$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/2c1cf0c4-948b-38a5-8190-de4f3466996c.roa File: 2c1cf0c4-948b-38a5-8190-de4f3466996c.roa (raw, json) Hash identifier: m7MvgKG6uW0Jcv7Pi09JIUJzCVaq5vbuXIxa7oKpYfA= Subject key identifier: D8:21:D8:59:6A:AF:88:A3:DE:7F:B9:D4:52:45:D3:2A:C4:9E:1F:52 Certificate issuer: /CN=f2f0585e-a28e-4ead-9b1c-defd291ce54d Certificate serial: 010D0C9F4328584B75A47D160033470F110C7F00 Authority key identifier: 7B:C6:78:77:88:93:19:53:E7:11:02:39:94:6D:8B:3D:13:7A:C2:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/2c1cf0c4-948b-38a5-8190-de4f3466996c.roa Signing time: Thu 09 Oct 2025 01:48:42 +0000 ROA not before: Thu 09 Oct 2025 01:48:42 +0000 ROA not after: Wed 07 Jan 2026 02:48:42 +0000 asID: 50842 IP address blocks: 130.12.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:75:a4:7d:16:00:33:47:0f:11:0c:7f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2f0585e-a28e-4ead-9b1c-defd291ce54d Validity Not Before: Oct 9 01:48:42 2025 GMT Not After : Jan 7 02:48:42 2026 GMT Subject: CN=bbac3004-6153-4f96-ba22-26670e5d8fb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:37:8c:f6:24:bc:40:e0:94:7f:5d:e6:44:c2: f1:ef:74:5f:fc:25:f9:39:d3:8e:db:33:6b:3b:1f: 36:85:52:59:2b:e4:50:65:1b:a9:41:48:ac:7f:a5: 6d:02:ec:93:e5:6e:16:40:2d:f9:7c:4e:3e:17:7f: 1b:2b:32:fd:23:b3:b5:b7:05:ae:ac:12:c6:6a:63: 48:fd:4b:c4:d8:11:05:67:e3:4c:4b:d9:6a:d7:35: e1:93:48:6e:9d:00:05:24:97:51:4f:4e:e5:c9:b6: a6:6a:dc:6d:5c:7d:50:23:4f:fd:49:7f:64:5a:fb: 0a:f7:e6:67:6e:2c:e1:11:54:80:bf:53:17:26:f0: 8e:e6:1e:a6:22:35:d9:7e:8d:a2:42:ba:58:18:bc: 96:05:09:06:4c:c7:ef:75:d4:b0:c6:1d:c5:9c:8c: 0e:a9:20:47:12:e8:10:dc:a8:6b:d4:95:7b:66:41: 98:72:d8:6f:de:53:65:ed:23:1d:c5:49:10:84:b8: 8f:4c:3b:e4:f2:e6:43:0a:f1:dc:be:a2:44:73:44: e7:94:22:f5:43:7b:43:07:86:26:76:6d:91:ae:70: 34:3c:0c:84:c6:58:72:3b:2c:03:05:88:d6:c9:ec: c1:a8:08:bc:61:89:01:e8:8c:0b:4e:c2:2b:41:0c: 06:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:21:D8:59:6A:AF:88:A3:DE:7F:B9:D4:52:45:D3:2A:C4:9E:1F:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/2c1cf0c4-948b-38a5-8190-de4f3466996c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.crl X509v3 Authority Key Identifier: keyid:7B:C6:78:77:88:93:19:53:E7:11:02:39:94:6D:8B:3D:13:7A:C2:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer sbgp-ipAddrBlock: critical IPv4: 130.12.