$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c501b1e0-0018-475e-9d4b-5090237060ae/b70dc82f-f8f0-340d-af3e-5810fada5e45.roa File: b70dc82f-f8f0-340d-af3e-5810fada5e45.roa (raw, json) Hash identifier: 9Au3uBMzT9SSkHanPVI7bxRw5e4pluahjf2Zp2PRmGw= Subject key identifier: 39:E3:94:F6:C6:F2:1D:A7:F8:59:BB:15:CD:5E:B9:83:9A:F0:69:5E Certificate issuer: /CN=c501b1e0-0018-475e-9d4b-5090237060ae Certificate serial: 010D0C9F4328584B636743873FD0FCC13ACE61C0 Authority key identifier: CB:88:97:9D:A7:79:1F:C4:E2:01:65:FC:6C:5D:DC:10:BB:BA:AC:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c501b1e0-0018-475e-9d4b-5090237060ae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c501b1e0-0018-475e-9d4b-5090237060ae/b70dc82f-f8f0-340d-af3e-5810fada5e45.roa Signing time: Thu 02 Oct 2025 13:00:40 +0000 ROA not before: Thu 02 Oct 2025 13:00:40 +0000 ROA not after: Wed 31 Dec 2025 14:00:40 +0000 asID: 54840 IP address blocks: 130.250.158.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c501b1e0-0018-475e-9d4b-5090237060ae/c501b1e0-0018-475e-9d4b-5090237060ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c501b1e0-0018-475e-9d4b-5090237060ae/c501b1e0-0018-475e-9d4b-5090237060ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c501b1e0-0018-475e-9d4b-5090237060ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:63:67:43:87:3f:d0:fc:c1:3a:ce:61:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c501b1e0-0018-475e-9d4b-5090237060ae Validity Not Before: Oct 2 13:00:40 2025 GMT Not After : Dec 31 14:00:40 2025 GMT Subject: CN=600bac6b-9593-4e60-bb2d-df5e8b510bc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:56:9d:72:41:a5:90:c2:29:44:27:e8:12:b9: a7:a7:5e:8b:0e:82:7b:1d:01:9b:75:02:ae:ea:d9: 55:e8:16:96:95:d0:88:cb:ab:b4:cc:df:27:c3:be: e3:df:79:b6:bd:bb:e6:a2:be:d5:06:77:0f:bc:b7: 64:1e:95:98:60:a1:ba:1c:2f:e1:77:4a:f1:8b:ee: 7b:71:47:36:8c:2f:ee:7c:da:40:ab:87:9d:9a:16: e1:ac:cf:c5:6a:ab:5b:aa:f4:19:8c:d9:ed:9d:41: 10:f6:20:e7:bd:36:93:56:c5:15:0a:70:59:89:ab: a3:9d:9a:ea:30:ea:85:16:e3:4f:76:64:92:5e:df: a5:7a:75:84:0e:ed:47:4c:6b:50:c2:41:23:a9:78: 78:bd:92:c1:d6:36:ca:73:3d:20:1f:dd:70:f3:b0: d4:f7:cb:56:43:7f:9c:64:cc:68:46:ff:bc:12:b2: 3d:23:e1:2d:ed:b7:93:44:7d:0d:d2:46:6a:d2:46: ef:7e:bc:8f:d5:20:c3:3b:32:2f:d6:79:e2:33:a8: 67:f8:20:71:c8:31:fe:3a:49:b5:f3:d2:52:ca:0e: 27:ee:d0:91:3c:9c:bc:53:c3:f4:6a:8b:b7:bf:2b: d2:26:21:61:61:ff:18:65:41:95:7f:9e:d0:8d:96: 40:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:E3:94:F6:C6:F2:1D:A7:F8:59:BB:15:CD:5E:B9:83:9A:F0:69:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c501b1e0-0018-475e-9d4b-5090237060ae/b70dc82f-f8f0-340d-af3e-5810fada5e45.