$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2a979bb9-1d54-3e5b-bf7d-c1661fbde173.roa File: 2a979bb9-1d54-3e5b-bf7d-c1661fbde173.roa (raw, json) Hash identifier: MHSjhy6+OzUIV8l5sRfpbV5vMuuWyXsbgGM477l1zDU= Subject key identifier: 4C:0F:A1:1C:AF:AF:DC:29:BC:15:7C:AF:0E:C6:BA:7C:16:27:21:26 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEEAD738DA4972374FBCE17C0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2a979bb9-1d54-3e5b-bf7d-c1661fbde173.roa Signing time: Thu 21 Aug 2025 17:32:38 +0000 ROA not before: Thu 21 Aug 2025 17:32:38 +0000 ROA not after: Wed 19 Nov 2025 18:32:38 +0000 asID: 31898 IP address blocks: 130.61.88.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:ad:73:8d:a4:97:23:74:fb:ce:17:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 21 17:32:38 2025 GMT Not After : Nov 19 18:32:38 2025 GMT Subject: CN=70e8b4cc-d934-4e8d-ac3b-cbe7e2410974 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:5f:5f:d3:3a:7a:e0:fb:95:c4:44:a4:9b:e1: 02:e5:c8:2e:39:1e:da:38:5d:4f:4c:64:ff:52:f8: d8:d0:c8:2b:15:01:d5:7b:1c:fc:29:cc:02:1e:b9: 05:4a:d0:28:2d:64:e4:52:72:65:1c:05:aa:82:9e: 5a:11:1b:e2:52:67:4e:cf:82:26:c8:4a:3c:e5:71: d6:9b:36:58:8e:55:f5:5d:d0:60:07:46:11:e3:d7: b7:2e:a7:c2:75:71:b4:e2:39:60:4e:1a:a7:b6:9c: d9:56:38:a2:98:25:d4:34:5d:97:a3:74:27:ba:68: 42:d0:50:be:06:e6:e0:f0:3d:99:36:a3:9a:d1:bc: 66:26:61:68:52:4b:c6:2d:89:1e:79:c2:16:ba:d5: fc:3d:f2:7b:b0:9b:b0:72:88:95:6b:f8:ba:0b:67: 81:26:1d:68:a2:13:7d:27:d4:7f:db:ca:38:89:fe: 42:c2:0a:ed:c7:56:d4:97:21:cb:bd:e0:f8:b3:ea: e7:da:42:4e:db:28:58:20:bd:bb:db:ca:99:43:23: 2d:f0:13:5b:9e:ae:6b:28:d4:60:61:74:cc:f1:63: 92:67:2d:e5:60:df:37:2c:3e:28:1a:0d:02:6b:8b: 1d:57:9b:c7:42:b8:cc:42:60:d9:95:00:3c:11:5e: 11:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:0F:A1:1C:AF:AF:DC:29:BC:15:7C:AF:0E:C6:BA:7C:16:27:21:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2a979bb9-1d54-3e5b-bf7d-c1661fbde173.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 130.61.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:f6:dd:f8:2b:bc:f7:57:a1:e6:ce:f7:9f:f8:5d:42:8f:55: 02:56:de:b4:4b:19:e8:cd:c2:40:25:48:49:c7:99:0f:28:97: 3d:64:9f:b9:6f:22:a9:5f:2a:60:71:be:d9:c0:d0:90:31:be: 31:31:8b:7f:d8:70:77:a4:a6:64:6f:59:92:da:06:88:f9:fd: 10:ab:35:ac:49:a1:3e:08:70:3c:d4:36:6e:a6:18:42:92:09: ba:ee:71:e8:f5:de:21:22:23:b3:fb:c4:91:18:44:db:18:26: 12:0e:6e:b4:9f:19:7d:6a:af:49:18:cd:17:85:63:a2:35:9f: 76:14:4f:19:22:aa:fa:73:6f:e8:0a:4f:aa:18:ed:19:fb:e3: 4c:50:e2:d4:a7:ca:2d:33:a9:36:6c:1c:8e:15:9c:f5:92:40: 6b:d2:d2:f3:84:99:a1:b9:2e:8b:fa:50:57:28:44:a4:71:66: d4:d3:e9:fd:78:24:f7:5b:a0:f1:ca:8e:4f:b3:f1:9d:41:4c: 32:48:66:54:b9:ca:52:d1:9e:13:33:5c:7f:35:ae:ff:34:9a: e5:df:ea:f5:06:e8:f5:c0:8f:31:44:d8:45:d0:8e:71:f6:4e: 6c:4f:d2:90:ed:50:cc:be:f6:83:d2:3f:fe:0a:39:0c:1f:9b: cd:dd:ca:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErurXONpJcjdPvOF8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMTE3MzIzOFoXDTI1MTExOTE4MzIzOFowLzEtMCsGA1UEAxMk NzBlOGI0Y2MtZDkzNC00ZThkLWFjM2ItY2JlN2UyNDEwOTc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA219f0zp64PuVxESkm+EC5cguOR7aOF1PTGT/ UvjY0MgrFQHVexz8KcwCHrkFStAoLWTkUnJlHAWqgp5aERviUmdOz4ImyEo85XHW mzZYjlX1XdBgB0YR49e3LqfCdXG04jlgThqntpzZVjiimCXUNF2Xo3QnumhC0FC+ Bubg8D2ZNqOa0bxmJmFoUkvGLYkeecIWutX8PfJ7sJuwcoiVa/i6C2eBJh1oohN9 J9R/28o4if5Cwgrtx1bUlyHLveD4s+rn2kJO2yhYIL2728qZQyMt8BNbnq5rKNRg YXTM8WOSZy3lYN83LD4oGg0Ca4sdV5vHQrjMQmDZlQA8EV4RpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEwPoRyvr9wpvBV8rw7GunwWJyEmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMmE5NzliYjktMWQ1NC0z ZTViLWJmN2QtYzE2NjFmYmRlMTczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDgj1YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIv23fgrvPdXoebO95/4XUKPVQJW3rRLGejNwkAlSEnHmQ8olz1kn7lv IqlfKmBxvtnA0JAxvjExi3/YcHekpmRvWZLaBoj5/RCrNaxJoT4IcDzUNm6mGEKS Cbrucej13iEiI7P7xJEYRNsYJhIObrSfGX1qr0kYzReFY6I1n3YUTxkiqvpzb+gK T6oY7Rn740xQ4tSnyi0zqTZsHI4VnPWSQGvS0vOEmaG5Lov6UFcoRKRxZtTT6f14 JPdboPHKjk+z8Z1BTDJIZlS5ylLRnhMzXH81rv80muXf6vUG6PXAjzFE2EXQjnH2 TmxP0pDtUMy+9oPSP/4KOQwfm83dyvs= -----END CERTIFICATE-----Generated at Wed Nov 5 08:51:05 2025 by rpki-client