$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/221cdd91-10e9-41bb-8765-69edc6f1e631/264899c9-03ad-388f-8f83-175d338b5b13.roa File: 264899c9-03ad-388f-8f83-175d338b5b13.roa (raw, json) Hash identifier: XeYNC2QdZmPwAly0FD5yFcblB+5JiAWcpgMK52GHrJ4= Subject key identifier: 14:A6:99:12:5A:89:6F:35:15:68:F8:4D:0A:79:1D:0F:66:8B:B5:3F Certificate issuer: /CN=221cdd91-10e9-41bb-8765-69edc6f1e631 Certificate serial: 010D0C9F4328584BAEC7AE26DB0AB6EC51AABF80 Authority key identifier: D4:0C:BD:52:74:20:06:4C:A1:FA:04:8B:7D:02:D2:8B:6E:9F:21:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/221cdd91-10e9-41bb-8765-69edc6f1e631.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/221cdd91-10e9-41bb-8765-69edc6f1e631/264899c9-03ad-388f-8f83-175d338b5b13.roa Signing time: Wed 29 Oct 2025 13:00:39 +0000 ROA not before: Wed 29 Oct 2025 13:00:39 +0000 ROA not after: Tue 27 Jan 2026 14:00:39 +0000 asID: 14618 IP address blocks: 130.50.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/221cdd91-10e9-41bb-8765-69edc6f1e631/221cdd91-10e9-41bb-8765-69edc6f1e631.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/221cdd91-10e9-41bb-8765-69edc6f1e631/221cdd91-10e9-41bb-8765-69edc6f1e631.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/221cdd91-10e9-41bb-8765-69edc6f1e631.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ae:c7:ae:26:db:0a:b6:ec:51:aa:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=221cdd91-10e9-41bb-8765-69edc6f1e631 Validity Not Before: Oct 29 13:00:39 2025 GMT Not After : Jan 27 14:00:39 2026 GMT Subject: CN=848f3bfa-dbcd-4bfe-9c70-33c927443282 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a0:84:ea:7d:f4:c6:e2:b4:74:b2:be:a3:8a: a2:e9:71:27:22:ff:49:9a:dc:0a:02:4e:ab:b2:25: 06:42:63:21:f9:54:aa:68:7a:04:f7:01:ae:ca:23: 6b:88:14:35:55:51:90:b5:9d:d1:56:eb:ce:75:da: a2:30:0f:d2:a2:6e:7b:de:ed:c5:49:4d:85:04:e2: 93:af:16:6e:4f:ac:ed:ae:8d:d8:a8:ee:20:f7:b5: c3:ba:7b:a9:4b:9f:2e:f8:67:61:f7:e7:20:0b:66: a1:f3:f7:67:db:29:fe:77:4f:62:56:f2:ba:3d:58: e4:a3:72:9c:58:e5:e5:e8:aa:f5:69:48:c6:60:27: 1f:28:92:d2:9d:59:96:ac:4b:5f:b5:48:dd:22:7f: f1:7b:66:2d:57:9b:84:5d:f1:15:d2:f0:93:14:23: 6d:4b:c3:ea:ed:d7:58:d5:b4:a2:d4:64:82:49:e1: 7f:fa:cb:2b:eb:a6:d0:f4:96:d4:af:0b:6d:66:48: dd:9b:1b:f0:41:76:18:02:43:45:21:bf:ff:47:84: 84:49:00:28:ca:25:b2:9a:e4:7b:8e:8f:eb:87:2d: f3:4e:32:0e:9e:e8:49:99:64:21:9a:76:e6:a6:65: 87:f2:00:d1:75:72:68:17:9d:59:82:4a:f7:38:69: d4:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:A6:99:12:5A:89:6F:35:15:68:F8:4D:0A:79:1D:0F:66:8B:B5:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/221cdd91-10e9-41bb-8765-69edc6f1e631/264899c9-03ad-388f-8f83-175d338b5b13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/221cdd91-10e9-41bb-8765-69edc6f1e631/221cdd91-10e9-41bb-8765-69edc6f1e631.crl X509v3 Authority Key Identifier: keyid:D4:0C:BD:52:74:20:06:4C:A1:FA:04:8B:7D:02:D2:8B:6E:9F:21:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/221cdd91-10e9-41bb-8765-69edc6f1e631.cer sbgp-ipAddrBlock: critical IPv4: 130.50.