$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/f325e258-70ae-34ad-833a-fef70fb9e333.roa File: f325e258-70ae-34ad-833a-fef70fb9e333.roa (raw, json) Hash identifier: PUIlGJXecN5YYRUbizdtNA+y3A3AWG9c22VB6fWC3qg= Subject key identifier: 58:FE:40:63:67:9F:ED:45:CB:53:62:A8:77:FE:DB:D0:93:8D:6D:5B Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584B28C6F22318E8241FD8157300 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/f325e258-70ae-34ad-833a-fef70fb9e333.roa Signing time: Thu 11 Sep 2025 13:00:41 +0000 ROA not before: Thu 11 Sep 2025 13:00:41 +0000 ROA not after: Wed 10 Dec 2025 14:00:41 +0000 asID: 20001 IP address blocks: 130.254.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:28:c6:f2:23:18:e8:24:1f:d8:15:73:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Sep 11 13:00:41 2025 GMT Not After : Dec 10 14:00:41 2025 GMT Subject: CN=9bf30328-f22e-42be-973c-23cf3ae4c345 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:bd:90:5c:d6:c9:6a:d9:43:11:d0:59:b1:da: 46:dc:89:35:9b:c8:20:dd:f4:76:55:59:af:48:28: 2a:11:17:35:0a:3a:9b:00:58:e1:24:9b:4d:47:b6: fe:c4:3c:f6:fd:25:60:40:5d:60:10:e7:91:eb:da: 4f:8d:ed:fb:9b:ca:63:87:b4:9c:86:da:53:92:a9: bb:ed:7f:44:02:62:20:4e:bb:a6:06:31:ea:45:7a: b6:11:88:d3:d8:cc:2c:4d:63:50:98:14:0c:26:23: 91:d5:9c:fb:0b:a4:7e:eb:8b:22:d8:9f:cd:22:29: 26:7e:22:41:21:2a:05:36:85:b9:68:3d:1e:74:00: 09:f9:78:70:b2:3f:39:14:4e:eb:4e:62:ad:16:9d: df:32:74:fe:d3:85:bf:c8:1b:e6:15:e9:55:38:c3: 26:60:cb:9b:79:de:ed:25:ad:a2:ef:b7:37:15:73: d0:17:d7:3c:ca:fe:6b:7b:0b:a5:de:62:36:5c:12: 30:b8:04:d6:e5:8e:16:78:f8:dc:82:41:de:3a:d3: 8b:ee:96:d3:11:3e:39:a5:50:fe:85:7d:d0:2c:33: 28:4e:33:51:2d:41:ab:4d:f8:62:23:a6:60:c2:27: 21:8c:a9:aa:03:7a:ac:38:7b:41:f4:25:67:3e:db: 85:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:FE:40:63:67:9F:ED:45:CB:53:62:A8:77:FE:DB:D0:93:8D:6D:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/f325e258-70ae-34ad-833a-fef70fb9e333.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 130.254.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:58:67:dd:16:29:b2:70:e7:7b:1a:31:45:bd:4a:b0:8b:fd: a4:f2:8c:bc:6b:1a:26:46:fe:15:30:ab:38:2d:16:c1:5b:04: a0:76:74:97:f4:12:da:b7:d4:c2:c3:20:3a:ea:14:4f:c6:95: 1e:f1:e9:8a:c7:23:e7:39:a3:64:b0:00:7d:27:60:65:b0:8f: c6:39:42:13:71:39:b7:87:47:6d:a3:9a:1f:5d:63:e6:3f:5e: 86:5f:c3:e3:26:68:e9:a3:7a:c3:e6:be:e7:cc:ac:38:f2:f0: cb:de:da:e0:da:41:90:c9:f3:20:65:d3:b4:6b:ba:07:33:2b: fc:b2:ce:c1:47:68:91:d9:81:a4:0c:19:a4:1e:f6:03:af:ed: 84:a7:14:bf:0d:0b:ef:47:53:16:dd:e7:25:12:e4:31:4c:3a: 2f:75:19:bd:6b:5b:c7:e4:6d:83:c4:d4:b4:bb:20:5b:6d:1b: cf:bf:c0:67:db:87:3a:4f:f7:9a:e8:fd:71:4a:ac:f0:31:b2: e5:61:b3:bb:49:81:0c:73:50:48:d7:5b:2b:21:be:02:4d:f8: 10:cc:6d:d7:6b:f5:0a:9d:08:8e:00:81:82:71:d8:b2:1d:8a: de:4f:d0:d0:19:70:67:93:65:ef:05:99:5d:97:1b:36:69:4a: 11:76:99:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsoxvIjGOgkH9gVcwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MDkxMTEzMDA0MVoXDTI1MTIxMDE0MDA0MVowLzEtMCsGA1UEAxMk OWJmMzAzMjgtZjIyZS00MmJlLTk3M2MtMjNjZjNhZTRjMzQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsr2QXNbJatlDEdBZsdpG3Ik1m8gg3fR2VVmv SCgqERc1CjqbAFjhJJtNR7b+xDz2/SVgQF1gEOeR69pPje37m8pjh7SchtpTkqm7 7X9EAmIgTrumBjHqRXq2EYjT2MwsTWNQmBQMJiOR1Zz7C6R+64si2J/NIikmfiJB ISoFNoW5aD0edAAJ+Xhwsj85FE7rTmKtFp3fMnT+04W/yBvmFelVOMMmYMubed7t Ja2i77c3FXPQF9c8yv5rewul3mI2XBIwuATW5Y4WePjcgkHeOtOL7pbTET45pVD+ hX3QLDMoTjNRLUGrTfhiI6ZgwichjKmqA3qsOHtB9CVnPtuFfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFj+QGNnn+1Fy1NiqHf+29CTjW1bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvZjMyNWUyNTgtNzBhZS0z NGFkLTgzM2EtZmVmNzBmYjllMzMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgv58MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABVYZ90WKbJw53saMUW9SrCL/aTyjLxrGiZG/hUwqzgtFsFbBKB2dJf0 Etq31MLDIDrqFE/GlR7x6YrHI+c5o2SwAH0nYGWwj8Y5QhNxObeHR22jmh9dY+Y/ XoZfw+MmaOmjesPmvufMrDjy8Mve2uDaQZDJ8yBl07RrugczK/yyzsFHaJHZgaQM GaQe9gOv7YSnFL8NC+9HUxbd5yUS5DFMOi91Gb1rW8fkbYPE1LS7IFttG8+/wGfb hzpP95ro/XFKrPAxsuVhs7tJgQxzUEjXWyshvgJN+BDMbddr9QqdCI4AgYJx2LId it5P0NAZcGeTZe8FmV2XGzZpShF2mWU= -----END CERTIFICATE-----Generated at Mon Oct 20 05:39:30 2025 by rpki-client