$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/94d1a796-df78-3790-9b89-11f64f25e18d.roa File: 94d1a796-df78-3790-9b89-11f64f25e18d.roa (raw, json) Hash identifier: CyVt011Hc8zsH0hS5dRtk2qFDWg9eGzMBdm8XJfwMlM= Subject key identifier: 8F:5D:2F:40:12:03:D1:D1:52:84:1C:C3:32:E3:1B:EE:0E:5F:03:13 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584A495F816518F2664BE2AA3580 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/94d1a796-df78-3790-9b89-11f64f25e18d.roa Signing time: Mon 23 Jun 2025 12:27:12 +0000 ROA not before: Mon 23 Jun 2025 12:27:12 +0000 ROA not after: Sun 21 Sep 2025 12:27:12 +0000 asID: 20001 IP address blocks: 130.254.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:49:5f:81:65:18:f2:66:4b:e2:aa:35:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Jun 23 12:27:12 2025 GMT Not After : Sep 21 12:27:12 2025 GMT Subject: CN=3c9596fa-27e7-45cd-94b0-d834bd13ae06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:50:ee:8d:a9:e5:a9:19:a0:89:0a:ca:32:44: 3f:0d:53:2c:0e:b6:a4:45:cf:4a:68:e2:2c:2e:93: 71:6b:4c:94:09:74:d3:28:7f:02:de:0f:87:59:02: 97:85:5e:49:74:4e:48:88:ec:d9:b1:81:dd:03:1e: 21:ce:ef:31:db:0d:cb:ab:53:56:ab:57:5d:5f:ab: 17:98:e7:c2:2d:d4:d9:d8:53:4f:e0:a5:a2:3b:4e: ba:db:58:59:4e:71:3b:88:7f:b4:2d:dd:5c:22:80: e5:75:ba:be:68:05:85:41:ed:03:a9:8f:37:68:12: 28:78:6d:26:55:d2:ca:3c:24:2e:f2:ee:01:22:7a: 66:d5:bb:e1:c0:f5:6e:80:a1:50:62:ad:9f:13:2f: 34:a3:c4:c9:a3:8e:64:91:c5:cd:9a:08:50:93:26: a9:f2:8a:75:d3:16:13:b4:3a:ff:7a:d6:32:4c:ad: a6:83:91:ad:60:72:3a:e2:98:11:26:0f:30:de:0b: c6:62:63:3f:38:88:be:1a:66:fb:f4:0f:de:f3:4d: 44:fc:f5:e0:75:e1:f8:69:23:ed:ac:6e:77:b3:86: 05:df:fd:c6:8d:1f:29:21:8e:fb:f1:4d:e6:a7:40: 28:ce:a5:cf:b4:e0:51:cf:43:15:fd:51:81:5d:ef: 63:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:5D:2F:40:12:03:D1:D1:52:84:1C:C3:32:E3:1B:EE:0E:5F:03:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/94d1a796-df78-3790-9b89-11f64f25e18d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 130.254.98.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:76:29:d4:10:a8:19:68:2d:c1:c1:f9:b2:b2:96:5a:85:9f: 56:11:c8:97:48:21:d2:46:97:5d:48:1f:4d:44:77:25:05:76: 82:2a:96:2a:7e:5f:4b:bf:b1:f1:49:6b:12:76:26:35:92:d7: 9c:1a:9a:f2:3a:7e:1b:09:cd:f6:b2:d7:ae:da:53:e0:98:50: d0:d2:34:2d:a2:a1:73:87:be:11:4d:86:32:03:10:0d:c5:75: 4f:c0:bb:51:d6:bb:29:1d:26:44:26:c4:8e:ca:f8:a2:fd:29: 79:5d:86:3d:81:55:17:52:c6:0b:6b:e3:88:fc:cb:cc:63:03: 5c:4d:f2:92:13:2b:4a:93:a8:90:84:90:b2:63:72:97:76:02: 02:e7:9f:33:f9:1a:15:2c:64:35:ce:f9:5d:cc:b3:68:73:5a: fd:e8:51:6d:e3:9b:3f:62:e5:a3:23:3f:b1:e0:af:ec:8c:ad: 9a:b1:62:ef:8b:83:8d:a6:a1:dd:71:cf:e2:a5:60:0b:df:23: 49:1e:d3:1e:bd:95:7e:59:45:72:bb:14:ce:56:57:ef:eb:ce: 07:cd:73:22:39:d9:d4:49:98:92:1b:e1:03:a1:ba:6c:13:60: 9a:1f:88:ce:d5:5a:5c:d0:fb:97:70:e0:21:56:d4:41:66:c7: 1a:1b:d6:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpJX4FlGPJmS+KqNYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MDYyMzEyMjcxMloXDTI1MDkyMTEyMjcxMlowLzEtMCsGA1UEAxMk M2M5NTk2ZmEtMjdlNy00NWNkLTk0YjAtZDgzNGJkMTNhZTA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVDujanlqRmgiQrKMkQ/DVMsDrakRc9KaOIs LpNxa0yUCXTTKH8C3g+HWQKXhV5JdE5IiOzZsYHdAx4hzu8x2w3Lq1NWq1ddX6sX mOfCLdTZ2FNP4KWiO06621hZTnE7iH+0Ld1cIoDldbq+aAWFQe0DqY83aBIoeG0m VdLKPCQu8u4BInpm1bvhwPVugKFQYq2fEy80o8TJo45kkcXNmghQkyap8op10xYT tDr/etYyTK2mg5GtYHI64pgRJg8w3gvGYmM/OIi+Gmb79A/e801E/PXgdeH4aSPt rG53s4YF3/3GjR8pIY778U3mp0AozqXPtOBRz0MV/VGBXe9jdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI9dL0ASA9HRUoQcwzLjG+4OXwMTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvOTRkMWE3OTYtZGY3OC0z NzkwLTliODktMTFmNjRmMjVlMThkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgv5iMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAp2KdQQqBloLcHB+bKyllqFn1YRyJdIIdJGl11IH01EdyUFdoIqlip+ X0u/sfFJaxJ2JjWS15wamvI6fhsJzfay167aU+CYUNDSNC2ioXOHvhFNhjIDEA3F dU/Au1HWuykdJkQmxI7K+KL9KXldhj2BVRdSxgtr44j8y8xjA1xN8pITK0qTqJCE kLJjcpd2AgLnnzP5GhUsZDXO+V3Ms2hzWv3oUW3jmz9i5aMjP7Hgr+yMrZqxYu+L g42mod1xz+KlYAvfI0ke0x69lX5ZRXK7FM5WV+/rzgfNcyI52dRJmJIb4QOhumwT YJofiM7VWlzQ+5dw4CFW1EFmxxob1hA= -----END CERTIFICATE-----Generated at Wed Jul 2 02:06:02 2025 by rpki-client