$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/1ff14226-6b7a-3e35-90c2-f5e5b37c64d4.roa File: 1ff14226-6b7a-3e35-90c2-f5e5b37c64d4.roa (raw, json) Hash identifier: yg8II41BtIDaiYbWHsQ8+viBiJGpihXRAS4MkcUSb3o= Subject key identifier: C0:B2:34:FB:45:B4:0C:C9:A2:E6:9E:E9:D6:B4:86:30:D9:CB:A6:BC Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584B9F6CDE77CA6CC194D7990100 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/1ff14226-6b7a-3e35-90c2-f5e5b37c64d4.roa Signing time: Fri 24 Oct 2025 01:00:30 +0000 ROA not before: Fri 24 Oct 2025 01:00:30 +0000 ROA not after: Thu 22 Jan 2026 02:00:30 +0000 asID: 46558 IP address blocks: 130.35.168.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9f:6c:de:77:ca:6c:c1:94:d7:99:01:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Oct 24 01:00:30 2025 GMT Not After : Jan 22 02:00:30 2026 GMT Subject: CN=e6b67277-a621-4327-9638-6ec8c2f94652 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:40:a1:1b:eb:d0:f2:21:85:81:e8:25:ef:23: 3c:17:45:93:1b:5f:76:85:3e:4f:14:ef:72:44:e3: df:ff:65:46:6d:45:61:41:70:af:10:29:e7:87:7c: c3:c4:9a:57:e5:e2:45:8e:4f:31:c4:64:a9:5b:60: f2:27:8c:71:f5:de:97:26:63:0e:a0:b3:af:b7:cd: cd:b8:9f:37:57:34:03:cd:a1:6a:7b:6f:e5:28:49: 8d:65:9c:dd:1c:19:fb:c5:d4:c4:61:a5:ed:60:22: 87:6c:04:84:81:36:4a:7b:9e:7a:39:e7:d2:bc:f1: 9f:d7:48:0b:4e:02:f0:c1:10:7d:10:08:fa:b2:96: 49:26:6e:44:7e:6f:86:29:97:b9:ab:a5:2d:fd:9a: 17:07:9a:f5:ea:b8:94:4b:f9:21:e3:00:fd:a4:d9: 2f:9d:ab:8d:0b:b1:f3:a8:1a:20:32:a1:5c:77:a1: 27:c0:29:6f:e2:80:fa:c1:de:45:ab:9f:af:b3:b1: 17:e5:da:00:9a:ad:5c:4b:91:68:89:49:4d:79:5c: 47:56:ef:4f:47:6f:31:dd:b6:fb:cc:fd:30:f3:2e: 23:12:47:3f:6f:19:00:19:57:2c:5f:7e:0c:96:a3: c2:0d:e5:88:8f:dd:51:1b:c4:86:48:c7:16:4d:18: c7:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:B2:34:FB:45:B4:0C:C9:A2:E6:9E:E9:D6:B4:86:30:D9:CB:A6:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/1ff14226-6b7a-3e35-90c2-f5e5b37c64d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 130.35.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:d1:66:f2:73:ce:82:9c:7d:d2:79:e2:bc:22:b6:30:7a:52: a4:4b:5c:8b:78:ef:a3:8c:e9:5c:33:5e:70:86:da:54:26:6d: 0a:ae:02:ac:70:69:74:3a:eb:87:f5:b3:38:91:f0:f5:82:13: 17:ad:2a:86:f8:f9:b2:48:90:ee:1f:fd:42:75:d6:e1:13:9a: 4a:a9:99:05:2c:b7:9f:e3:d0:af:ad:ea:38:57:60:82:17:21: 85:4f:4d:05:bd:f9:3a:7c:14:7c:d2:8e:40:39:5d:d1:3c:50: f9:e1:d8:38:92:58:af:3d:03:9c:f8:1c:5c:39:b6:29:67:27: 55:a7:b0:55:84:9f:59:16:57:da:7a:8b:0a:26:80:25:e6:19: 53:bb:25:15:c5:83:ed:56:f1:ab:25:0f:74:c7:b9:56:9f:aa: 70:52:a5:6d:d2:bd:91:f2:61:2a:ac:8a:01:33:05:2a:28:1a: 7c:cc:e3:f4:da:58:f2:6d:ad:9b:a6:70:b3:fc:a9:33:4d:a1: 81:8c:5a:dc:b5:f7:9e:8f:de:60:31:d7:73:f0:62:60:94:b2: e0:6c:8f:33:a2:87:16:a7:dd:de:7c:20:f5:8d:02:ab:18:f7: b6:61:b0:df:22:c8:cc:9b:fd:75:9e:b1:37:93:00:a4:59:01: 84:24:ca:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEufbN53ymzBlNeZAQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI1MTAyNDAxMDAzMFoXDTI2MDEyMjAyMDAzMFowLzEtMCsGA1UEAxMk ZTZiNjcyNzctYTYyMS00MzI3LTk2MzgtNmVjOGMyZjk0NjUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUChG+vQ8iGFgegl7yM8F0WTG192hT5PFO9y ROPf/2VGbUVhQXCvECnnh3zDxJpX5eJFjk8xxGSpW2DyJ4xx9d6XJmMOoLOvt83N uJ83VzQDzaFqe2/lKEmNZZzdHBn7xdTEYaXtYCKHbASEgTZKe556OefSvPGf10gL TgLwwRB9EAj6spZJJm5Efm+GKZe5q6Ut/ZoXB5r16riUS/kh4wD9pNkvnauNC7Hz qBogMqFcd6EnwClv4oD6wd5Fq5+vs7EX5doAmq1cS5FoiUlNeVxHVu9PR28x3bb7 zP0w8y4jEkc/bxkAGVcsX34MlqPCDeWIj91RG8SGSMcWTRjHNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMCyNPtFtAzJouae6da0hjDZy6a8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvMWZmMTQyMjYtNmI3YS0z ZTM1LTkwYzItZjVlNWIzN2M2NGQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgiOoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADPRZvJzzoKcfdJ54rwitjB6UqRLXIt476OM6VwzXnCG2lQmbQquAqxw aXQ664f1sziR8PWCExetKob4+bJIkO4f/UJ11uETmkqpmQUst5/j0K+t6jhXYIIX IYVPTQW9+Tp8FHzSjkA5XdE8UPnh2DiSWK89A5z4HFw5tilnJ1WnsFWEn1kWV9p6 iwomgCXmGVO7JRXFg+1W8aslD3THuVafqnBSpW3SvZHyYSqsigEzBSooGnzM4/Ta WPJtrZumcLP8qTNNoYGMWty1956P3mAx13PwYmCUsuBsjzOihxan3d58IPWNAqsY 97ZhsN8iyMyb/XWesTeTAKRZAYQkyog= -----END CERTIFICATE-----Generated at Wed Nov 5 16:59:19 2025 by rpki-client