$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70bed85-1ab7-44a0-a0b7-401891be2082/acc2f20d-d9b5-323e-881e-c18c6ec77c4c.roa File: acc2f20d-d9b5-323e-881e-c18c6ec77c4c.roa (raw, json) Hash identifier: iLVg44A0et5qr8vwkPl0K1qNqkf3zgCMFK35kFQQDDQ= Subject key identifier: 76:54:75:5B:59:59:74:EF:36:AA:DC:8A:54:94:53:54:BA:D5:09:4E Certificate issuer: /CN=f70bed85-1ab7-44a0-a0b7-401891be2082 Certificate serial: 010D0C9F4328584B79D6E26390FC8EE49B370EC0 Authority key identifier: 3A:04:E6:83:03:36:15:97:E2:32:DB:32:D9:D3:81:96:05:4F:E7:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70bed85-1ab7-44a0-a0b7-401891be2082.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70bed85-1ab7-44a0-a0b7-401891be2082/acc2f20d-d9b5-323e-881e-c18c6ec77c4c.roa Signing time: Fri 10 Oct 2025 13:53:29 +0000 ROA not before: Fri 10 Oct 2025 13:53:29 +0000 ROA not after: Thu 08 Jan 2026 14:53:29 +0000 asID: 397041 IP address blocks: 130.12.164.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70bed85-1ab7-44a0-a0b7-401891be2082/f70bed85-1ab7-44a0-a0b7-401891be2082.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70bed85-1ab7-44a0-a0b7-401891be2082/f70bed85-1ab7-44a0-a0b7-401891be2082.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70bed85-1ab7-44a0-a0b7-401891be2082.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:d6:e2:63:90:fc:8e:e4:9b:37:0e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f70bed85-1ab7-44a0-a0b7-401891be2082 Validity Not Before: Oct 10 13:53:29 2025 GMT Not After : Jan 8 14:53:29 2026 GMT Subject: CN=2451b7cf-84a0-4b23-b155-ab54aad56dbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:74:77:59:95:a3:a4:e4:da:7e:80:65:b6:d5: 0f:d7:95:c3:d3:36:d6:49:46:39:da:65:95:96:65: f4:d2:e4:ae:c8:3d:66:9c:3e:be:89:96:19:9b:c4: 7c:b4:89:d3:8f:66:43:17:89:60:03:d6:76:3b:0b: 0f:76:4d:39:33:30:ca:06:04:50:b4:bf:b7:54:f4: 51:63:9e:a0:38:e7:3f:ea:7a:06:c4:6e:a3:12:cb: 02:e5:19:67:cc:3b:84:bf:8c:98:e4:8f:de:71:7e: bd:c7:20:37:97:32:87:9a:c6:21:a1:c3:aa:86:e1: 98:27:f3:fc:66:1c:2b:33:11:93:a4:ff:27:e5:f0: 16:e9:b4:74:96:b8:7d:f7:9a:94:96:6e:fb:84:7d: a6:3b:1f:25:ad:45:86:bb:a9:a7:ff:9a:01:2a:e8: fb:bc:8e:30:76:d9:d5:dd:f8:ea:b2:2e:0d:6f:cc: 75:c1:51:88:97:f3:f9:cd:ce:26:6f:ab:b6:91:3b: 99:47:35:c1:b7:ac:af:13:f0:9b:db:3b:76:d9:bc: af:8a:26:f5:79:bf:26:83:8d:b4:06:b1:a3:aa:32: c2:13:c7:6b:a2:b3:2b:f9:78:30:10:5d:82:d2:e6: 2c:37:1d:b9:19:71:b5:6b:ea:c8:77:5e:5c:78:09: 81:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:54:75:5B:59:59:74:EF:36:AA:DC:8A:54:94:53:54:BA:D5:09:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70bed85-1ab7-44a0-a0b7-401891be2082/acc2f20d-d9b5-323e-881e-c18c6ec77c4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70bed85-1ab7-44a0-a0b7-401891be2082/f70bed85-1ab7-44a0-a0b7-401891be2082.crl X509v3 Authority Key Identifier: keyid:3A:04:E6:83:03:36:15:97:E2:32:DB:32:D9:D3:81:96:05:4F:E7:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70bed85-1ab7-44a0-a0b7-401891be2082.cer sbgp-ipAddrBlock: critical IPv4: 130.12.164.