$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4/2289cf57-959f-3a84-8712-d7d38208f851.roa File: 2289cf57-959f-3a84-8712-d7d38208f851.roa (raw, json) Hash identifier: 0H9uwOyMbFS4Q/LXpEmFP7ETUfrgEsZecdcargX7AS8= Subject key identifier: 74:26:DD:BE:C9:A3:6D:EA:0E:2A:5F:82:6D:A0:E5:4A:51:FD:F8:37 Certificate issuer: /CN=1cfb66bc-dcfd-4c7e-bd00-38e923719ab4 Certificate serial: 010D0C9F4328584BB45D159FB80971CBA4BD5C40 Authority key identifier: 3A:40:F3:76:43:CD:0A:7A:FA:BD:DA:79:7D:F1:84:CA:E8:00:4D:8C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4/2289cf57-959f-3a84-8712-d7d38208f851.roa Signing time: Fri 31 Oct 2025 13:00:39 +0000 ROA not before: Fri 31 Oct 2025 13:00:39 +0000 ROA not after: Thu 29 Jan 2026 14:00:39 +0000 asID: 31775 IP address blocks: 130.44.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:5d:15:9f:b8:09:71:cb:a4:bd:5c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cfb66bc-dcfd-4c7e-bd00-38e923719ab4 Validity Not Before: Oct 31 13:00:39 2025 GMT Not After : Jan 29 14:00:39 2026 GMT Subject: CN=d16cfd36-924a-469a-b9bd-5e1484966252 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:fb:64:6e:a4:61:64:4b:e6:21:6d:da:2f:1e: 8f:d9:43:96:26:a7:0e:2b:ec:0b:0f:43:a7:e1:19: 2d:00:c0:47:bf:45:6d:95:c6:3c:34:d4:c1:f9:6c: 59:2b:8d:ae:38:fb:58:7a:77:29:5f:fc:d1:f0:c3: c3:79:03:f6:68:4a:23:ca:d7:17:70:19:e3:a1:14: ad:95:d7:4b:49:f7:eb:03:65:b4:f1:87:1f:a7:49: 8c:38:3d:9d:01:1b:bc:90:e7:c8:cc:5e:ff:1d:9f: 50:48:2a:1e:c3:42:c9:53:83:c1:d8:f3:44:a5:90: 80:b2:7f:81:67:3d:45:be:22:16:62:bd:8e:40:cc: ae:2d:f7:57:0a:ac:a5:42:9e:20:20:41:79:57:e5: 7a:22:c6:6e:24:10:55:6d:e2:11:5a:61:0d:aa:65: a5:68:95:94:98:f6:4f:65:55:63:e1:b3:07:f9:56: cf:1f:36:0a:ae:6d:d5:1b:8d:53:73:81:27:5c:96: ac:d4:5e:3c:a7:e0:1c:24:c8:4e:d1:01:38:b6:c8: 93:2b:27:1c:de:a6:50:60:31:c8:dc:25:69:24:f5: 80:e5:2d:3b:c3:b0:5e:21:c5:5f:32:0e:ba:11:05: 9d:8e:bc:ae:dd:99:07:34:f2:9f:f2:c9:24:fd:d8: 84:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:26:DD:BE:C9:A3:6D:EA:0E:2A:5F:82:6D:A0:E5:4A:51:FD:F8:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4/2289cf57-959f-3a84-8712-d7d38208f851.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4.crl X509v3 Authority Key Identifier: keyid:3A:40:F3:76:43:CD:0A:7A:FA:BD:DA:79:7D:F1:84:CA:E8:00:4D:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4.cer sbgp-ipAddrBlock: critical IPv4: 130.44.