$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/a665fa5d-070b-3b52-a2b8-06eb8d4b5714.roa File: a665fa5d-070b-3b52-a2b8-06eb8d4b5714.roa (raw, json) Hash identifier: jnYIpSOCKQ7CijfEmvwIM8pcY8m4RU7KSlX4CQoVFXI= Subject key identifier: A4:A4:8B:7F:2A:2D:EA:46:C9:6B:75:64:1F:D2:F6:B5:DA:EE:42:65 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584D359FD6C021E2F420CAB62880 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/a665fa5d-070b-3b52-a2b8-06eb8d4b5714.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 397630 IP address blocks: 130.254.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:9f:d6:c0:21:e2:f4:20:ca:b6:28:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=e8a0a906-b3b6-441d-9a5c-66fe9f0014a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:14:35:74:5c:11:37:d3:a3:ee:dd:72:a1:7c: d9:8f:33:0f:dc:80:d6:2d:5d:e5:c4:48:aa:9e:b9: b7:ef:a3:1e:7e:33:f6:33:84:ea:2a:a3:0c:7d:64: 0f:ed:83:0e:f6:f0:00:e6:0a:b6:5d:74:c2:65:5f: 26:7e:4a:83:79:41:2a:4e:7f:80:aa:8c:6b:cb:bd: d8:8d:ce:33:40:cc:0d:f6:41:65:3d:d7:17:cc:71: 2f:ea:6e:8d:5b:b0:5a:df:8f:cf:18:14:1a:8c:af: cd:39:50:57:00:cd:65:85:2e:63:a9:cd:e5:79:70: 79:ca:cf:90:0b:5e:87:79:98:3e:6b:aa:c9:cf:64: 1e:2f:83:58:d5:e5:0b:c1:51:c2:5a:59:c0:53:86: db:a3:f0:ed:94:ab:6a:99:d7:a9:33:1c:b5:29:f9: a7:15:fb:ff:30:35:c2:70:15:83:67:4b:b5:97:d9: 25:f9:1c:41:b3:df:4c:48:f0:28:3d:a0:c4:31:8e: ce:5b:b2:1c:b8:68:eb:51:85:1e:06:8a:ec:24:28: a2:b1:c7:24:f8:3d:77:84:d5:fe:85:1d:6d:93:0a: bf:1b:5a:4d:41:fe:49:82:d0:f5:93:01:4b:8b:33: f2:a6:01:32:ba:94:48:4f:9b:f9:54:50:ec:90:8c: 48:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:A4:8B:7F:2A:2D:EA:46:C9:6B:75:64:1F:D2:F6:B5:DA:EE:42:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/a665fa5d-070b-3b52-a2b8-06eb8d4b5714.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 130.254.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:01:01:8d:4e:a9:6d:d7:eb:ee:55:cf:92:53:8b:f0:28:28: 76:9e:d2:63:4e:b5:d3:6e:c7:b7:46:34:b9:42:9d:62:44:88: 38:e1:1f:22:1a:05:36:9a:f3:28:37:b2:6e:bc:25:f8:f3:e4: 0d:a7:de:3e:2b:7f:95:bd:eb:55:c1:e7:ad:7a:de:87:04:5d: 51:8b:b0:89:d6:c3:5f:51:18:e9:9b:7b:d6:8c:44:f4:ab:2c: fc:51:0c:b2:35:7c:dd:42:f5:36:ac:ae:fd:2a:d0:dc:9c:e4: 7d:73:18:cd:8c:cd:fd:68:cb:b0:b2:eb:6e:67:cf:8a:56:82: fc:b1:f3:1c:94:03:32:b3:1b:bf:5d:f4:b1:5b:60:f5:28:67: b2:37:c9:ea:9e:70:f7:34:48:a8:e4:d5:14:5f:c8:b2:3b:da: 4c:52:5b:59:d7:e8:30:02:ef:c8:c7:41:e1:6b:f4:62:a3:ce: 0d:99:18:03:a5:2a:fc:2c:e1:13:c0:a1:78:62:b0:ac:f8:10: 55:f8:ea:0a:d5:88:7f:1d:95:c4:44:3e:39:80:21:13:22:29: 21:be:2c:c2:a6:36:fe:1d:26:20:25:cc:97:a7:fe:b0:09:d1: 4c:61:c9:1b:4d:a9:17:3c:d6:49:85:65:33:88:3c:4c:7a:bc: cb:ec:4e:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01n9bAIeL0IMq2KIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk ZThhMGE5MDYtYjNiNi00NDFkLTlhNWMtNjZmZTlmMDAxNGE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshQ1dFwRN9Oj7t1yoXzZjzMP3IDWLV3lxEiq nrm376MefjP2M4TqKqMMfWQP7YMO9vAA5gq2XXTCZV8mfkqDeUEqTn+Aqoxry73Y jc4zQMwN9kFlPdcXzHEv6m6NW7Ba34/PGBQajK/NOVBXAM1lhS5jqc3leXB5ys+Q C16HeZg+a6rJz2QeL4NY1eULwVHCWlnAU4bbo/DtlKtqmdepMxy1KfmnFfv/MDXC cBWDZ0u1l9kl+RxBs99MSPAoPaDEMY7OW7IcuGjrUYUeBorsJCiiscck+D13hNX+ hR1tkwq/G1pNQf5JgtD1kwFLizPypgEyupRIT5v5VFDskIxIYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKSki38qLepGyWt1ZB/S9rXa7kJlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvYTY2NWZhNWQtMDcwYi0z YjUyLWEyYjgtMDZlYjhkNGI1NzE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgv54MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIoBAY1OqW3X6+5Vz5JTi/AoKHae0mNOtdNux7dGNLlCnWJEiDjhHyIa BTaa8yg3sm68Jfjz5A2n3j4rf5W961XB56163ocEXVGLsInWw19RGOmbe9aMRPSr LPxRDLI1fN1C9Tasrv0q0Nyc5H1zGM2Mzf1oy7Cy625nz4pWgvyx8xyUAzKzG79d 9LFbYPUoZ7I3yeqecPc0SKjk1RRfyLI72kxSW1nX6DAC78jHQeFr9GKjzg2ZGAOl Kvws4RPAoXhisKz4EFX46grViH8dlcREPjmAIRMiKSG+LMKmNv4dJiAlzJen/rAJ 0UxhyRtNqRc81kmFZTOIPEx6vMvsTjE= -----END CERTIFICATE-----Generated at Thu Mar 26 14:30:56 2026 by rpki-client