$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/ba7f0f31-f4ef-3918-bc9a-0cddafed77c8.roa File: ba7f0f31-f4ef-3918-bc9a-0cddafed77c8.roa (raw, json) Hash identifier: uZp1msa1GQf5U0CdX6RV5XTjiUGzFo99bcjAo+4MiDc= Subject key identifier: C6:A4:AE:D6:F4:8E:EA:35:60:33:8D:2C:83:D7:43:1F:7C:D1:24:B0 Certificate issuer: /CN=d45613e1-c70f-4ce1-996e-e01d89469087 Certificate serial: 010D0C9F4328584A888F70ACBD201A375C7B8FC0 Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/ba7f0f31-f4ef-3918-bc9a-0cddafed77c8.roa Signing time: Tue 15 Jul 2025 19:46:14 +0000 ROA not before: Tue 15 Jul 2025 19:46:14 +0000 ROA not after: Mon 13 Oct 2025 19:46:14 +0000 asID: 40676 IP address blocks: 130.254.46.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:88:8f:70:ac:bd:20:1a:37:5c:7b:8f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087 Validity Not Before: Jul 15 19:46:14 2025 GMT Not After : Oct 13 19:46:14 2025 GMT Subject: CN=8bee85e0-c225-408d-ab1c-c64ea686ae3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:67:5a:f8:f6:9d:61:4a:9b:cb:00:2b:86:0c: ff:f4:79:ab:22:ad:5f:b4:1a:6f:43:de:e2:50:93: dd:08:bd:c6:28:d6:e6:98:de:cc:b2:2a:dd:42:c0: 1a:7c:05:07:23:6d:6c:1c:5a:7e:d5:c5:8f:90:f1: 57:ec:b4:8d:87:db:92:11:24:41:fc:4c:58:75:84: b1:51:60:7b:f1:05:6e:eb:5a:23:29:5b:4a:0a:e9: 42:6a:b6:10:90:dd:e5:b8:b8:53:ad:f0:75:03:c4: f2:be:3c:0a:83:56:28:18:17:e0:40:fd:6c:f8:35: 63:9f:f2:a1:ae:cf:80:39:7c:8d:6d:b3:20:92:57: 06:6b:b7:e6:04:3f:56:8f:c9:31:2c:3b:16:9c:08: bd:bd:c2:a1:99:e2:90:08:62:7e:1d:83:34:1b:20: cb:63:5e:36:dc:3b:29:61:32:98:63:e9:4f:da:aa: 1e:23:ce:1f:9c:5b:28:9d:92:c0:56:46:14:8b:c3: 9d:4e:f4:b3:66:52:50:c6:0a:d5:13:07:1b:12:e9: 4b:0d:90:6a:8c:c5:b7:5a:5d:d7:bd:38:99:eb:f2: 92:8c:b5:3c:d6:80:54:56:75:2a:25:91:1a:61:12: 3c:65:76:f5:a4:d1:b7:b1:01:e5:8f:f0:42:61:36: 30:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:A4:AE:D6:F4:8E:EA:35:60:33:8D:2C:83:D7:43:1F:7C:D1:24:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/ba7f0f31-f4ef-3918-bc9a-0cddafed77c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl X509v3 Authority Key Identifier: keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer sbgp-ipAddrBlock: critical IPv4: 130.254.46.