$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f4df3738-fdb2-48c0-a548-b9ecc7f28709/ea52c2c2-3f4a-39d3-8891-20d3e08757b9.roa File: ea52c2c2-3f4a-39d3-8891-20d3e08757b9.roa (raw, json) Hash identifier: Q9qVigG7XCTG34qthi4KQW5XZQm/ECJCeNNJvK6H92k= Subject key identifier: 15:DD:63:C3:DD:4E:1D:49:D5:E6:EC:A4:81:17:34:28:E6:3F:38:A1 Certificate issuer: /CN=f4df3738-fdb2-48c0-a548-b9ecc7f28709 Certificate serial: 010D0C9F4328584B74D7F75B104C2640441755E8 Authority key identifier: 10:9C:A2:4E:05:E8:4D:9F:B8:DF:06:E6:69:45:DD:DC:2D:EB:F5:FF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f4df3738-fdb2-48c0-a548-b9ecc7f28709.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f4df3738-fdb2-48c0-a548-b9ecc7f28709/ea52c2c2-3f4a-39d3-8891-20d3e08757b9.roa Signing time: Wed 08 Oct 2025 18:56:37 +0000 ROA not before: Wed 08 Oct 2025 18:56:37 +0000 ROA not after: Tue 06 Jan 2026 19:56:37 +0000 asID: 212177 IP address blocks: 130.12.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f4df3738-fdb2-48c0-a548-b9ecc7f28709/f4df3738-fdb2-48c0-a548-b9ecc7f28709.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f4df3738-fdb2-48c0-a548-b9ecc7f28709/f4df3738-fdb2-48c0-a548-b9ecc7f28709.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f4df3738-fdb2-48c0-a548-b9ecc7f28709.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:74:d7:f7:5b:10:4c:26:40:44:17:55:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4df3738-fdb2-48c0-a548-b9ecc7f28709 Validity Not Before: Oct 8 18:56:37 2025 GMT Not After : Jan 6 19:56:37 2026 GMT Subject: CN=94e902a9-d8e2-411a-90b5-8532977ec8ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a5:b9:fa:27:68:8d:10:9f:39:0f:c1:c0:83: 4a:8e:02:09:3b:ed:9a:4a:0f:fc:c5:72:8b:4a:7d: 07:b8:e1:e6:92:41:3a:0c:3f:10:e4:e0:02:43:5b: d4:70:f4:8d:3b:8a:87:a0:7a:69:f9:25:b2:0b:f5: c8:9d:30:b0:b7:c7:46:88:89:78:ce:16:9d:47:7f: 16:7a:01:31:59:0c:55:73:7c:87:db:2c:64:2d:e1: f2:d6:26:6a:d8:55:92:42:bd:bd:92:c3:72:13:9a: 5f:20:dd:24:a3:52:da:10:da:b0:4e:fc:fb:77:0c: 38:10:6b:1c:63:8d:93:38:2f:32:eb:db:67:28:e7: 91:7b:20:86:b6:e6:c2:53:51:d5:4a:11:40:d2:28: 8c:92:bf:df:7c:14:32:53:f8:3a:8c:63:1f:e8:0c: 2a:9a:b4:eb:33:08:d1:a3:4b:70:fa:8c:49:fe:57: 3a:4c:ef:20:83:66:77:c3:9b:f8:20:ad:64:a0:a0: 02:12:35:1b:de:89:46:3c:ce:61:26:88:3a:d9:0e: fd:5f:7f:b6:39:89:ae:ef:c1:23:7a:53:12:3b:78: a8:0a:14:1e:d0:47:77:42:76:c8:c1:61:1f:68:0e: 17:7c:99:68:2c:dd:f1:ca:24:ce:eb:92:d4:67:b7: e6:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:DD:63:C3:DD:4E:1D:49:D5:E6:EC:A4:81:17:34:28:E6:3F:38:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f4df3738-fdb2-48c0-a548-b9ecc7f28709/ea52c2c2-3f4a-39d3-8891-20d3e08757b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f4df3738-fdb2-48c0-a548-b9ecc7f28709/f4df3738-fdb2-48c0-a548-b9ecc7f28709.crl X509v3 Authority Key Identifier: keyid:10:9C:A2:4E:05:E8:4D:9F:B8:DF:06:E6:69:45:DD:DC:2D:EB:F5:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f4df3738-fdb2-48c0-a548-b9ecc7f28709.cer sbgp-ipAddrBlock: critical IPv4: 130.12.