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:02:38:26:27:c4:d6:13:87:10:22:00:e8:e4:39:b4:26:bd: 0a:65:c5:85:58:ff:ac:62:26:20:24:ef:1a:68:06:40:a4:90: 5e:3c:a3:bf:0a:f9:f0:18:d5:81:27:d8:47:33:af:7f:14:78: 9b:d9:31:12:d3:4c:26:8e:28:d7:ee:d2:8c:70:e3:a6:3a:d5: 34:8c:b5:0c:8f:88:03:8f:5c:2d:d6:ff:fb:77:14:5e:f9:b3: a0:cd:b8:a1:c7:5b:28:1e:a9:8a:27:33:24:ff:cd:e9:fa:96: 03:01:f3:65:98:80:6a:86:31:98:b3:d5:00:c2:45:c8:db:1e: 8c:2d:ee:24:96:1d:50:3e:2f:e0:f7:09:ca:b1:ef:55:31:06: 49:52:b9:c3:0c:fa:1b:4c:57:a4:4f:91:50:f9:08:fc:96:b5: bb:88:e6:04:b8:8a:ba:04:32:21:b2:ea:0d:0f:05:5d:ba:9f: de:b7:eb:d9:b3:ae:f9:cd:ac:2d:a4:a0:2f:5d:4a:55:b7:85: d1:f9:a0:ef:53:e4:04:c4:d1:22:a0:63:df:fa:53:20:60:81: 66:41:52:5f:c7:41:1e:ac:e4:65:b5:f6:91:a3:f7:38:d5:79: 4d:59:36:da:27:40:c0:68:54:da:32:d3:38:fb:a2:9b:09:31: 65:7c:d8:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt1pH0WADNHDxEMfwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjJmMDU4NWUtYTI4ZS00ZWFkLTliMWMtZGVmZDI5MWNl NTRkMB4XDTI1MTAwOTAxNDg0MloXDTI2MDEwNzAyNDg0MlowLzEtMCsGA1UEAxMk YmJhYzMwMDQtNjE1My00Zjk2LWJhMjItMjY2NzBlNWQ4ZmI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDeM9iS8QOCUf13mRMLx73Rf/CX5OdOO2zNr Ox82hVJZK+RQZRupQUisf6VtAuyT5W4WQC35fE4+F38bKzL9I7O1twWurBLGamNI /UvE2BEFZ+NMS9lq1zXhk0hunQAFJJdRT07lybamatxtXH1QI0/9SX9kWvsK9+Zn bizhEVSAv1MXJvCO5h6mIjXZfo2iQrpYGLyWBQkGTMfvddSwxh3FnIwOqSBHEugQ 3Khr1JV7ZkGYcthv3lNl7SMdxUkQhLiPTDvk8uZDCvHcvqJEc0TnlCL1Q3tDB4Ym dm2RrnA0PAyExlhyOywDBYjWyezBqAi8YYkB6IwLTsIrQQwGEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNgh2Flqr4ij3n+51FJF0yrEnh9SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mMmYw NTg1ZS1hMjhlLTRlYWQtOWIxYy1kZWZkMjkxY2U1NGQvMmMxY2YwYzQtOTQ4Yi0z OGE1LTgxOTAtZGU0ZjM0NjY5OTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjJmMDU4NWUtYTI4ZS00ZWFkLTli MWMtZGVmZDI5MWNlNTRkL2YyZjA1ODVlLWEyOGUtNGVhZC05YjFjLWRlZmQyOTFj ZTU0ZC5jcmwwHwYDVR0jBBgwFoAUe8Z4d4iTGVPnEQI5lG2LPRN6wo8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mMmYwNTg1ZS1hMjhlLTRlYWQtOWIxYy1kZWZk MjkxY2U1NGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAggzwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAoCOCYnxNYThxAiAOjkObQmvQplxYVY/6xiJiAk7xpoBkCkkF48o78K +fAY1YEn2Eczr38UeJvZMRLTTCaOKNfu0oxw46Y61TSMtQyPiAOPXC3W//t3FF75 s6DNuKHHWygeqYonMyT/zen6lgMB82WYgGqGMZiz1QDCRcjbHowt7iSWHVA+L+D3 Ccqx71UxBklSucMM+htMV6RPkVD5CPyWtbuI5gS4iroEMiGy6g0PBV26n96369mz rvnNrC2koC9dSlW3hdH5oO9T5ATE0SKgY9/6UyBggWZBUl/HQR6s5GW19pGj9zjV eU1ZNtonQMBoVNoy0zj7opsJMWV82Dc= -----END CERTIFICATE-----Generated at Mon Oct 20 21:11:46 2025 by rpki-client