$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adf336cd-e30b-4fd4-a132-8eede3026803/8eab7860-30e1-3df5-9c83-1583684e864c.roa File: 8eab7860-30e1-3df5-9c83-1583684e864c.roa (raw, json) Hash identifier: FF51+J1X356ETIqtJA/6g9rsbLdJgD11HBRpS8TZ41g= Subject key identifier: 99:0D:D3:39:FB:FA:DC:83:B7:46:62:35:33:8B:CD:71:25:48:FB:01 Certificate issuer: /CN=adf336cd-e30b-4fd4-a132-8eede3026803 Certificate serial: 010D0C9F4328584B3AEC3E0A0B1F1FE85C508200 Authority key identifier: 43:13:C7:FA:51:66:91:DB:FC:9F:FB:6F:E5:C7:17:10:21:4A:56:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adf336cd-e30b-4fd4-a132-8eede3026803.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adf336cd-e30b-4fd4-a132-8eede3026803/8eab7860-30e1-3df5-9c83-1583684e864c.roa Signing time: Thu 18 Sep 2025 01:00:32 +0000 ROA not before: Thu 18 Sep 2025 01:00:32 +0000 ROA not after: Wed 17 Dec 2025 02:00:32 +0000 asID: 11094 IP address blocks: 130.219.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adf336cd-e30b-4fd4-a132-8eede3026803/adf336cd-e30b-4fd4-a132-8eede3026803.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adf336cd-e30b-4fd4-a132-8eede3026803/adf336cd-e30b-4fd4-a132-8eede3026803.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adf336cd-e30b-4fd4-a132-8eede3026803.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3a:ec:3e:0a:0b:1f:1f:e8:5c:50:82:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=adf336cd-e30b-4fd4-a132-8eede3026803 Validity Not Before: Sep 18 01:00:32 2025 GMT Not After : Dec 17 02:00:32 2025 GMT Subject: CN=f245bfbd-9fe7-4c0f-8d8a-329f0afeb344 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:ba:b7:b3:94:60:22:89:55:a2:1b:13:70:4f: 0c:48:1d:2e:8c:38:4d:97:56:2f:5e:98:72:78:df: b5:4a:07:b3:b1:0d:c2:fb:f5:fe:5d:90:6e:c3:8b: ff:dd:ca:53:3e:3e:14:b0:dd:41:c0:a1:e3:18:6f: 5d:89:f5:04:d8:f5:fd:71:eb:26:11:b3:02:c2:23: aa:13:60:e0:4f:55:b7:0e:1e:4e:c9:a7:f0:ec:6d: 12:ea:08:95:37:e9:fc:2c:d8:49:f9:5a:d3:58:58: a1:d5:97:a4:03:c7:c8:ee:8e:92:0a:aa:ee:fc:b1: 8e:de:42:8b:32:5b:5a:4e:a8:cb:95:d0:5d:a9:29: 5f:0a:26:de:57:14:b0:db:0c:75:23:39:f3:75:e2: b1:02:7a:68:e8:00:76:0d:e3:fe:2e:54:fd:d5:c2: 6d:91:ce:f4:85:94:66:a0:cf:0c:95:69:b8:95:8e: c5:26:fe:ef:14:77:21:86:d3:e0:d0:d0:72:12:e9: 77:f6:d5:c2:30:02:0e:a7:7c:7e:ca:a4:db:ca:b8: c4:4b:33:0b:6c:14:73:df:38:5c:a4:71:c0:1d:b9: 56:87:b0:9c:a9:f2:71:f3:df:cc:57:98:6c:d9:78: b9:bb:4c:92:fe:b6:13:7b:70:a6:ec:bb:52:89:a6: b9:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:0D:D3:39:FB:FA:DC:83:B7:46:62:35:33:8B:CD:71:25:48:FB:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adf336cd-e30b-4fd4-a132-8eede3026803/8eab7860-30e1-3df5-9c83-1583684e864c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adf336cd-e30b-4fd4-a132-8eede3026803/adf336cd-e30b-4fd4-a132-8eede3026803.crl X509v3 Authority Key Identifier: keyid:43:13:C7:FA:51:66:91:DB:FC:9F:FB:6F:E5:C7:17:10:21:4A:56:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adf336cd-e30b-4fd4-a132-8eede3026803.cer sbgp-ipAddrBlock: critical IPv4: 130.219.