$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/eb7b8561-8852-40be-b540-5a3c275d2aeb/8b898931-4f74-3ecf-9669-96047a1ec357.roa File: 8b898931-4f74-3ecf-9669-96047a1ec357.roa (raw, json) Hash identifier: 6ygrlq7a/4iYmPLXsgKRWwmg/0jce1hIqH0Bu6hbMUI= Subject key identifier: 42:1F:14:83:9A:A7:76:D0:5F:C5:10:0B:99:64:73:9F:E6:A1:BD:02 Certificate issuer: /CN=eb7b8561-8852-40be-b540-5a3c275d2aeb Certificate serial: 010D0C9F4328584B4D11C7E5C8FED024BDB9AEC0 Authority key identifier: 6F:64:D3:E2:77:55:08:B6:4C:5F:E1:7B:2F:C3:3E:84:B6:0D:0C:C1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/eb7b8561-8852-40be-b540-5a3c275d2aeb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/eb7b8561-8852-40be-b540-5a3c275d2aeb/8b898931-4f74-3ecf-9669-96047a1ec357.roa Signing time: Wed 24 Sep 2025 13:00:41 +0000 ROA not before: Wed 24 Sep 2025 13:00:41 +0000 ROA not after: Tue 23 Dec 2025 14:00:41 +0000 asID: 909 IP address blocks: 130.250.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/eb7b8561-8852-40be-b540-5a3c275d2aeb/eb7b8561-8852-40be-b540-5a3c275d2aeb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/eb7b8561-8852-40be-b540-5a3c275d2aeb/eb7b8561-8852-40be-b540-5a3c275d2aeb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/eb7b8561-8852-40be-b540-5a3c275d2aeb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4d:11:c7:e5:c8:fe:d0:24:bd:b9:ae:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb7b8561-8852-40be-b540-5a3c275d2aeb Validity Not Before: Sep 24 13:00:41 2025 GMT Not After : Dec 23 14:00:41 2025 GMT Subject: CN=b28c8187-838a-4183-b032-8800c216214f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:38:64:bb:b9:e2:9e:f3:a8:3e:7e:5f:03:d6: 44:4d:06:9b:34:24:5f:d9:12:c0:94:d2:c1:00:e6: 24:11:41:41:b8:43:dc:2e:a7:2d:bb:b3:13:3b:19: 2c:0e:40:a9:2d:e3:ad:20:d8:60:6c:55:13:87:ee: b3:d0:eb:74:c6:16:c2:be:6d:a1:53:cd:92:a0:c7: 1a:27:94:b5:9a:d6:69:b9:be:df:a7:c3:5f:cd:be: cd:a0:08:82:2e:76:1a:58:32:e8:6d:5c:24:a2:71: 14:fb:fa:18:91:12:e6:83:c4:da:d9:ee:18:63:a6: 4c:c3:06:fd:6c:41:9c:51:70:72:98:8f:82:6e:60: 5a:23:cf:87:8d:9b:bf:50:e8:36:23:4f:c5:33:f1: ec:ba:3c:89:a7:4a:57:0d:65:5b:2d:69:98:5d:0c: e7:5b:80:3c:c5:56:64:72:b8:e9:63:f6:3a:c1:bc: 37:eb:20:bc:66:16:07:28:27:1f:74:9e:34:71:3f: 18:d4:ca:d7:51:81:c5:09:ec:10:fb:9b:b5:bb:1f: 50:0f:93:b8:82:20:a8:03:aa:48:9e:c3:81:b8:61: 2e:37:86:e8:54:78:16:2c:33:3f:6f:b6:da:d8:20: 63:ae:ef:19:32:6c:78:03:ed:ef:b2:02:d2:27:7f: 4d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:1F:14:83:9A:A7:76:D0:5F:C5:10:0B:99:64:73:9F:E6:A1:BD:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/eb7b8561-8852-40be-b540-5a3c275d2aeb/8b898931-4f74-3ecf-9669-96047a1ec357.