$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/bf2a86be-ddfc-3570-9f60-30127542aaa1.roa File: bf2a86be-ddfc-3570-9f60-30127542aaa1.roa (raw, json) Hash identifier: 0lRqrPjWXuZcAkCH9wSc2PUIkNIGVFvzk8Frc4GgJA0= Subject key identifier: BA:90:77:C4:AB:5F:A8:B1:84:03:BC:69:B1:5C:CA:B7:35:56:D5:7C Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584AF8C22D76A836A6B082F54580 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/bf2a86be-ddfc-3570-9f60-30127542aaa1.roa Signing time: Mon 25 Aug 2025 08:12:29 +0000 ROA not before: Mon 25 Aug 2025 08:12:29 +0000 ROA not after: Sun 23 Nov 2025 09:12:29 +0000 asID: 31898 IP address blocks: 130.35.200.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f8:c2:2d:76:a8:36:a6:b0:82:f5:45:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Aug 25 08:12:29 2025 GMT Not After : Nov 23 09:12:29 2025 GMT Subject: CN=6b081e33-1ec9-4b76-9f92-fece8fb2d613 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:46:7c:e3:00:95:f8:a6:d1:7a:89:3b:14:73: 2d:be:ca:bd:b4:79:90:4e:bf:c4:11:fc:62:2b:76: 61:e9:e7:94:2a:3b:36:23:f7:22:44:e7:df:a4:25: e4:a2:89:c7:4a:46:23:14:07:13:9e:7e:ab:bc:1e: fa:3e:c5:4a:ab:d9:17:53:a6:7d:8d:c8:e8:7b:54: 1a:0c:6e:12:a4:2a:29:df:67:b7:ce:42:02:e4:d1: 0f:5a:27:37:f4:d4:f9:75:8c:08:a0:9e:a4:3c:4f: 6c:a1:39:bb:74:00:76:2e:27:d1:79:3e:3e:44:ba: 9d:9b:84:35:9c:b5:e6:55:21:c1:41:09:75:ff:1e: af:5f:9e:60:9f:92:f7:b0:f3:24:75:c8:0e:10:eb: 21:dc:79:e0:50:72:1b:75:5c:f3:8e:7e:74:f0:d0: 58:81:26:a0:b3:f3:da:18:7b:9d:4f:bc:08:f8:32: 7d:e7:8e:f2:ac:d3:80:bd:50:78:6b:28:0a:39:89: d5:87:68:dc:d9:57:ea:a0:a6:a7:a5:4f:fc:54:3c: 49:78:0c:09:40:01:aa:2a:ed:89:9a:44:07:14:49: 45:d8:9a:d4:37:e7:0e:f5:34:14:e4:44:55:88:6d: 3a:cf:3a:7c:17:af:5e:8f:38:6b:64:88:b0:f5:ab: 44:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:90:77:C4:AB:5F:A8:B1:84:03:BC:69:B1:5C:CA:B7:35:56:D5:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/bf2a86be-ddfc-3570-9f60-30127542aaa1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 130.35.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:6e:57:e0:e3:a2:c3:b9:d8:9d:bd:ac:dc:a5:51:99:cb:98: 5a:e0:1b:a7:9c:d6:82:c6:0e:a6:24:a0:97:e2:65:b1:ca:9b: c9:c7:50:47:01:93:f4:d6:27:de:9f:b3:9e:84:7e:b8:30:2d: 91:2c:c6:6e:18:54:07:c6:a7:7d:17:e5:25:c9:da:86:f2:7f: ff:88:d5:8d:ec:11:f3:fd:2e:ed:3a:8d:33:a6:98:fc:dd:16: 45:65:3d:37:b5:d2:52:5f:31:4d:0c:f6:ef:b8:5c:e8:29:05: 4b:4f:b0:18:23:9c:ad:ae:0f:18:03:f4:5e:03:22:0b:71:81: a8:1c:95:99:6f:65:19:6f:87:7d:fb:b8:49:76:7e:50:09:20: f1:a5:74:8e:85:14:14:e4:45:7c:10:20:07:49:5a:17:4b:86: 5e:e8:c2:25:5b:4e:25:2e:76:e7:6e:f7:be:67:cd:24:25:4b: e3:ad:98:f8:42:3d:f5:e2:b3:e2:38:43:37:3a:f5:e1:aa:84: db:6c:4e:ec:0f:75:b5:d9:4a:c4:00:7c:a5:dc:e7:6f:13:0b: 23:60:7b:f4:1f:c1:9c:c2:b0:03:f6:af:51:78:75:02:45:a8: 6a:29:e1:50:b4:51:14:43:6d:df:f0:bb:3d:91:b5:42:8a:07: fa:ab:df:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr4wi12qDamsIL1RYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI1MDgyNTA4MTIyOVoXDTI1MTEyMzA5MTIyOVowLzEtMCsGA1UEAxMk NmIwODFlMzMtMWVjOS00Yjc2LTlmOTItZmVjZThmYjJkNjEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEZ84wCV+KbReok7FHMtvsq9tHmQTr/EEfxi K3Zh6eeUKjs2I/ciROffpCXkoonHSkYjFAcTnn6rvB76PsVKq9kXU6Z9jcjoe1Qa DG4SpCop32e3zkIC5NEPWic39NT5dYwIoJ6kPE9soTm7dAB2LifReT4+RLqdm4Q1 nLXmVSHBQQl1/x6vX55gn5L3sPMkdcgOEOsh3HngUHIbdVzzjn508NBYgSags/Pa GHudT7wI+DJ9547yrNOAvVB4aygKOYnVh2jc2VfqoKanpU/8VDxJeAwJQAGqKu2J mkQHFElF2JrUN+cO9TQU5ERViG06zzp8F69ejzhrZIiw9atEZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLqQd8SrX6ixhAO8abFcyrc1VtV8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvYmYyYTg2YmUtZGRmYy0z NTcwLTlmNjAtMzAxMjc1NDJhYWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgiPIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEpuV+DjosO52J29rNylUZnLmFrgG6ec1oLGDqYkoJfiZbHKm8nHUEcB k/TWJ96fs56EfrgwLZEsxm4YVAfGp30X5SXJ2obyf/+I1Y3sEfP9Lu06jTOmmPzd FkVlPTe10lJfMU0M9u+4XOgpBUtPsBgjnK2uDxgD9F4DIgtxgagclZlvZRlvh337 uEl2flAJIPGldI6FFBTkRXwQIAdJWhdLhl7owiVbTiUududu975nzSQlS+OtmPhC PfXis+I4Qzc69eGqhNtsTuwPdbXZSsQAfKXc528TCyNge/QfwZzCsAP2r1F4dQJF qGop4VC0URRDbd/wuz2RtUKKB/qr34A= -----END CERTIFICATE-----Generated at Wed Oct 8 19:39:58 2025 by rpki-client