$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4/16879c3a-efc4-389c-b69b-d8417a7de201.roa File: 16879c3a-efc4-389c-b69b-d8417a7de201.roa (raw, json) Hash identifier: mBgLk2yHYVlzluG+NKqeqLMaqa6gEziimK3+k8P3LDA= Subject key identifier: B9:1A:37:4B:F3:0C:79:A9:E6:7D:E3:A3:1B:EC:58:61:B2:F7:1F:BD Certificate issuer: /CN=1cfb66bc-dcfd-4c7e-bd00-38e923719ab4 Certificate serial: 010D0C9F4328584BB45D114EEB03D0B7A719BF40 Authority key identifier: 3A:40:F3:76:43:CD:0A:7A:FA:BD:DA:79:7D:F1:84:CA:E8:00:4D:8C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4/16879c3a-efc4-389c-b69b-d8417a7de201.roa Signing time: Fri 31 Oct 2025 13:00:39 +0000 ROA not before: Fri 31 Oct 2025 13:00:39 +0000 ROA not after: Thu 29 Jan 2026 14:00:39 +0000 asID: 397105 IP address blocks: 130.44.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:5d:11:4e:eb:03:d0:b7:a7:19:bf:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cfb66bc-dcfd-4c7e-bd00-38e923719ab4 Validity Not Before: Oct 31 13:00:39 2025 GMT Not After : Jan 29 14:00:39 2026 GMT Subject: CN=5a5275c3-36d6-44b3-bf35-078ee93ffd18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:02:34:8f:85:e0:f0:03:22:97:12:a8:8e:60: 43:1f:10:78:c3:0e:fe:fe:00:58:75:08:56:16:7f: b6:69:d1:ed:ed:35:d1:1a:1a:b7:5f:75:c9:f0:af: ca:cd:fd:f7:8a:e8:4d:6e:c5:70:06:c8:45:19:1f: fc:bd:fe:61:5d:79:fb:ca:ee:c8:52:c3:15:e4:b0: c8:45:04:45:d5:9c:5a:8d:6a:af:41:5e:a8:da:16: 29:8e:91:3c:4e:68:19:77:0a:cc:69:f1:d9:4c:db: 1a:14:3f:1e:e6:37:db:de:ad:49:55:71:d9:b1:12: 0e:82:97:f7:1b:d3:d2:26:8e:55:68:d3:f4:9e:c1: 00:f2:fa:12:3d:a9:69:09:3c:e9:c7:6c:79:bc:97: 7c:7c:88:74:88:4d:6d:62:fc:a5:aa:20:5f:fa:ba: 0c:b5:64:71:04:52:25:8a:c1:bf:31:ef:4c:a9:11: 54:9a:f8:12:ad:91:9e:2f:98:ab:89:e7:95:e4:b9: 1b:0c:64:c3:85:6e:fc:0a:ad:ea:7d:9a:fc:19:57: a7:d7:17:cb:45:ac:f6:b2:ee:08:71:1e:71:5b:d4: 6c:d4:68:6b:47:c0:0a:70:19:51:e0:5c:a6:f0:fc: 9f:eb:a2:f2:6f:ad:a0:70:e7:4d:68:9e:43:29:00: ba:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:1A:37:4B:F3:0C:79:A9:E6:7D:E3:A3:1B:EC:58:61:B2:F7:1F:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4/16879c3a-efc4-389c-b69b-d8417a7de201.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4.crl X509v3 Authority Key Identifier: keyid:3A:40:F3:76:43:CD:0A:7A:FA:BD:DA:79:7D:F1:84:CA:E8:00:4D:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4.cer sbgp-ipAddrBlock: critical IPv4: 130.44.