$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/12ab670a-5108-3501-89d8-51456dcdd327.roa File: 12ab670a-5108-3501-89d8-51456dcdd327.roa (raw, json) Hash identifier: r5KRIuVHgIQrZAz3lxlBH0WTet0m4ClOm5f0RVuk8gY= Subject key identifier: F8:A9:70:AC:93:F5:C0:2C:DF:66:AA:71:33:3D:47:C0:60:8F:10:FF Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584BBB759FF0CB616E8AB8112780 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/12ab670a-5108-3501-89d8-51456dcdd327.roa Signing time: Mon 03 Nov 2025 02:00:31 +0000 ROA not before: Mon 03 Nov 2025 02:00:31 +0000 ROA not after: Sun 01 Feb 2026 02:00:31 +0000 asID: 397630 IP address blocks: 130.254.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bb:75:9f:f0:cb:61:6e:8a:b8:11:27:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Nov 3 02:00:31 2025 GMT Not After : Feb 1 02:00:31 2026 GMT Subject: CN=d4080d79-ae0e-4f7a-a745-4e3aa6785976 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:5c:6c:8f:26:82:0e:ce:40:75:d1:6f:92:2b: fd:09:6f:80:d7:23:f3:f2:d6:8a:8e:ec:2d:1a:2c: 1c:8f:3f:f5:b5:47:56:4b:6d:36:52:76:ba:e5:fa: a9:cf:c0:1b:d6:b9:60:04:86:9a:d4:5d:07:dc:61: c1:f4:19:55:df:b7:8c:8a:be:6c:b7:0f:db:ba:75: 07:1b:16:8a:cc:a3:2a:6a:60:9c:fe:92:fb:1b:a5: 0c:42:e7:9d:a9:6a:aa:16:66:1c:f5:5d:7e:17:5b: ba:46:4d:a0:d2:10:46:52:4c:18:8e:b6:a9:86:c0: a5:63:a8:ed:ba:4d:19:af:0d:c4:d4:75:20:34:dc: b0:29:43:75:ed:4c:7c:02:43:02:c3:1f:b9:a8:32: 81:3d:8b:6b:eb:75:f9:4d:cb:ff:4d:73:40:d6:9e: 03:85:4b:a2:1f:28:b4:24:8d:e9:a4:b3:fb:cc:8d: 73:ac:9a:23:ae:36:88:5e:fd:17:02:55:21:25:ba: c1:cd:01:ad:59:34:7f:33:24:93:9e:90:1f:ec:65: 19:db:8a:bf:42:fd:1f:43:2f:94:a1:25:cf:47:3f: 36:48:4b:81:3c:22:82:e6:54:7d:0b:50:b2:c0:ab: 02:7e:31:41:de:a7:df:a0:bc:fb:e0:e0:6a:a1:b6: 3d:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:A9:70:AC:93:F5:C0:2C:DF:66:AA:71:33:3D:47:C0:60:8F:10:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/12ab670a-5108-3501-89d8-51456dcdd327.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 130.254.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:2f:4f:78:69:67:dd:35:20:24:b7:11:4f:a2:61:b9:3c:ef: b3:80:a7:02:e5:9e:76:21:7b:64:84:98:e4:2e:94:76:a0:cf: 08:e3:ae:2d:39:4f:e4:d5:be:f3:d1:dd:db:0d:0e:4d:bf:0a: 01:13:83:32:75:7d:87:96:88:a8:18:b9:74:4f:d9:2c:55:90: ab:34:3f:df:12:8a:cd:9f:19:8a:e0:a6:f1:92:11:36:21:7a: c9:b9:80:10:ab:a3:8c:36:10:e0:b1:a0:38:3c:ad:95:09:ec: 1d:78:c1:5a:b8:e4:40:00:cf:11:f2:18:4e:ec:88:99:27:c1: 7b:35:41:5d:26:2c:a2:43:99:f0:2e:bb:05:8e:6f:b3:35:00: 12:af:0e:ad:da:d3:14:88:8e:7e:ef:d4:36:39:86:4f:7a:ec: a1:84:e0:b1:f1:0c:93:6c:c4:0a:cc:ed:f1:d9:a7:5c:bc:f3: 9e:c2:49:f9:11:af:a1:a1:73:f8:55:8d:1f:6e:36:9d:e6:4d: 47:36:36:5f:f4:ae:12:ce:40:01:4f:63:f0:36:a1:4f:52:4d: aa:d4:03:68:08:49:c9:b3:62:05:5f:fe:05:9e:8d:0f:95:36: fe:82:fe:f1:d3:4b:80:92:03:72:66:f0:2b:52:19:b0:97:2b: cf:70:95:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu7dZ/wy2FuirgRJ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MTEwMzAyMDAzMVoXDTI2MDIwMTAyMDAzMVowLzEtMCsGA1UEAxMk ZDQwODBkNzktYWUwZS00ZjdhLWE3NDUtNGUzYWE2Nzg1OTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVxsjyaCDs5AddFvkiv9CW+A1yPz8taKjuwt Giwcjz/1tUdWS202Una65fqpz8Ab1rlgBIaa1F0H3GHB9BlV37eMir5stw/bunUH GxaKzKMqamCc/pL7G6UMQuedqWqqFmYc9V1+F1u6Rk2g0hBGUkwYjraphsClY6jt uk0Zrw3E1HUgNNywKUN17Ux8AkMCwx+5qDKBPYtr63X5Tcv/TXNA1p4DhUuiHyi0 JI3ppLP7zI1zrJojrjaIXv0XAlUhJbrBzQGtWTR/MySTnpAf7GUZ24q/Qv0fQy+U oSXPRz82SEuBPCKC5lR9C1CywKsCfjFB3qffoLz74OBqobY9kQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPipcKyT9cAs32aqcTM9R8BgjxD/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvMTJhYjY3MGEtNTEwOC0z NTAxLTg5ZDgtNTE0NTZkY2RkMzI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgv57MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA0vT3hpZ901ICS3EU+iYbk877OApwLlnnYhe2SEmOQulHagzwjjri05 T+TVvvPR3dsNDk2/CgETgzJ1fYeWiKgYuXRP2SxVkKs0P98Sis2fGYrgpvGSETYh esm5gBCro4w2EOCxoDg8rZUJ7B14wVq45EAAzxHyGE7siJknwXs1QV0mLKJDmfAu uwWOb7M1ABKvDq3a0xSIjn7v1DY5hk967KGE4LHxDJNsxArM7fHZp1y8857CSfkR r6Ghc/hVjR9uNp3mTUc2Nl/0rhLOQAFPY/A2oU9STarUA2gIScmzYgVf/gWejQ+V Nv6C/vHTS4CSA3Jm8CtSGbCXK89wlZc= -----END CERTIFICATE-----Generated at Wed Nov 5 04:07:05 2025 by rpki-client