$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1347cdae-54c7-4fcb-9019-0bee16977198/cad5ca65-956d-31bd-87ac-8299da4f56ec.roa File: cad5ca65-956d-31bd-87ac-8299da4f56ec.roa (raw, json) Hash identifier: OBkIiYTBIgo15DeBbUW6ooDBlB2sIP7Gq/fLASOwQZQ= Subject key identifier: 30:D8:2B:65:8C:DA:DA:2F:CC:FA:AF:19:39:50:A2:FB:9A:B6:9A:3A Certificate issuer: /CN=1347cdae-54c7-4fcb-9019-0bee16977198 Certificate serial: 010D0C9F4328584BA93258216A5FBBE273462C80 Authority key identifier: 29:C9:3E:41:B6:86:FB:0B:EA:53:17:40:CB:91:D0:B1:34:B2:36:F0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1347cdae-54c7-4fcb-9019-0bee16977198.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1347cdae-54c7-4fcb-9019-0bee16977198/cad5ca65-956d-31bd-87ac-8299da4f56ec.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 25656 IP address blocks: 130.74.0.0/16 maxlen: 16 130.74.0.0/17 maxlen: 17 130.74.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1347cdae-54c7-4fcb-9019-0bee16977198/1347cdae-54c7-4fcb-9019-0bee16977198.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1347cdae-54c7-4fcb-9019-0bee16977198/1347cdae-54c7-4fcb-9019-0bee16977198.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1347cdae-54c7-4fcb-9019-0bee16977198.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:58:21:6a:5f:bb:e2:73:46:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1347cdae-54c7-4fcb-9019-0bee16977198 Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=f3c4d5d0-e3cc-4c5a-b326-7c621879deee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:8c:7b:fa:7f:9b:a1:c0:3e:de:98:cc:31:72: 9d:00:98:af:2a:cb:88:fc:82:0e:8e:1e:1e:63:a7: 98:e0:ae:a1:ba:fc:9d:c7:25:e3:42:c4:6b:ac:46: 06:c0:4d:e8:ec:06:6d:62:a2:87:7e:16:f3:83:89: de:ca:87:0f:e0:94:ad:14:bd:51:5c:42:23:e6:7c: f9:13:d2:80:52:ef:e2:af:89:09:33:d5:07:57:8b: f8:ee:ac:00:ed:ff:9d:c9:70:92:ef:42:32:5e:2a: 74:0d:a9:e8:56:42:8f:eb:a9:03:ce:04:50:b7:af: c9:34:d5:dc:39:62:ff:1e:c6:0b:df:df:6c:36:10: 53:cf:7a:eb:c4:a0:01:b8:d9:a4:7d:ff:65:d3:9f: af:16:51:2f:79:60:59:d2:a4:ca:3a:b8:60:4d:9b: e8:fd:b5:b1:0d:e9:4b:7b:85:28:b4:d7:18:4b:4e: 59:56:47:34:9d:f0:d5:5f:a1:47:50:d8:42:91:36: 00:d3:8d:38:39:a5:42:8e:c7:34:bb:92:05:a4:0b: 3c:84:15:f6:f8:7f:ed:ea:7f:14:d4:1b:5c:a6:3d: e8:93:cb:02:5d:fc:da:62:9a:da:46:81:47:7a:34: df:9a:93:bc:1e:bf:8e:ac:8a:f1:73:91:56:55:36: d8:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:D8:2B:65:8C:DA:DA:2F:CC:FA:AF:19:39:50:A2:FB:9A:B6:9A:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1347cdae-54c7-4fcb-9019-0bee16977198/cad5ca65-956d-31bd-87ac-8299da4f56ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1347cdae-54c7-4fcb-9019-0bee16977198/1347cdae-54c7-4fcb-9019-0bee16977198.crl X509v3 Authority Key Identifier: keyid:29:C9:3E:41:B6:86:FB:0B:EA:53:17:40:CB:91:D0:B1:34:B2:36:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1347cdae-54c7-4fcb-9019-0bee16977198.cer sbgp-ipAddrBlock: critical IPv4: 130.74.