$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c501b1e0-0018-475e-9d4b-5090237060ae/b70dc82f-f8f0-340d-af3e-5810fada5e45.roa File: b70dc82f-f8f0-340d-af3e-5810fada5e45.roa (raw, json) Hash identifier: Hw6HigzRaUDn4SOiZ0rjuy6aVbRP9I+uZ5RQ6t225P8= Subject key identifier: D6:43:37:BB:72:D4:16:25:EC:CC:FC:47:52:20:21:40:2A:61:E2:E4 Certificate issuer: /CN=c501b1e0-0018-475e-9d4b-5090237060ae Certificate serial: 010D0C9F4328584A82AB4D24A08AB9C969937580 Authority key identifier: CB:88:97:9D:A7:79:1F:C4:E2:01:65:FC:6C:5D:DC:10:BB:BA:AC:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c501b1e0-0018-475e-9d4b-5090237060ae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c501b1e0-0018-475e-9d4b-5090237060ae/b70dc82f-f8f0-340d-af3e-5810fada5e45.roa Signing time: Mon 14 Jul 2025 01:00:50 +0000 ROA not before: Mon 14 Jul 2025 01:00:50 +0000 ROA not after: Sun 12 Oct 2025 01:00:50 +0000 asID: 54840 IP address blocks: 130.250.158.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c501b1e0-0018-475e-9d4b-5090237060ae/c501b1e0-0018-475e-9d4b-5090237060ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c501b1e0-0018-475e-9d4b-5090237060ae/c501b1e0-0018-475e-9d4b-5090237060ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c501b1e0-0018-475e-9d4b-5090237060ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:82:ab:4d:24:a0:8a:b9:c9:69:93:75:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c501b1e0-0018-475e-9d4b-5090237060ae Validity Not Before: Jul 14 01:00:50 2025 GMT Not After : Oct 12 01:00:50 2025 GMT Subject: CN=57a5c0e3-fa72-4226-9fcb-87c314a1e830 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:fb:4b:cd:7b:d2:9e:34:06:11:f3:0d:94:9b: 4b:2d:59:44:41:c7:f4:3e:21:81:90:09:0f:40:e8: 6f:7d:ca:25:32:85:e8:0a:55:13:11:6c:9c:52:fb: 41:6e:60:82:52:48:ff:8d:03:a3:06:f3:e8:4c:c6: 14:3f:fe:05:1f:48:d2:a5:21:6a:0f:a2:ea:0f:99: 45:0a:13:89:0d:71:e0:ab:81:67:77:df:52:85:46: 62:fb:d0:b0:df:dd:94:7e:57:fa:85:f0:ab:c0:6f: 60:9d:73:59:79:1c:cc:b4:96:9a:2b:dc:de:10:8e: b1:13:e4:1d:ec:a0:e7:f7:a9:7c:32:5a:bd:64:67: f5:3b:30:aa:25:4a:e9:9b:ef:41:8b:b8:f5:87:ff: a2:09:97:df:e6:70:ae:f6:d4:9a:d7:29:01:f4:29: 89:ff:c0:b6:b4:2e:07:5f:23:ae:a8:50:a4:ca:81: 19:f4:07:54:3c:1f:b7:d5:b1:a2:7a:8c:20:6d:52: e5:ca:dc:06:b9:ba:71:94:7a:2b:8d:5b:bb:1e:e7: 39:4b:54:1c:24:bd:54:64:d3:3f:ba:16:ed:55:8e: a0:b9:9c:62:b9:93:e9:62:63:ce:ae:bf:23:02:94: 34:1c:7c:bb:99:ee:88:12:fc:61:37:cf:10:30:d0: 9b:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:43:37:BB:72:D4:16:25:EC:CC:FC:47:52:20:21:40:2A:61:E2:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c501b1e0-0018-475e-9d4b-5090237060ae/b70dc82f-f8f0-340d-af3e-5810fada5e45.