$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/cf9fd58f-ca9a-3d2f-a422-a2924475a7f9.roa File: cf9fd58f-ca9a-3d2f-a422-a2924475a7f9.roa (raw, json) Hash identifier: xZb7wAlnPhu6h01u5b6IvpRVEyvuJ3gvsiLeH5tUUzY= Subject key identifier: 8C:ED:84:01:1E:73:B6:CB:1F:9C:12:30:72:98:C2:02:83:D3:9B:B1 Certificate issuer: /CN=5597247f-2d88-4c51-805a-7ab2a9af9dc5 Certificate serial: 010D0C9F4328584AE4611411464534AD732BE680 Authority key identifier: 3C:73:2A:DD:04:B3:6B:02:2D:46:03:FE:E9:87:D2:83:58:1C:8B:A4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/cf9fd58f-ca9a-3d2f-a422-a2924475a7f9.roa Signing time: Mon 18 Aug 2025 01:00:33 +0000 ROA not before: Mon 18 Aug 2025 01:00:33 +0000 ROA not after: Sun 16 Nov 2025 02:00:33 +0000 asID: 40948 IP address blocks: 130.51.132.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e4:61:14:11:46:45:34:ad:73:2b:e6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5597247f-2d88-4c51-805a-7ab2a9af9dc5 Validity Not Before: Aug 18 01:00:33 2025 GMT Not After : Nov 16 02:00:33 2025 GMT Subject: CN=ed6bbc44-4e7b-49b9-a032-3f617bc49ea5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:41:81:f2:a7:e0:59:d4:d4:20:3b:47:65:51: 47:29:aa:49:cc:1c:86:f5:29:76:e7:c1:80:1f:42: fc:a7:19:c2:39:66:b4:7f:9d:5f:47:61:93:7e:f2: c1:e1:02:a0:73:f2:df:8d:74:26:0e:8a:d6:4b:8a: e6:a1:13:46:50:bd:a1:7a:4f:69:e6:65:fc:2e:f9: 0d:55:2b:a2:b7:20:de:77:2a:a1:dd:6a:f3:d5:fd: 71:9f:d4:41:de:12:36:af:3d:e7:30:de:e5:3c:e1: 12:73:f7:f9:6e:95:44:8e:b9:29:c3:88:33:8a:d4: 96:16:77:13:d1:d0:b4:6d:ae:da:ee:cc:92:5d:a0: 55:41:91:85:bb:f3:3c:0d:08:f3:df:7c:4e:bf:3e: 94:08:88:c7:13:20:02:6b:ba:02:84:9d:0b:5e:d1: a8:1b:c7:10:c7:4c:c1:f2:f6:b8:d4:71:98:a1:89: 1c:21:0a:49:43:f1:d8:19:70:5c:22:6d:7f:75:0f: c8:c0:b8:af:e7:8f:07:3b:0d:89:18:c5:27:22:96: 15:5d:aa:20:7e:63:49:09:c9:a7:d4:52:e5:1c:41: 79:69:52:bf:87:6a:68:12:a4:89:b3:3c:1d:ed:fa: 88:65:8b:36:bf:d3:bf:31:f5:41:9e:c0:83:ab:52: 8c:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:ED:84:01:1E:73:B6:CB:1F:9C:12:30:72:98:C2:02:83:D3:9B:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/cf9fd58f-ca9a-3d2f-a422-a2924475a7f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.crl X509v3 Authority Key Identifier: keyid:3C:73:2A:DD:04:B3:6B:02:2D:46:03:FE:E9:87:D2:83:58:1C:8B:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer sbgp-ipAddrBlock: critical IPv4: 130.51.