$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0a1846ed-ef84-4eab-bfbb-1e94b6302ca0/10be62e9-28d1-3850-82c7-7ec81651d656.roa File: 10be62e9-28d1-3850-82c7-7ec81651d656.roa (raw, json) Hash identifier: cmJnV0wz5FFA5oRhTSrnTbVrxX1XJFDXycg3htVoMv8= Subject key identifier: 9F:ED:85:31:A9:46:55:FA:A5:41:B8:CF:6A:ED:4A:5C:96:1C:AF:91 Certificate issuer: /CN=0a1846ed-ef84-4eab-bfbb-1e94b6302ca0 Certificate serial: 010D0C9F4328584BB88D0B105E78760B17F7D000 Authority key identifier: 58:B7:67:25:AC:4E:39:47:F8:54:4F:6C:2F:20:C1:06:68:66:21:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0a1846ed-ef84-4eab-bfbb-1e94b6302ca0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0a1846ed-ef84-4eab-bfbb-1e94b6302ca0/10be62e9-28d1-3850-82c7-7ec81651d656.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 400133 IP address blocks: 130.250.170.0/24 maxlen: 24 130.250.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0a1846ed-ef84-4eab-bfbb-1e94b6302ca0/0a1846ed-ef84-4eab-bfbb-1e94b6302ca0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0a1846ed-ef84-4eab-bfbb-1e94b6302ca0/0a1846ed-ef84-4eab-bfbb-1e94b6302ca0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0a1846ed-ef84-4eab-bfbb-1e94b6302ca0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:0b:10:5e:78:76:0b:17:f7:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a1846ed-ef84-4eab-bfbb-1e94b6302ca0 Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=604ab59d-aa7b-4b66-9ec1-f5ab77d7b617 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:07:1f:6c:cc:0d:81:dd:aa:21:eb:eb:b8:96: df:bf:3c:6a:20:b1:be:ba:23:5d:83:2d:28:a6:99: 85:a7:85:f0:35:fd:c8:96:76:fc:cf:e9:2c:f8:96: e9:34:60:0f:78:b6:48:01:74:a3:f1:88:73:ed:49: 19:dc:b6:fb:a4:a9:d4:41:fb:a9:c9:cb:44:75:eb: 18:36:27:dd:31:a0:93:50:e3:43:cc:66:9b:60:98: 73:b7:f8:86:c7:5d:1f:bd:43:60:48:ba:4f:e2:67: f8:32:69:4a:74:67:84:d8:b8:16:93:70:40:c6:af: 78:75:13:5a:4c:00:9a:04:e4:e2:74:55:1c:47:e4: b6:7d:bb:6d:51:36:f8:02:9f:ff:b6:9a:ee:c9:7d: a6:f8:ad:92:e9:79:93:01:19:c2:83:41:c9:10:e0: 18:60:c3:33:7f:03:9f:cb:c5:c8:06:41:79:3d:3f: 6a:86:60:1d:da:8a:1d:49:c7:b7:6c:46:7f:1c:2a: 2b:da:78:aa:f3:0b:ad:23:f4:da:d1:09:67:18:c8: c8:f2:f1:84:92:06:1e:2e:b3:21:7c:96:b2:09:44: 48:0b:45:fa:02:fc:39:e7:59:5a:23:e4:d5:e0:53: b3:09:3e:ec:d1:a1:3b:e0:34:f9:b4:1b:6e:68:ea: 2c:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:ED:85:31:A9:46:55:FA:A5:41:B8:CF:6A:ED:4A:5C:96:1C:AF:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0a1846ed-ef84-4eab-bfbb-1e94b6302ca0/10be62e9-28d1-3850-82c7-7ec81651d656.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0a1846ed-ef84-4eab-bfbb-1e94b6302ca0/0a1846ed-ef84-4eab-bfbb-1e94b6302ca0.crl X509v3 Authority Key Identifier: keyid:58:B7:67:25:AC:4E:39:47:F8:54:4F:6C:2F:20:C1:06:68:66:21:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0a1846ed-ef84-4eab-bfbb-1e94b6302ca0.cer sbgp-ipAddrBlock: critical IPv4: 130.250.170.