$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f24ed1aa-dae1-3d59-a05f-dc8f52a444fe.roa File: f24ed1aa-dae1-3d59-a05f-dc8f52a444fe.roa (raw, json) Hash identifier: Z+x9TjPOrwsXzsX2Trcsj0pUxjMTzyni9hMwmHA7ScM= Subject key identifier: 84:CE:DE:2F:A5:5F:3C:55:5E:4D:48:54:71:80:B6:CC:21:E6:B4:D9 Certificate issuer: /CN=f2f0585e-a28e-4ead-9b1c-defd291ce54d Certificate serial: 010D0C9F4328584B7456E7E53ECC4F2A5D15D300 Authority key identifier: 7B:C6:78:77:88:93:19:53:E7:11:02:39:94:6D:8B:3D:13:7A:C2:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f24ed1aa-dae1-3d59-a05f-dc8f52a444fe.roa Signing time: Wed 08 Oct 2025 14:36:34 +0000 ROA not before: Wed 08 Oct 2025 14:36:34 +0000 ROA not after: Tue 06 Jan 2026 15:36:34 +0000 asID: 50842 IP address blocks: 130.12.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:74:56:e7:e5:3e:cc:4f:2a:5d:15:d3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2f0585e-a28e-4ead-9b1c-defd291ce54d Validity Not Before: Oct 8 14:36:34 2025 GMT Not After : Jan 6 15:36:34 2026 GMT Subject: CN=ea05c095-1b6f-4150-8908-ec6bc1be4aa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:df:01:6e:ba:bb:04:4d:48:7f:fb:49:4e:4c: 32:a8:2e:14:00:b4:41:dc:57:fb:33:9a:1c:ef:04: 6d:26:5c:c5:34:72:3f:f5:d8:a1:5c:04:2c:27:65: d4:9c:93:bb:6c:e4:32:d5:9b:56:e1:ed:fc:f8:68: 2d:8e:6e:b8:f8:b4:0e:3b:e6:8a:f9:b8:83:49:77: 12:f0:8a:96:6a:4a:47:3a:92:e4:77:c1:52:e3:fb: 6d:b1:aa:08:04:fb:02:d1:e7:3e:7c:f1:5a:24:54: b4:23:bf:39:26:d0:7d:cf:78:f1:8a:ed:d9:5b:ad: ce:7a:73:86:6f:07:a0:21:fb:b4:7e:51:f1:96:c8: 9d:12:ac:7b:b4:81:e0:f4:77:ce:06:15:c5:46:0e: cc:b1:7b:46:c4:3b:3a:63:14:02:9d:e3:4c:6d:33: ad:05:12:ee:2f:cd:3e:81:a8:c2:1e:52:3b:d8:54: 88:28:11:ed:00:47:f3:94:9c:a1:db:45:e2:64:92: 04:85:49:d8:5e:f6:8d:64:e5:10:10:6c:96:2c:6d: 7c:69:99:6f:d1:dc:99:e9:69:e7:4d:fb:b8:7d:aa: 5e:6c:72:6b:31:e5:0e:41:f8:4b:a6:07:06:7c:58: 17:a3:36:25:33:01:20:7c:51:13:90:af:f1:ad:ce: 1a:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:CE:DE:2F:A5:5F:3C:55:5E:4D:48:54:71:80:B6:CC:21:E6:B4:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f24ed1aa-dae1-3d59-a05f-dc8f52a444fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.crl X509v3 Authority Key Identifier: keyid:7B:C6:78:77:88:93:19:53:E7:11:02:39:94:6D:8B:3D:13:7A:C2:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer sbgp-ipAddrBlock: critical IPv4: 130.12.