$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/b141f248-49b7-31ab-b20c-04519496bec3.roa File: b141f248-49b7-31ab-b20c-04519496bec3.roa (raw, json) Hash identifier: jJ8swqUOZL74Jll5YSy4mPWBc/8cK79whheM6qNpGxw= Subject key identifier: 32:49:8E:CC:1E:4A:29:E4:56:14:55:EE:95:6D:84:C8:32:C6:C4:ED Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584AF8C224B61CAE737C3C0C9BE0 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/b141f248-49b7-31ab-b20c-04519496bec3.roa Signing time: Mon 25 Aug 2025 08:12:24 +0000 ROA not before: Mon 25 Aug 2025 08:12:24 +0000 ROA not after: Sun 23 Nov 2025 09:12:24 +0000 asID: 31898 IP address blocks: 130.35.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f8:c2:24:b6:1c:ae:73:7c:3c:0c:9b:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Aug 25 08:12:24 2025 GMT Not After : Nov 23 09:12:24 2025 GMT Subject: CN=135347e3-393a-4fa0-9a79-935288c5764e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:87:de:b3:21:6a:b3:bc:f4:06:2a:c7:99:53: 47:70:50:3c:af:86:e5:2f:6c:3f:89:98:5e:4f:f3: 22:22:7d:9e:e9:77:9b:34:ba:06:2c:e9:38:18:76: c4:81:15:64:e9:f4:40:f8:90:cf:49:66:03:5c:d0: 5d:81:ff:fd:fc:41:08:14:79:0b:09:d9:e6:2e:09: b7:fe:9f:e1:36:b1:86:6a:c0:c8:ca:ee:7c:c9:bf: 81:ed:74:ed:c1:0d:70:dd:1a:b0:fa:fb:24:0e:59: a0:9b:a9:4b:41:c0:cb:0a:37:46:e9:bf:02:53:a9: dd:e8:22:9a:a3:24:b9:51:d0:f1:6c:af:2f:20:68: b1:f1:3d:71:f5:ae:01:70:22:c6:1b:20:95:c1:8c: e7:58:0f:51:6f:74:f0:89:19:ee:fe:8d:cc:b2:86: 86:8e:9d:d7:8b:2f:62:08:aa:3b:5e:a1:e9:50:16: fa:d3:2a:53:4f:1c:d6:35:ec:16:fd:58:43:1f:3e: 34:24:65:7f:5e:ed:61:ae:6c:76:1c:90:0e:93:74: 03:5b:92:56:c5:77:35:b2:18:22:b1:46:c4:04:9d: c3:c8:30:37:9c:bd:ab:7c:75:1f:ab:27:2f:c5:a3: ba:47:d4:17:2f:cb:72:39:21:22:1f:e0:42:c4:ee: 83:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:49:8E:CC:1E:4A:29:E4:56:14:55:EE:95:6D:84:C8:32:C6:C4:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/b141f248-49b7-31ab-b20c-04519496bec3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 130.35.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:8f:2e:b9:6d:8d:9e:85:b6:9d:b1:9c:43:6f:b4:1f:51:88: 6d:e9:4e:a4:de:ec:36:be:36:91:72:ec:2d:1e:24:c5:11:96: 0f:f8:cb:a0:98:62:85:0a:46:6d:1e:f3:c6:b3:85:76:b9:19: ec:99:8f:1d:96:d1:d2:c5:48:f2:c8:74:84:68:0e:ce:18:3b: cb:19:26:7d:9a:9c:56:ff:c3:78:be:d9:71:f1:8e:37:f9:f5: 61:df:e4:20:ff:ec:2b:43:48:5c:fa:26:7b:b8:9b:e1:ef:58: 90:bb:a3:99:bf:eb:76:81:0c:9a:cd:00:f4:04:84:ab:4c:32: 8d:d8:e3:2c:5c:bb:f7:00:8c:97:3f:bc:51:f7:99:88:9e:b5: a6:4f:cf:e9:23:f0:1d:62:e9:ac:2b:83:c1:13:07:29:c3:1c: 84:57:0a:a5:38:27:ee:0c:da:f3:8b:e7:c6:fe:5a:4b:4a:16: db:71:8f:da:32:a3:cb:64:d8:d7:fc:c6:80:d7:9d:3b:2b:59: be:ea:ce:5d:e5:07:4c:ba:53:90:b5:4b:ff:20:8e:bb:85:30: 14:5b:96:db:25:1b:f5:0c:90:3c:d7:1b:39:4d:48:4c:74:39: d1:5a:89:0e:a0:0a:6e:ab:7e:56:bd:79:49:7c:9f:a9:72:d6: 06:ab:12:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr4wiS2HK5zfDwMm+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI1MDgyNTA4MTIyNFoXDTI1MTEyMzA5MTIyNFowLzEtMCsGA1UEAxMk MTM1MzQ3ZTMtMzkzYS00ZmEwLTlhNzktOTM1Mjg4YzU3NjRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgYfesyFqs7z0BirHmVNHcFA8r4blL2w/iZhe T/MiIn2e6XebNLoGLOk4GHbEgRVk6fRA+JDPSWYDXNBdgf/9/EEIFHkLCdnmLgm3 /p/hNrGGasDIyu58yb+B7XTtwQ1w3Rqw+vskDlmgm6lLQcDLCjdG6b8CU6nd6CKa oyS5UdDxbK8vIGix8T1x9a4BcCLGGyCVwYznWA9Rb3TwiRnu/o3MsoaGjp3Xiy9i CKo7XqHpUBb60ypTTxzWNewW/VhDHz40JGV/Xu1hrmx2HJAOk3QDW5JWxXc1shgi sUbEBJ3DyDA3nL2rfHUfqycvxaO6R9QXL8tyOSEiH+BCxO6DcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDJJjsweSinkVhRV7pVthMgyxsTtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvYjE0MWYyNDgtNDliNy0z MWFiLWIyMGMtMDQ1MTk0OTZiZWMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgiMUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA+PLrltjZ6Ftp2xnENvtB9RiG3pTqTe7Da+NpFy7C0eJMURlg/4y6CY YoUKRm0e88azhXa5GeyZjx2W0dLFSPLIdIRoDs4YO8sZJn2anFb/w3i+2XHxjjf5 9WHf5CD/7CtDSFz6Jnu4m+HvWJC7o5m/63aBDJrNAPQEhKtMMo3Y4yxcu/cAjJc/ vFH3mYietaZPz+kj8B1i6awrg8ETBynDHIRXCqU4J+4M2vOL58b+WktKFttxj9oy o8tk2Nf8xoDXnTsrWb7qzl3lB0y6U5C1S/8gjruFMBRbltslG/UMkDzXGzlNSEx0 OdFaiQ6gCm6rfla9eUl8n6ly1garErA= -----END CERTIFICATE-----Generated at Wed Oct 8 19:39:56 2025 by rpki-client