$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/78d92b50-1d3f-3251-8bd4-5b59b5901aa3.roa File: 78d92b50-1d3f-3251-8bd4-5b59b5901aa3.roa (raw, json) Hash identifier: nVNjCDDFEGhzm6MXF7ipQQPkaoYet8rNzBKKHdSdTYs= Subject key identifier: 40:02:C5:68:C8:72:5D:60:7E:EF:40:47:68:58:D5:0A:FE:38:25:6E Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584CC61204C5781D166DB0AEC280 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/78d92b50-1d3f-3251-8bd4-5b59b5901aa3.roa Signing time: Fri 06 Feb 2026 14:00:40 +0000 ROA not before: Fri 06 Feb 2026 14:00:40 +0000 ROA not after: Thu 07 May 2026 13:00:40 +0000 asID: 64267 IP address blocks: 130.254.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:c6:12:04:c5:78:1d:16:6d:b0:ae:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Feb 6 14:00:40 2026 GMT Not After : May 7 13:00:40 2026 GMT Subject: CN=7c517733-3f48-43a1-8fcf-65ffaae8b223 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:bc:23:12:1f:20:3d:c1:60:1d:ad:d8:7f:23: 0f:89:50:5a:46:9a:a5:3d:e4:1d:a8:90:bf:6e:18: 25:0a:50:dc:c2:d9:46:e4:88:1f:45:09:16:81:6d: ae:35:90:d6:97:1d:e9:60:e7:72:db:29:03:db:c5: 1d:6f:8a:53:25:10:05:d0:73:dd:36:4f:fa:c1:c9: 49:e7:30:d8:89:5d:b1:3f:c3:57:0a:45:1c:20:cd: 71:55:25:32:07:63:d9:22:d4:64:e7:01:32:e8:2f: b7:c8:67:ad:38:23:1c:28:08:f1:a6:6a:6a:69:d8: 34:fd:c3:a8:65:ca:d5:05:e5:98:25:f5:25:f6:8c: 70:3f:c2:0c:1b:b8:9e:5a:53:48:0e:d8:c5:d5:f3: 3a:fa:12:ff:bb:bc:79:6f:2a:43:5c:00:5f:90:bc: db:6d:ef:5d:e9:4d:d0:0c:5a:f4:53:2b:d6:99:d0: 45:15:05:2e:36:b4:83:6b:55:3f:10:a9:24:29:c3: c0:51:de:8a:38:ea:c4:74:89:ea:a0:1b:fb:d3:af: 14:1f:eb:d5:ed:7a:f0:d4:65:0a:2f:4f:81:ce:40: 70:65:70:e3:cf:0b:8c:c8:36:ca:c3:05:32:da:08: 2e:c6:1f:d4:7c:ce:53:7d:0a:f5:95:d3:51:d1:dd: 26:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:02:C5:68:C8:72:5D:60:7E:EF:40:47:68:58:D5:0A:FE:38:25:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/78d92b50-1d3f-3251-8bd4-5b59b5901aa3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 130.254.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c1:0f:4f:89:30:7e:fd:17:09:59:a8:d9:6e:a4:cf:f7:cb:25: 3f:d1:a2:70:35:eb:79:fd:2f:cc:bc:57:da:60:e5:bd:66:39: da:48:f2:e2:c5:bc:3a:12:21:18:07:da:d5:de:0e:cf:26:b8: 2a:42:30:2e:46:c2:22:f5:36:cb:fd:56:2b:f8:1a:91:18:cc: 3f:ed:0d:25:82:c6:ca:6f:e1:65:2a:e1:49:55:39:9b:fb:7f: 87:d3:bd:f2:a8:ca:91:83:e2:dd:ba:56:4e:b8:94:33:23:37: 4c:5f:b8:0b:5c:ef:32:bf:9c:3a:1e:d3:d9:6d:72:45:96:2c: 9e:02:d7:02:6a:46:75:e2:6e:e8:8b:57:85:7c:c8:08:30:dd: aa:7a:bc:c7:bb:d7:fc:5c:99:5e:2f:59:60:13:7a:39:dc:5a: 23:ab:cd:6e:43:28:ce:e9:a0:24:88:68:b6:62:89:54:70:40: b8:ba:26:72:76:2c:f6:1c:ea:93:45:9a:47:ac:ab:8b:60:10: 8e:5b:99:ac:91:8a:0f:32:84:97:5e:3d:f5:a0:d6:c3:14:9d: cc:6e:98:c2:4f:a3:f0:74:9a:6d:71:73:df:68:04:58:c5:75: 45:5b:d5:30:c9:84:e9:8a:fe:64:9e:9b:17:ae:fd:65:1b:af: cc:20:4f:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzGEgTFeB0WbbCuwoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI2MDIwNjE0MDA0MFoXDTI2MDUwNzEzMDA0MFowLzEtMCsGA1UEAxMk N2M1MTc3MzMtM2Y0OC00M2ExLThmY2YtNjVmZmFhZThiMjIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh7wjEh8gPcFgHa3YfyMPiVBaRpqlPeQdqJC/ bhglClDcwtlG5IgfRQkWgW2uNZDWlx3pYOdy2ykD28Udb4pTJRAF0HPdNk/6wclJ 5zDYiV2xP8NXCkUcIM1xVSUyB2PZItRk5wEy6C+3yGetOCMcKAjxpmpqadg0/cOo ZcrVBeWYJfUl9oxwP8IMG7ieWlNIDtjF1fM6+hL/u7x5bypDXABfkLzbbe9d6U3Q DFr0UyvWmdBFFQUuNrSDa1U/EKkkKcPAUd6KOOrEdInqoBv7068UH+vV7Xrw1GUK L0+BzkBwZXDjzwuMyDbKwwUy2gguxh/UfM5TfQr1ldNR0d0mkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEACxWjIcl1gfu9AR2hY1Qr+OCVuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvNzhkOTJiNTAtMWQzZi0z MjUxLThiZDQtNWI1OWI1OTAxYWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgv5tMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMEPT4kwfv0XCVmo2W6kz/fLJT/RonA163n9L8y8V9pg5b1mOdpI8uLF vDoSIRgH2tXeDs8muCpCMC5GwiL1Nsv9Viv4GpEYzD/tDSWCxspv4WUq4UlVOZv7 f4fTvfKoypGD4t26Vk64lDMjN0xfuAtc7zK/nDoe09ltckWWLJ4C1wJqRnXibuiL V4V8yAgw3ap6vMe71/xcmV4vWWATejncWiOrzW5DKM7poCSIaLZiiVRwQLi6JnJ2 LPYc6pNFmkesq4tgEI5bmayRig8yhJdePfWg1sMUncxumMJPo/B0mm1xc99oBFjF dUVb1TDJhOmK/mSemxeu/WUbr8wgT2Y= -----END CERTIFICATE-----Generated at Mon Mar 2 16:09:47 2026 by rpki-client