$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/a665fa5d-070b-3b52-a2b8-06eb8d4b5714.roa File: a665fa5d-070b-3b52-a2b8-06eb8d4b5714.roa (raw, json) Hash identifier: qZD5DqWF6Lr2mevjGOQOzefT1XiMyfJub25Yp8L/OL8= Subject key identifier: 94:DE:0C:7A:C3:04:AD:C1:EE:99:26:DB:5D:A8:B3:BC:E6:6D:AE:95 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584B76F25522865B419B559137C0 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/a665fa5d-070b-3b52-a2b8-06eb8d4b5714.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 397630 IP address blocks: 130.254.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:55:22:86:5b:41:9b:55:91:37:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=475c3503-6daa-4dae-a4b9-01af90fffe56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:13:cc:9a:e7:cf:79:2e:6d:ff:e8:80:99:57: f6:55:87:22:51:f1:3b:8e:aa:2d:ea:2d:06:7f:e5: 90:a7:91:dd:ff:26:e2:e0:f2:44:2b:cc:a4:88:1f: df:82:75:99:7f:03:08:59:b7:ad:32:6a:c9:12:63: c0:21:cb:e8:67:f8:57:48:f9:40:51:eb:06:cc:cb: c0:f8:5b:8b:df:e2:e3:64:47:15:b4:06:f5:43:0b: 35:30:30:80:4c:46:02:a9:0c:a2:ee:ba:42:ee:99: eb:84:15:38:87:b6:8d:2d:3a:f8:01:e7:bf:4d:54: be:84:88:f1:82:a1:9b:cb:0d:c2:a6:8b:95:ec:06: f9:28:e3:2b:78:0e:b2:80:99:e8:15:13:0d:3c:5e: 21:58:dd:ed:83:73:80:c4:9c:4d:c6:ca:c7:de:53: 3a:86:f0:43:e2:ff:d5:cd:36:7a:a0:03:fa:2b:28: f5:be:47:76:71:fc:11:b3:68:b2:ef:d8:7e:68:f7: e1:9e:45:bc:a4:0a:37:9a:bd:f8:58:81:4b:e0:f6: 4d:6d:92:f2:14:25:69:17:14:0d:52:59:6d:d1:d1: e8:ef:8d:18:e8:1d:4a:ae:d3:7c:42:6e:2b:70:d4: d3:b8:2c:d5:52:64:a3:92:b8:e0:75:b7:a9:11:1c: 27:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:DE:0C:7A:C3:04:AD:C1:EE:99:26:DB:5D:A8:B3:BC:E6:6D:AE:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/a665fa5d-070b-3b52-a2b8-06eb8d4b5714.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 130.254.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:e9:05:91:27:05:fc:5f:8c:08:ac:ff:62:5f:ed:f0:e0:33: d6:80:7e:e0:49:c3:df:ca:e5:f9:5d:45:f1:c2:8b:b4:8a:68: 61:f7:e1:26:26:25:2a:6b:8e:4e:72:22:e4:ea:9f:98:e4:b9: 17:6d:4e:79:6b:76:e8:ac:5e:07:35:58:40:2b:4c:04:fd:39: 49:c0:ab:39:83:c7:6a:2f:fc:9f:36:82:73:c9:b9:a1:b1:f3: d4:74:07:16:20:96:3e:09:a6:af:62:5b:2b:f3:d6:33:7a:d3: 42:f4:89:c7:79:65:99:9f:6d:bc:e3:ba:19:3c:34:db:0d:f7: dd:0f:72:24:c8:7a:b2:7f:47:1c:e5:ce:d8:fa:e7:31:19:eb: 67:9b:6b:01:39:15:5f:ff:95:a7:c0:cd:3e:42:1c:a2:cf:a9: 9b:4c:19:24:36:7b:18:1f:4d:42:c5:6e:89:8e:49:2f:35:5b: d3:ff:0b:0f:1b:83:96:84:3b:b9:45:f6:84:68:0b:15:6e:3a: f1:52:08:9e:b1:3f:6b:f3:f7:03:1f:32:fe:44:8b:72:55:ba: 35:ca:fc:05:4d:f9:3e:20:21:cb:f8:c5:e9:e6:ed:c2:c0:14: ef:c2:db:e1:a0:1d:5f:ce:5f:e1:5d:60:7e:3c:36:0d:a5:0c: f3:aa:c7:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28lUihltBm1WRN8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk NDc1YzM1MDMtNmRhYS00ZGFlLWE0YjktMDFhZjkwZmZmZTU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhPMmufPeS5t/+iAmVf2VYciUfE7jqot6i0G f+WQp5Hd/ybi4PJEK8ykiB/fgnWZfwMIWbetMmrJEmPAIcvoZ/hXSPlAUesGzMvA +FuL3+LjZEcVtAb1Qws1MDCATEYCqQyi7rpC7pnrhBU4h7aNLTr4Aee/TVS+hIjx gqGbyw3CpouV7Ab5KOMreA6ygJnoFRMNPF4hWN3tg3OAxJxNxsrH3lM6hvBD4v/V zTZ6oAP6Kyj1vkd2cfwRs2iy79h+aPfhnkW8pAo3mr34WIFL4PZNbZLyFCVpFxQN Ullt0dHo740Y6B1KrtN8Qm4rcNTTuCzVUmSjkrjgdbepERwnRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJTeDHrDBK3B7pkm212os7zmba6VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvYTY2NWZhNWQtMDcwYi0z YjUyLWEyYjgtMDZlYjhkNGI1NzE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgv54MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJbpBZEnBfxfjAis/2Jf7fDgM9aAfuBJw9/K5fldRfHCi7SKaGH34SYm JSprjk5yIuTqn5jkuRdtTnlrduisXgc1WEArTAT9OUnAqzmDx2ov/J82gnPJuaGx 89R0BxYglj4Jpq9iWyvz1jN600L0icd5ZZmfbbzjuhk8NNsN990PciTIerJ/Rxzl ztj65zEZ62ebawE5FV//lafAzT5CHKLPqZtMGSQ2exgfTULFbomOSS81W9P/Cw8b g5aEO7lF9oRoCxVuOvFSCJ6xP2vz9wMfMv5Ei3JVujXK/AVN+T4gIcv4xenm7cLA FO/C2+GgHV/OX+FdYH48Ng2lDPOqx9c= -----END CERTIFICATE-----Generated at Mon Oct 20 05:34:59 2025 by rpki-client