$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/19865837-8848-3883-9293-51f005bce9fd.roa File: 19865837-8848-3883-9293-51f005bce9fd.roa (raw, json) Hash identifier: oSUIRqosDqmnQZ5uuFasFZN5BsQxOkINXKVQznkskYk= Subject key identifier: 1C:69:91:B4:6F:35:BB:91:FF:01:68:07:98:4C:68:C0:24:68:82:B5 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584A495C90945C64BB1DC8D33D80 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/19865837-8848-3883-9293-51f005bce9fd.roa Signing time: Mon 23 Jun 2025 12:21:17 +0000 ROA not before: Mon 23 Jun 2025 12:21:17 +0000 ROA not after: Sun 21 Sep 2025 12:21:17 +0000 asID: 20001 IP address blocks: 130.254.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:49:5c:90:94:5c:64:bb:1d:c8:d3:3d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Jun 23 12:21:17 2025 GMT Not After : Sep 21 12:21:17 2025 GMT Subject: CN=8de3939d-c0e5-48d7-93f2-a4d7833076f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:46:05:bc:4e:a1:70:da:56:bb:c2:83:3f:66: 26:7a:79:7d:09:fd:8a:62:76:0a:3b:e8:1f:43:75: 29:bd:5f:11:cf:20:f4:df:d0:79:97:a9:78:d4:f5: 3a:ba:0a:d6:fb:b2:b6:6a:a7:d4:46:ac:2c:4c:19: 9c:80:47:df:96:43:41:00:85:bb:32:c7:ac:4d:9f: 76:10:1e:b1:88:e1:d0:76:f7:93:e8:ca:bf:70:fb: f3:dc:ab:b6:cc:80:4d:6b:51:f5:c5:b8:4d:c7:b7: 2a:b3:fa:94:6d:ea:0c:ab:82:9c:04:4e:5a:10:00: c8:06:c3:f1:cf:f7:61:c4:63:52:53:f4:06:b7:5c: 11:3d:6e:44:49:c1:18:e9:97:d5:31:f1:3d:22:37: 50:14:2a:03:a8:f2:67:3d:5b:37:23:bd:ce:12:2d: 09:e5:02:e0:9f:dc:7e:5c:b3:de:41:1a:58:30:50: a3:38:32:83:9f:9b:a2:8a:8a:bf:8c:03:b6:39:f5: 88:e5:2f:24:4d:6e:a1:a4:b9:b4:29:99:5e:cb:dc: f5:22:35:d8:20:02:28:73:b8:ca:47:dc:bd:33:a3: 24:fc:ad:36:6d:b2:71:7c:3e:1f:45:a1:26:71:2b: 76:f0:a0:d1:24:12:08:ed:19:ac:da:c8:7d:5e:61: 5b:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:69:91:B4:6F:35:BB:91:FF:01:68:07:98:4C:68:C0:24:68:82:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/19865837-8848-3883-9293-51f005bce9fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 130.254.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:78:0b:3b:b0:8c:b2:a5:61:25:56:44:e2:96:6f:5a:9e:6a: 40:90:9f:13:c5:e7:de:3b:97:7b:42:11:1e:98:1a:10:9c:da: 15:8c:64:f0:27:8d:7d:77:92:5e:7e:3a:6e:01:5a:9d:fa:e7: 2c:9f:1d:f2:35:5e:17:db:26:b4:fd:f5:5f:3c:05:8c:da:4d: 47:13:57:7f:60:9a:56:ca:7b:f5:cd:7e:a9:67:f4:58:a4:83: c4:c8:84:a0:89:79:6d:a0:ce:95:c9:8a:da:ae:15:fa:56:b8: dd:82:ac:3a:38:4f:3d:3b:f9:74:a9:ad:54:f8:41:2e:d4:36: 75:b2:7b:89:5d:51:9a:26:d6:c4:89:23:c3:dd:d3:12:e3:1b: d0:d6:4a:6a:85:d4:bf:91:63:4e:2e:be:c8:84:6b:19:2d:18: ce:d8:78:16:a1:f6:45:7a:f1:f0:76:96:78:ff:84:e7:94:62: cc:29:99:74:56:57:fb:c1:99:a1:dc:03:ff:a7:72:ab:7f:a8: 18:f0:0f:9b:e7:bf:9e:49:79:07:10:c9:e5:aa:bf:3c:a0:6c: 1e:7c:89:fc:07:05:a3:39:8a:e0:bd:f2:39:77:41:44:88:63: 1f:1b:6c:fc:e1:1d:e6:31:85:5d:6c:8d:c9:3d:3a:f6:02:aa: fe:ce:61:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpJXJCUXGS7HcjTPYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MDYyMzEyMjExN1oXDTI1MDkyMTEyMjExN1owLzEtMCsGA1UEAxMk OGRlMzkzOWQtYzBlNS00OGQ3LTkzZjItYTRkNzgzMzA3NmYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA00YFvE6hcNpWu8KDP2Ymenl9Cf2KYnYKO+gf Q3UpvV8RzyD039B5l6l41PU6ugrW+7K2aqfURqwsTBmcgEfflkNBAIW7MsesTZ92 EB6xiOHQdveT6Mq/cPvz3Ku2zIBNa1H1xbhNx7cqs/qUbeoMq4KcBE5aEADIBsPx z/dhxGNSU/QGt1wRPW5EScEY6ZfVMfE9IjdQFCoDqPJnPVs3I73OEi0J5QLgn9x+ XLPeQRpYMFCjODKDn5uiioq/jAO2OfWI5S8kTW6hpLm0KZley9z1IjXYIAIoc7jK R9y9M6Mk/K02bbJxfD4fRaEmcSt28KDRJBII7Rms2sh9XmFb5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBxpkbRvNbuR/wFoB5hMaMAkaIK1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvMTk4NjU4MzctODg0OC0z ODgzLTkyOTMtNTFmMDA1YmNlOWZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgv5tMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABV4CzuwjLKlYSVWROKWb1qeakCQnxPF5947l3tCER6YGhCc2hWMZPAn jX13kl5+Om4BWp365yyfHfI1XhfbJrT99V88BYzaTUcTV39gmlbKe/XNfqln9Fik g8TIhKCJeW2gzpXJitquFfpWuN2CrDo4Tz07+XSprVT4QS7UNnWye4ldUZom1sSJ I8Pd0xLjG9DWSmqF1L+RY04uvsiEaxktGM7YeBah9kV68fB2lnj/hOeUYswpmXRW V/vBmaHcA/+ncqt/qBjwD5vnv55JeQcQyeWqvzygbB58ifwHBaM5iuC98jl3QUSI Yx8bbPzhHeYxhV1sjck9OvYCqv7OYSQ= -----END CERTIFICATE-----Generated at Thu Jul 3 01:25:45 2025 by rpki-client