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:75:27:20:86:da:05:f0:eb:8c:22:8f:d4:10:90:99:eb:53: dd:3b:13:f8:0d:0d:37:ad:a0:bb:75:06:da:6e:49:0d:d1:93: 3e:0a:5d:b3:17:1a:34:cc:b5:b8:cf:81:2f:18:f4:45:dc:69: c9:19:40:7b:d0:24:22:51:74:cc:d4:6f:eb:30:5e:6c:36:ee: c5:25:48:90:01:b2:1c:a5:c2:3f:fa:16:33:40:e0:04:ec:65: bf:74:6c:02:ae:e0:6f:52:60:8a:03:f2:4e:1e:3b:50:0e:30: 7c:cd:10:69:40:34:57:24:da:a1:1d:ef:c2:90:d5:1e:64:b4: a8:c0:2f:f5:c1:f3:a9:dd:51:e8:71:18:a5:dd:d9:9b:6d:ef: fa:0b:14:8b:d3:af:12:93:98:8b:b1:07:2a:3b:bb:43:58:ee: c2:e1:e2:05:d3:c2:04:1b:72:a4:75:ec:b5:a4:10:1c:d5:af: 37:56:b3:d3:71:d0:f1:82:7c:2b:0e:f6:ea:44:e2:11:62:cc: 38:61:3b:d7:99:05:0f:ab:14:8f:a7:29:ed:1b:ad:44:b9:e1: 35:e0:0a:a5:5f:94:e4:92:5b:f2:b5:91:bf:53:3a:fa:7e:51: 45:99:36:98:20:f1:7e:bd:49:9f:1a:f1:c6:0e:d6:b6:21:c4: 2f:4f:02:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu0XRWfuAlxy6S9XEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWNmYjY2YmMtZGNmZC00YzdlLWJkMDAtMzhlOTIzNzE5 YWI0MB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk ZDE2Y2ZkMzYtOTI0YS00NjlhLWI5YmQtNWUxNDg0OTY2MjUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPtkbqRhZEvmIW3aLx6P2UOWJqcOK+wLD0On 4RktAMBHv0VtlcY8NNTB+WxZK42uOPtYencpX/zR8MPDeQP2aEojytcXcBnjoRSt lddLSffrA2W08Ycfp0mMOD2dARu8kOfIzF7/HZ9QSCoew0LJU4PB2PNEpZCAsn+B Zz1FviIWYr2OQMyuLfdXCqylQp4gIEF5V+V6IsZuJBBVbeIRWmENqmWlaJWUmPZP ZVVj4bMH+VbPHzYKrm3VG41Tc4EnXJas1F48p+AcJMhO0QE4tsiTKycc3qZQYDHI 3CVpJPWA5S07w7BeIcVfMg66EQWdjryu3ZkHNPKf8skk/diECQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHQm3b7Jo23qDipfgm2g5UpR/fg3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xY2Zi NjZiYy1kY2ZkLTRjN2UtYmQwMC0zOGU5MjM3MTlhYjQvMjI4OWNmNTctOTU5Zi0z YTg0LTg3MTItZDdkMzgyMDhmODUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWNmYjY2YmMtZGNmZC00YzdlLWJk MDAtMzhlOTIzNzE5YWI0LzFjZmI2NmJjLWRjZmQtNGM3ZS1iZDAwLTM4ZTkyMzcx OWFiNC5jcmwwHwYDVR0jBBgwFoAUOkDzdkPNCnr6vdp5ffGEyugATYwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xY2ZiNjZiYy1kY2ZkLTRjN2UtYmQwMC0zOGU5 MjM3MTlhYjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgiwYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALF1JyCG2gXw64wij9QQkJnrU907E/gNDTetoLt1BtpuSQ3Rkz4KXbMX GjTMtbjPgS8Y9EXcackZQHvQJCJRdMzUb+swXmw27sUlSJABshylwj/6FjNA4ATs Zb90bAKu4G9SYIoD8k4eO1AOMHzNEGlANFck2qEd78KQ1R5ktKjAL/XB86ndUehx GKXd2Ztt7/oLFIvTrxKTmIuxByo7u0NY7sLh4gXTwgQbcqR17LWkEBzVrzdWs9Nx 0PGCfCsO9upE4hFizDhhO9eZBQ+rFI+nKe0brUS54TXgCqVflOSSW/K1kb9TOvp+ UUWZNpgg8X69SZ8a8cYO1rYhxC9PAiU= -----END CERTIFICATE-----Generated at Wed Nov 5 14:23:52 2025 by rpki-client