$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afa71238-3202-40f6-8fdd-d9505c5a8635/dd3d50c1-47bf-3100-bea5-123ccdcb515f.roa File: dd3d50c1-47bf-3100-bea5-123ccdcb515f.roa (raw, json) Hash identifier: Im+At5r5lZZBg1nIkxnFvtQp//X/AeC5x/ihCeRE4VE= Subject key identifier: 09:90:EC:A6:45:FF:46:35:FD:72:D7:A0:E4:55:18:ED:AC:FB:8E:9C Certificate issuer: /CN=afa71238-3202-40f6-8fdd-d9505c5a8635 Certificate serial: 010D0C9F4328584B77133169253269972FBBB2F0 Authority key identifier: 5B:F6:61:9D:C4:CA:54:0A:21:F2:91:5D:E2:CE:9E:F8:1E:B8:79:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afa71238-3202-40f6-8fdd-d9505c5a8635.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afa71238-3202-40f6-8fdd-d9505c5a8635/dd3d50c1-47bf-3100-bea5-123ccdcb515f.roa Signing time: Thu 09 Oct 2025 14:07:34 +0000 ROA not before: Thu 09 Oct 2025 14:07:34 +0000 ROA not after: Wed 07 Jan 2026 15:07:34 +0000 asID: 401523 IP address blocks: 130.12.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afa71238-3202-40f6-8fdd-d9505c5a8635/afa71238-3202-40f6-8fdd-d9505c5a8635.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afa71238-3202-40f6-8fdd-d9505c5a8635/afa71238-3202-40f6-8fdd-d9505c5a8635.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afa71238-3202-40f6-8fdd-d9505c5a8635.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:77:13:31:69:25:32:69:97:2f:bb:b2:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afa71238-3202-40f6-8fdd-d9505c5a8635 Validity Not Before: Oct 9 14:07:34 2025 GMT Not After : Jan 7 15:07:34 2026 GMT Subject: CN=427946a9-dd43-43ed-8623-da8b6b2afb65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:be:ac:36:d9:d6:b7:b9:bb:10:92:69:97:1c: 97:0f:bb:fa:24:99:e4:da:50:f9:ee:bd:ca:dc:14: 78:00:75:d9:2e:d5:45:e2:5a:b3:b1:06:0c:78:b2: af:42:26:d9:07:b1:4a:ca:24:6b:d9:27:1a:89:b9: af:b1:a3:57:51:9c:c2:7f:bb:fa:90:88:02:fb:85: 7e:9b:3f:cb:02:26:3f:7f:65:5a:93:bd:ba:d8:ce: e5:ed:aa:f5:1f:82:36:fe:65:da:ea:6a:73:cb:9e: cc:e7:63:0c:ba:7d:2f:6c:f9:1b:91:da:8b:9f:09: e8:62:4b:9d:5b:b7:3e:3e:23:b7:04:72:e3:29:83: 3c:76:1e:7c:58:18:e7:d5:50:9e:82:50:a1:41:ee: d2:65:6b:48:94:be:3f:0d:5b:7e:95:33:65:bc:c6: c8:ec:b0:fd:ab:d0:81:56:dd:0e:fd:b8:4e:dc:18: 8c:43:09:cd:1b:fa:2c:90:6f:e5:6d:4c:bd:4e:15: a6:44:6a:fe:6e:5e:fa:34:d8:14:05:bf:d4:0e:ac: 08:be:80:f8:61:37:c1:ec:86:84:2b:cf:08:87:35: f3:ef:57:b2:4c:e7:82:42:b5:1e:ec:7e:4c:80:08: d0:51:32:57:81:a9:44:d8:47:2e:e1:58:fe:f2:16: 2e:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:90:EC:A6:45:FF:46:35:FD:72:D7:A0:E4:55:18:ED:AC:FB:8E:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afa71238-3202-40f6-8fdd-d9505c5a8635/dd3d50c1-47bf-3100-bea5-123ccdcb515f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afa71238-3202-40f6-8fdd-d9505c5a8635/afa71238-3202-40f6-8fdd-d9505c5a8635.crl X509v3 Authority Key Identifier: keyid:5B:F6:61:9D:C4:CA:54:0A:21:F2:91:5D:E2:CE:9E:F8:1E:B8:79:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afa71238-3202-40f6-8fdd-d9505c5a8635.cer sbgp-ipAddrBlock: critical IPv4: 130.12.