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c501b1e0-0018-475e-9d4b-5090237060ae/c501b1e0-0018-475e-9d4b-5090237060ae.crl X509v3 Authority Key Identifier: keyid:CB:88:97:9D:A7:79:1F:C4:E2:01:65:FC:6C:5D:DC:10:BB:BA:AC:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c501b1e0-0018-475e-9d4b-5090237060ae.cer sbgp-ipAddrBlock: critical IPv4: 130.250.158.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:0b:29:3c:e1:31:79:34:46:ab:40:16:15:1f:cd:2c:67:b4: 9b:b6:8b:a5:c1:3a:b4:d7:87:c1:75:ef:7d:93:2e:ac:4a:5b: da:98:23:44:49:50:ca:cb:cb:dd:33:bb:b3:ee:0b:c2:07:37: 8d:e9:18:34:03:f7:60:b5:2c:99:21:fc:75:a2:fe:38:4c:97: 5f:83:c5:e5:88:9d:2c:31:f4:c0:f6:44:fd:14:e4:47:8b:f2: 7d:ea:fd:a9:51:9f:50:cb:10:2f:8b:76:0c:46:44:83:f2:e0: 35:c9:05:2a:9b:dd:bb:bf:49:56:0e:8a:b5:cb:70:0b:07:a1: 41:f5:c5:d1:38:f6:7a:62:92:a1:56:3e:99:7d:09:1d:b4:06: da:fb:91:5c:28:9c:cb:b8:92:8a:9d:53:94:3d:53:e9:6c:ec: 74:68:15:4a:8c:32:7d:2e:b0:e0:a8:7a:41:63:9b:40:f6:de: 2a:93:87:c8:2f:8d:88:4d:98:24:a5:4a:e8:58:ca:83:a5:bd: d0:37:04:3a:e5:16:7a:d9:73:46:0e:66:cd:bd:e5:59:4e:29: ab:44:c5:58:1e:a3:03:26:71:81:11:66:7c:41:2c:49:1e:07: 74:9e:fc:a4:e5:c9:e8:39:01:25:ca:74:f2:e6:95:0e:e4:f3: 32:6a:f5:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtjZ0OHP9D8wTrOYcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzUwMWIxZTAtMDAxOC00NzVlLTlkNGItNTA5MDIzNzA2 MGFlMB4XDTI1MTAwMjEzMDA0MFoXDTI1MTIzMTE0MDA0MFowLzEtMCsGA1UEAxMk NjAwYmFjNmItOTU5My00ZTYwLWJiMmQtZGY1ZThiNTEwYmM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1adckGlkMIpRCfoErmnp16LDoJ7HQGbdQKu 6tlV6BaWldCIy6u0zN8nw77j33m2vbvmor7VBncPvLdkHpWYYKG6HC/hd0rxi+57 cUc2jC/ufNpAq4edmhbhrM/FaqtbqvQZjNntnUEQ9iDnvTaTVsUVCnBZiaujnZrq MOqFFuNPdmSSXt+lenWEDu1HTGtQwkEjqXh4vZLB1jbKcz0gH91w87DU98tWQ3+c ZMxoRv+8ErI9I+Et7beTRH0N0kZq0kbvfryP1SDDOzIv1nniM6hn+CBxyDH+Okm1 89JSyg4n7tCRPJy8U8P0aou3vyvSJiFhYf8YZUGVf57QjZZADwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDnjlPbG8h2n+Fm7Fc1euYOa8GleMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jNTAx YjFlMC0wMDE4LTQ3NWUtOWQ0Yi01MDkwMjM3MDYwYWUvYjcwZGM4MmYtZjhmMC0z NDBkLWFmM2UtNTgxMGZhZGE1ZTQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzUwMWIxZTAtMDAxOC00NzVlLTlk NGItNTA5MDIzNzA2MGFlL2M1MDFiMWUwLTAwMTgtNDc1ZS05ZDRiLTUwOTAyMzcw NjBhZS5jcmwwHwYDVR0jBBgwFoAUy4iXnad5H8TiAWX8bF3cELu6rMUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jNTAxYjFlMC0wMDE4LTQ3NWUtOWQ0Yi01MDkw MjM3MDYwYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgvqeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIELKTzhMXk0RqtAFhUfzSxntJu2i6XBOrTXh8F1732TLqxKW9qYI0RJ UMrLy90zu7PuC8IHN43pGDQD92C1LJkh/HWi/jhMl1+DxeWInSwx9MD2RP0U5EeL 8n3q/alRn1DLEC+LdgxGRIPy4DXJBSqb3bu/SVYOirXLcAsHoUH1xdE49npikqFW Ppl9CR20Btr7kVwonMu4koqdU5Q9U+ls7HRoFUqMMn0usOCoekFjm0D23iqTh8gv jYhNmCSlSuhYyoOlvdA3BDrlFnrZc0YOZs295VlOKatExVgeowMmcYERZnxBLEke B3Se/KTlyeg5ASXKdPLmlQ7k8zJq9QU= -----END CERTIFICATE-----Generated at Wed Nov 5 13:27:43 2025 by rpki-client