$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/c2db622b-7545-33c4-9e85-825e60dfab74.roa File: c2db622b-7545-33c4-9e85-825e60dfab74.roa (raw, json) Hash identifier: 4v46Qp+oBtksL+q/3b3JR8617XrbdsKEaV7Cx9l0oDk= Subject key identifier: B0:63:E8:B8:1C:1E:F0:91:DB:49:8F:5F:EE:AD:91:CB:E2:67:BF:7D Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584AF8C23EBB71C278945DAD7BE0 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/c2db622b-7545-33c4-9e85-825e60dfab74.roa Signing time: Mon 25 Aug 2025 08:12:37 +0000 ROA not before: Mon 25 Aug 2025 08:12:37 +0000 ROA not after: Sun 23 Nov 2025 09:12:37 +0000 asID: 31898 IP address blocks: 130.35.208.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f8:c2:3e:bb:71:c2:78:94:5d:ad:7b:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Aug 25 08:12:37 2025 GMT Not After : Nov 23 09:12:37 2025 GMT Subject: CN=866728ce-dbc8-473e-844a-f373785ceb68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ef:a3:a1:d1:6b:5d:55:dc:85:9f:94:56:50: 64:c2:59:46:5f:b5:e1:4a:20:b6:c5:b9:7e:19:2a: d5:79:bc:70:72:a8:8d:c9:75:c4:8a:c2:d6:ac:72: ad:7d:a8:39:bd:e8:8e:9d:f6:4c:53:f0:6e:47:d4: a0:30:85:b9:8e:40:2e:f1:0f:15:11:bb:83:1e:eb: a6:12:08:ae:db:45:fc:13:75:b2:44:af:57:5f:ef: b7:b8:8b:b8:d6:a7:df:e3:6b:34:ee:91:7f:d8:e1: eb:de:05:3e:2b:2b:d3:9f:99:99:c4:92:6f:9d:5d: 50:4d:7e:ac:08:8b:f2:3c:0e:56:f6:05:87:13:96: 3f:9f:d0:b9:4d:e3:3a:6a:78:e9:fa:c2:c1:d4:94: ba:7e:60:02:44:86:a9:cb:56:eb:4b:49:57:15:6b: 12:6c:d8:03:a3:51:f7:c3:c6:61:c0:55:85:f0:b1: 80:a4:61:35:94:2b:93:ac:df:09:4c:ee:5c:c7:0d: 84:5c:a5:f8:59:d5:88:81:76:f6:90:e2:39:33:db: 6b:99:9e:69:69:cd:20:6c:f6:0b:4b:4c:4d:43:87: d2:69:31:d9:4b:50:84:37:ec:16:e8:1b:9f:d2:21: 53:c0:e1:b9:90:a5:de:92:3a:39:4b:54:90:39:ce: 58:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:63:E8:B8:1C:1E:F0:91:DB:49:8F:5F:EE:AD:91:CB:E2:67:BF:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/c2db622b-7545-33c4-9e85-825e60dfab74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 130.35.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:f7:8b:d7:8b:21:b5:ad:8d:8a:dc:a0:e0:cb:e6:55:32:56: 1f:69:b3:09:bb:6d:a7:fb:da:c8:7e:dd:99:cd:db:40:2a:93: 35:40:50:a9:f3:8b:28:01:bd:88:95:30:8a:37:df:26:7c:a3: 59:b0:2a:a8:b4:06:e4:13:92:ad:f7:11:a8:d5:d3:48:25:6a: cc:d4:59:14:44:d6:7a:5d:2c:b9:8c:d1:a6:b5:d4:b2:f9:4f: 82:a3:81:70:6a:68:24:9e:4e:60:45:b4:f1:2e:70:5c:f8:79: 8e:cf:f7:e6:76:66:ff:6b:52:6e:32:0b:f1:5a:ae:e0:d2:28: 90:0e:00:e5:f9:5b:5b:eb:e1:54:c4:e5:32:9d:e1:56:ef:26: 88:8b:38:ba:02:2e:6e:a7:26:e8:af:86:26:81:97:7b:92:41: 97:ff:a2:34:17:d7:49:e6:c3:6a:96:31:9e:e5:60:f0:c3:9a: cc:8c:65:81:f7:33:53:9e:41:fc:5a:2f:f8:32:6f:a3:71:29: 23:a1:80:0d:ec:6e:82:28:5f:91:25:75:f7:2c:83:db:ff:1f: 93:db:ef:36:c4:15:b6:c2:ee:10:ce:c5:30:37:99:0b:8a:25: af:b0:64:d9:08:ea:63:41:d1:e9:ec:b7:32:af:9c:99:e8:ec: de:ca:1e:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr4wj67ccJ4lF2te+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI1MDgyNTA4MTIzN1oXDTI1MTEyMzA5MTIzN1owLzEtMCsGA1UEAxMk ODY2NzI4Y2UtZGJjOC00NzNlLTg0NGEtZjM3Mzc4NWNlYjY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtO+jodFrXVXchZ+UVlBkwllGX7XhSiC2xbl+ GSrVebxwcqiNyXXEisLWrHKtfag5veiOnfZMU/BuR9SgMIW5jkAu8Q8VEbuDHuum Egiu20X8E3WyRK9XX++3uIu41qff42s07pF/2OHr3gU+KyvTn5mZxJJvnV1QTX6s CIvyPA5W9gWHE5Y/n9C5TeM6anjp+sLB1JS6fmACRIapy1brS0lXFWsSbNgDo1H3 w8ZhwFWF8LGApGE1lCuTrN8JTO5cxw2EXKX4WdWIgXb2kOI5M9trmZ5pac0gbPYL S0xNQ4fSaTHZS1CEN+wW6Buf0iFTwOG5kKXekjo5S1SQOc5YvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLBj6LgcHvCR20mPX+6tkcviZ799MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvYzJkYjYyMmItNzU0NS0z M2M0LTllODUtODI1ZTYwZGZhYjc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgiPQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAf3i9eLIbWtjYrcoODL5lUyVh9pswm7baf72sh+3ZnN20AqkzVAUKnz iygBvYiVMIo33yZ8o1mwKqi0BuQTkq33EajV00glaszUWRRE1npdLLmM0aa11LL5 T4KjgXBqaCSeTmBFtPEucFz4eY7P9+Z2Zv9rUm4yC/FaruDSKJAOAOX5W1vr4VTE 5TKd4VbvJoiLOLoCLm6nJuivhiaBl3uSQZf/ojQX10nmw2qWMZ7lYPDDmsyMZYH3 M1OeQfxaL/gyb6NxKSOhgA3sboIoX5Eldfcsg9v/H5Pb7zbEFbbC7hDOxTA3mQuK Ja+wZNkI6mNB0enstzKvnJno7N7KHt4= -----END CERTIFICATE-----Generated at Wed Oct 8 19:40:03 2025 by rpki-client