$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/2b6dd575-f8d9-36bc-8c87-52636d9af5ac.roa File: 2b6dd575-f8d9-36bc-8c87-52636d9af5ac.roa (raw, json) Hash identifier: BCWv612h6PU4pVrxPj8RSNsMjVF2UVH4lPX0Ufor1jA= Subject key identifier: E3:3C:11:96:1E:C5:2B:3B:04:DC:70:CD:67:46:A6:39:B2:FB:C3:6F Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584AF8C2024C76B5724125FC7C80 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/2b6dd575-f8d9-36bc-8c87-52636d9af5ac.roa Signing time: Mon 25 Aug 2025 08:12:08 +0000 ROA not before: Mon 25 Aug 2025 08:12:08 +0000 ROA not after: Sun 23 Nov 2025 09:12:08 +0000 asID: 31898 IP address blocks: 130.35.184.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f8:c2:02:4c:76:b5:72:41:25:fc:7c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Aug 25 08:12:08 2025 GMT Not After : Nov 23 09:12:08 2025 GMT Subject: CN=dc872bd0-c391-4927-bb46-29c1d773ef68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c2:8b:bd:1b:fc:3d:01:0a:ee:ec:1c:7a:0a: 52:9e:7f:7b:db:96:41:21:49:21:09:1b:9f:38:33: 34:76:1b:79:30:c9:cb:1a:bb:78:43:00:2b:97:74: 60:4c:8f:79:70:a3:60:7f:95:2c:2d:fc:ce:8a:a2: 0c:47:1b:b3:d0:d4:ed:6d:1e:fc:cb:f9:01:43:68: a3:ef:a3:7d:a9:87:ae:21:dc:9d:55:c7:98:c5:94: 5a:ab:23:21:0d:9b:f0:e0:25:b2:93:a2:7f:9f:21: a8:59:69:3b:07:1f:0d:71:d9:60:de:22:c6:08:ae: 0d:66:06:d5:5d:94:04:19:67:54:18:80:4c:95:2b: 92:c2:38:57:61:99:39:26:e6:fa:57:dd:07:16:99: c2:78:44:65:7f:35:4a:dc:fe:20:68:92:af:07:ff: de:33:d8:16:cc:5d:6e:6c:9c:8e:4b:fd:41:75:13: 4f:43:07:8b:e1:3d:70:b4:2d:cb:dc:a2:71:f0:c8: 74:b1:d0:f7:ae:c9:1e:29:ae:78:9d:d6:e7:a6:ca: f8:9b:b2:a1:c1:c4:f7:9e:2b:2f:ba:2d:0f:6c:4a: ea:9c:c2:42:29:e1:76:88:07:ca:a9:87:78:27:f4: a6:e0:ba:2d:3a:e9:17:4e:ad:ad:fc:92:b8:c2:69: f4:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:3C:11:96:1E:C5:2B:3B:04:DC:70:CD:67:46:A6:39:B2:FB:C3:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/2b6dd575-f8d9-36bc-8c87-52636d9af5ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 130.35.184.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:47:0f:de:db:56:30:46:f6:99:60:59:8b:f9:51:05:c9:61: 3b:3b:6a:e3:87:91:bf:0f:52:19:19:04:24:ea:42:39:08:b5: d6:e3:ae:fe:ba:7b:e2:82:47:f5:42:67:7d:58:b6:bf:1e:76: 34:ca:65:0a:3a:01:76:fb:07:b0:1f:d7:05:e2:a8:39:57:8a: f9:d0:c8:d9:ba:e0:eb:7c:72:af:4f:5f:63:3b:e7:ca:f0:62: 59:b1:29:90:7a:6b:6e:b4:c8:89:aa:8a:cf:bb:9c:53:7d:0b: d1:9c:2f:75:30:d5:bf:c7:a7:6a:a4:1a:8b:bb:9b:f3:e9:8f: 6d:d9:d9:12:57:05:cf:8a:57:62:0d:da:dd:d7:17:08:5c:48: 50:5f:64:bd:f6:02:83:da:aa:ee:21:f3:a5:93:60:dc:1f:4d: 33:cd:6f:e6:a1:12:ad:d8:47:37:83:b5:72:9d:29:1e:6c:aa: 24:96:ec:ee:ef:28:78:2f:e8:65:a9:42:97:d5:e3:bb:61:4a: 3c:97:95:a0:a9:63:af:61:f8:0a:02:32:68:b1:db:65:b3:b8: c6:e5:9d:0f:3a:72:ae:62:bb:8c:c8:6b:59:60:a4:d8:a0:af: a1:ea:36:4b:59:3c:7d:b6:73:52:4a:60:9f:ac:7e:63:db:ac: 3c:a5:d1:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr4wgJMdrVyQSX8fIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI1MDgyNTA4MTIwOFoXDTI1MTEyMzA5MTIwOFowLzEtMCsGA1UEAxMk ZGM4NzJiZDAtYzM5MS00OTI3LWJiNDYtMjljMWQ3NzNlZjY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8KLvRv8PQEK7uwcegpSnn9725ZBIUkhCRuf ODM0dht5MMnLGrt4QwArl3RgTI95cKNgf5UsLfzOiqIMRxuz0NTtbR78y/kBQ2ij 76N9qYeuIdydVceYxZRaqyMhDZvw4CWyk6J/nyGoWWk7Bx8Ncdlg3iLGCK4NZgbV XZQEGWdUGIBMlSuSwjhXYZk5Jub6V90HFpnCeERlfzVK3P4gaJKvB//eM9gWzF1u bJyOS/1BdRNPQweL4T1wtC3L3KJx8Mh0sdD3rskeKa54ndbnpsr4m7KhwcT3nisv ui0PbErqnMJCKeF2iAfKqYd4J/Sm4LotOukXTq2t/JK4wmn0EwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOM8EZYexSs7BNxwzWdGpjmy+8NvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvMmI2ZGQ1NzUtZjhkOS0z NmJjLThjODctNTI2MzZkOWFmNWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgiO4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADJHD97bVjBG9plgWYv5UQXJYTs7auOHkb8PUhkZBCTqQjkItdbjrv66 e+KCR/VCZ31Ytr8edjTKZQo6AXb7B7Af1wXiqDlXivnQyNm64Ot8cq9PX2M758rw YlmxKZB6a260yImqis+7nFN9C9GcL3Uw1b/Hp2qkGou7m/Ppj23Z2RJXBc+KV2IN 2t3XFwhcSFBfZL32AoPaqu4h86WTYNwfTTPNb+ahEq3YRzeDtXKdKR5sqiSW7O7v KHgv6GWpQpfV47thSjyXlaCpY69h+AoCMmix22WzuMblnQ86cq5iu4zIa1lgpNig r6HqNktZPH22c1JKYJ+sfmPbrDyl0TQ= -----END CERTIFICATE-----Generated at Wed Nov 5 13:40:28 2025 by rpki-client