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:6b:77:45:96:07:1e:d9:dd:10:1d:fa:7a:7d:b1:b8:fe:cc: 68:06:45:00:e6:05:c5:0f:f6:7c:a3:93:8b:a9:42:38:e7:a6: 70:cd:3a:ae:78:99:a3:17:02:a6:19:c0:68:f3:a8:b6:ef:59: 04:84:ad:2d:52:02:9d:6a:d1:ee:9a:f0:94:d5:fe:37:ac:df: a6:4e:34:17:25:a4:58:30:e0:61:40:52:33:58:d3:5b:ba:8b: c1:3f:f6:fa:be:8b:e9:50:7f:d8:a7:ed:cb:a1:61:7a:2c:6a: 57:e7:2e:cd:71:b8:82:05:7e:76:bd:99:f7:24:1d:92:86:a2: bb:10:fa:95:1a:a7:e1:83:13:ed:be:17:ad:f4:93:29:d1:20: be:f0:26:b0:18:2c:eb:2c:a6:c8:ff:8a:00:9c:5c:b6:bf:9e: 01:62:30:dc:2f:ba:88:27:5a:a1:31:85:ca:e9:c6:e4:d9:c4: 08:94:90:88:8e:0d:78:f5:31:87:a2:d0:3a:0a:2e:b5:10:45: c1:7c:22:e9:8d:45:cb:33:75:7a:0c:7c:2b:57:2d:27:c4:9c: 33:44:26:d0:9e:ef:60:84:d0:3d:63:d5:1c:ca:e7:f1:49:05: 86:67:32:97:7c:32:1f:74:52:4e:95:ec:f8:0b:48:d4:ec:fb: e1:1f:90:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu4jQsQXnh2Cxf30AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGExODQ2ZWQtZWY4NC00ZWFiLWJmYmItMWU5NGI2MzAy Y2EwMB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk NjA0YWI1OWQtYWE3Yi00YjY2LTllYzEtZjVhYjc3ZDdiNjE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQcfbMwNgd2qIevruJbfvzxqILG+uiNdgy0o ppmFp4XwNf3Ilnb8z+ks+JbpNGAPeLZIAXSj8Yhz7UkZ3Lb7pKnUQfupyctEdesY NifdMaCTUONDzGabYJhzt/iGx10fvUNgSLpP4mf4MmlKdGeE2LgWk3BAxq94dRNa TACaBOTidFUcR+S2fbttUTb4Ap//tpruyX2m+K2S6XmTARnCg0HJEOAYYMMzfwOf y8XIBkF5PT9qhmAd2oodSce3bEZ/HCor2niq8wutI/Ta0QlnGMjI8vGEkgYeLrMh fJayCURIC0X6Avw551laI+TV4FOzCT7s0aE74DT5tBtuaOosTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ/thTGpRlX6pUG4z2rtSlyWHK+RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wYTE4 NDZlZC1lZjg0LTRlYWItYmZiYi0xZTk0YjYzMDJjYTAvMTBiZTYyZTktMjhkMS0z ODUwLTgyYzctN2VjODE2NTFkNjU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMGExODQ2ZWQtZWY4NC00ZWFiLWJm YmItMWU5NGI2MzAyY2EwLzBhMTg0NmVkLWVmODQtNGVhYi1iZmJiLTFlOTRiNjMw MmNhMC5jcmwwHwYDVR0jBBgwFoAUWLdnJaxOOUf4VE9sLyDBBmhmIYYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wYTE4NDZlZC1lZjg0LTRlYWItYmZiYi0xZTk0 YjYzMDJjYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgvqqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABRrd0WWBx7Z3RAd+np9sbj+zGgGRQDmBcUP9nyjk4upQjjnpnDNOq54 maMXAqYZwGjzqLbvWQSErS1SAp1q0e6a8JTV/jes36ZONBclpFgw4GFAUjNY01u6 i8E/9vq+i+lQf9in7cuhYXosalfnLs1xuIIFfna9mfckHZKGorsQ+pUap+GDE+2+ F630kynRIL7wJrAYLOsspsj/igCcXLa/ngFiMNwvuognWqExhcrpxuTZxAiUkIiO DXj1MYei0DoKLrUQRcF8IumNRcszdXoMfCtXLSfEnDNEJtCe72CE0D1j1RzK5/FJ BYZnMpd8Mh90Uk6V7PgLSNTs++EfkGA= -----END CERTIFICATE-----Generated at Wed Nov 5 00:07:22 2025 by rpki-client