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:b4:44:6c:c3:98:1b:96:dc:93:8e:cc:69:9a:51:58:a3:67: 91:b2:1c:f7:79:29:dd:6b:97:a3:c9:3d:dc:7d:2c:36:4d:34: f7:ee:f4:59:56:10:c3:15:a1:ad:e1:56:95:f0:31:8f:6d:21: ac:56:49:d0:cf:c3:6b:99:43:3f:d7:c8:e8:6f:8b:64:41:0c: ef:3b:97:55:73:a2:4b:82:c6:bf:38:68:a3:d7:a8:d1:30:33: 48:37:2e:9b:70:87:c3:a5:49:db:3d:e2:91:bc:78:a5:f9:de: 3a:1c:e3:7e:86:4f:55:36:28:df:67:e6:55:eb:7e:ac:00:08: ea:2d:3a:4b:6e:7e:5a:84:b7:11:0e:8c:1c:48:6d:3b:af:6e: ac:53:dd:e3:5a:32:43:da:30:97:28:33:dc:1c:66:9b:e3:e5: b4:79:c7:64:59:72:1c:42:1a:1a:8a:d9:e7:37:60:e9:e8:3b: b3:de:46:75:95:82:1e:e9:5b:77:8e:ab:8d:54:5d:12:f9:81: 6b:56:b2:8f:19:07:46:cf:31:7e:12:75:54:2d:51:4c:cd:bd: f5:50:08:3e:13:e0:a2:15:1c:ae:60:26:72:52:f6:e2:aa:e9: ce:c5:78:d3:04:af:cc:5b:f4:23:1c:4a:2f:5b:78:84:4d:60: 12:e3:23:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqIj3CsvSAaN1x7j8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ1NjEzZTEtYzcwZi00Y2UxLTk5NmUtZTAxZDg5NDY5 MDg3MB4XDTI1MDcxNTE5NDYxNFoXDTI1MTAxMzE5NDYxNFowLzEtMCsGA1UEAxMk OGJlZTg1ZTAtYzIyNS00MDhkLWFiMWMtYzY0ZWE2ODZhZTNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2da+PadYUqbywArhgz/9HmrIq1ftBpvQ97i UJPdCL3GKNbmmN7MsirdQsAafAUHI21sHFp+1cWPkPFX7LSNh9uSESRB/ExYdYSx UWB78QVu61ojKVtKCulCarYQkN3luLhTrfB1A8TyvjwKg1YoGBfgQP1s+DVjn/Kh rs+AOXyNbbMgklcGa7fmBD9Wj8kxLDsWnAi9vcKhmeKQCGJ+HYM0GyDLY1423Dsp YTKYY+lP2qoeI84fnFsonZLAVkYUi8OdTvSzZlJQxgrVEwcbEulLDZBqjMW3Wl3X vTiZ6/KSjLU81oBUVnUqJZEaYRI8ZXb1pNG3sQHlj/BCYTYwuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMakrtb0juo1YDONLIPXQx980SSwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2 MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFkODk0NjkwODcvYmE3ZjBmMzEtZjRlZi0z OTE4LWJjOWEtMGNkZGFmZWQ3N2M4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ1NjEzZTEtYzcwZi00Y2UxLTk5 NmUtZTAxZDg5NDY5MDg3L2Q0NTYxM2UxLWM3MGYtNGNlMS05OTZlLWUwMWQ4OTQ2 OTA4Ny5jcmwwHwYDVR0jBBgwFoAUNBHhKorpHx6VjIOA/IkQ/r/mucMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFk ODk0NjkwODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgv4uMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIG0RGzDmBuW3JOOzGmaUVijZ5GyHPd5Kd1rl6PJPdx9LDZNNPfu9FlW EMMVoa3hVpXwMY9tIaxWSdDPw2uZQz/XyOhvi2RBDO87l1VzokuCxr84aKPXqNEw M0g3Lptwh8OlSds94pG8eKX53joc436GT1U2KN9n5lXrfqwACOotOktuflqEtxEO jBxIbTuvbqxT3eNaMkPaMJcoM9wcZpvj5bR5x2RZchxCGhqK2ec3YOnoO7PeRnWV gh7pW3eOq41UXRL5gWtWso8ZB0bPMX4SdVQtUUzNvfVQCD4T4KIVHK5gJnJS9uKq 6c7FeNMEr8xb9CMcSi9beIRNYBLjI/I= -----END CERTIFICATE-----Generated at Mon Aug 4 15:35:27 2025 by rpki-client