$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/fa361c94-733e-3254-a108-9d03e7e4bf01.roa File: fa361c94-733e-3254-a108-9d03e7e4bf01.roa (raw, json) Hash identifier: d2BR/7PKM9vsHggKBNjKWM/emc7sb3IHGsTG/TA4jZ4= Subject key identifier: 3C:BF:07:F4:AD:95:24:0A:0B:58:42:4C:90:2C:8F:B2:32:4D:3B:F0 Certificate issuer: /CN=f2f0585e-a28e-4ead-9b1c-defd291ce54d Certificate serial: 010D0C9F4328584B75863D986B4464A0555F7D60 Authority key identifier: 7B:C6:78:77:88:93:19:53:E7:11:02:39:94:6D:8B:3D:13:7A:C2:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/fa361c94-733e-3254-a108-9d03e7e4bf01.roa Signing time: Thu 09 Oct 2025 00:47:45 +0000 ROA not before: Thu 09 Oct 2025 00:47:45 +0000 ROA not after: Wed 07 Jan 2026 01:47:45 +0000 asID: 23428 IP address blocks: 130.12.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:75:86:3d:98:6b:44:64:a0:55:5f:7d:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2f0585e-a28e-4ead-9b1c-defd291ce54d Validity Not Before: Oct 9 00:47:45 2025 GMT Not After : Jan 7 01:47:45 2026 GMT Subject: CN=6d261a83-8fd3-4583-a5bb-1771a08d516e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:1f:47:ba:80:33:ef:23:30:84:d6:fe:7d:a7: 07:ba:4d:63:43:d3:6b:65:89:c0:0d:f2:de:f7:c9: ea:d5:e5:15:c4:8b:e6:8d:92:4f:d4:82:cd:a5:30: ac:fe:16:3d:fd:a3:64:8e:f6:73:a3:a1:30:7b:f0: a0:35:ec:03:b6:ba:0e:ff:56:90:1f:28:6e:4d:b9: c6:a6:00:99:e2:23:16:5f:33:92:e6:e6:2c:a0:54: 8b:6d:a9:91:8c:52:0d:8f:31:dd:cc:5f:cd:79:4e: 86:80:77:89:7d:ad:18:3e:99:a0:9a:0d:6a:b9:83: a5:12:49:9e:df:25:64:b8:7f:e1:9c:77:f7:69:61: a9:49:c0:b7:1c:3e:61:55:bc:98:89:38:58:bc:e5: 65:c2:7d:37:0b:3c:1e:e3:37:70:2a:6d:57:3e:53: 7b:5e:3c:0f:12:4d:7a:e6:7b:37:b2:2c:bd:10:56: 59:59:88:98:a7:10:5d:11:11:3e:ac:83:3d:fd:10: 97:1e:f3:37:17:23:42:9b:45:45:04:5f:25:a1:a2: e3:74:eb:4c:34:9e:11:09:63:20:ef:e4:63:0a:44: 65:76:02:f1:b1:30:bf:b7:01:43:c9:64:ea:60:54: 5f:80:b1:05:c8:51:e8:a3:e0:dc:48:ea:f1:af:4c: b0:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:BF:07:F4:AD:95:24:0A:0B:58:42:4C:90:2C:8F:B2:32:4D:3B:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/fa361c94-733e-3254-a108-9d03e7e4bf01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.crl X509v3 Authority Key Identifier: keyid:7B:C6:78:77:88:93:19:53:E7:11:02:39:94:6D:8B:3D:13:7A:C2:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer sbgp-ipAddrBlock: critical IPv4: 130.12.