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:c9:41:c0:df:12:89:e9:26:a8:95:fe:b8:3d:13:39:8b:5b: 4b:7c:ff:9f:61:d7:e5:16:34:17:8f:b4:3d:ff:77:54:7b:01: 38:3f:87:2c:36:c4:bc:e4:cd:22:83:6a:6f:de:72:37:87:d7: 56:ea:ca:b4:0b:fe:10:b1:6a:12:b8:12:ff:f7:a9:32:b9:94: 7a:99:f3:20:3b:65:c3:1b:14:fc:73:ff:38:fe:5d:27:89:4b: c0:b0:4c:c6:81:20:ad:4e:85:29:9e:34:b1:0c:ed:5c:c5:d9: 74:7d:41:4f:b4:39:ce:64:8d:e5:59:ea:31:30:df:2f:24:fd: dd:0c:4f:7d:1a:1a:ef:17:03:72:d5:c0:fb:4e:19:3a:33:02: 98:5c:16:50:dc:5d:14:d6:63:5c:a3:28:26:e8:83:bf:7e:bf: bc:02:8b:86:e8:e8:eb:5d:a7:5f:82:73:b9:9e:9d:2c:6b:e9: bb:7c:e7:ab:52:22:23:79:41:96:f8:20:bb:23:aa:95:03:56: a8:a6:4e:4b:bb:78:77:46:fa:7d:aa:bd:40:d1:db:89:59:75: 29:fb:17:30:89:1c:cd:c8:c7:5d:ce:ed:17:6a:59:e1:04:7e: 85:10:44:b1:6e:d4:53:70:c3:9a:ee:af:c5:5a:fd:87:ba:a1: 3b:b5:b9:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErkYRQRRkU0rXMr5oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTU5NzI0N2YtMmQ4OC00YzUxLTgwNWEtN2FiMmE5YWY5 ZGM1MB4XDTI1MDgxODAxMDAzM1oXDTI1MTExNjAyMDAzM1owLzEtMCsGA1UEAxMk ZWQ2YmJjNDQtNGU3Yi00OWI5LWEwMzItM2Y2MTdiYzQ5ZWE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkGB8qfgWdTUIDtHZVFHKapJzByG9Sl258GA H0L8pxnCOWa0f51fR2GTfvLB4QKgc/LfjXQmDorWS4rmoRNGUL2hek9p5mX8LvkN VSuityDedyqh3Wrz1f1xn9RB3hI2rz3nMN7lPOESc/f5bpVEjrkpw4gzitSWFncT 0dC0ba7a7sySXaBVQZGFu/M8DQjz33xOvz6UCIjHEyACa7oChJ0LXtGoG8cQx0zB 8va41HGYoYkcIQpJQ/HYGXBcIm1/dQ/IwLiv548HOw2JGMUnIpYVXaogfmNJCcmn 1FLlHEF5aVK/h2poEqSJszwd7fqIZYs2v9O/MfVBnsCDq1KMowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIzthAEec7bLH5wSMHKYwgKD05uxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81NTk3 MjQ3Zi0yZDg4LTRjNTEtODA1YS03YWIyYTlhZjlkYzUvY2Y5ZmQ1OGYtY2E5YS0z ZDJmLWE0MjItYTI5MjQ0NzVhN2Y5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTU5NzI0N2YtMmQ4OC00YzUxLTgw NWEtN2FiMmE5YWY5ZGM1LzU1OTcyNDdmLTJkODgtNGM1MS04MDVhLTdhYjJhOWFm OWRjNS5jcmwwHwYDVR0jBBgwFoAUPHMq3QSzawItRgP+6YfSg1gci6QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81NTk3MjQ3Zi0yZDg4LTRjNTEtODA1YS03YWIy YTlhZjlkYzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgjOEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKPJQcDfEonpJqiV/rg9EzmLW0t8/59h1+UWNBePtD3/d1R7ATg/hyw2 xLzkzSKDam/ecjeH11bqyrQL/hCxahK4Ev/3qTK5lHqZ8yA7ZcMbFPxz/zj+XSeJ S8CwTMaBIK1OhSmeNLEM7VzF2XR9QU+0Oc5kjeVZ6jEw3y8k/d0MT30aGu8XA3LV wPtOGTozAphcFlDcXRTWY1yjKCbog79+v7wCi4bo6Otdp1+Cc7menSxr6bt856tS IiN5QZb4ILsjqpUDVqimTku7eHdG+n2qvUDR24lZdSn7FzCJHM3Ix13O7RdqWeEE foUQRLFu1FNww5rur8Va/Ye6oTu1uX8= -----END CERTIFICATE-----Generated at Thu Aug 21 06:53:21 2025 by rpki-client