$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/1ff14226-6b7a-3e35-90c2-f5e5b37c64d4.roa File: 1ff14226-6b7a-3e35-90c2-f5e5b37c64d4.roa (raw, json) Hash identifier: eAtXMuDgJzHt7fdoSCdZ0YzQ+icLh3/o+TgPF3v1DJ0= Subject key identifier: 88:36:49:FD:1B:23:D4:E2:1A:05:AF:37:F7:A5:7D:BE:17:99:24:87 Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584ABF5CAFAEC9CC47F99DB02800 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/1ff14226-6b7a-3e35-90c2-f5e5b37c64d4.roa Signing time: Mon 04 Aug 2025 18:46:55 +0000 ROA not before: Mon 04 Aug 2025 18:46:55 +0000 ROA not after: Sun 02 Nov 2025 19:46:55 +0000 asID: 46558 IP address blocks: 130.35.168.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 09 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bf:5c:af:ae:c9:cc:47:f9:9d:b0:28:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Aug 4 18:46:55 2025 GMT Not After : Nov 2 19:46:55 2025 GMT Subject: CN=793a673e-6245-4473-9b29-100d1a853278 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:5f:64:2d:f4:ff:3d:64:a2:1b:be:65:92:29: 52:f8:70:3c:79:3d:2b:e8:0f:48:a5:9f:ed:9e:fd: 77:cd:cf:17:2d:7c:f7:1d:5b:80:c8:8e:88:32:69: ce:25:64:ee:ab:4e:e8:c4:98:e5:8b:e4:3d:22:41: e0:ce:c2:ae:27:24:8f:9e:67:b4:2a:65:ee:ab:b5: fb:ec:ed:49:c3:c0:30:9d:b0:3c:37:6a:72:72:24: 20:a2:92:19:ac:e7:b5:3e:fc:03:f5:64:73:50:02: 91:55:2c:83:50:a3:44:95:62:43:9e:2b:b5:7f:e9: 4a:db:4e:47:c7:01:3c:97:4f:4d:06:c4:8d:fd:d3: e3:ad:d7:a6:ce:82:2e:31:cd:ad:42:14:4a:df:42: b0:91:63:d8:ef:9f:4d:26:84:5c:19:b6:c8:f7:78: c9:30:8a:6d:c3:31:43:a2:2c:0a:a9:1f:ea:50:c7: a2:54:0b:8f:26:d2:0a:b1:8f:a0:cf:bb:7b:e3:c9: 8b:76:98:1e:ad:1d:0e:87:f3:27:a6:66:81:59:a0: 8b:6b:80:80:14:71:0b:3d:67:b2:56:4e:9a:26:c0: 74:ce:2a:78:61:1c:a2:60:04:c8:2e:da:83:a0:4d: 3a:5c:b5:e6:95:ab:5f:62:b1:cb:3e:fd:20:fd:2d: 7e:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:36:49:FD:1B:23:D4:E2:1A:05:AF:37:F7:A5:7D:BE:17:99:24:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/1ff14226-6b7a-3e35-90c2-f5e5b37c64d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 130.35.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:c3:ab:88:20:43:e4:e6:0d:6b:21:2d:93:03:4e:72:49:d4: f0:1b:88:6f:74:70:2f:93:27:f4:65:1e:f2:4e:44:ff:1f:62: 13:97:9e:b3:a3:d3:0e:18:ab:c1:d6:05:b5:b7:69:77:ed:d1: 79:a6:bf:d9:1c:dd:a7:57:07:e5:23:03:cd:9f:c2:fa:7a:ff: b4:8b:5d:16:11:7e:8c:b8:2c:bb:9d:40:ee:97:90:7b:b3:af: 09:14:9b:c7:4c:89:13:49:91:79:c7:62:89:65:d7:96:4c:02: 37:42:ef:8c:ce:f7:c9:5e:e1:39:c4:51:33:fa:80:af:7e:34: c2:d1:67:77:9c:15:ee:13:8d:55:4e:b7:02:05:58:a4:9b:dc: 98:b2:26:56:32:fe:95:24:48:c3:f4:27:8f:4c:d4:dd:db:ea: 46:9e:09:ab:f4:df:ae:f5:3c:b6:76:84:2c:86:45:bb:bb:d0: f2:65:5c:02:b8:52:d2:5f:6d:4d:ea:c4:e1:07:17:a5:f6:a9: 4d:d0:0b:90:67:b1:e3:87:96:3a:1d:75:98:84:1b:f3:44:1d: ff:1e:e5:20:ec:de:c2:bb:e9:b0:4e:51:cb:5f:7c:97:15:b5: d9:2e:74:03:fc:dc:10:69:93:f4:51:7a:8c:30:d4:8b:ff:11: 72:84:50:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq/XK+uycxH+Z2wKAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI1MDgwNDE4NDY1NVoXDTI1MTEwMjE5NDY1NVowLzEtMCsGA1UEAxMk NzkzYTY3M2UtNjI0NS00NDczLTliMjktMTAwZDFhODUzMjc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArl9kLfT/PWSiG75lkilS+HA8eT0r6A9IpZ/t nv13zc8XLXz3HVuAyI6IMmnOJWTuq07oxJjli+Q9IkHgzsKuJySPnme0KmXuq7X7 7O1Jw8AwnbA8N2pyciQgopIZrOe1PvwD9WRzUAKRVSyDUKNElWJDniu1f+lK205H xwE8l09NBsSN/dPjrdemzoIuMc2tQhRK30KwkWPY759NJoRcGbbI93jJMIptwzFD oiwKqR/qUMeiVAuPJtIKsY+gz7t748mLdpgerR0Oh/MnpmaBWaCLa4CAFHELPWey Vk6aJsB0zip4YRyiYATILtqDoE06XLXmlatfYrHLPv0g/S1+wQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIg2Sf0bI9TiGgWvN/elfb4XmSSHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvMWZmMTQyMjYtNmI3YS0z ZTM1LTkwYzItZjVlNWIzN2M2NGQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgiOoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJLDq4ggQ+TmDWshLZMDTnJJ1PAbiG90cC+TJ/RlHvJORP8fYhOXnrOj 0w4Yq8HWBbW3aXft0Xmmv9kc3adXB+UjA82fwvp6/7SLXRYRfoy4LLudQO6XkHuz rwkUm8dMiRNJkXnHYoll15ZMAjdC74zO98le4TnEUTP6gK9+NMLRZ3ecFe4TjVVO twIFWKSb3JiyJlYy/pUkSMP0J49M1N3b6kaeCav03671PLZ2hCyGRbu70PJlXAK4 UtJfbU3qxOEHF6X2qU3QC5BnseOHljoddZiEG/NEHf8e5SDs3sK76bBOUctffJcV tdkudAP83BBpk/RReoww1Iv/EXKEUEE= -----END CERTIFICATE-----Generated at Thu Aug 7 23:59:56 2025 by rpki-client