$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/aa49d036-1a98-38b8-924b-70ab1a70e4b9.roa File: aa49d036-1a98-38b8-924b-70ab1a70e4b9.roa (raw, json) Hash identifier: xaJtaoWdqw6bni2TyytUY1FGBzOC/jdxoNnsOxA3Wgg= Subject key identifier: BF:F8:6F:12:2D:33:A7:B3:BA:C1:5F:F5:89:04:A2:75:0E:0F:E0:67 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584A495D1E90BF4CA9D1F0123E60 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/aa49d036-1a98-38b8-924b-70ab1a70e4b9.roa Signing time: Mon 23 Jun 2025 12:22:24 +0000 ROA not before: Mon 23 Jun 2025 12:22:24 +0000 ROA not after: Sun 21 Sep 2025 12:22:24 +0000 asID: 20001 IP address blocks: 130.254.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:49:5d:1e:90:bf:4c:a9:d1:f0:12:3e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Jun 23 12:22:24 2025 GMT Not After : Sep 21 12:22:24 2025 GMT Subject: CN=4e54fcb9-1a9c-44e0-87bd-19e0c092bbcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:89:59:65:5f:45:43:0d:1e:d7:f0:a9:79:be: bc:2f:39:de:0a:3f:76:d8:f4:99:10:a9:4d:ae:f1: 26:64:ed:43:8d:ba:06:f9:66:77:20:a2:25:c5:30: dd:4b:d0:b7:9c:d5:9e:3b:e2:72:bd:3d:b4:3f:f7: c3:8d:b7:86:23:a1:e4:96:42:b3:31:d3:b4:cb:d4: 85:b5:ac:f5:c2:27:da:d7:ab:a7:41:ac:4f:ef:54: d9:6f:14:34:1b:fb:c6:7a:02:d7:e6:2a:e8:c6:84: 96:b0:ff:8b:d4:3b:85:85:40:e6:84:6b:22:0a:46: fc:4b:68:a2:9b:12:ff:27:71:2b:b7:bd:d2:45:0e: 27:55:48:6a:ce:fd:83:e4:9a:1d:5a:38:d4:67:b5: 16:4e:a6:43:c6:58:c9:c8:ef:b9:01:99:66:9e:67: e7:8d:7e:c8:06:bf:51:40:76:fd:d2:c3:2a:7f:bf: bc:c8:86:7b:bc:9b:25:d1:a9:2e:cd:ef:36:a7:10: 30:f1:31:25:e6:89:dc:74:76:54:d9:0c:db:95:98: 34:67:cd:a6:8f:f9:1e:d5:72:31:94:2a:15:73:3c: e6:bc:fa:36:5c:43:dc:9c:8c:18:19:bd:9c:95:17: b4:8c:de:a0:e1:46:d8:f6:1b:f5:c1:62:b7:c6:3c: fe:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:F8:6F:12:2D:33:A7:B3:BA:C1:5F:F5:89:04:A2:75:0E:0F:E0:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/aa49d036-1a98-38b8-924b-70ab1a70e4b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 130.254.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:18:28:61:a6:7d:15:48:26:5a:a6:ba:87:79:60:ae:77:6b: 98:11:d0:c7:d3:f1:c7:26:63:0c:ab:e1:c7:59:3c:79:37:9d: 00:fb:39:6c:0e:89:05:99:6e:30:4d:d5:97:1f:9d:13:6e:ea: 1c:7a:c0:8d:95:17:35:d4:a1:9b:80:dc:eb:4b:48:d1:0a:f2: 69:e7:02:92:d1:c9:22:f7:9a:a6:af:3d:5a:e0:0b:1b:f4:25: 75:08:7d:0d:63:54:d9:0d:0d:f0:e9:6c:d9:39:05:1b:85:2a: 8f:37:07:a6:fe:56:42:74:ec:56:ca:ff:62:61:79:e4:dd:8a: 8a:1e:3a:a0:ff:dc:3c:6b:e5:f2:3c:0c:87:e1:9a:13:e8:e1: fc:0e:9a:a4:f3:23:ef:3e:ab:45:90:24:bb:aa:04:be:67:31: 51:16:5e:c6:7d:60:af:82:d9:fb:61:97:4e:68:aa:0f:1c:3b: 78:13:9b:f9:49:b7:ca:8d:c9:23:95:2a:ba:7d:d5:b1:28:6f: 82:4c:92:20:fc:49:6b:77:00:d7:7d:51:67:af:94:dd:52:f6: e7:e7:ee:4d:55:ba:4f:23:10:9a:94:35:a0:05:50:0e:ec:fc: 94:f2:77:93:0d:c9:52:03:fa:70:0d:28:bb:b7:ac:cd:0a:b5: 65:dd:30:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpJXR6Qv0yp0fASPmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MDYyMzEyMjIyNFoXDTI1MDkyMTEyMjIyNFowLzEtMCsGA1UEAxMk NGU1NGZjYjktMWE5Yy00NGUwLTg3YmQtMTllMGMwOTJiYmNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkolZZV9FQw0e1/Cpeb68LzneCj922PSZEKlN rvEmZO1DjboG+WZ3IKIlxTDdS9C3nNWeO+JyvT20P/fDjbeGI6HklkKzMdO0y9SF taz1wifa16unQaxP71TZbxQ0G/vGegLX5iroxoSWsP+L1DuFhUDmhGsiCkb8S2ii mxL/J3Ert73SRQ4nVUhqzv2D5JodWjjUZ7UWTqZDxljJyO+5AZlmnmfnjX7IBr9R QHb90sMqf7+8yIZ7vJsl0akuze82pxAw8TEl5oncdHZU2QzblZg0Z82mj/ke1XIx lCoVczzmvPo2XEPcnIwYGb2clRe0jN6g4UbY9hv1wWK3xjz+5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL/4bxItM6ezusFf9YkEonUOD+BnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvYWE0OWQwMzYtMWE5OC0z OGI4LTkyNGItNzBhYjFhNzBlNGI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgv5wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEkYKGGmfRVIJlqmuod5YK53a5gR0MfT8ccmYwyr4cdZPHk3nQD7OWwO iQWZbjBN1ZcfnRNu6hx6wI2VFzXUoZuA3OtLSNEK8mnnApLRySL3mqavPVrgCxv0 JXUIfQ1jVNkNDfDpbNk5BRuFKo83B6b+VkJ07FbK/2JheeTdiooeOqD/3Dxr5fI8 DIfhmhPo4fwOmqTzI+8+q0WQJLuqBL5nMVEWXsZ9YK+C2fthl05oqg8cO3gTm/lJ t8qNySOVKrp91bEob4JMkiD8SWt3ANd9UWevlN1S9ufn7k1Vuk8jEJqUNaAFUA7s /JTyd5MNyVID+nANKLu3rM0KtWXdMBI= -----END CERTIFICATE-----Generated at Tue Jul 1 20:25:48 2025 by rpki-client