$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/2db5bc4c-8e1b-3ff9-a3d8-1f6dfbb79534.roa File: 2db5bc4c-8e1b-3ff9-a3d8-1f6dfbb79534.roa (raw, json) Hash identifier: xYAwIEEhVXzckyZo09iRJhvQgfw0KeGZ6iqOpTJChtE= Subject key identifier: 2D:E8:84:86:E9:9E:87:4B:E6:12:76:59:22:CC:EE:1C:F7:F0:08:68 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584F3CE2922D710F8C87E39B5380 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/2db5bc4c-8e1b-3ff9-a3d8-1f6dfbb79534.roa Signing time: Sun 20 Sep 2026 13:00:12 +0000 ROA not before: Sun 20 Sep 2026 13:00:12 +0000 ROA not after: Sat 19 Dec 2026 14:00:12 +0000 asID: 22516 IP address blocks: 130.254.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3c:e2:92:2d:71:0f:8c:87:e3:9b:53:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Sep 20 13:00:12 2026 GMT Not After : Dec 19 14:00:12 2026 GMT Subject: CN=660bc5e8-08ca-41a8-81fa-315b447acec4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:ba:b8:54:af:bf:81:96:cc:66:40:d3:5c:d4: a2:5c:07:6a:3c:a5:6f:d4:28:6d:a4:04:43:49:dc: 51:44:3f:0b:a9:88:8b:d3:2f:91:45:e7:3c:dc:44: c2:6e:8a:61:0f:f9:00:5a:21:fd:6e:3d:38:d2:eb: 6f:9f:5b:b0:4a:c6:09:ae:f3:b0:80:44:66:b2:96: 04:e0:68:59:e8:f2:23:94:a4:58:37:47:e1:b9:76: ca:f2:9a:18:44:aa:f8:02:52:52:0e:15:08:78:98: 74:1c:b0:c3:7d:a6:fe:bc:75:72:51:ad:ae:0e:4c: b5:a9:1f:8d:9d:2e:57:98:87:54:fa:c2:80:dc:a6: 23:cb:ff:3a:2e:8d:fe:90:ff:3a:5f:7a:42:86:08: 93:0c:aa:50:15:69:2d:92:ed:ce:93:ea:eb:cc:0b: bb:34:d2:a0:78:69:5f:d9:dd:49:01:a2:ec:9e:bc: e8:75:6b:1f:d4:ee:3c:5e:a5:f4:33:89:38:f0:ac: 5c:90:9d:c3:f2:c2:8f:bf:18:90:07:ac:2d:86:cc: d5:7f:f2:90:db:89:e1:28:5c:67:ca:de:b6:78:3c: 8f:61:1c:9d:ac:2c:93:15:d2:a4:92:6e:ec:43:1f: 7b:60:a3:56:53:80:68:bd:9a:84:6c:40:4f:ef:31: 17:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:E8:84:86:E9:9E:87:4B:E6:12:76:59:22:CC:EE:1C:F7:F0:08:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/2db5bc4c-8e1b-3ff9-a3d8-1f6dfbb79534.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 130.254.98.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:2c:fc:c7:00:2c:71:e5:e5:ea:94:15:b2:0c:8b:7c:a2:71: 0c:1e:59:e0:94:84:55:1a:a4:a5:08:4c:79:ca:54:c7:1f:a6: 65:29:a3:03:be:bb:99:24:cd:6f:f8:37:e2:58:48:73:86:be: 4d:bd:45:90:01:60:45:58:1c:1e:a5:72:27:46:ac:b3:38:b8: 79:f8:04:f9:9f:35:75:94:4e:18:5d:7c:0f:89:c8:66:06:a2: e2:d1:11:0f:48:f1:f3:11:f7:71:7d:a4:a4:eb:83:66:e2:ba: 89:b0:43:8f:32:b4:c2:93:70:77:5d:bc:ad:14:b0:9a:a4:ef: 28:53:4a:aa:a8:cd:96:cb:71:0e:67:4c:65:7f:57:3b:98:f3: 58:ab:69:1a:d1:ba:bc:2b:24:da:60:b9:9d:b6:34:eb:91:a5: 92:bc:02:6e:d4:56:ce:31:d4:3c:96:a3:7c:54:63:68:3e:fb: ba:f2:e7:3f:12:02:54:92:3a:ec:7b:5d:e7:87:dd:18:14:95: 47:9b:d3:2b:39:63:f0:72:f8:f4:8d:b0:a0:34:66:e0:bd:34: 33:15:3c:f9:8b:13:fa:e5:be:9e:1c:21:50:36:03:49:de:0f: 72:36:61:6b:68:b6:9b:65:48:3d:cb:79:a6:6c:99:62:22:5a: 2f:0e:1b:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE884pItcQ+Mh+ObU4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI2MDkyMDEzMDAxMloXDTI2MTIxOTE0MDAxMlowLzEtMCsGA1UEAxMk NjYwYmM1ZTgtMDhjYS00MWE4LTgxZmEtMzE1YjQ0N2FjZWM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7q4VK+/gZbMZkDTXNSiXAdqPKVv1ChtpARD SdxRRD8LqYiL0y+RRec83ETCbophD/kAWiH9bj040utvn1uwSsYJrvOwgERmspYE 4GhZ6PIjlKRYN0fhuXbK8poYRKr4AlJSDhUIeJh0HLDDfab+vHVyUa2uDky1qR+N nS5XmIdU+sKA3KYjy/86Lo3+kP86X3pChgiTDKpQFWktku3Ok+rrzAu7NNKgeGlf 2d1JAaLsnrzodWsf1O48XqX0M4k48KxckJ3D8sKPvxiQB6wthszVf/KQ24nhKFxn yt62eDyPYRydrCyTFdKkkm7sQx97YKNWU4BovZqEbEBP7zEXwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC3ohIbpnodL5hJ2WSLM7hz38AhoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvMmRiNWJjNGMtOGUxYi0z ZmY5LWEzZDgtMWY2ZGZiYjc5NTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgv5iMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABss/McALHHl5eqUFbIMi3yicQweWeCUhFUapKUITHnKVMcfpmUpowO+ u5kkzW/4N+JYSHOGvk29RZABYEVYHB6lcidGrLM4uHn4BPmfNXWUThhdfA+JyGYG ouLREQ9I8fMR93F9pKTrg2biuomwQ48ytMKTcHddvK0UsJqk7yhTSqqozZbLcQ5n TGV/VzuY81iraRrRurwrJNpguZ22NOuRpZK8Am7UVs4x1DyWo3xUY2g++7ry5z8S AlSSOux7XeeH3RgUlUeb0ys5Y/By+PSNsKA0ZuC9NDMVPPmLE/rlvp4cIVA2A0ne D3I2YWtotptlSD3LeaZsmWIiWi8OG9c= -----END CERTIFICATE-----Generated at Sun Sep 20 17:13:30 2026 by rpki-client