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:8e:6f:22:ad:83:ca:61:2d:d8:79:4b:1b:d4:21:dc:ad:78: 28:b3:b5:3d:96:37:0e:b7:ed:0f:c2:db:8e:e8:33:8b:49:a5: 34:ae:4f:9d:8a:8f:12:d8:db:10:42:87:a4:41:b6:95:03:b2: bf:85:69:ff:ba:60:89:18:b1:5a:1b:b9:50:52:0c:60:74:2d: 16:6f:f3:43:5a:bd:c7:f7:72:00:cf:05:73:e3:37:27:a9:3f: 51:bc:66:ad:df:3c:27:16:cf:be:f2:2a:3d:c3:1c:36:0d:de: 63:81:6d:bc:08:6a:b2:68:cd:06:19:97:72:57:0c:73:b6:a5: 0d:24:1a:1e:30:f3:ab:23:00:1d:07:11:fd:33:32:2f:27:45: 3b:13:68:61:21:e9:b0:ff:7c:19:f0:54:52:f8:10:eb:47:bd: 57:8a:20:5c:af:5c:5e:a7:84:96:f7:4b:11:38:ef:7e:f1:9b: 19:0d:83:8e:db:73:5e:8c:0e:71:e1:cf:9b:09:ef:c0:9a:01: cd:52:11:5e:3d:53:9d:85:65:43:e2:23:82:9e:b0:16:66:0e: fb:bc:ee:1f:6e:17:09:f9:71:f2:5f:dc:00:ff:29:9f:52:47: 5d:f4:0f:bc:19:a6:0e:7b:ce:5c:04:57:80:04:85:3e:16:67: c2:00:e8:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu0XRFO6wPQt6cZv0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWNmYjY2YmMtZGNmZC00YzdlLWJkMDAtMzhlOTIzNzE5 YWI0MB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk NWE1Mjc1YzMtMzZkNi00NGIzLWJmMzUtMDc4ZWU5M2ZmZDE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwI0j4Xg8AMilxKojmBDHxB4ww7+/gBYdQhW Fn+2adHt7TXRGhq3X3XJ8K/Kzf33iuhNbsVwBshFGR/8vf5hXXn7yu7IUsMV5LDI RQRF1ZxajWqvQV6o2hYpjpE8TmgZdwrMafHZTNsaFD8e5jfb3q1JVXHZsRIOgpf3 G9PSJo5VaNP0nsEA8voSPalpCTzpx2x5vJd8fIh0iE1tYvylqiBf+roMtWRxBFIl isG/Me9MqRFUmvgSrZGeL5irieeV5LkbDGTDhW78Cq3qfZr8GVen1xfLRaz2su4I cR5xW9Rs1GhrR8AKcBlR4Fym8Pyf66Lyb62gcOdNaJ5DKQC6uQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLkaN0vzDHmp5n3joxvsWGGy9x+9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xY2Zi NjZiYy1kY2ZkLTRjN2UtYmQwMC0zOGU5MjM3MTlhYjQvMTY4NzljM2EtZWZjNC0z ODljLWI2OWItZDg0MTdhN2RlMjAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWNmYjY2YmMtZGNmZC00YzdlLWJk MDAtMzhlOTIzNzE5YWI0LzFjZmI2NmJjLWRjZmQtNGM3ZS1iZDAwLTM4ZTkyMzcx OWFiNC5jcmwwHwYDVR0jBBgwFoAUOkDzdkPNCnr6vdp5ffGEyugATYwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xY2ZiNjZiYy1kY2ZkLTRjN2UtYmQwMC0zOGU5 MjM3MTlhYjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgiwYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFuObyKtg8phLdh5SxvUIdyteCiztT2WNw637Q/C247oM4tJpTSuT52K jxLY2xBCh6RBtpUDsr+Faf+6YIkYsVobuVBSDGB0LRZv80Navcf3cgDPBXPjNyep P1G8Zq3fPCcWz77yKj3DHDYN3mOBbbwIarJozQYZl3JXDHO2pQ0kGh4w86sjAB0H Ef0zMi8nRTsTaGEh6bD/fBnwVFL4EOtHvVeKIFyvXF6nhJb3SxE4737xmxkNg47b c16MDnHhz5sJ78CaAc1SEV49U52FZUPiI4KesBZmDvu87h9uFwn5cfJf3AD/KZ9S R130D7wZpg57zlwEV4AEhT4WZ8IA6HY= -----END CERTIFICATE-----Generated at Wed Nov 5 14:40:58 2025 by rpki-client