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:fb:11:15:35:69:1c:2c:f1:62:ff:35:d9:c5:24:82:28:57: 8f:df:88:3e:4a:70:da:cb:a0:c5:e2:f2:d7:48:37:89:c1:e7: 37:0f:ed:0e:c2:cd:37:94:d1:b5:9f:c8:53:be:6f:76:2c:17: 4a:73:12:ce:02:d2:95:c5:c7:dd:e2:6e:b4:0c:db:e8:8f:e5: 24:6c:32:79:f0:91:22:65:97:18:3c:5c:7d:cc:d1:75:52:5c: 61:25:a9:0e:9c:71:c7:11:c9:be:22:ac:d3:bd:36:b1:a7:d1: 91:7e:a3:06:fb:36:19:0e:45:f1:56:6a:43:91:b3:71:e2:8b: 12:54:3a:d5:1a:7d:92:52:8d:e8:1b:b1:2a:3c:7a:16:db:dc: d6:55:4e:89:0c:5d:60:43:f4:c0:4a:42:d4:32:5c:5e:34:c4: ca:a7:5a:b4:3d:2e:a4:6e:6c:b4:9f:af:e2:23:a0:f2:82:f9: d9:ee:a5:e6:5e:8c:cc:58:94:0e:6e:a9:9f:2c:3f:9e:cb:1e: 84:5e:5d:fa:29:ec:27:6d:a8:d4:bd:da:23:c6:4f:de:72:8f: dd:a2:d2:d5:4d:78:63:28:86:a4:86:07:a7:05:26:70:9c:f6: f1:b8:6e:31:0e:e3:8c:63:e1:0b:04:f7:20:7e:a8:0e:11:d5: f2:dc:90:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt0VuflPsxPKl0V0wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjJmMDU4NWUtYTI4ZS00ZWFkLTliMWMtZGVmZDI5MWNl NTRkMB4XDTI1MTAwODE0MzYzNFoXDTI2MDEwNjE1MzYzNFowLzEtMCsGA1UEAxMk ZWEwNWMwOTUtMWI2Zi00MTUwLTg5MDgtZWM2YmMxYmU0YWE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0N8Bbrq7BE1If/tJTkwyqC4UALRB3Ff7M5oc 7wRtJlzFNHI/9dihXAQsJ2XUnJO7bOQy1ZtW4e38+Ggtjm64+LQOO+aK+biDSXcS 8IqWakpHOpLkd8FS4/ttsaoIBPsC0ec+fPFaJFS0I785JtB9z3jxiu3ZW63OenOG bwegIfu0flHxlsidEqx7tIHg9HfOBhXFRg7MsXtGxDs6YxQCneNMbTOtBRLuL80+ gajCHlI72FSIKBHtAEfzlJyh20XiZJIEhUnYXvaNZOUQEGyWLG18aZlv0dyZ6Wnn Tfu4fapebHJrMeUOQfhLpgcGfFgXozYlMwEgfFETkK/xrc4aOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFITO3i+lXzxVXk1IVHGAtswh5rTZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mMmYw NTg1ZS1hMjhlLTRlYWQtOWIxYy1kZWZkMjkxY2U1NGQvZjI0ZWQxYWEtZGFlMS0z ZDU5LWEwNWYtZGM4ZjUyYTQ0NGZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjJmMDU4NWUtYTI4ZS00ZWFkLTli MWMtZGVmZDI5MWNlNTRkL2YyZjA1ODVlLWEyOGUtNGVhZC05YjFjLWRlZmQyOTFj ZTU0ZC5jcmwwHwYDVR0jBBgwFoAUe8Z4d4iTGVPnEQI5lG2LPRN6wo8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mMmYwNTg1ZS1hMjhlLTRlYWQtOWIxYy1kZWZk MjkxY2U1NGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAggzxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEf7ERU1aRws8WL/NdnFJIIoV4/fiD5KcNrLoMXi8tdIN4nB5zcP7Q7C zTeU0bWfyFO+b3YsF0pzEs4C0pXFx93ibrQM2+iP5SRsMnnwkSJllxg8XH3M0XVS XGElqQ6ccccRyb4irNO9NrGn0ZF+owb7NhkORfFWakORs3HiixJUOtUafZJSjegb sSo8ehbb3NZVTokMXWBD9MBKQtQyXF40xMqnWrQ9LqRubLSfr+IjoPKC+dnupeZe jMxYlA5uqZ8sP57LHoReXfop7CdtqNS92iPGT95yj92i0tVNeGMohqSGB6cFJnCc 9vG4bjEO44xj4QsE9yB+qA4R1fLckII= -----END CERTIFICATE-----Generated at Mon Oct 20 21:12:41 2025 by rpki-client