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:7f:f8:c6:50:b9:2e:dd:af:e1:4a:61:86:43:01:be:17:3d: 83:31:82:c8:da:23:e7:15:54:cc:4f:49:97:9a:4a:35:b7:95: 50:98:9b:4e:42:0e:a7:a6:12:e6:81:ea:e5:d0:ab:88:d5:43: 22:0e:df:e0:e2:1e:4b:0e:8c:88:a5:48:26:84:a8:c4:ec:ef: b5:87:b8:a5:57:c5:27:c6:2b:62:be:02:e1:56:a6:3c:c4:67: f5:df:85:02:66:0e:10:37:ae:d2:f9:88:4a:67:4f:b6:60:a4: 90:e1:6a:8b:5b:67:39:de:d1:2e:91:f9:8d:5f:42:ec:31:dd: 79:f8:f9:7e:43:db:6e:3b:1a:94:ae:b2:91:bf:26:58:c3:86: 67:3d:78:34:45:3b:1f:44:a9:21:e5:77:80:bd:fb:8a:81:20: e7:51:f9:57:28:a4:68:9f:41:f5:2d:75:26:e9:97:a5:d5:65: 83:10:cf:c7:5e:c9:78:d4:ea:bb:27:26:41:32:94:2c:d1:99: 78:d0:3a:b4:dc:4d:13:8c:76:c1:e1:82:f6:8c:09:76:25:87: ab:bd:0c:89:e3:fe:d3:c3:6c:f4:d9:85:a6:58:5e:4c:47:5f: 9e:1c:85:45:73:33:28:5f:ea:e4:08:e3:0b:72:ed:29:19:eb: d4:d0:0f:89 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEupMlghal+74nNGLIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTM0N2NkYWUtNTRjNy00ZmNiLTkwMTktMGJlZTE2OTc3 MTk4MB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk ZjNjNGQ1ZDAtZTNjYy00YzVhLWIzMjYtN2M2MjE4NzlkZWVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4x7+n+bocA+3pjMMXKdAJivKsuI/IIOjh4e Y6eY4K6huvydxyXjQsRrrEYGwE3o7AZtYqKHfhbzg4neyocP4JStFL1RXEIj5nz5 E9KAUu/ir4kJM9UHV4v47qwA7f+dyXCS70IyXip0DanoVkKP66kDzgRQt6/JNNXc OWL/HsYL399sNhBTz3rrxKABuNmkff9l05+vFlEveWBZ0qTKOrhgTZvo/bWxDelL e4UotNcYS05ZVkc0nfDVX6FHUNhCkTYA0404OaVCjsc0u5IFpAs8hBX2+H/t6n8U 1Btcpj3ok8sCXfzaYpraRoFHejTfmpO8Hr+OrIrxc5FWVTbYKwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFDDYK2WM2tovzPqvGTlQovuatpo6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xMzQ3 Y2RhZS01NGM3LTRmY2ItOTAxOS0wYmVlMTY5NzcxOTgvY2FkNWNhNjUtOTU2ZC0z MWJkLTg3YWMtODI5OWRhNGY1NmVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMTM0N2NkYWUtNTRjNy00ZmNiLTkw MTktMGJlZTE2OTc3MTk4LzEzNDdjZGFlLTU0YzctNGZjYi05MDE5LTBiZWUxNjk3 NzE5OC5jcmwwHwYDVR0jBBgwFoAUKck+QbaG+wvqUxdAy5HQsTSyNvAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xMzQ3Y2RhZS01NGM3LTRmY2ItOTAxOS0wYmVl MTY5NzcxOTguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgkowVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAfH/4xlC5Lt2v4UphhkMBvhc9gzGCyNoj5xVUzE9Jl5pKNbeVUJibTkIO p6YS5oHq5dCriNVDIg7f4OIeSw6MiKVIJoSoxOzvtYe4pVfFJ8YrYr4C4VamPMRn 9d+FAmYOEDeu0vmISmdPtmCkkOFqi1tnOd7RLpH5jV9C7DHdefj5fkPbbjsalK6y kb8mWMOGZz14NEU7H0SpIeV3gL37ioEg51H5VyikaJ9B9S11JumXpdVlgxDPx17J eNTquycmQTKULNGZeNA6tNxNE4x2weGC9owJdiWHq70MieP+08Ns9NmFplheTEdf nhyFRXMzKF/q5AjjC3LtKRnr1NAPiQ== -----END CERTIFICATE-----Generated at Wed Nov 5 11:42:07 2025 by rpki-client