$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/39bfe4e7-0385-30b6-a037-146aab481977.roa File: 39bfe4e7-0385-30b6-a037-146aab481977.roa (raw, json) Hash identifier: WjYUpiwRYBTqatzTv0l1AX1YDZn6sk94vY0w76C8hus= Subject key identifier: 6E:E6:83:69:E1:79:71:DF:45:DE:4D:4D:78:83:0A:DC:1B:BC:FE:7C Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584AEC0047BAB43E21641E485C80 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/39bfe4e7-0385-30b6-a037-146aab481977.roa Signing time: Wed 20 Aug 2025 18:32:06 +0000 ROA not before: Wed 20 Aug 2025 18:32:06 +0000 ROA not after: Tue 18 Nov 2025 19:32:06 +0000 asID: 31898 IP address blocks: 150.230.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:00:47:ba:b4:3e:21:64:1e:48:5c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Aug 20 18:32:06 2025 GMT Not After : Nov 18 19:32:06 2025 GMT Subject: CN=f2329bc0-6cbb-4011-a296-12783ef0a7d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:3d:2a:a0:27:2b:b1:bf:23:77:d6:30:c4:1e: f6:40:03:87:a4:d2:2a:ee:e3:b9:dc:bf:aa:a5:2b: be:d5:88:e0:d1:16:d2:24:f6:57:dd:9d:a5:ba:ae: 21:7b:bb:9b:47:fc:c8:26:94:2b:6c:ec:86:ef:36: 1c:6a:85:7a:30:12:ab:36:4d:52:d1:3a:7b:74:25: a7:e6:4c:d6:4b:cb:55:0d:62:8b:08:2a:fe:ed:5b: 70:61:48:b2:6d:f0:fd:fa:80:b9:d9:9f:2c:b4:c2: 10:78:0c:ad:b9:c2:cc:86:e0:34:aa:13:0e:41:ed: 92:9e:ed:af:f0:d4:46:76:b8:99:51:09:e6:91:4e: d7:a4:3e:70:05:93:8b:4f:f7:cb:7a:5e:e3:bc:67: 79:a7:56:41:dc:67:78:6d:2e:88:d3:40:24:4b:e6: 6c:2a:33:d7:00:ce:57:25:19:4c:04:8a:0a:b0:3f: 56:52:69:f0:e9:51:8d:38:c2:3c:d9:b9:9b:90:54: 86:71:6f:5f:0f:be:31:d0:8a:9f:50:08:b3:61:f4: c2:40:8a:29:17:cf:0b:63:29:a5:9e:58:ee:d0:dd: c1:59:bf:c8:f3:85:fd:3e:7c:36:83:fd:61:69:cd: c3:76:29:be:44:b0:61:14:d7:e4:f2:73:4f:9c:b2: 2e:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:E6:83:69:E1:79:71:DF:45:DE:4D:4D:78:83:0A:DC:1B:BC:FE:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/39bfe4e7-0385-30b6-a037-146aab481977.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 150.230.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:a1:c4:e8:6e:a3:f0:85:3a:b2:77:1e:10:e7:d9:da:48:6f: 0a:28:04:07:91:c1:59:46:2a:36:d6:3b:bd:49:d1:b8:d8:2b: 7b:2a:ad:dd:36:64:c9:f3:64:e4:7e:0c:fb:14:c2:a0:34:79: 44:3e:65:ce:79:22:08:0d:5e:10:bd:d4:93:0d:06:3a:19:6c: 32:b8:3f:00:a1:30:53:60:1b:f1:a8:47:9f:83:7b:56:66:48: dd:ad:f4:f1:45:6d:af:4b:fe:b4:1b:6f:dd:c3:93:64:a4:e9: 0b:4e:50:2d:07:e0:a4:67:86:4a:1e:ef:51:dc:6e:45:ca:1e: d0:bf:7a:ec:85:5c:9a:94:02:59:90:5b:00:b3:0e:60:ab:57: 34:7d:d6:ba:0f:71:38:7a:8e:af:f4:0c:de:be:5e:9f:8c:b7: ef:71:4f:88:b3:b9:4e:11:18:c9:06:b9:8a:15:d2:43:1c:26: c7:0c:b3:0e:25:a1:cc:2f:47:1b:24:a4:f1:04:1d:1b:e4:dd: de:58:cf:05:20:e1:9c:c3:56:3f:c9:c2:68:34:70:c5:76:38: 93:61:f8:4e:4e:1d:96:ac:29:e8:45:1c:7a:88:e4:ef:44:55: 80:a8:68:6c:45:f5:d7:80:27:e0:45:6b:87:d6:7f:36:8a:5e: 04:8f:79:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsAEe6tD4hZB5IXIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI1MDgyMDE4MzIwNloXDTI1MTExODE5MzIwNlowLzEtMCsGA1UEAxMk ZjIzMjliYzAtNmNiYi00MDExLWEyOTYtMTI3ODNlZjBhN2QwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvD0qoCcrsb8jd9YwxB72QAOHpNIq7uO53L+q pSu+1Yjg0RbSJPZX3Z2luq4he7ubR/zIJpQrbOyG7zYcaoV6MBKrNk1S0Tp7dCWn 5kzWS8tVDWKLCCr+7VtwYUiybfD9+oC52Z8stMIQeAytucLMhuA0qhMOQe2Snu2v 8NRGdriZUQnmkU7XpD5wBZOLT/fLel7jvGd5p1ZB3Gd4bS6I00AkS+ZsKjPXAM5X JRlMBIoKsD9WUmnw6VGNOMI82bmbkFSGcW9fD74x0IqfUAizYfTCQIopF88LYyml nlju0N3BWb/I84X9Pnw2g/1hac3Ddim+RLBhFNfk8nNPnLIuQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG7mg2nheXHfRd5NTXiDCtwbvP58MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvMzliZmU0ZTctMDM4NS0z MGI2LWEwMzctMTQ2YWFiNDgxOTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCluYUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAyhxOhuo/CFOrJ3HhDn2dpIbwooBAeRwVlGKjbWO71J0bjYK3sqrd02 ZMnzZOR+DPsUwqA0eUQ+Zc55IggNXhC91JMNBjoZbDK4PwChMFNgG/GoR5+De1Zm SN2t9PFFba9L/rQbb93Dk2Sk6QtOUC0H4KRnhkoe71HcbkXKHtC/euyFXJqUAlmQ WwCzDmCrVzR91roPcTh6jq/0DN6+Xp+Mt+9xT4izuU4RGMkGuYoV0kMcJscMsw4l ocwvRxskpPEEHRvk3d5YzwUg4ZzDVj/Jwmg0cMV2OJNh+E5OHZasKehFHHqI5O9E VYCoaGxF9deAJ+BFa4fWfzaKXgSPedg= -----END CERTIFICATE-----Generated at Wed Nov 5 13:40:33 2025 by rpki-client