$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/25bec96c-30a5-3c37-8274-f9a4b9626b98.roa File: 25bec96c-30a5-3c37-8274-f9a4b9626b98.roa (raw, json) Hash identifier: Tuyj8rwdGP+0rz4neet4+hxHP9AjZsDysZ0pP4e7WOQ= Subject key identifier: FE:7A:18:0A:2C:6F:E4:1D:9E:53:4B:80:9C:C7:D5:45:00:B2:8F:2E Certificate issuer: /CN=f2f0585e-a28e-4ead-9b1c-defd291ce54d Certificate serial: 010D0C9F4328584B85B222905BE6B3B56F9D1200 Authority key identifier: 7B:C6:78:77:88:93:19:53:E7:11:02:39:94:6D:8B:3D:13:7A:C2:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/25bec96c-30a5-3c37-8274-f9a4b9626b98.roa Signing time: Tue 14 Oct 2025 19:49:08 +0000 ROA not before: Tue 14 Oct 2025 19:49:08 +0000 ROA not after: Mon 12 Jan 2026 20:49:08 +0000 asID: 23428 IP address blocks: 130.12.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:85:b2:22:90:5b:e6:b3:b5:6f:9d:12:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2f0585e-a28e-4ead-9b1c-defd291ce54d Validity Not Before: Oct 14 19:49:08 2025 GMT Not After : Jan 12 20:49:08 2026 GMT Subject: CN=bf4ed13d-16b8-439c-8f41-ef97389cbd4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:77:b4:f7:b4:93:cb:d5:a9:19:4f:6f:42:13: bd:67:fb:96:85:f8:ee:bd:77:e8:6d:52:57:02:50: f6:59:8e:84:17:0b:1d:ea:f5:57:ec:d1:98:6a:79: 76:95:5a:a4:24:6b:f7:e4:cd:7e:c1:85:87:be:43: 7f:a9:33:6e:c4:6c:78:2c:e9:36:e9:5f:85:1c:40: 13:51:69:68:6a:87:b7:20:f5:64:cf:de:78:f6:7e: 0a:54:22:31:15:30:b2:27:c6:45:f4:cc:d8:41:5e: ca:e0:14:48:cf:da:62:bc:76:a4:2a:2e:6a:2b:bf: 1b:c1:d3:09:bb:4a:da:12:6c:1d:07:a4:22:ee:0a: a0:f4:07:05:8d:62:e0:9d:05:56:94:45:f7:57:d4: c8:76:71:aa:9c:20:86:eb:9a:b0:ed:a4:74:0f:f4: de:21:dd:fb:50:74:5a:fa:8d:07:3f:10:85:11:6c: 19:14:8d:9c:3a:45:81:fb:d5:d5:ba:2b:c0:46:4c: 33:25:c6:00:d0:e6:b9:47:66:e6:ca:14:bc:52:1e: 20:ac:23:b5:45:b2:d6:bf:01:45:89:71:c1:e2:56: 84:68:7f:7c:45:de:3f:2e:ea:ee:d5:a7:85:67:59: 25:a9:dd:fa:df:d2:d9:47:62:b3:b6:48:d4:bd:ac: bd:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:7A:18:0A:2C:6F:E4:1D:9E:53:4B:80:9C:C7:D5:45:00:B2:8F:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/25bec96c-30a5-3c37-8274-f9a4b9626b98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.crl X509v3 Authority Key Identifier: keyid:7B:C6:78:77:88:93:19:53:E7:11:02:39:94:6D:8B:3D:13:7A:C2:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer sbgp-ipAddrBlock: critical IPv4: 130.12.