$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/31c090d1-b6a1-3f1b-8511-139f67a1791e.roa File: 31c090d1-b6a1-3f1b-8511-139f67a1791e.roa (raw, json) Hash identifier: s+OG5PBKprz3aIZM0navHbA0uCCHgato3OTNnXYuKR0= Subject key identifier: A5:66:54:D1:08:A5:4F:21:1D:B8:9A:45:AF:B5:0B:18:F3:2B:D7:9A Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584B28C6F26650238591DE9C2D80 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/31c090d1-b6a1-3f1b-8511-139f67a1791e.roa Signing time: Thu 11 Sep 2025 13:00:41 +0000 ROA not before: Thu 11 Sep 2025 13:00:41 +0000 ROA not after: Wed 10 Dec 2025 14:00:41 +0000 asID: 20001 IP address blocks: 130.44.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:28:c6:f2:66:50:23:85:91:de:9c:2d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Sep 11 13:00:41 2025 GMT Not After : Dec 10 14:00:41 2025 GMT Subject: CN=e932bfb0-b232-439e-b429-947b4c9efdc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:9f:79:89:da:a6:db:84:06:8f:7d:37:1c:4c: bf:90:ef:cf:9e:4e:59:4f:bb:3b:2b:d2:c6:c6:ba: 67:25:95:f2:a0:f4:ae:22:52:be:e4:cc:15:ab:67: 09:73:99:b0:b4:f8:2d:dd:cb:2e:c4:08:2e:4f:46: 63:ae:79:5e:25:4a:09:f9:d5:48:f7:47:cf:66:72: a3:43:e9:d2:94:19:fd:0f:6f:09:28:1a:84:ac:5e: 17:34:78:0a:9b:02:26:d5:21:f6:a6:89:d1:ee:a2: 08:09:9b:87:99:e9:62:66:13:d5:b7:e7:e2:3d:ba: 1e:e0:24:3c:d9:4e:19:2a:23:61:8b:86:ab:11:de: 12:d0:00:82:e5:bd:b4:b3:77:fd:c3:1c:d7:9c:ab: d9:bf:91:33:c1:15:e7:b9:c3:9c:12:82:51:94:4a: c7:96:57:38:16:0b:c2:98:ab:17:8f:9c:0a:58:a6: cf:85:27:94:27:d6:0e:46:19:fb:33:5e:26:c3:27: 25:bf:ad:e1:69:f6:12:12:5d:b1:67:8a:90:da:c3: e8:41:a6:20:53:6a:95:ab:e5:11:64:69:c7:43:d5: 15:08:17:b5:58:51:7e:58:e4:97:ce:e9:6e:60:25: 93:18:7e:cf:28:0f:ed:09:c2:f6:95:fd:8b:fd:64: 68:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:66:54:D1:08:A5:4F:21:1D:B8:9A:45:AF:B5:0B:18:F3:2B:D7:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/31c090d1-b6a1-3f1b-8511-139f67a1791e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 130.44.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:a6:bd:96:92:36:83:3e:e5:24:86:b7:88:45:a5:73:56:6e: b0:fe:07:a9:02:d2:0b:73:6f:85:5c:33:56:88:06:bf:44:e1: 27:9c:21:81:41:7f:d1:e7:c4:c4:1f:70:09:85:28:6d:cf:a1: fc:ef:8c:58:c4:1a:07:e3:e9:3b:64:7d:4d:07:34:50:86:59: c9:75:36:0f:c5:8a:64:2d:8e:92:51:bf:8a:16:8b:fe:1b:19: 5c:b1:68:b9:05:4f:8e:95:bf:b8:ff:53:ed:9d:ac:cf:2b:2e: d7:91:02:4a:af:8c:87:58:6b:d3:62:84:e2:91:96:c0:de:73: e8:fa:23:59:3a:63:05:bb:00:71:9d:26:ab:73:bc:a7:aa:34: 81:98:fc:45:d0:46:f4:ee:92:8d:0c:4a:4f:1f:cc:22:2f:a0: df:c7:38:b6:01:3c:d2:12:3f:eb:31:f3:d6:c9:f3:1b:73:63: e9:23:59:95:d3:42:74:47:9f:99:14:44:22:f6:12:c7:28:2d: fa:cb:2a:4b:45:d5:f4:48:07:86:4f:b8:94:68:7e:47:de:a7: 38:4c:5c:90:75:61:29:c5:ae:4c:e5:e3:d9:50:7b:cf:fc:3b: b8:2e:cf:7c:e9:d3:37:4e:19:e1:2f:b1:72:8a:fd:2a:eb:fe: c3:15:6d:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsoxvJmUCOFkd6cLYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MDkxMTEzMDA0MVoXDTI1MTIxMDE0MDA0MVowLzEtMCsGA1UEAxMk ZTkzMmJmYjAtYjIzMi00MzllLWI0MjktOTQ3YjRjOWVmZGMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJ95idqm24QGj303HEy/kO/Pnk5ZT7s7K9LG xrpnJZXyoPSuIlK+5MwVq2cJc5mwtPgt3csuxAguT0ZjrnleJUoJ+dVI90fPZnKj Q+nSlBn9D28JKBqErF4XNHgKmwIm1SH2ponR7qIICZuHmeliZhPVt+fiPboe4CQ8 2U4ZKiNhi4arEd4S0ACC5b20s3f9wxzXnKvZv5EzwRXnucOcEoJRlErHllc4FgvC mKsXj5wKWKbPhSeUJ9YORhn7M14mwyclv63hafYSEl2xZ4qQ2sPoQaYgU2qVq+UR ZGnHQ9UVCBe1WFF+WOSXzuluYCWTGH7PKA/tCcL2lf2L/WRoiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKVmVNEIpU8hHbiaRa+1CxjzK9eaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvMzFjMDkwZDEtYjZhMS0z ZjFiLTg1MTEtMTM5ZjY3YTE3OTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgizKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD6mvZaSNoM+5SSGt4hFpXNWbrD+B6kC0gtzb4VcM1aIBr9E4SecIYFB f9HnxMQfcAmFKG3PofzvjFjEGgfj6TtkfU0HNFCGWcl1Ng/FimQtjpJRv4oWi/4b GVyxaLkFT46Vv7j/U+2drM8rLteRAkqvjIdYa9NihOKRlsDec+j6I1k6YwW7AHGd JqtzvKeqNIGY/EXQRvTuko0MSk8fzCIvoN/HOLYBPNISP+sx89bJ8xtzY+kjWZXT QnRHn5kURCL2EscoLfrLKktF1fRIB4ZPuJRofkfepzhMXJB1YSnFrkzl49lQe8/8 O7guz3zp0zdOGeEvsXKK/Srr/sMVbSM= -----END CERTIFICATE-----Generated at Mon Oct 20 03:52:58 2025 by rpki-client