$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/4b70d72f-2d45-3ff1-8d2c-ee732c863c78.roa File: 4b70d72f-2d45-3ff1-8d2c-ee732c863c78.roa (raw, json) Hash identifier: lwGRbYLSk0Ua8u15K9yqjqlCZiMa69E9BAXwFT/XEdY= Subject key identifier: 15:A2:0C:A4:AD:44:45:66:F5:57:E7:FF:AE:92:35:F1:4F:17:4B:0F Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584B79BCB2D74F22ECC39108C600 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/4b70d72f-2d45-3ff1-8d2c-ee732c863c78.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 7018 IP address blocks: 130.254.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:b2:d7:4f:22:ec:c3:91:08:c6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=7687c8f9-ddd8-4c44-bc8c-a534ee1b66c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:6c:33:87:e1:a5:a5:d6:ef:a8:3f:02:be:f2: ac:bd:b7:bd:13:9c:dd:74:fe:83:6d:61:62:ab:72: 3a:54:0a:cc:5f:58:fc:01:60:1d:85:af:3a:a4:6f: ee:e3:ac:ae:78:72:a4:b5:a2:d3:9a:f0:b1:e7:4e: 38:5a:65:c3:65:95:c6:b4:d4:a8:6d:29:a3:63:0e: 15:86:d5:a2:6b:ab:b6:51:41:95:11:42:4c:90:75: d3:ce:15:9e:a7:67:80:c2:88:37:73:c4:73:f1:90: 8f:a1:88:d1:81:66:93:9b:fd:69:37:42:c9:d3:60: f1:6b:fe:ce:39:57:ff:22:09:4b:86:7b:ce:9d:4f: 5f:e2:a1:a2:f0:b5:5f:16:59:9b:7e:f3:93:35:a5: 7c:25:90:69:05:47:61:43:85:b9:a2:8f:a2:6a:44: 63:fd:c9:b6:92:14:81:bb:29:92:c0:a0:9e:1d:92: 12:18:f2:86:98:24:87:d2:24:84:71:a4:8a:67:68: 42:7a:c3:d9:01:67:14:60:53:f6:b7:5d:ef:c3:c1: 41:a3:a1:66:29:b1:e7:cc:ac:27:db:b8:14:83:bd: 89:91:8e:2e:80:d1:38:da:7c:70:7c:2e:66:d1:b8: a6:f5:08:52:3d:30:89:40:6e:58:0a:dc:c1:45:36: 5c:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:A2:0C:A4:AD:44:45:66:F5:57:E7:FF:AE:92:35:F1:4F:17:4B:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/4b70d72f-2d45-3ff1-8d2c-ee732c863c78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 130.254.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:f6:e0:36:76:91:04:8f:d0:8f:fd:63:09:87:31:17:b3:c5: b2:12:34:e8:0b:38:fe:c1:1e:a2:bb:74:6a:da:59:d5:68:d8: dc:3e:0a:85:30:1a:7d:d9:90:dd:8f:76:9b:5a:68:39:55:90: b4:21:0a:c1:ad:ca:3a:51:2f:84:10:62:03:fd:f9:14:b9:85: f5:8b:46:9b:94:bb:2d:22:2b:f2:9f:a5:da:33:1f:d3:40:f7: fe:d1:d7:99:ee:b0:a4:07:09:09:9d:bc:af:a7:2c:19:d7:d0: d8:f3:39:ed:c0:35:42:e7:fe:66:5c:93:3a:a3:2d:be:ed:a1: f0:60:2d:e3:3b:2c:68:3e:b8:f4:de:08:c3:41:31:76:02:20: 3e:c5:8d:8a:37:f9:f3:30:2c:eb:24:9f:9b:05:90:c7:4d:f1: 2d:af:ed:ab:af:bd:0e:2c:96:ac:65:7b:61:8e:53:05:33:4a: 4f:83:35:93:cd:b5:f1:85:e5:14:da:8e:f3:18:5c:3a:ad:e8: cc:29:d3:ce:11:45:dd:41:5b:48:33:c5:c6:60:4a:0b:2d:f4: 89:13:6c:e1:9f:b1:db:07:b9:9f:03:56:da:35:d3:88:c8:e6: 4e:4f:39:40:06:9c:e2:a5:b1:3d:54:59:0c:ff:0b:8b:c8:d8: 9b:b8:e9:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt5vLLXTyLsw5EIxgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk NzY4N2M4ZjktZGRkOC00YzQ0LWJjOGMtYTUzNGVlMWI2NmMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2wzh+GlpdbvqD8CvvKsvbe9E5zddP6DbWFi q3I6VArMX1j8AWAdha86pG/u46yueHKktaLTmvCx5044WmXDZZXGtNSobSmjYw4V htWia6u2UUGVEUJMkHXTzhWep2eAwog3c8Rz8ZCPoYjRgWaTm/1pN0LJ02Dxa/7O OVf/IglLhnvOnU9f4qGi8LVfFlmbfvOTNaV8JZBpBUdhQ4W5oo+iakRj/cm2khSB uymSwKCeHZISGPKGmCSH0iSEcaSKZ2hCesPZAWcUYFP2t13vw8FBo6FmKbHnzKwn 27gUg72JkY4ugNE42nxwfC5m0bim9QhSPTCJQG5YCtzBRTZcYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBWiDKStREVm9Vfn/66SNfFPF0sPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvNGI3MGQ3MmYtMmQ0NS0z ZmYxLThkMmMtZWU3MzJjODYzYzc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgv57MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHf24DZ2kQSP0I/9YwmHMRezxbISNOgLOP7BHqK7dGraWdVo2Nw+CoUw Gn3ZkN2PdptaaDlVkLQhCsGtyjpRL4QQYgP9+RS5hfWLRpuUuy0iK/KfpdozH9NA 9/7R15nusKQHCQmdvK+nLBnX0NjzOe3ANULn/mZckzqjLb7tofBgLeM7LGg+uPTe CMNBMXYCID7FjYo3+fMwLOskn5sFkMdN8S2v7auvvQ4slqxle2GOUwUzSk+DNZPN tfGF5RTajvMYXDqt6Mwp084RRd1BW0gzxcZgSgst9IkTbOGfsdsHuZ8DVto104jI 5k5POUAGnOKlsT1UWQz/C4vI2Ju46dI= -----END CERTIFICATE-----Generated at Wed Nov 5 07:17:06 2025 by rpki-client