$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8af7652f-9905-3a35-8e49-b06dd018deb1.roa File: 8af7652f-9905-3a35-8e49-b06dd018deb1.roa (raw, json) Hash identifier: StBh9RJnkysh0BnnvxndCCU83d0JhZKR7FoaErAHiqY= Subject key identifier: 29:16:35:D0:9D:78:B4:0C:95:08:20:E6:C2:EB:93:EF:E1:F4:EE:4C Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEEAD61CA7D3F5D11DF203678 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8af7652f-9905-3a35-8e49-b06dd018deb1.roa Signing time: Thu 21 Aug 2025 17:32:30 +0000 ROA not before: Thu 21 Aug 2025 17:32:30 +0000 ROA not after: Wed 19 Nov 2025 18:32:30 +0000 asID: 31898 IP address blocks: 130.61.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:ad:61:ca:7d:3f:5d:11:df:20:36:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 21 17:32:30 2025 GMT Not After : Nov 19 18:32:30 2025 GMT Subject: CN=40dd86a2-7b5f-4c53-b923-e66957a17fab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:fb:07:2c:66:f1:54:c1:39:7c:0b:a3:f6:85: ea:06:c4:2b:ae:a9:b4:bc:75:67:1d:59:f9:38:8f: 46:bc:9b:8d:80:67:83:5f:3f:e8:e9:b5:68:17:69: 37:17:34:8d:a8:5a:40:c7:06:7b:cf:c7:08:92:11: 9f:46:29:64:2f:33:c8:49:6a:56:d2:bf:50:71:ae: 85:93:6b:37:57:5d:1a:31:3a:6f:3b:d1:2c:90:83: 88:7a:ec:58:de:2c:e6:1b:32:36:c7:dc:16:7d:e2: 62:1a:f2:41:d0:07:14:2c:c2:b4:5f:7b:95:6a:5d: a6:11:b2:f9:14:e5:80:9d:3d:11:8a:dd:9a:55:9a: 75:49:dc:93:3b:f0:37:fe:be:35:75:6e:b9:2f:0f: ab:06:6f:e3:b9:70:a2:7e:f8:03:bd:85:9d:90:de: 0c:69:37:0a:ac:74:32:37:de:79:53:4d:43:dd:7a: ff:37:8e:03:a9:cf:8b:f2:74:e5:90:3c:ed:5d:f6: 1d:90:62:0e:14:75:d6:f9:f4:9d:f4:f1:31:8e:81: cf:cd:16:75:47:24:9a:7b:c4:23:07:f0:de:6e:0c: 20:65:30:18:99:c2:8d:98:5d:a3:f2:85:21:39:cf: b1:03:d9:8c:77:c3:89:6e:01:2d:ef:06:d8:ad:12: 5d:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:16:35:D0:9D:78:B4:0C:95:08:20:E6:C2:EB:93:EF:E1:F4:EE:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8af7652f-9905-3a35-8e49-b06dd018deb1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 130.61.6.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:a0:4b:fb:6a:17:b6:23:6c:92:82:ba:5e:1e:61:80:5b:f4: 09:24:13:06:cd:be:26:50:ee:a7:03:9d:90:45:e6:34:bc:09: 1f:50:f6:4e:24:29:57:b1:b8:9a:6d:fc:10:67:35:97:f2:d1: ce:f3:59:1e:55:0e:cd:b4:11:24:55:85:9d:a2:d5:f1:e8:94: fe:d2:51:6e:aa:99:b3:88:6b:72:0f:ca:b0:bb:5c:54:47:d9: 1e:46:f5:af:91:91:9a:23:65:ec:dd:63:0b:19:a1:e7:4d:3b: ca:ad:32:9d:b5:8e:1f:da:44:af:00:d9:26:06:05:29:2a:51: 22:bc:bc:16:5e:11:59:cd:be:0e:30:c3:46:13:ab:22:5a:7e: 0a:b0:ed:a8:55:6c:ea:f0:a5:51:f2:57:48:69:d8:06:bd:01: fe:f2:35:55:7c:65:5b:a8:30:40:d0:ab:5f:f3:71:4d:4b:72: 47:44:dd:77:ca:b7:2e:6b:8d:87:67:19:b8:c9:ce:c1:54:ea: 5a:ae:8f:f6:49:39:32:18:59:a7:60:d5:39:ee:8f:5b:f1:b0: fc:a7:70:0c:21:16:fc:93:39:22:51:b2:16:cc:af:33:5c:78: 35:96:37:6d:15:ad:be:4a:44:15:60:d2:eb:13:50:d2:cd:8d: bd:6d:7c:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErurWHKfT9dEd8gNngwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMTE3MzIzMFoXDTI1MTExOTE4MzIzMFowLzEtMCsGA1UEAxMk NDBkZDg2YTItN2I1Zi00YzUzLWI5MjMtZTY2OTU3YTE3ZmFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvsHLGbxVME5fAuj9oXqBsQrrqm0vHVnHVn5 OI9GvJuNgGeDXz/o6bVoF2k3FzSNqFpAxwZ7z8cIkhGfRilkLzPISWpW0r9Qca6F k2s3V10aMTpvO9EskIOIeuxY3izmGzI2x9wWfeJiGvJB0AcULMK0X3uVal2mEbL5 FOWAnT0Rit2aVZp1SdyTO/A3/r41dW65Lw+rBm/juXCifvgDvYWdkN4MaTcKrHQy N955U01D3Xr/N44Dqc+L8nTlkDztXfYdkGIOFHXW+fSd9PExjoHPzRZ1RySae8Qj B/DebgwgZTAYmcKNmF2j8oUhOc+xA9mMd8OJbgEt7wbYrRJdSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCkWNdCdeLQMlQgg5sLrk+/h9O5MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOGFmNzY1MmYtOTkwNS0z YTM1LThlNDktYjA2ZGQwMThkZWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgj0GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIygS/tqF7YjbJKCul4eYYBb9AkkEwbNviZQ7qcDnZBF5jS8CR9Q9k4k KVexuJpt/BBnNZfy0c7zWR5VDs20ESRVhZ2i1fHolP7SUW6qmbOIa3IPyrC7XFRH 2R5G9a+RkZojZezdYwsZoedNO8qtMp21jh/aRK8A2SYGBSkqUSK8vBZeEVnNvg4w w0YTqyJafgqw7ahVbOrwpVHyV0hp2Aa9Af7yNVV8ZVuoMEDQq1/zcU1LckdE3XfK ty5rjYdnGbjJzsFU6lquj/ZJOTIYWadg1Tnuj1vxsPyncAwhFvyTOSJRshbMrzNc eDWWN20Vrb5KRBVg0usTUNLNjb1tfAI= -----END CERTIFICATE-----Generated at Wed Nov 5 04:58:01 2025 by rpki-client