$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/3969ce54-6a81-30a0-a86e-2f5d0d4778b1.roa File: 3969ce54-6a81-30a0-a86e-2f5d0d4778b1.roa (raw, json) Hash identifier: 3XlyXIrmkzV5oXjXovfbCaZOqo3YQGFw/YPp9ZWUIVE= Subject key identifier: 8B:E7:9E:14:FE:26:C0:CB:2B:C2:1C:C9:4B:67:E4:40:3E:2E:8C:3D Certificate issuer: /CN=820e56e8-763b-4037-929e-b01c8d786e75 Certificate serial: 010D0C9F4328584BAC1068AA9B41D646C911FE80 Authority key identifier: 3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/3969ce54-6a81-30a0-a86e-2f5d0d4778b1.roa Signing time: Tue 28 Oct 2025 13:39:48 +0000 ROA not before: Tue 28 Oct 2025 13:39:48 +0000 ROA not after: Mon 26 Jan 2026 14:39:48 +0000 asID: 399275 IP address blocks: 130.12.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ac:10:68:aa:9b:41:d6:46:c9:11:fe:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=820e56e8-763b-4037-929e-b01c8d786e75 Validity Not Before: Oct 28 13:39:48 2025 GMT Not After : Jan 26 14:39:48 2026 GMT Subject: CN=6de9e8b8-d0e3-4d11-b3b3-57e02cc8d20d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:c1:ba:18:f2:93:b0:21:d1:95:6b:e9:57:7f: fb:7b:cd:ef:d0:f9:d5:3f:9f:c0:a8:81:7c:c0:5e: 63:8b:47:7d:d6:a5:f2:cc:01:47:c3:60:23:60:ac: 79:af:02:21:eb:59:b3:7c:20:66:b3:52:5c:b0:45: ab:77:27:e7:4d:fb:ac:4e:a9:ed:7f:66:05:e9:d6: c3:5b:ad:b2:a0:85:80:78:31:71:e6:dc:f6:52:e1: 1f:c4:38:be:af:e8:9f:7d:77:a3:ff:8c:21:7d:64: 9b:3f:da:b1:fa:58:e1:d4:ae:b9:ee:09:26:50:ae: 5e:68:36:13:8f:46:f9:df:0f:d5:c9:16:36:4c:ec: ac:41:8b:cb:bc:b1:22:90:1d:20:b8:1c:e0:02:01: 45:90:9a:7a:40:b1:cb:a4:32:c5:4e:82:2f:bf:13: 6b:91:b9:b3:ae:dd:eb:f6:33:d2:a7:b8:ce:f3:97: 49:24:35:b8:c9:3b:fc:eb:3d:53:3b:9f:17:98:db: 05:8f:8c:80:4c:db:81:ae:f4:7b:8c:27:53:4e:7e: 7b:ec:fe:a7:3a:28:8c:d0:99:1b:e5:e6:a4:9d:5c: ec:9a:05:0e:88:a8:6b:52:3c:7f:b9:77:9b:aa:c8: 58:f3:73:f3:05:9d:ad:7c:94:58:04:a3:85:65:fe: 98:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:E7:9E:14:FE:26:C0:CB:2B:C2:1C:C9:4B:67:E4:40:3E:2E:8C:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/3969ce54-6a81-30a0-a86e-2f5d0d4778b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.crl X509v3 Authority Key Identifier: keyid:3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer sbgp-ipAddrBlock: critical IPv4: 130.12.