$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/aa49d036-1a98-38b8-924b-70ab1a70e4b9.roa File: aa49d036-1a98-38b8-924b-70ab1a70e4b9.roa (raw, json) Hash identifier: BYs8RlpQQ0/hvyRCg2ML74/GU43m8cSqg08RAx+t/H4= Subject key identifier: BF:43:34:6E:1B:01:34:A9:25:7F:38:14:52:0D:79:AE:FF:73:94:DD Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584B28C6F1BF56A56382E3FE5720 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/aa49d036-1a98-38b8-924b-70ab1a70e4b9.roa Signing time: Thu 11 Sep 2025 13:00:41 +0000 ROA not before: Thu 11 Sep 2025 13:00:41 +0000 ROA not after: Wed 10 Dec 2025 14:00:41 +0000 asID: 20001 IP address blocks: 130.254.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:28:c6:f1:bf:56:a5:63:82:e3:fe:57:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Sep 11 13:00:41 2025 GMT Not After : Dec 10 14:00:41 2025 GMT Subject: CN=327c23f0-7322-4810-8e4d-d91bdffabc08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:51:93:65:cc:de:7e:e3:27:d0:8e:3b:fa:17: a2:aa:ef:94:18:bd:cb:a2:9e:ff:98:00:b0:5f:75: b9:cd:37:3d:85:a0:46:6d:84:57:e7:6e:d3:51:31: 08:8f:e8:8f:60:96:08:e3:38:4f:ae:19:92:d2:65: ea:d8:82:16:86:90:50:3d:45:b2:29:b6:01:69:44: 21:52:82:80:ec:53:58:6f:73:70:cb:35:57:1a:db: 17:2b:27:6a:e4:df:9c:09:27:c4:da:04:c7:9e:84: 4c:dd:9e:65:6a:91:20:9e:18:e3:42:65:7b:23:31: 30:34:50:00:56:bf:cc:14:c5:99:ac:a5:a7:79:e5: c6:7c:eb:2f:60:5b:f1:ad:12:36:e4:ef:85:eb:e1: 20:a2:5b:47:27:a3:49:a5:35:f6:4f:5a:11:59:4c: ff:b4:48:86:42:bb:fc:d5:92:a8:78:6d:6f:b4:e8: 47:98:c4:1c:80:09:23:99:e1:23:9d:dd:00:dd:e4: c7:27:e0:d0:e5:a0:53:81:9a:21:da:98:1b:c8:80: 94:98:3a:dd:56:18:b3:a1:66:62:69:cf:13:05:e4: ee:75:9d:5f:32:b5:48:f9:7d:04:e9:46:66:13:0f: ea:01:58:87:19:78:79:ff:cb:b7:31:01:c2:d1:8b: 84:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:43:34:6E:1B:01:34:A9:25:7F:38:14:52:0D:79:AE:FF:73:94:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/aa49d036-1a98-38b8-924b-70ab1a70e4b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 130.254.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:46:4a:87:2f:05:04:3f:dc:c5:53:8e:74:ba:73:c2:e4:14: fd:aa:53:cd:4f:44:ec:6c:1d:0a:c2:c6:9a:22:6b:3d:25:6d: 12:74:ea:00:2e:4e:b9:f3:cc:4d:e7:c6:de:48:fa:fc:dc:c6: 74:6f:3e:52:7c:b7:30:ed:97:3f:0d:4b:18:67:a0:5a:94:ae: 93:ea:0e:49:56:90:a9:ae:a9:7c:dc:b9:5b:26:5b:89:fd:ec: 8c:36:74:b0:d3:f2:9f:26:31:c7:8a:2d:a0:14:71:e5:ca:30: f6:9a:93:8d:fc:3c:18:f2:98:98:87:a8:e1:65:f2:33:1e:f5: d3:36:b5:23:7f:9c:8d:5a:17:52:8f:3b:9b:e3:76:43:95:ea: b8:00:38:18:d0:85:a8:dc:9a:ec:3f:3d:25:77:85:17:7e:d9: 8b:5a:1f:b9:09:d2:42:64:90:6d:26:d1:0b:9b:a7:90:47:09: ab:78:be:96:ce:19:d3:4e:21:6f:42:3e:64:2f:1a:5a:a1:61: 8c:1d:13:17:2c:38:14:d7:e3:89:fa:3d:d3:fb:fd:92:fa:b1: ec:6c:2b:99:33:70:c7:01:11:ec:fd:77:98:df:29:e6:c6:f1: 06:4c:3d:c3:6e:e7:20:ca:d3:4d:ac:f3:3c:2f:3a:1e:66:75: 73:2d:b2:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsoxvG/VqVjguP+VyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MDkxMTEzMDA0MVoXDTI1MTIxMDE0MDA0MVowLzEtMCsGA1UEAxMk MzI3YzIzZjAtNzMyMi00ODEwLThlNGQtZDkxYmRmZmFiYzA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1GTZczefuMn0I47+heiqu+UGL3Lop7/mACw X3W5zTc9haBGbYRX527TUTEIj+iPYJYI4zhPrhmS0mXq2IIWhpBQPUWyKbYBaUQh UoKA7FNYb3NwyzVXGtsXKydq5N+cCSfE2gTHnoRM3Z5lapEgnhjjQmV7IzEwNFAA Vr/MFMWZrKWneeXGfOsvYFvxrRI25O+F6+EgoltHJ6NJpTX2T1oRWUz/tEiGQrv8 1ZKoeG1vtOhHmMQcgAkjmeEjnd0A3eTHJ+DQ5aBTgZoh2pgbyICUmDrdVhizoWZi ac8TBeTudZ1fMrVI+X0E6UZmEw/qAViHGXh5/8u3MQHC0YuErQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL9DNG4bATSpJX84FFINea7/c5TdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvYWE0OWQwMzYtMWE5OC0z OGI4LTkyNGItNzBhYjFhNzBlNGI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgv5wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALpGSocvBQQ/3MVTjnS6c8LkFP2qU81PROxsHQrCxpoiaz0lbRJ06gAu TrnzzE3nxt5I+vzcxnRvPlJ8tzDtlz8NSxhnoFqUrpPqDklWkKmuqXzcuVsmW4n9 7Iw2dLDT8p8mMceKLaAUceXKMPaak438PBjymJiHqOFl8jMe9dM2tSN/nI1aF1KP O5vjdkOV6rgAOBjQhajcmuw/PSV3hRd+2YtaH7kJ0kJkkG0m0Qubp5BHCat4vpbO GdNOIW9CPmQvGlqhYYwdExcsOBTX44n6PdP7/ZL6sexsK5kzcMcBEez9d5jfKebG 8QZMPcNu5yDK002s8zwvOh5mdXMtsiU= -----END CERTIFICATE-----Generated at Mon Oct 20 10:44:59 2025 by rpki-client