$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/3399417b-2d47-3e33-a2b1-9c08cb91a6f3.roa File: 3399417b-2d47-3e33-a2b1-9c08cb91a6f3.roa (raw, json) Hash identifier: tv6qUEY7da6qAoZrV/2XzJQL/xpAT4ihYF8JMqubYMs= Subject key identifier: 43:FD:62:DE:4E:16:18:9F:83:8A:33:89:52:42:AA:81:92:3D:78:55 Certificate issuer: /CN=d45613e1-c70f-4ce1-996e-e01d89469087 Certificate serial: 010D0C9F4328584A9E6DEDF8F055299DC06E8CA4 Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/3399417b-2d47-3e33-a2b1-9c08cb91a6f3.roa Signing time: Wed 23 Jul 2025 23:39:59 +0000 ROA not before: Wed 23 Jul 2025 23:39:59 +0000 ROA not after: Tue 21 Oct 2025 23:39:59 +0000 asID: 49981 IP address blocks: 130.254.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9e:6d:ed:f8:f0:55:29:9d:c0:6e:8c:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087 Validity Not Before: Jul 23 23:39:59 2025 GMT Not After : Oct 21 23:39:59 2025 GMT Subject: CN=09cacd9e-6dc4-4840-9a1a-444f33326d63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:7b:0f:67:30:0e:08:c9:b0:b7:40:39:2c:e3: f7:c7:13:25:a6:f2:04:61:51:36:f6:64:c6:ba:1e: ea:74:71:83:be:6f:d7:6e:b1:65:0d:55:86:1b:39: 40:bb:a0:22:33:f6:36:64:c8:2e:be:73:b2:d3:bf: a8:96:68:37:cc:67:2e:b5:87:52:b4:b6:2a:56:ed: 28:ce:f5:3d:8b:68:41:75:18:9f:52:0d:58:31:ea: 91:11:b3:9a:c1:94:09:06:fe:f5:9a:95:e5:3c:96: b2:3d:b6:b0:fe:7b:b1:8d:0f:bb:d7:e8:6c:4c:c2: 71:97:5c:14:41:9c:04:17:e1:9c:84:3a:e8:54:77: 1b:c9:5b:2e:ba:c2:f0:a7:c9:b9:a1:1f:dc:07:5d: ac:eb:40:7f:c1:24:95:d8:27:5d:d3:a8:c2:80:f2: 3d:b1:07:66:fb:6b:c6:6c:34:1a:16:04:3d:dc:c9: 55:20:46:3f:9a:f9:7e:78:82:37:27:9c:32:43:45: 42:d4:ee:53:56:54:bc:6d:2d:6d:3a:ac:c7:f2:28: ec:19:d7:b3:eb:2b:58:ca:f2:3a:86:2e:8f:10:c5: 4a:18:52:7f:21:02:ae:4f:c1:5d:8b:0e:20:9b:54: 08:80:e5:42:29:82:bf:ee:b4:9a:65:01:43:6b:81: b1:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:FD:62:DE:4E:16:18:9F:83:8A:33:89:52:42:AA:81:92:3D:78:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/3399417b-2d47-3e33-a2b1-9c08cb91a6f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl X509v3 Authority Key Identifier: keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer sbgp-ipAddrBlock: critical IPv4: 130.254.44.