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:c1:4b:b7:60:7d:f7:d3:0f:6b:87:aa:a6:4e:8b:04:89:30: 9e:ba:8f:7a:b3:3e:0f:2e:5c:a2:51:81:28:ab:65:66:3e:67: ea:fd:6a:fa:04:76:02:3b:29:f9:09:4b:64:ae:dc:ef:83:ed: 98:f1:c8:5c:7b:13:d5:34:ed:21:50:9b:e4:c3:11:a0:1f:30: 40:7b:89:d2:fd:fb:4c:e7:4d:47:19:2e:b0:c6:7b:da:de:c9: 6a:d9:c9:2b:86:1b:85:58:09:59:a4:f3:61:32:04:7a:88:c6: 7f:9e:26:b4:2a:cb:08:05:f9:19:64:30:3e:8d:6d:d6:a7:1b: 0c:77:25:a3:2b:4d:85:7a:c6:5f:01:eb:b7:8c:8f:87:f5:97: 6c:e8:b0:53:78:37:65:1b:7e:94:d1:a3:b2:6c:36:e6:08:76: bb:51:b0:15:0a:1f:9b:16:0f:f6:ac:d4:53:cd:c7:54:52:5e: 31:aa:97:ee:7b:39:e0:3e:7c:ee:e4:61:41:91:1c:34:44:ee: 93:e5:39:7c:7c:46:6c:0b:e5:ce:47:55:5a:fd:07:39:73:4e: b1:0f:c1:4b:cd:8b:eb:ac:95:01:23:a7:96:b4:af:af:56:2a: 35:2e:08:c0:8c:91:70:90:35:31:9a:56:57:63:3c:ee:68:ff: df:52:66:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt01/dbEEwmQEQXVegwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjRkZjM3MzgtZmRiMi00OGMwLWE1NDgtYjllY2M3ZjI4 NzA5MB4XDTI1MTAwODE4NTYzN1oXDTI2MDEwNjE5NTYzN1owLzEtMCsGA1UEAxMk OTRlOTAyYTktZDhlMi00MTFhLTkwYjUtODUzMjk3N2VjOGVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKW5+idojRCfOQ/BwINKjgIJO+2aSg/8xXKL Sn0HuOHmkkE6DD8Q5OACQ1vUcPSNO4qHoHpp+SWyC/XInTCwt8dGiIl4zhadR38W egExWQxVc3yH2yxkLeHy1iZq2FWSQr29ksNyE5pfIN0ko1LaENqwTvz7dww4EGsc Y42TOC8y69tnKOeReyCGtubCU1HVShFA0iiMkr/ffBQyU/g6jGMf6AwqmrTrMwjR o0tw+oxJ/lc6TO8gg2Z3w5v4IK1koKACEjUb3olGPM5hJog62Q79X3+2OYmu78Ej elMSO3ioChQe0Ed3QnbIwWEfaA4XfJloLN3xyiTO65LUZ7fmWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBXdY8PdTh1J1ebspIEXNCjmPzihMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mNGRm MzczOC1mZGIyLTQ4YzAtYTU0OC1iOWVjYzdmMjg3MDkvZWE1MmMyYzItM2Y0YS0z OWQzLTg4OTEtMjBkM2UwODc1N2I5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjRkZjM3MzgtZmRiMi00OGMwLWE1 NDgtYjllY2M3ZjI4NzA5L2Y0ZGYzNzM4LWZkYjItNDhjMC1hNTQ4LWI5ZWNjN2Yy ODcwOS5jcmwwHwYDVR0jBBgwFoAUEJyiTgXoTZ+43wbmaUXd3C3r9f8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mNGRmMzczOC1mZGIyLTQ4YzAtYTU0OC1iOWVj YzdmMjg3MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAggxtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFrBS7dgfffTD2uHqqZOiwSJMJ66j3qzPg8uXKJRgSirZWY+Z+r9avoE dgI7KfkJS2Su3O+D7ZjxyFx7E9U07SFQm+TDEaAfMEB7idL9+0znTUcZLrDGe9re yWrZySuGG4VYCVmk82EyBHqIxn+eJrQqywgF+RlkMD6NbdanGwx3JaMrTYV6xl8B 67eMj4f1l2zosFN4N2UbfpTRo7JsNuYIdrtRsBUKH5sWD/as1FPNx1RSXjGql+57 OeA+fO7kYUGRHDRE7pPlOXx8RmwL5c5HVVr9BzlzTrEPwUvNi+uslQEjp5a0r69W KjUuCMCMkXCQNTGaVldjPO5o/99SZpc= -----END CERTIFICATE-----Generated at Fri Oct 10 03:46:37 2025 by rpki-client