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:41:42:71:4a:af:a4:3a:da:20:68:8c:48:b2:11:c2:f5:e6: 77:42:d7:ad:54:9b:ac:d3:1f:03:70:39:d0:c8:36:a2:83:da: 65:4d:c9:e6:1d:37:3e:2e:b0:e5:7a:35:cb:31:aa:2c:ac:3d: 87:8a:65:fd:c9:64:d0:a8:83:2e:e5:4a:2e:96:6a:87:14:d5: a3:75:84:5c:2b:b3:49:a7:62:8f:f3:50:e3:ad:ca:86:36:10: 6b:3e:ba:9c:e6:38:ae:15:51:95:ba:ef:20:e5:c7:14:74:b9: 4a:59:64:95:fe:91:3b:cc:b7:03:c4:00:18:ad:3c:7b:02:c4: dd:7d:28:5d:e0:5e:4f:1b:47:57:dc:db:74:d5:ca:af:af:1a: 50:e9:75:a4:f0:7a:79:44:76:25:36:da:3e:98:41:09:de:2d: 81:f8:33:de:05:10:0b:a7:a4:0b:a4:f5:fc:ea:01:24:56:5b: 12:c5:c2:7a:d3:b9:40:e4:94:04:a9:12:ad:ef:1e:a3:72:ee: ab:7f:83:58:be:46:bc:93:9d:a1:96:95:6d:8f:ad:73:8a:38: df:da:ef:65:8b:75:7a:80:c1:c1:a5:0c:c4:8a:ea:ca:1b:33: dd:99:df:b9:e5:a1:71:8a:1d:8d:cc:de:15:cc:84:e5:03:c4: f3:23:d2:1b -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEs67D4KCx8f6FxQggAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWRmMzM2Y2QtZTMwYi00ZmQ0LWExMzItOGVlZGUzMDI2 ODAzMB4XDTI1MDkxODAxMDAzMloXDTI1MTIxNzAyMDAzMlowLzEtMCsGA1UEAxMk ZjI0NWJmYmQtOWZlNy00YzBmLThkOGEtMzI5ZjBhZmViMzQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirq3s5RgIolVohsTcE8MSB0ujDhNl1YvXphy eN+1SgezsQ3C+/X+XZBuw4v/3cpTPj4UsN1BwKHjGG9difUE2PX9cesmEbMCwiOq E2DgT1W3Dh5Oyafw7G0S6giVN+n8LNhJ+VrTWFih1ZekA8fI7o6SCqru/LGO3kKL MltaTqjLldBdqSlfCibeVxSw2wx1IznzdeKxAnpo6AB2DeP+LlT91cJtkc70hZRm oM8MlWm4lY7FJv7vFHchhtPg0NByEul39tXCMAIOp3x+yqTbyrjESzMLbBRz3zhc pHHAHblWh7CcqfJx89/MV5hs2Xi5u0yS/rYTe3Cm7LtSiaa5MwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFJkN0zn7+tyDt0ZiNTOLzXElSPsBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hZGYz MzZjZC1lMzBiLTRmZDQtYTEzMi04ZWVkZTMwMjY4MDMvOGVhYjc4NjAtMzBlMS0z ZGY1LTljODMtMTU4MzY4NGU4NjRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWRmMzM2Y2QtZTMwYi00ZmQ0LWEx MzItOGVlZGUzMDI2ODAzL2FkZjMzNmNkLWUzMGItNGZkNC1hMTMyLThlZWRlMzAy NjgwMy5jcmwwHwYDVR0jBBgwFoAUQxPH+lFmkdv8n/tv5ccXECFKVo0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hZGYzMzZjZC1lMzBiLTRmZDQtYTEzMi04ZWVk ZTMwMjY4MDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgtswVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAO0FCcUqvpDraIGiMSLIRwvXmd0LXrVSbrNMfA3A50Mg2ooPaZU3J5h03 Pi6w5Xo1yzGqLKw9h4pl/clk0KiDLuVKLpZqhxTVo3WEXCuzSadij/NQ463KhjYQ az66nOY4rhVRlbrvIOXHFHS5Sllklf6RO8y3A8QAGK08ewLE3X0oXeBeTxtHV9zb dNXKr68aUOl1pPB6eUR2JTbaPphBCd4tgfgz3gUQC6ekC6T1/OoBJFZbEsXCetO5 QOSUBKkSre8eo3Luq3+DWL5GvJOdoZaVbY+tc4o439rvZYt1eoDBwaUMxIrqyhsz 3ZnfueWhcYodjczeFcyE5QPE8yPSGw== -----END CERTIFICATE-----Generated at Wed Oct 22 05:00:48 2025 by rpki-client