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:82:66:87:38:e3:fb:23:aa:1b:d0:f3:7b:78:50:3b:78:09: 54:35:4b:fa:0d:6a:61:af:ff:2b:e7:88:a5:47:20:94:b0:ae: 87:a5:30:35:06:3a:b6:e5:86:8e:a6:6f:c9:da:f8:fb:52:e5: fd:b8:30:b5:be:98:82:ee:f4:b9:3d:0b:97:b8:29:94:41:63: 98:ef:d6:d8:95:42:1f:23:89:51:6b:06:9d:f3:4d:98:9a:b3: 0d:68:f0:30:4b:82:bd:a0:65:03:96:ff:51:83:ec:83:be:35: b4:96:9d:2d:10:f2:ab:cf:e8:c9:90:48:56:51:0a:95:c5:bd: b8:85:c4:73:a2:c5:6a:c6:f4:cc:9d:11:9d:b9:bf:b3:25:d8: 55:6a:e9:e8:da:26:c6:02:e2:e1:c8:f9:0b:b6:f0:2d:d0:fc: f6:5d:ba:db:c3:19:e5:e2:5b:dc:ea:a1:99:bf:35:fc:ab:29: 13:8c:38:aa:ff:51:e2:ad:07:76:3d:36:cb:5e:a4:9e:2d:18: 32:ca:12:e6:a3:60:71:d3:bc:7b:3f:3a:4a:8f:3c:9f:fd:01: 83:cd:f2:7f:be:c3:62:66:d5:3a:6c:b1:a7:f8:d7:0a:2b:99: 4c:ea:e3:48:8b:07:c7:50:d2:6f:29:62:4a:ce:90:ab:a9:35: 58:8b:b8:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt3EzFpJTJply+7svAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZhNzEyMzgtMzIwMi00MGY2LThmZGQtZDk1MDVjNWE4 NjM1MB4XDTI1MTAwOTE0MDczNFoXDTI2MDEwNzE1MDczNFowLzEtMCsGA1UEAxMk NDI3OTQ2YTktZGQ0My00M2VkLTg2MjMtZGE4YjZiMmFmYjY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnr6sNtnWt7m7EJJplxyXD7v6JJnk2lD57r3K 3BR4AHXZLtVF4lqzsQYMeLKvQibZB7FKyiRr2ScaibmvsaNXUZzCf7v6kIgC+4V+ mz/LAiY/f2Vak7262M7l7ar1H4I2/mXa6mpzy57M52MMun0vbPkbkdqLnwnoYkud W7c+PiO3BHLjKYM8dh58WBjn1VCeglChQe7SZWtIlL4/DVt+lTNlvMbI7LD9q9CB Vt0O/bhO3BiMQwnNG/oskG/lbUy9ThWmRGr+bl76NNgUBb/UDqwIvoD4YTfB7IaE K88IhzXz71eyTOeCQrUe7H5MgAjQUTJXgalE2Ecu4Vj+8hYuawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAmQ7KZF/0Y1/XLXoORVGO2s+46cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hZmE3 MTIzOC0zMjAyLTQwZjYtOGZkZC1kOTUwNWM1YTg2MzUvZGQzZDUwYzEtNDdiZi0z MTAwLWJlYTUtMTIzY2NkY2I1MTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWZhNzEyMzgtMzIwMi00MGY2LThm ZGQtZDk1MDVjNWE4NjM1L2FmYTcxMjM4LTMyMDItNDBmNi04ZmRkLWQ5NTA1YzVh ODYzNS5jcmwwHwYDVR0jBBgwFoAUW/ZhncTKVAoh8pFd4s6e+B64eY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hZmE3MTIzOC0zMjAyLTQwZjYtOGZkZC1kOTUw NWM1YTg2MzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAggwdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF2CZoc44/sjqhvQ83t4UDt4CVQ1S/oNamGv/yvniKVHIJSwroelMDUG Orblho6mb8na+PtS5f24MLW+mILu9Lk9C5e4KZRBY5jv1tiVQh8jiVFrBp3zTZia sw1o8DBLgr2gZQOW/1GD7IO+NbSWnS0Q8qvP6MmQSFZRCpXFvbiFxHOixWrG9Myd EZ25v7Ml2FVq6ejaJsYC4uHI+Qu28C3Q/PZdutvDGeXiW9zqoZm/NfyrKROMOKr/ UeKtB3Y9NstepJ4tGDLKEuajYHHTvHs/OkqPPJ/9AYPN8n++w2Jm1Tpssaf41wor mUzq40iLB8dQ0m8pYkrOkKupNViLuPE= -----END CERTIFICATE-----Generated at Fri Oct 10 17:47:34 2025 by rpki-client