$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/c17b1e7e-dbec-3fd6-a3b8-cafa53245c81.roa File: c17b1e7e-dbec-3fd6-a3b8-cafa53245c81.roa (raw, json) Hash identifier: VPZhwDGZXoQDlwpjGT3wXRLMMUjT911AdhepPTTiJV8= Subject key identifier: A5:70:73:4B:AB:CB:9D:3F:DA:BE:F6:29:40:D0:67:1A:8E:77:74:05 Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584AF0140FFD34F757DC117A8E80 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/c17b1e7e-dbec-3fd6-a3b8-cafa53245c81.roa Signing time: Fri 22 Aug 2025 05:35:11 +0000 ROA not before: Fri 22 Aug 2025 05:35:11 +0000 ROA not after: Thu 20 Nov 2025 06:35:11 +0000 asID: 31898 IP address blocks: 130.35.128.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:14:0f:fd:34:f7:57:dc:11:7a:8e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Aug 22 05:35:11 2025 GMT Not After : Nov 20 06:35:11 2025 GMT Subject: CN=2b4f7d14-94f1-4e52-ae0b-75d86b71ff7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:1e:f2:a3:63:9a:96:e3:60:5f:5c:0e:45:da: d2:6c:6f:20:41:e7:90:ee:72:35:a0:37:28:ca:6e: 1a:aa:e4:20:0c:b7:32:92:46:e9:96:a1:27:d7:82: 2e:39:e7:fb:84:06:2b:56:12:80:47:6d:18:cf:e2: ae:8c:5b:87:c9:9c:df:c2:c3:8e:71:22:8c:24:25: 5e:99:53:1d:7b:8b:6a:42:32:db:e1:6f:11:17:43: e4:3a:e6:0a:5a:f8:9d:4f:86:23:a2:d7:f8:d6:62: 0d:da:36:c9:75:f1:06:d0:d3:58:ca:a9:fd:40:3a: a8:33:0b:4f:86:3a:b7:c9:54:94:a8:31:52:69:a8: 4b:19:60:b2:ce:0d:88:58:eb:f3:f9:42:11:76:8c: bd:ac:71:32:ce:0a:4f:ff:b2:e0:20:ca:19:26:ab: 66:4d:95:0b:ce:51:e0:39:06:22:fa:0a:76:7f:42: 1b:23:b1:6d:07:7a:9d:52:ee:08:48:89:a9:de:98: 71:54:54:9d:bd:8c:68:fa:04:7a:41:f1:fb:9a:f9: 4e:be:08:33:68:cf:1b:34:06:4f:7f:8a:48:b6:c2: 17:e4:9e:e5:2f:14:6f:2d:16:9d:61:33:2e:84:84: 1d:76:0f:bd:84:63:6f:7c:73:09:be:e6:07:92:9e: 77:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:70:73:4B:AB:CB:9D:3F:DA:BE:F6:29:40:D0:67:1A:8E:77:74:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/c17b1e7e-dbec-3fd6-a3b8-cafa53245c81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 130.35.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:33:33:0d:c3:f3:65:03:d3:53:a0:fd:42:96:aa:05:89:26: 6c:ba:3b:ea:15:56:65:89:50:71:6f:00:3a:94:c1:9b:65:e5: 7b:d3:c8:fb:83:2f:0f:09:ae:59:2e:3a:0f:40:20:b5:67:5f: 29:1b:85:af:35:7e:17:11:22:8c:3d:d6:96:0d:15:bf:8f:55: cd:d2:62:5a:25:59:0c:47:a3:bc:9a:7a:82:32:b9:ef:3b:f1: 19:94:68:bc:fc:b4:2c:06:bb:ba:d0:d3:9a:a3:d5:56:15:07: 3f:24:70:ec:61:ec:98:69:43:a1:4b:84:11:2d:7b:c7:98:f3: 26:fb:60:e5:2d:57:ca:01:a1:de:2f:29:be:00:8d:3f:3c:dd: c7:07:72:a8:a3:ec:a5:e1:46:6d:65:fb:b2:35:3f:ed:0e:68: 3d:dd:75:da:99:16:9c:b8:a1:cd:c1:b1:ed:21:4b:12:41:91: 53:98:67:cf:56:5d:66:05:a7:db:9f:db:c8:55:7e:59:81:30: c2:ad:8a:19:53:e4:38:e6:08:9d:4d:ae:10:e4:02:f8:fe:f8: a2:f5:ca:8d:ce:b5:29:88:d4:41:fe:f6:9e:1a:e1:de:08:5b: b8:10:24:7b:9a:98:25:c4:77:50:d4:96:94:5c:8b:50:7d:5f: 85:bd:1b:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErwFA/9NPdX3BF6joAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI1MDgyMjA1MzUxMVoXDTI1MTEyMDA2MzUxMVowLzEtMCsGA1UEAxMk MmI0ZjdkMTQtOTRmMS00ZTUyLWFlMGItNzVkODZiNzFmZjdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAux7yo2OaluNgX1wORdrSbG8gQeeQ7nI1oDco ym4aquQgDLcykkbplqEn14IuOef7hAYrVhKAR20Yz+KujFuHyZzfwsOOcSKMJCVe mVMde4tqQjLb4W8RF0PkOuYKWvidT4Yjotf41mIN2jbJdfEG0NNYyqn9QDqoMwtP hjq3yVSUqDFSaahLGWCyzg2IWOvz+UIRdoy9rHEyzgpP/7LgIMoZJqtmTZULzlHg OQYi+gp2f0IbI7FtB3qdUu4ISImp3phxVFSdvYxo+gR6QfH7mvlOvggzaM8bNAZP f4pItsIX5J7lLxRvLRadYTMuhIQddg+9hGNvfHMJvuYHkp53owIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKVwc0ury50/2r72KUDQZxqOd3QFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvYzE3YjFlN2UtZGJlYy0z ZmQ2LWEzYjgtY2FmYTUzMjQ1YzgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgiOAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABQzMw3D82UD01Og/UKWqgWJJmy6O+oVVmWJUHFvADqUwZtl5XvTyPuD Lw8JrlkuOg9AILVnXykbha81fhcRIow91pYNFb+PVc3SYlolWQxHo7yaeoIyue87 8RmUaLz8tCwGu7rQ05qj1VYVBz8kcOxh7JhpQ6FLhBEte8eY8yb7YOUtV8oBod4v Kb4AjT883ccHcqij7KXhRm1l+7I1P+0OaD3dddqZFpy4oc3Bse0hSxJBkVOYZ89W XWYFp9uf28hVflmBMMKtihlT5DjmCJ1NrhDkAvj++KL1yo3OtSmI1EH+9p4a4d4I W7gQJHuamCXEd1DUlpRci1B9X4W9Gwo= -----END CERTIFICATE-----Generated at Wed Nov 5 15:19:45 2025 by rpki-client