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:b4:3a:ab:e0:7d:10:db:14:1c:5b:38:22:c2:92:d3:c5:46: 9f:f5:4b:5b:9c:24:eb:22:f2:0f:64:43:e3:4d:db:4b:a8:c0: 15:11:21:0a:46:a9:c7:78:2f:df:d1:88:70:fc:84:f7:de:2b: 96:33:73:d4:70:b0:c1:82:9c:1a:ce:3c:77:6f:bc:50:68:df: c9:9f:39:34:43:07:f8:18:f5:3b:05:eb:78:f4:d5:bb:54:b5: a2:3d:c4:43:19:16:54:3b:a8:c5:1e:9c:7a:55:be:8f:10:2a: 6c:85:07:9e:6e:76:7e:c1:01:bc:40:aa:98:50:2a:b8:a2:9f: cc:bf:81:9d:5c:2b:89:8a:95:a4:af:35:9c:58:01:36:17:dc: 38:5e:0b:d8:d4:2c:ca:e1:0c:c2:6c:28:8c:8e:2c:07:09:de: 0a:8a:72:3b:27:16:99:69:ba:dc:32:e4:43:f5:cc:da:82:cc: c7:9a:01:52:9a:b5:2a:65:58:5d:5f:cd:ab:80:1c:1c:71:aa: 79:a2:50:42:51:94:e0:62:10:44:d8:bf:ea:6c:05:d0:02:1a: 7f:0e:28:11:30:cd:52:7f:02:35:da:f0:62:16:f6:64:09:cf: 67:4c:22:20:e0:02:f4:f3:88:38:9a:dd:93:bf:c9:de:20:e0: ab:bf:33:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt1hj2Ya0RkoFVffWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjJmMDU4NWUtYTI4ZS00ZWFkLTliMWMtZGVmZDI5MWNl NTRkMB4XDTI1MTAwOTAwNDc0NVoXDTI2MDEwNzAxNDc0NVowLzEtMCsGA1UEAxMk NmQyNjFhODMtOGZkMy00NTgzLWE1YmItMTc3MWEwOGQ1MTZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlB9HuoAz7yMwhNb+facHuk1jQ9NrZYnADfLe 98nq1eUVxIvmjZJP1ILNpTCs/hY9/aNkjvZzo6Ewe/CgNewDtroO/1aQHyhuTbnG pgCZ4iMWXzOS5uYsoFSLbamRjFINjzHdzF/NeU6GgHeJfa0YPpmgmg1quYOlEkme 3yVkuH/hnHf3aWGpScC3HD5hVbyYiThYvOVlwn03Czwe4zdwKm1XPlN7XjwPEk16 5ns3siy9EFZZWYiYpxBdERE+rIM9/RCXHvM3FyNCm0VFBF8loaLjdOtMNJ4RCWMg 7+RjCkRldgLxsTC/twFDyWTqYFRfgLEFyFHoo+DcSOrxr0ywaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDy/B/StlSQKC1hCTJAsj7IyTTvwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mMmYw NTg1ZS1hMjhlLTRlYWQtOWIxYy1kZWZkMjkxY2U1NGQvZmEzNjFjOTQtNzMzZS0z MjU0LWExMDgtOWQwM2U3ZTRiZjAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjJmMDU4NWUtYTI4ZS00ZWFkLTli MWMtZGVmZDI5MWNlNTRkL2YyZjA1ODVlLWEyOGUtNGVhZC05YjFjLWRlZmQyOTFj ZTU0ZC5jcmwwHwYDVR0jBBgwFoAUe8Z4d4iTGVPnEQI5lG2LPRN6wo8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mMmYwNTg1ZS1hMjhlLTRlYWQtOWIxYy1kZWZk MjkxY2U1NGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAggzwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAm0OqvgfRDbFBxbOCLCktPFRp/1S1ucJOsi8g9kQ+NN20uowBURIQpG qcd4L9/RiHD8hPfeK5Yzc9RwsMGCnBrOPHdvvFBo38mfOTRDB/gY9TsF63j01btU taI9xEMZFlQ7qMUenHpVvo8QKmyFB55udn7BAbxAqphQKriin8y/gZ1cK4mKlaSv NZxYATYX3DheC9jULMrhDMJsKIyOLAcJ3gqKcjsnFplputwy5EP1zNqCzMeaAVKa tSplWF1fzauAHBxxqnmiUEJRlOBiEETYv+psBdACGn8OKBEwzVJ/AjXa8GIW9mQJ z2dMIiDgAvTziDia3ZO/yd4g4Ku/M5o= -----END CERTIFICATE-----Generated at Mon Oct 20 21:12:01 2025 by rpki-client