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:22:87:69:b5:67:90:a3:c4:36:a7:d2:e2:d3:b1:69:d4:b0: 21:25:fb:8b:d3:af:8a:e8:74:5e:af:e1:e5:41:87:8d:83:93: b9:53:ea:e5:fc:76:56:af:5a:0d:ca:24:f6:85:91:ed:28:50: 9e:e3:2e:b7:d0:9d:f8:da:61:eb:4f:7c:06:52:92:46:11:50: 30:5a:ff:97:ec:4e:31:3d:bb:f6:b4:e9:4f:36:e2:de:1b:c9: 37:d6:fa:f5:4d:6e:5b:9d:fe:18:36:e7:e1:f5:fc:40:52:3c: 82:5f:ca:2a:da:e8:ef:6b:7f:93:d1:57:7e:2d:fe:70:2a:d7: ec:31:35:d0:cc:a9:7e:57:e1:86:93:53:0f:8b:6c:f1:1b:54: 34:ad:1f:94:b7:0b:5f:8b:c6:5b:7e:84:2c:e8:2a:40:fe:cd: 97:cb:28:a7:25:0f:a9:fa:98:61:dd:ee:04:80:14:29:be:4e: 84:95:a7:a4:da:1c:aa:39:a5:de:69:f7:05:14:4a:54:6d:7b: c3:f3:38:31:29:05:55:93:09:ef:91:b8:59:84:0f:ec:fc:38: d1:47:c9:69:b2:74:04:05:3b:c5:e1:7f:03:e8:b0:13:77:5d: c7:33:8c:5e:27:5a:99:bf:ca:28:68:45:96:67:96:fa:88:13: 33:67:de:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEusEGiqm0HWRskR/oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODIwZTU2ZTgtNzYzYi00MDM3LTkyOWUtYjAxYzhkNzg2 ZTc1MB4XDTI1MTAyODEzMzk0OFoXDTI2MDEyNjE0Mzk0OFowLzEtMCsGA1UEAxMk NmRlOWU4YjgtZDBlMy00ZDExLWIzYjMtNTdlMDJjYzhkMjBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1cG6GPKTsCHRlWvpV3/7e83v0PnVP5/AqIF8 wF5ji0d91qXyzAFHw2AjYKx5rwIh61mzfCBms1JcsEWrdyfnTfusTqntf2YF6dbD W62yoIWAeDFx5tz2UuEfxDi+r+iffXej/4whfWSbP9qx+ljh1K657gkmUK5eaDYT j0b53w/VyRY2TOysQYvLvLEikB0guBzgAgFFkJp6QLHLpDLFToIvvxNrkbmzrt3r 9jPSp7jO85dJJDW4yTv86z1TO58XmNsFj4yATNuBrvR7jCdTTn577P6nOiiM0Jkb 5eaknVzsmgUOiKhrUjx/uXebqshY83PzBZ2tfJRYBKOFZf6Y7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIvnnhT+JsDLK8IcyUtn5EA+Low9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84MjBl NTZlOC03NjNiLTQwMzctOTI5ZS1iMDFjOGQ3ODZlNzUvMzk2OWNlNTQtNmE4MS0z MGEwLWE4NmUtMmY1ZDBkNDc3OGIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODIwZTU2ZTgtNzYzYi00MDM3LTky OWUtYjAxYzhkNzg2ZTc1LzgyMGU1NmU4LTc2M2ItNDAzNy05MjllLWIwMWM4ZDc4 NmU3NS5jcmwwHwYDVR0jBBgwFoAUP3013qVs2g7sbxhuEQO8bIfW0y0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84MjBlNTZlOC03NjNiLTQwMzctOTI5ZS1iMDFj OGQ3ODZlNzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAggyrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABAih2m1Z5CjxDan0uLTsWnUsCEl+4vTr4rodF6v4eVBh42Dk7lT6uX8 dlavWg3KJPaFke0oUJ7jLrfQnfjaYetPfAZSkkYRUDBa/5fsTjE9u/a06U824t4b yTfW+vVNblud/hg25+H1/EBSPIJfyira6O9rf5PRV34t/nAq1+wxNdDMqX5X4YaT Uw+LbPEbVDStH5S3C1+Lxlt+hCzoKkD+zZfLKKclD6n6mGHd7gSAFCm+ToSVp6Ta HKo5pd5p9wUUSlRte8PzODEpBVWTCe+RuFmED+z8ONFHyWmydAQFO8XhfwPosBN3 XcczjF4nWpm/yihoRZZnlvqIEzNn3is= -----END CERTIFICATE-----Generated at Wed Nov 5 10:18:33 2025 by rpki-client