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/eb7b8561-8852-40be-b540-5a3c275d2aeb/eb7b8561-8852-40be-b540-5a3c275d2aeb.crl X509v3 Authority Key Identifier: keyid:6F:64:D3:E2:77:55:08:B6:4C:5F:E1:7B:2F:C3:3E:84:B6:0D:0C:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/eb7b8561-8852-40be-b540-5a3c275d2aeb.cer sbgp-ipAddrBlock: critical IPv4: 130.250.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:a0:48:4e:84:64:a9:c1:5b:a8:90:b4:29:1a:05:d2:39:00: ff:97:3c:f2:3c:55:31:80:69:5a:ea:6e:e7:67:7f:c8:35:87: 28:0d:61:12:fc:d8:46:d8:af:92:a9:68:6e:e8:bf:92:77:dd: cb:f7:db:94:6f:53:b2:32:9a:68:ef:4d:c3:27:9a:32:15:4a: 5d:a8:e4:14:68:86:5f:da:9e:b1:c1:74:37:5c:b6:14:61:90: 5c:05:47:5c:8a:38:9f:80:f8:d3:ca:33:33:4a:01:9b:50:19: ed:1b:46:91:0c:98:5c:28:37:12:3a:f8:38:17:9c:7c:b5:fc: 0f:40:78:f1:6c:13:34:7e:44:99:28:5e:9d:1e:4c:64:33:91: 52:ce:b3:fb:2b:4f:4f:9f:53:27:5c:d3:5a:50:5a:a6:b9:69: 5e:d4:0d:3a:4c:8d:19:63:be:61:c8:be:07:ab:73:c2:e2:22: eb:d8:ca:5d:7c:73:e4:93:d1:d7:69:9c:69:a6:86:e4:70:1d: 00:11:67:4a:33:4f:73:c5:c2:5a:4e:e9:6f:5e:66:a4:41:f7: d7:57:96:0b:ca:44:bf:9f:54:5a:e2:74:d7:7d:95:5f:40:c4: cb:cc:79:b9:ec:bf:f1:9f:67:df:e2:e1:a9:74:c6:47:66:a0: dd:b5:41:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtNEcflyP7QJL25rsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWI3Yjg1NjEtODg1Mi00MGJlLWI1NDAtNWEzYzI3NWQy YWViMB4XDTI1MDkyNDEzMDA0MVoXDTI1MTIyMzE0MDA0MVowLzEtMCsGA1UEAxMk YjI4YzgxODctODM4YS00MTgzLWIwMzItODgwMGMyMTYyMTRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjhku7ninvOoPn5fA9ZETQabNCRf2RLAlNLB AOYkEUFBuEPcLqctu7MTOxksDkCpLeOtINhgbFUTh+6z0Ot0xhbCvm2hU82SoMca J5S1mtZpub7fp8Nfzb7NoAiCLnYaWDLobVwkonEU+/oYkRLmg8Ta2e4YY6ZMwwb9 bEGcUXBymI+CbmBaI8+HjZu/UOg2I0/FM/HsujyJp0pXDWVbLWmYXQznW4A8xVZk crjpY/Y6wbw36yC8ZhYHKCcfdJ40cT8Y1MrXUYHFCewQ+5u1ux9QD5O4giCoA6pI nsOBuGEuN4boVHgWLDM/b7ba2CBjru8ZMmx4A+3vsgLSJ39NuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEIfFIOap3bQX8UQC5lkc5/mob0CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lYjdi ODU2MS04ODUyLTQwYmUtYjU0MC01YTNjMjc1ZDJhZWIvOGI4OTg5MzEtNGY3NC0z ZWNmLTk2NjktOTYwNDdhMWVjMzU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZWI3Yjg1NjEtODg1Mi00MGJlLWI1 NDAtNWEzYzI3NWQyYWViL2ViN2I4NTYxLTg4NTItNDBiZS1iNTQwLTVhM2MyNzVk MmFlYi5jcmwwHwYDVR0jBBgwFoAUb2TT4ndVCLZMX+F7L8M+hLYNDMEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lYjdiODU2MS04ODUyLTQwYmUtYjU0MC01YTNj Mjc1ZDJhZWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgvprMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAmgSE6EZKnBW6iQtCkaBdI5AP+XPPI8VTGAaVrqbudnf8g1hygNYRL8 2EbYr5KpaG7ov5J33cv325RvU7IymmjvTcMnmjIVSl2o5BRohl/anrHBdDdcthRh kFwFR1yKOJ+A+NPKMzNKAZtQGe0bRpEMmFwoNxI6+DgXnHy1/A9AePFsEzR+RJko Xp0eTGQzkVLOs/srT0+fUydc01pQWqa5aV7UDTpMjRljvmHIvgerc8LiIuvYyl18 c+ST0ddpnGmmhuRwHQARZ0ozT3PFwlpO6W9eZqRB99dXlgvKRL+fVFridNd9lV9A xMvMebnsv/GfZ9/i4al0xkdmoN21QV0= -----END CERTIFICATE-----Generated at Tue Oct 21 21:09:19 2025 by rpki-client