:2e:38:97:99:6d:a9:04:c7:e0:9b:41:97: c0:dc:44:7a:90:9e:b3:38:9b:3d:eb:0b:9a:18:6d: 07:de:3d:d1:cd:e5:e8:14:80:69:8d:56:f6:66:70: 89:79:3c:b1:c3:d2:f7:9a:1d:1d:30:5b:a9:21:2f: d6:37:6c:e5:80:4d:b2:9a:9a:e5:ac:1a:6f:17:f3: ee:59:4e:70:a2:b1:16:0f:be:25:58:ca:65:82:10: 1c:9d:39:ac:44:1c:fb:51:96:30:ad:78:24:c6:c8: e9:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:34:6C:A8:CC:F2:D7:F8:06:F3:05:11:1C:41:72:D1:B9:99:A2:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/9a68d362-d4fb-37ce-b577-e446d82d6d77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 130.35.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:3e:36:72:80:39:ab:05:ac:29:6b:20:d4:fc:d4:60:fa:d9: 66:aa:8f:fb:25:59:69:38:80:8c:57:a2:ec:48:a9:a4:b1:f5: 5d:c3:c5:81:6a:ca:1d:04:08:1b:ca:83:21:4e:8f:7a:42:51: 28:b9:89:e2:17:f2:14:8c:3b:68:55:35:b2:34:a7:cd:f6:7d: 46:da:a0:70:d7:1c:ef:5c:10:3d:31:77:f9:4a:6c:a4:5b:0f: ce:c7:9e:7d:f8:29:f5:b4:20:f5:f4:f6:b5:91:f4:1a:ed:8f: 0c:af:aa:22:8c:28:c8:29:aa:6e:f0:d3:fe:ce:69:2f:14:9d: ea:33:c3:1b:f9:08:a2:b4:2e:1b:99:72:87:00:ea:2f:03:5d: b7:3f:9e:46:9e:f2:63:d3:19:53:47:d5:44:53:2d:7a:7a:93: 07:2a:ea:7b:66:70:67:7a:5d:f6:15:72:d7:78:ab:7d:72:46: d5:20:cb:2f:bc:7f:57:81:3c:98:a3:32:ba:7b:b0:38:1e:b0: 9b:aa:45:50:15:b9:d1:70:67:84:50:14:ce:28:d9:8a:91:9e: ca:42:2d:bd:99:cf:2e:90:c4:ab:42:48:29:ef:2a:85:17:fe: 61:f9:88:54:85:8b:90:21:d9:ec:cb:2d:bd:39:20:d6:19:97: 32:92:6d:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr4wkfyqaqtDVXfurgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI1MDgyNTA4MTI0MVoXDTI1MTEyMzA5MTI0MVowLzEtMCsGA1UEAxMk OTQ1MzVkMWItZDk3MS00MTZlLWEwMWUtOGI1MmE3YWU5NzZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjXG9GR+u1aDKPM49Idw3Wf7pzjfniGhwG1L fEEE8Q2rhmTl+Ar8qiLntvUByqRr7Zpt1B+AZMLk2/+C716xlQyJpqFsaQm2GwLb h6Qofm7TNmXS2F+SnKYR4aUASxHiBX5bAdqkMi21kSIZK1ftiUkHmzFnu6krhDpg lv8C3BT6S7Rfdvv036aNpICSbCsJOfek8hr6oK0uOJeZbakEx+CbQZfA3ER6kJ6z OJs96wuaGG0H3j3RzeXoFIBpjVb2ZnCJeTyxw9L3mh0dMFupIS/WN2zlgE2ymprl rBpvF/PuWU5worEWD74lWMplghAcnTmsRBz7UZYwrXgkxsjpAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJo0bKjM8tf4BvMFERxBctG5maI+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvOWE2OGQzNjItZDRmYi0z N2NlLWI1NzctZTQ0NmQ4MmQ2ZDc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgiPUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHc+NnKAOasFrClrINT81GD62Waqj/slWWk4gIxXouxIqaSx9V3DxYFq yh0ECBvKgyFOj3pCUSi5ieIX8hSMO2hVNbI0p832fUbaoHDXHO9cED0xd/lKbKRb D87Hnn34KfW0IPX09rWR9BrtjwyvqiKMKMgpqm7w0/7OaS8Uneozwxv5CKK0LhuZ cocA6i8DXbc/nkae8mPTGVNH1URTLXp6kwcq6ntmcGd6XfYVctd4q31yRtUgyy+8 f1eBPJijMrp7sDgesJuqRVAVudFwZ4RQFM4o2YqRnspCLb2Zzy6QxKtCSCnvKoUX /mH5iFSFi5Ah2ezLLb05INYZlzKSbTw= -----END CERTIFICATE-----Generated at Wed Oct 8 21:11:29 2025 by rpki-client