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:74:95:a9:b3:07:ca:e7:f2:e8:8f:5d:26:8f:c6:cb:88:34: 4c:40:e7:21:5e:8c:03:34:60:3a:c9:dc:8b:fe:1e:be:1d:ba: 72:15:ff:a4:4b:2d:37:3a:0b:83:65:76:7e:0b:0f:c0:07:d8: 2c:6e:9a:81:8b:df:3e:88:f6:60:a5:94:d1:ab:af:46:c4:93: ee:41:6c:a6:05:fc:0d:94:9d:4f:19:cc:a4:7e:24:3d:cf:c7: cd:9c:88:8a:fd:fa:46:60:37:0c:b8:17:cc:77:b8:d3:6d:5c: fe:01:fd:3a:26:74:5d:65:0a:17:b1:95:38:cf:6d:5e:bc:93: a9:94:2e:b2:56:63:47:8a:63:2d:21:4e:c8:84:f5:79:bf:f9: e7:0d:03:8b:ca:2b:d2:84:62:db:bd:f0:1b:4a:6b:1d:10:09: 51:7d:d2:d1:8d:5c:1b:ff:75:33:97:06:e8:da:1c:58:0d:23: d0:f4:b0:a4:0c:df:d5:89:19:e8:71:e0:c2:e2:45:3d:16:b9: 08:7d:84:ae:2c:9b:1d:b9:3f:0f:bf:18:67:2a:83:2b:ec:37: 19:43:d1:e0:1c:53:c9:0e:9f:c9:3a:ff:7d:a2:83:ed:b8:1f: fc:95:79:31:f9:e5:8f:f5:56:4b:39:9b:ff:b3:1c:a5:d2:bd: 23:84:84:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqebe348FUpncBujKQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ1NjEzZTEtYzcwZi00Y2UxLTk5NmUtZTAxZDg5NDY5 MDg3MB4XDTI1MDcyMzIzMzk1OVoXDTI1MTAyMTIzMzk1OVowLzEtMCsGA1UEAxMk MDljYWNkOWUtNmRjNC00ODQwLTlhMWEtNDQ0ZjMzMzI2ZDYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnsPZzAOCMmwt0A5LOP3xxMlpvIEYVE29mTG uh7qdHGDvm/XbrFlDVWGGzlAu6AiM/Y2ZMguvnOy07+olmg3zGcutYdStLYqVu0o zvU9i2hBdRifUg1YMeqREbOawZQJBv71mpXlPJayPbaw/nuxjQ+71+hsTMJxl1wU QZwEF+GchDroVHcbyVsuusLwp8m5oR/cB12s60B/wSSV2Cdd06jCgPI9sQdm+2vG bDQaFgQ93MlVIEY/mvl+eII3J5wyQ0VC1O5TVlS8bS1tOqzH8ijsGdez6ytYyvI6 hi6PEMVKGFJ/IQKuT8Fdiw4gm1QIgOVCKYK/7rSaZQFDa4Gx9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEP9Yt5OFhifg4oziVJCqoGSPXhVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2 MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFkODk0NjkwODcvMzM5OTQxN2ItMmQ0Ny0z ZTMzLWEyYjEtOWMwOGNiOTFhNmYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ1NjEzZTEtYzcwZi00Y2UxLTk5 NmUtZTAxZDg5NDY5MDg3L2Q0NTYxM2UxLWM3MGYtNGNlMS05OTZlLWUwMWQ4OTQ2 OTA4Ny5jcmwwHwYDVR0jBBgwFoAUNBHhKorpHx6VjIOA/IkQ/r/mucMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFk ODk0NjkwODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgv4sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGN0lamzB8rn8uiPXSaPxsuINExA5yFejAM0YDrJ3Iv+Hr4dunIV/6RL LTc6C4Nldn4LD8AH2CxumoGL3z6I9mCllNGrr0bEk+5BbKYF/A2UnU8ZzKR+JD3P x82ciIr9+kZgNwy4F8x3uNNtXP4B/TomdF1lChexlTjPbV68k6mULrJWY0eKYy0h TsiE9Xm/+ecNA4vKK9KEYtu98BtKax0QCVF90tGNXBv/dTOXBujaHFgNI9D0sKQM 39WJGehx4MLiRT0WuQh9hK4smx25Pw+/GGcqgyvsNxlD0eAcU8kOn8k6/32ig+24 H/yVeTH55Y/1Vks5m/+zHKXSvSOEhOI= -----END CERTIFICATE-----Generated at Mon Aug 4 11:15:06 2025 by rpki-client