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:a0:77:01:1c:8f:78:98:f5:60:c9:f1:9f:4e:e3:d3:0f:3f: 0e:00:72:77:ce:66:cc:55:93:bc:bf:1b:fa:1e:6b:72:b5:51: 08:5c:d9:bd:51:85:5d:73:b5:6e:27:36:24:78:3e:b1:2e:f9: ac:96:e9:0b:89:ba:07:df:63:97:02:13:da:be:fd:c1:9a:79: 8b:f7:84:8c:44:c2:ec:e1:6e:b7:a7:fb:27:59:18:8e:e5:f8: af:84:71:50:3f:ae:60:24:f0:8f:20:ed:43:a0:f3:2c:86:87: 48:15:c7:98:a8:a8:50:2a:be:52:4b:73:3c:d0:bd:83:08:3b: 18:ef:5c:fc:26:2c:2f:b5:d0:4f:29:67:07:a4:00:24:31:8a: 4e:00:c9:ef:27:df:8e:62:e5:12:a7:e7:e3:f6:ca:22:eb:6f: 80:72:b0:aa:98:0e:bb:a8:23:18:04:70:2b:82:35:7f:3a:87: 2a:ed:69:aa:52:dd:52:9e:ce:e3:aa:ea:0e:f9:e4:23:01:57: f9:0b:be:2c:4f:89:05:77:ff:fd:55:08:a9:ca:0b:50:9b:75: 99:11:d2:4a:6a:9a:70:40:2c:27:76:76:ab:87:2f:3b:17:fd: 7d:2b:0b:09:c0:d5:e5:4c:c6:fa:bb:84:87:d5:c3:0e:55:69: 07:11:ca:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuFsiKQW+aztW+dEgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjJmMDU4NWUtYTI4ZS00ZWFkLTliMWMtZGVmZDI5MWNl NTRkMB4XDTI1MTAxNDE5NDkwOFoXDTI2MDExMjIwNDkwOFowLzEtMCsGA1UEAxMk YmY0ZWQxM2QtMTZiOC00MzljLThmNDEtZWY5NzM4OWNiZDRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgHe097STy9WpGU9vQhO9Z/uWhfjuvXfobVJX AlD2WY6EFwsd6vVX7NGYanl2lVqkJGv35M1+wYWHvkN/qTNuxGx4LOk26V+FHEAT UWloaoe3IPVkz9549n4KVCIxFTCyJ8ZF9MzYQV7K4BRIz9pivHakKi5qK78bwdMJ u0raEmwdB6Qi7gqg9AcFjWLgnQVWlEX3V9TIdnGqnCCG65qw7aR0D/TeId37UHRa +o0HPxCFEWwZFI2cOkWB+9XVuivARkwzJcYA0Oa5R2bmyhS8Uh4grCO1RbLWvwFF iXHB4laEaH98Rd4/Luru1aeFZ1klqd3639LZR2KztkjUvay9DQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP56GAosb+QdnlNLgJzH1UUAso8uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mMmYw NTg1ZS1hMjhlLTRlYWQtOWIxYy1kZWZkMjkxY2U1NGQvMjViZWM5NmMtMzBhNS0z YzM3LTgyNzQtZjlhNGI5NjI2Yjk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjJmMDU4NWUtYTI4ZS00ZWFkLTli MWMtZGVmZDI5MWNlNTRkL2YyZjA1ODVlLWEyOGUtNGVhZC05YjFjLWRlZmQyOTFj ZTU0ZC5jcmwwHwYDVR0jBBgwFoAUe8Z4d4iTGVPnEQI5lG2LPRN6wo8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mMmYwNTg1ZS1hMjhlLTRlYWQtOWIxYy1kZWZk MjkxY2U1NGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAggzyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADqgdwEcj3iY9WDJ8Z9O49MPPw4AcnfOZsxVk7y/G/oea3K1UQhc2b1R hV1ztW4nNiR4PrEu+ayW6QuJugffY5cCE9q+/cGaeYv3hIxEwuzhbren+ydZGI7l +K+EcVA/rmAk8I8g7UOg8yyGh0gVx5ioqFAqvlJLczzQvYMIOxjvXPwmLC+10E8p ZwekACQxik4Aye8n345i5RKn5+P2yiLrb4BysKqYDruoIxgEcCuCNX86hyrtaapS 3VKezuOq6g755CMBV/kLvixPiQV3//1VCKnKC1CbdZkR0kpqmnBALCd2dquHLzsX /X0rCwnA1eVMxvq7hIfVww5VaQcRyrc= -----END CERTIFICATE-----Generated at Mon Oct 20 21:12:39 2025 by rpki-client