$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/5a3b95db-aa21-36c4-8540-7f3dde136ed6.roa File: 5a3b95db-aa21-36c4-8540-7f3dde136ed6.roa (raw, json) Hash identifier: jNMHaMbnCUmETnOPCHBiesRurm1oFY0+Y3sNaXbnhUs= Subject key identifier: 0C:A0:F6:BD:0F:4D:C4:08:E7:B9:B5:9B:B9:30:2E:74:6C:C7:CB:BB Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584DC995B9A64C6E9C67AD623C00 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/5a3b95db-aa21-36c4-8540-7f3dde136ed6.roa Signing time: Sun 10 May 2026 13:00:31 +0000 ROA not before: Sun 10 May 2026 13:00:31 +0000 ROA not after: Sat 08 Aug 2026 13:00:31 +0000 asID: 20001 IP address blocks: 130.254.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c9:95:b9:a6:4c:6e:9c:67:ad:62:3c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: May 10 13:00:31 2026 GMT Not After : Aug 8 13:00:31 2026 GMT Subject: CN=57d46be1-7f99-49b8-9292-5f4f2c9859f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:f9:b6:75:04:87:e9:73:f6:5d:1f:fc:0d:4b: 09:0a:b6:18:12:95:b3:e7:f6:ab:fb:f4:12:13:d9: db:a8:04:48:e7:44:62:98:98:55:0a:5f:26:bb:4a: 85:4f:2f:d1:51:a3:68:b7:4e:e2:ff:7c:c4:b1:74: ad:00:98:17:37:56:49:d1:86:f2:8d:7e:8e:04:13: 0b:16:ee:41:9c:59:a2:ab:a1:00:7d:76:3d:d1:e4: ca:b8:ca:35:fe:3d:cd:b8:9d:1d:f3:f4:29:a1:a3: 55:40:c9:91:03:c0:b7:79:2d:b0:fb:3f:42:5e:dd: 11:5c:fd:cb:e5:69:c6:8d:ca:5f:49:d0:cd:95:f6: 44:f4:f6:a5:47:9a:d8:27:d9:1d:b0:a2:0e:85:8c: f3:bd:d5:7e:05:d1:3e:3f:35:e6:03:00:ab:a4:70: d6:be:66:32:94:5c:66:0d:21:69:7f:06:45:90:ac: 77:c7:0b:97:7d:7b:51:07:d0:0d:7c:26:2d:af:90: e2:0c:8d:e8:2a:b5:15:1f:57:29:0d:5f:03:96:c2: b3:61:0a:2d:65:dd:14:7d:79:cf:b3:09:12:41:1a: 25:39:21:e9:db:5a:18:f6:4f:01:1d:04:61:15:ea: 5d:23:72:b8:98:56:11:2a:0e:a5:3b:d8:51:40:d7: 3d:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:A0:F6:BD:0F:4D:C4:08:E7:B9:B5:9B:B9:30:2E:74:6C:C7:CB:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/5a3b95db-aa21-36c4-8540-7f3dde136ed6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 130.254.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption e4:62:3d:25:70:bc:8a:09:73:55:ce:5f:a2:0d:b1:a7:57:06: 80:0e:77:ef:58:be:91:46:63:8b:78:59:26:4c:54:50:da:2b: 9d:26:87:ee:37:1e:19:d7:af:33:6e:e4:c5:28:ad:c5:90:e2: 95:42:a0:04:66:4f:f0:80:e6:d2:5e:b9:d3:4f:47:2e:df:f5: 6d:55:8c:08:b0:4b:2f:bf:1c:8a:0d:d4:27:78:b4:d0:44:9c: 4f:59:44:b6:8f:64:c8:2c:2d:f4:7a:6c:3c:02:94:97:ad:2e: ec:ef:0d:6a:42:2d:d3:6c:4d:ae:4b:b4:16:9c:d6:aa:fe:97: d2:45:2a:8d:b1:69:81:7c:d3:d4:28:d0:37:7d:8b:db:51:4e: aa:17:ed:02:6e:d5:21:22:7b:75:59:ea:e2:0f:5a:c9:a0:21: 3c:c7:08:db:11:d8:b0:74:f3:5d:c1:d5:9c:68:0e:c5:84:52: 71:71:27:36:d5:d5:6b:9b:98:8c:12:9b:49:89:94:82:b4:d7: fe:92:b1:40:f1:54:87:d5:50:82:d5:de:e9:a1:72:b4:eb:c3: 6a:f0:e9:01:84:b9:92:91:a1:17:00:d8:a3:77:73:e1:13:1b: e9:80:f9:6c:6d:66:7d:4f:9d:37:c9:43:b0:2f:0c:94:91:fe: bf:c6:91:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3JlbmmTG6cZ61iPAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI2MDUxMDEzMDAzMVoXDTI2MDgwODEzMDAzMVowLzEtMCsGA1UEAxMk NTdkNDZiZTEtN2Y5OS00OWI4LTkyOTItNWY0ZjJjOTg1OWYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvm2dQSH6XP2XR/8DUsJCrYYEpWz5/ar+/QS E9nbqARI50RimJhVCl8mu0qFTy/RUaNot07i/3zEsXStAJgXN1ZJ0YbyjX6OBBML Fu5BnFmiq6EAfXY90eTKuMo1/j3NuJ0d8/QpoaNVQMmRA8C3eS2w+z9CXt0RXP3L 5WnGjcpfSdDNlfZE9PalR5rYJ9kdsKIOhYzzvdV+BdE+PzXmAwCrpHDWvmYylFxm DSFpfwZFkKx3xwuXfXtRB9ANfCYtr5DiDI3oKrUVH1cpDV8DlsKzYQotZd0UfXnP swkSQRolOSHp21oY9k8BHQRhFepdI3K4mFYRKg6lO9hRQNc9cwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAyg9r0PTcQI57m1m7kwLnRsx8u7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvNWEzYjk1ZGItYWEyMS0z NmM0LTg1NDAtN2YzZGRlMTM2ZWQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgv57MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAORiPSVwvIoJc1XOX6INsadXBoAOd+9YvpFGY4t4WSZMVFDaK50mh+43 HhnXrzNu5MUorcWQ4pVCoARmT/CA5tJeudNPRy7f9W1VjAiwSy+/HIoN1Cd4tNBE nE9ZRLaPZMgsLfR6bDwClJetLuzvDWpCLdNsTa5LtBac1qr+l9JFKo2xaYF809Qo 0Dd9i9tRTqoX7QJu1SEie3VZ6uIPWsmgITzHCNsR2LB0813B1ZxoDsWEUnFxJzbV 1WubmIwSm0mJlIK01/6SsUDxVIfVUILV3umhcrTrw2rw6QGEuZKRoRcA2KN3c+ET G+mA+WxtZn1PnTfJQ7AvDJSR/r/GkUo= -----END CERTIFICATE-----Generated at Wed May 13 15:38:10 2026 by rpki-client