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:56:c4:7d:5d:22:77:0b:7a:35:21:2f:2c:c7:79:77:37:73: b6:9e:d0:c9:5e:4b:c6:9a:aa:ce:b0:9b:93:a7:cf:24:28:d0: 81:7f:48:61:8f:02:11:05:dc:a9:53:99:5a:c4:52:9e:6f:c9: ac:e4:cc:8a:0f:87:05:ed:fd:dc:86:81:7d:0d:64:82:3f:ee: e0:45:4a:bc:60:64:bc:19:f1:74:78:c0:75:5c:71:89:ab:51: d4:ec:f4:d2:dc:12:e5:f6:da:12:2c:b4:d0:b9:2c:7e:81:9e: ea:3a:5c:cf:2f:7b:20:01:ea:60:d2:78:bb:fd:05:f2:d7:ef: 83:c0:88:b9:db:f9:e3:c2:56:60:96:35:d3:6d:e6:e9:cb:78: 29:77:79:b8:91:7d:ae:d7:16:f3:d4:be:ea:b2:2a:f0:15:e5: 59:fa:15:d6:ed:4a:21:24:37:69:4e:e2:fd:41:25:0a:c7:fa: 79:20:f4:89:98:43:8e:f8:7d:fd:ab:3b:d0:80:a6:54:86:40: 1f:fd:23:c0:47:92:6c:3d:ad:e2:d4:37:05:01:d7:a8:2a:b6: 21:de:c3:8c:e3:78:3a:d6:25:12:33:6d:8a:45:89:10:4a:b1: 28:98:f7:bd:e3:d8:4d:cc:de:ea:c9:c0:62:46:dc:d7:81:1e: f8:af:6e:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt51uJjkPyO5Js3DsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjcwYmVkODUtMWFiNy00NGEwLWEwYjctNDAxODkxYmUy MDgyMB4XDTI1MTAxMDEzNTMyOVoXDTI2MDEwODE0NTMyOVowLzEtMCsGA1UEAxMk MjQ1MWI3Y2YtODRhMC00YjIzLWIxNTUtYWI1NGFhZDU2ZGJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3R3WZWjpOTafoBlttUP15XD0zbWSUY52mWV lmX00uSuyD1mnD6+iZYZm8R8tInTj2ZDF4lgA9Z2OwsPdk05MzDKBgRQtL+3VPRR Y56gOOc/6noGxG6jEssC5RlnzDuEv4yY5I/ecX69xyA3lzKHmsYhocOqhuGYJ/P8 ZhwrMxGTpP8n5fAW6bR0lrh995qUlm77hH2mOx8lrUWGu6mn/5oBKuj7vI4wdtnV 3fjqsi4Nb8x1wVGIl/P5zc4mb6u2kTuZRzXBt6yvE/Cb2zt22byviib1eb8mg420 BrGjqjLCE8drorMr+XgwEF2C0uYsNx25GXG1a+rId15ceAmB+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHZUdVtZWXTvNqrcilSUU1S61QlOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mNzBi ZWQ4NS0xYWI3LTQ0YTAtYTBiNy00MDE4OTFiZTIwODIvYWNjMmYyMGQtZDliNS0z MjNlLTg4MWUtYzE4YzZlYzc3YzRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZjcwYmVkODUtMWFiNy00NGEwLWEw YjctNDAxODkxYmUyMDgyL2Y3MGJlZDg1LTFhYjctNDRhMC1hMGI3LTQwMTg5MWJl MjA4Mi5jcmwwHwYDVR0jBBgwFoAUOgTmgwM2FZfiMtsy2dOBlgVP53QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9mNzBiZWQ4NS0xYWI3LTQ0YTAtYTBiNy00MDE4 OTFiZTIwODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCggykMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAApWxH1dIncLejUhLyzHeXc3c7ae0MleS8aaqs6wm5OnzyQo0IF/SGGP AhEF3KlTmVrEUp5vyazkzIoPhwXt/dyGgX0NZII/7uBFSrxgZLwZ8XR4wHVccYmr UdTs9NLcEuX22hIstNC5LH6Bnuo6XM8veyAB6mDSeLv9BfLX74PAiLnb+ePCVmCW NdNt5unLeCl3ebiRfa7XFvPUvuqyKvAV5Vn6FdbtSiEkN2lO4v1BJQrH+nkg9ImY Q474ff2rO9CAplSGQB/9I8BHkmw9reLUNwUB16gqtiHew4zjeDrWJRIzbYpFiRBK sSiY973j2E3M3urJwGJG3NeBHvivbtM= -----END CERTIFICATE-----Generated at Sat Oct 11 05:27:59 2025 by rpki-client