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:51:6f:ad:6b:03:af:30:84:d7:aa:bb:dd:77:db:a0:2d:ac: 10:07:af:36:1a:0c:24:77:04:71:96:2c:4e:9e:f2:de:bd:8d: 2d:61:0d:a5:10:f4:fc:58:0c:6e:0e:6b:a9:98:1e:67:c2:ee: 98:32:ca:0e:07:a7:f5:9e:17:ff:31:ae:69:9f:87:eb:12:6d: 74:61:65:23:44:15:85:8b:f1:80:00:ae:6b:91:d6:17:78:79: 1c:2a:07:f9:ac:92:62:c5:46:06:4e:b2:ef:56:50:70:16:87: 5a:ec:69:eb:82:29:a5:b2:69:3f:8e:95:57:8b:1f:da:20:d3: b8:79:3b:f3:25:57:c2:11:75:66:ff:66:42:9a:05:00:fd:45: a8:fe:ab:a4:d0:88:fd:22:c0:2b:09:b1:f8:43:3c:2b:b1:e5: 5b:8a:01:c2:b1:d1:78:5e:da:dd:95:c2:f7:9e:cb:11:5c:29: 53:5b:d2:02:c8:08:7c:e8:d7:c6:32:6b:39:3d:ad:f5:db:3b: e7:3c:c5:6f:28:0d:68:9c:c9:b7:82:5b:de:89:c2:b8:be:68: e6:7d:18:76:83:e7:45:93:08:7a:9e:81:c6:94:3e:94:1d:55: 5a:1f:a5:5c:09:3d:2a:76:0d:c5:69:19:08:ba:89:cb:41:b6: e9:44:2a:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuux64m2wq27FGqv4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjIxY2RkOTEtMTBlOS00MWJiLTg3NjUtNjllZGM2ZjFl NjMxMB4XDTI1MTAyOTEzMDAzOVoXDTI2MDEyNzE0MDAzOVowLzEtMCsGA1UEAxMk ODQ4ZjNiZmEtZGJjZC00YmZlLTljNzAtMzNjOTI3NDQzMjgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtaCE6n30xuK0dLK+o4qi6XEnIv9JmtwKAk6r siUGQmMh+VSqaHoE9wGuyiNriBQ1VVGQtZ3RVuvOddqiMA/Som573u3FSU2FBOKT rxZuT6ztro3YqO4g97XDunupS58u+Gdh9+cgC2ah8/dn2yn+d09iVvK6PVjko3Kc WOXl6Kr1aUjGYCcfKJLSnVmWrEtftUjdIn/xe2YtV5uEXfEV0vCTFCNtS8Pq7ddY 1bSi1GSCSeF/+ssr66bQ9JbUrwttZkjdmxvwQXYYAkNFIb//R4SESQAoyiWymuR7 jo/rhy3zTjIOnuhJmWQhmnbmpmWH8gDRdXJoF51Zgkr3OGnUewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBSmmRJaiW81FWj4TQp5HQ9mi7U/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yMjFj ZGQ5MS0xMGU5LTQxYmItODc2NS02OWVkYzZmMWU2MzEvMjY0ODk5YzktMDNhZC0z ODhmLThmODMtMTc1ZDMzOGI1YjEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjIxY2RkOTEtMTBlOS00MWJiLTg3 NjUtNjllZGM2ZjFlNjMxLzIyMWNkZDkxLTEwZTktNDFiYi04NzY1LTY5ZWRjNmYx ZTYzMS5jcmwwHwYDVR0jBBgwFoAU1Ay9UnQgBkyh+gSLfQLSi26fIUswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yMjFjZGQ5MS0xMGU5LTQxYmItODc2NS02OWVk YzZmMWU2MzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgjIjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGJRb61rA68whNequ91326AtrBAHrzYaDCR3BHGWLE6e8t69jS1hDaUQ 9PxYDG4Oa6mYHmfC7pgyyg4Hp/WeF/8xrmmfh+sSbXRhZSNEFYWL8YAArmuR1hd4 eRwqB/mskmLFRgZOsu9WUHAWh1rsaeuCKaWyaT+OlVeLH9og07h5O/MlV8IRdWb/ ZkKaBQD9Raj+q6TQiP0iwCsJsfhDPCux5VuKAcKx0Xhe2t2VwveeyxFcKVNb0gLI CHzo18Yyazk9rfXbO+c8xW8oDWicybeCW96Jwri+aOZ9GHaD50WTCHqegcaUPpQd VVofpVwJPSp2DcVpGQi6ictBtulEKlQ= -----END CERTIFICATE-----Generated at Mon Nov 3 14:24:47 2025 by rpki-client