$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/d42d81df-78cb-3705-9865-564dd4db794a.roa File: d42d81df-78cb-3705-9865-564dd4db794a.roa (raw, json) Hash identifier: HEwapfOI1ZbYRNOw42GzA7Vz4mrAUxUpIfCmRAqwcKo= Subject key identifier: 3E:69:39:91:59:06:98:B4:8A:70:27:3B:02:AE:13:9F:0E:0D:FB:26 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584B28C6F25609CA1F122078DB00 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/d42d81df-78cb-3705-9865-564dd4db794a.roa Signing time: Thu 11 Sep 2025 13:00:41 +0000 ROA not before: Thu 11 Sep 2025 13:00:41 +0000 ROA not after: Wed 10 Dec 2025 14:00:41 +0000 asID: 20001 IP address blocks: 130.44.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:28:c6:f2:56:09:ca:1f:12:20:78:db:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Sep 11 13:00:41 2025 GMT Not After : Dec 10 14:00:41 2025 GMT Subject: CN=89cb0655-cbaf-4284-8cdb-e46d083638b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c1:b5:66:34:8c:f3:d0:ea:00:81:f3:08:66: 39:46:ef:3e:c7:2a:49:6e:b0:8d:b1:5a:df:27:f1: 53:b1:5e:d4:18:d2:7f:93:df:ae:ea:1c:12:9e:84: 1e:16:ca:71:d1:36:1d:e2:77:a4:0e:0f:a8:3f:35: 5b:d7:18:74:09:38:3a:50:3b:69:86:0a:68:f4:39: 2c:0a:2f:e7:fc:0d:fb:c9:f7:88:68:18:87:9f:32: 0c:d1:19:2c:92:39:a4:42:46:df:3a:57:27:d1:67: a6:95:dd:76:49:1a:dd:f3:c9:85:64:c6:0f:e6:88: 38:0e:42:dc:86:f0:76:87:cb:4c:7e:93:01:a2:8b: 6e:f6:13:c6:b9:08:75:18:c3:10:ca:52:09:01:7c: 81:f5:2c:d9:5e:67:ad:ac:d4:a1:c8:b7:67:b0:e5: 37:bf:6d:56:b7:a1:a6:2a:8b:c0:d1:23:7e:28:50: 39:77:af:d2:97:20:ed:c4:36:fc:5f:e1:d5:37:31: 91:75:45:27:bc:a8:4d:81:97:c8:2e:cd:c4:f9:b9: da:fb:e3:11:6f:82:45:31:7d:ba:e3:65:33:3c:5f: 02:c3:96:cd:24:97:ef:c9:95:40:2d:76:a5:a0:4a: 22:08:b7:37:bf:3c:16:e7:c7:2c:38:4f:55:83:03: ea:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:69:39:91:59:06:98:B4:8A:70:27:3B:02:AE:13:9F:0E:0D:FB:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/d42d81df-78cb-3705-9865-564dd4db794a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 130.44.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:05:7a:86:53:c3:f8:fc:89:0d:5e:33:6a:27:d8:3a:08:da: 1e:b0:64:b3:c8:ee:41:89:f1:f2:fe:3c:b0:48:d2:06:79:ca: 73:85:1d:74:f2:e7:42:93:a6:c2:e1:66:a3:a7:e6:89:d9:7c: 24:d9:66:ef:13:44:ba:c6:d7:44:5c:18:88:c1:e1:8e:5f:55: 58:a4:68:d6:71:3f:e1:a4:d1:3c:f4:f4:51:51:9b:16:6e:70: 6d:a8:7f:24:e8:0b:69:15:d3:48:57:d9:8e:5c:39:04:82:7e: 54:2a:51:60:31:21:a9:aa:69:49:8b:81:cc:ea:89:86:f2:58: b3:ba:5e:ab:40:ad:c7:1e:4c:f9:82:29:ba:57:68:b6:94:70: 49:e9:85:63:7d:77:9d:0b:e3:6b:28:d0:73:86:58:b6:a1:af: ef:47:d4:88:ca:4e:16:2c:35:68:a2:d3:20:a8:ff:67:b2:ba: cd:b9:0d:20:f2:74:99:9b:14:bf:0b:22:67:4e:af:58:5f:c8: b6:9d:43:de:cb:9b:69:2a:5b:e7:19:24:86:a7:cd:ee:e1:42: 56:55:85:4f:b2:cd:6a:59:c3:18:67:db:cb:4c:d4:3d:38:29: e2:b6:a5:4b:b9:93:ba:4a:65:c2:51:09:96:e5:22:f9:ab:06: 12:b9:91:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsoxvJWCcofEiB42wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MDkxMTEzMDA0MVoXDTI1MTIxMDE0MDA0MVowLzEtMCsGA1UEAxMk ODljYjA2NTUtY2JhZi00Mjg0LThjZGItZTQ2ZDA4MzYzOGI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMG1ZjSM89DqAIHzCGY5Ru8+xypJbrCNsVrf J/FTsV7UGNJ/k9+u6hwSnoQeFspx0TYd4nekDg+oPzVb1xh0CTg6UDtphgpo9Dks Ci/n/A37yfeIaBiHnzIM0RkskjmkQkbfOlcn0Wemld12SRrd88mFZMYP5og4DkLc hvB2h8tMfpMBootu9hPGuQh1GMMQylIJAXyB9SzZXmetrNShyLdnsOU3v21Wt6Gm KovA0SN+KFA5d6/SlyDtxDb8X+HVNzGRdUUnvKhNgZfILs3E+bna++MRb4JFMX26 42UzPF8Cw5bNJJfvyZVALXaloEoiCLc3vzwW58csOE9VgwPqsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD5pOZFZBpi0inAnOwKuE58ODfsmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvZDQyZDgxZGYtNzhjYi0z NzA1LTk4NjUtNTY0ZGQ0ZGI3OTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgizIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB4FeoZTw/j8iQ1eM2on2DoI2h6wZLPI7kGJ8fL+PLBI0gZ5ynOFHXTy 50KTpsLhZqOn5onZfCTZZu8TRLrG10RcGIjB4Y5fVVikaNZxP+Gk0Tz09FFRmxZu cG2ofyToC2kV00hX2Y5cOQSCflQqUWAxIamqaUmLgczqiYbyWLO6XqtArcceTPmC KbpXaLaUcEnphWN9d50L42so0HOGWLahr+9H1IjKThYsNWii0yCo/2eyus25DSDy dJmbFL8LImdOr1hfyLadQ97Lm2kqW+cZJIanze7hQlZVhU+yzWpZwxhn28tM1D04 KeK2pUu5k7pKZcJRCZblIvmrBhK5kcQ= -----END CERTIFICATE-----Generated at Mon Oct 20 12:42:54 2025 by rpki-client