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c501b1e0-0018-475e-9d4b-5090237060ae/c501b1e0-0018-475e-9d4b-5090237060ae.crl X509v3 Authority Key Identifier: keyid:CB:88:97:9D:A7:79:1F:C4:E2:01:65:FC:6C:5D:DC:10:BB:BA:AC:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c501b1e0-0018-475e-9d4b-5090237060ae.cer sbgp-ipAddrBlock: critical IPv4: 130.250.158.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:b2:82:9e:a6:1f:a2:5d:17:a4:1d:bc:1b:4c:f0:ac:0f:3f: 53:b8:c7:37:18:a0:f1:94:5f:39:fb:a7:4f:e8:57:f6:c2:41: 1b:0a:d2:9a:d2:1d:4f:e9:a1:85:3e:2c:5e:82:a8:30:b1:7c: 4a:7a:f7:49:63:c6:bd:c9:82:13:8b:54:a9:5e:4b:5f:ee:5f: 65:8e:5a:71:4b:27:3c:df:ec:34:4f:b3:17:33:ec:33:72:df: 81:82:14:09:95:fa:83:80:45:85:fc:41:6b:5b:81:f4:b0:77: 19:5d:ba:82:08:2c:3f:69:11:57:a5:95:d1:81:ba:b1:47:71: 82:30:3e:fc:d0:a4:6c:bd:eb:b3:e7:c6:eb:90:80:a8:7c:8a: 39:06:b3:2e:0c:e5:de:46:22:1a:90:2b:99:d9:2c:a3:4d:ac: 6a:fa:bb:ba:37:2c:e4:3d:dd:e2:f0:d6:52:12:ee:f8:05:84: f0:51:79:6a:1e:8b:fe:cc:05:d1:2d:20:44:6f:de:d5:a8:5d: e8:d4:db:99:44:bf:35:34:c8:de:76:4b:cd:d3:69:b5:70:5e: d6:9a:cb:5e:68:5c:52:d0:b1:cb:bc:b0:ef:82:70:3e:ea:54: 32:f1:52:90:b5:fd:fa:da:7c:b4:ad:2e:d0:03:7e:60:b7:8a: db:9e:a5:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqCq00koIq5yWmTdYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzUwMWIxZTAtMDAxOC00NzVlLTlkNGItNTA5MDIzNzA2 MGFlMB4XDTI1MDcxNDAxMDA1MFoXDTI1MTAxMjAxMDA1MFowLzEtMCsGA1UEAxMk NTdhNWMwZTMtZmE3Mi00MjI2LTlmY2ItODdjMzE0YTFlODMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiftLzXvSnjQGEfMNlJtLLVlEQcf0PiGBkAkP QOhvfcolMoXoClUTEWycUvtBbmCCUkj/jQOjBvPoTMYUP/4FH0jSpSFqD6LqD5lF ChOJDXHgq4Fnd99ShUZi+9Cw392Uflf6hfCrwG9gnXNZeRzMtJaaK9zeEI6xE+Qd 7KDn96l8Mlq9ZGf1OzCqJUrpm+9Bi7j1h/+iCZff5nCu9tSa1ykB9CmJ/8C2tC4H XyOuqFCkyoEZ9AdUPB+31bGieowgbVLlytwGubpxlHorjVu7Huc5S1QcJL1UZNM/ uhbtVY6guZxiuZPpYmPOrr8jApQ0HHy7me6IEvxhN88QMNCbsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNZDN7ty1BYl7Mz8R1IgIUAqYeLkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jNTAx YjFlMC0wMDE4LTQ3NWUtOWQ0Yi01MDkwMjM3MDYwYWUvYjcwZGM4MmYtZjhmMC0z NDBkLWFmM2UtNTgxMGZhZGE1ZTQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzUwMWIxZTAtMDAxOC00NzVlLTlk NGItNTA5MDIzNzA2MGFlL2M1MDFiMWUwLTAwMTgtNDc1ZS05ZDRiLTUwOTAyMzcw NjBhZS5jcmwwHwYDVR0jBBgwFoAUy4iXnad5H8TiAWX8bF3cELu6rMUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jNTAxYjFlMC0wMDE4LTQ3NWUtOWQ0Yi01MDkw MjM3MDYwYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgvqeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA+ygp6mH6JdF6QdvBtM8KwPP1O4xzcYoPGUXzn7p0/oV/bCQRsK0prS HU/poYU+LF6CqDCxfEp690ljxr3JghOLVKleS1/uX2WOWnFLJzzf7DRPsxcz7DNy 34GCFAmV+oOARYX8QWtbgfSwdxlduoIILD9pEVelldGBurFHcYIwPvzQpGy967Pn xuuQgKh8ijkGsy4M5d5GIhqQK5nZLKNNrGr6u7o3LOQ93eLw1lIS7vgFhPBReWoe i/7MBdEtIERv3tWoXejU25lEvzU0yN52S83TabVwXtaay15oXFLQscu8sO+CcD7q VDLxUpC1/frafLStLtADfmC3ituepbg= -----END CERTIFICATE-----Generated at Sat Aug 9 10:34:34 2025 by rpki-client