$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8af9792c-adf8-459e-a0ad-6c60ded9e25d/9574e16d-1266-329d-a7e8-43f74e67f01d.roa File: 9574e16d-1266-329d-a7e8-43f74e67f01d.roa (raw, json) Hash identifier: Qnr45JkNAmb76fVL7xE7CtIYamDND9v+i7Nrkmk1l2o= Subject key identifier: D0:0C:13:64:A2:88:71:7D:1B:A9:93:28:C3:F1:0C:82:E1:5C:BE:B7 Certificate issuer: /CN=8af9792c-adf8-459e-a0ad-6c60ded9e25d Certificate serial: 010D0C9F4328584BAD8293EA4DA08EDE49D8E000 Authority key identifier: FA:99:54:4D:78:B2:74:D3:1B:7F:3B:EA:28:15:7A:BE:3B:C3:64:58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8af9792c-adf8-459e-a0ad-6c60ded9e25d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8af9792c-adf8-459e-a0ad-6c60ded9e25d/9574e16d-1266-329d-a7e8-43f74e67f01d.roa Signing time: Wed 29 Oct 2025 02:05:39 +0000 ROA not before: Wed 29 Oct 2025 02:05:39 +0000 ROA not after: Tue 27 Jan 2026 03:05:39 +0000 asID: 54740 IP address blocks: 130.12.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8af9792c-adf8-459e-a0ad-6c60ded9e25d/8af9792c-adf8-459e-a0ad-6c60ded9e25d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8af9792c-adf8-459e-a0ad-6c60ded9e25d/8af9792c-adf8-459e-a0ad-6c60ded9e25d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8af9792c-adf8-459e-a0ad-6c60ded9e25d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ad:82:93:ea:4d:a0:8e:de:49:d8:e0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8af9792c-adf8-459e-a0ad-6c60ded9e25d Validity Not Before: Oct 29 02:05:39 2025 GMT Not After : Jan 27 03:05:39 2026 GMT Subject: CN=58bbd795-70f4-4ca7-b1c9-6900f05bc13b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:7e:3d:a0:8f:9e:74:a6:34:4f:f2:4b:4a:de: ec:26:3a:8c:b8:e2:33:15:e8:c3:e8:7e:46:be:dc: ec:a5:76:45:2b:1c:ac:8a:64:22:c2:10:ff:3d:cc: 05:1a:72:0a:0e:55:5e:c6:68:eb:c0:05:91:1d:6e: d5:3c:92:78:75:e1:ea:10:87:1f:d2:9f:1a:e1:5b: dd:25:1f:76:e4:4d:a7:a9:af:d3:31:9a:1d:08:e5: ff:2e:24:5f:e5:76:88:53:5b:cb:82:40:8d:36:70: 59:f0:a6:ac:33:2b:b0:f9:c0:87:e5:bd:1c:c1:bf: c0:05:06:8f:d3:69:e4:a2:26:82:ce:23:46:56:f6: fb:70:38:be:55:66:de:ff:d7:1f:80:a5:5f:2c:ff: 2c:54:cf:c4:60:0d:21:fe:b4:1d:1a:0a:88:de:a9: 69:77:3a:51:f5:a3:e3:02:58:ed:d3:c1:49:fb:89: dd:1e:79:62:d4:98:a6:83:f9:ed:58:28:4d:ca:7d: eb:88:90:bc:7c:19:c1:46:96:e0:ec:72:b2:a5:1f: e8:22:36:90:15:6c:71:60:39:c1:9c:25:30:ce:87: ee:a9:ef:01:ec:c1:9d:d1:85:04:6b:ec:43:65:35: 73:47:c4:e5:be:4c:a2:8d:01:c0:20:11:2d:ea:82: b7:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:0C:13:64:A2:88:71:7D:1B:A9:93:28:C3:F1:0C:82:E1:5C:BE:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8af9792c-adf8-459e-a0ad-6c60ded9e25d/9574e16d-1266-329d-a7e8-43f74e67f01d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8af9792c-adf8-459e-a0ad-6c60ded9e25d/8af9792c-adf8-459e-a0ad-6c60ded9e25d.crl X509v3 Authority Key Identifier: keyid:FA:99:54:4D:78:B2:74:D3:1B:7F:3B:EA:28:15:7A:BE:3B:C3:64:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8af9792c-adf8-459e-a0ad-6c60ded9e25d.cer sbgp-ipAddrBlock: critical IPv4: 130.12.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:42:24:85:ba:1f:7b:72:22:6c:69:b5:71:68:45:29:a9:18: 43:c8:3f:30:3a:17:9e:90:f4:a0:db:78:a7:90:b1:02:d7:17: 02:3a:7c:9e:1d:f7:c9:22:27:c3:e6:73:ba:1a:6f:f7:06:aa: 1a:f0:f0:32:f7:1e:c8:30:f0:57:03:de:27:63:4e:3b:ce:7e: 4b:f6:a9:a7:96:0b:50:e8:20:02:65:c1:0d:d2:01:3c:0d:e8: 68:12:54:86:e3:ed:5e:01:ab:05:d0:b9:23:81:30:52:5f:7a: eb:76:b2:1e:f7:5d:fa:5e:9f:a0:8d:07:7e:12:ae:8e:30:39: 40:8c:09:b7:e2:90:64:a0:04:90:03:12:c2:ab:a3:1d:84:95: 61:e8:33:34:48:38:d1:65:20:ae:7b:35:da:ce:c6:b5:62:68: 03:0e:0a:26:33:0d:20:5c:7a:a1:73:72:03:1c:61:54:a1:53: b2:4b:27:55:ef:18:ff:8b:96:04:51:f4:b1:e4:50:05:05:97: 21:40:98:60:01:06:c6:7e:ec:29:8d:6a:6c:c7:56:19:bc:b8: 19:ce:39:35:f2:58:0a:56:bf:36:7e:85:0a:a7:a4:a0:22:9b: 4f:8b:95:c9:2d:1d:8a:5d:ba:ed:ef:86:b3:f1:16:66:f6:56: e6:1e:17:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEutgpPqTaCO3knY4AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGFmOTc5MmMtYWRmOC00NTllLWEwYWQtNmM2MGRlZDll MjVkMB4XDTI1MTAyOTAyMDUzOVoXDTI2MDEyNzAzMDUzOVowLzEtMCsGA1UEAxMk NThiYmQ3OTUtNzBmNC00Y2E3LWIxYzktNjkwMGYwNWJjMTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4X49oI+edKY0T/JLSt7sJjqMuOIzFejD6H5G vtzspXZFKxysimQiwhD/PcwFGnIKDlVexmjrwAWRHW7VPJJ4deHqEIcf0p8a4Vvd JR925E2nqa/TMZodCOX/LiRf5XaIU1vLgkCNNnBZ8KasMyuw+cCH5b0cwb/ABQaP 02nkoiaCziNGVvb7cDi+VWbe/9cfgKVfLP8sVM/EYA0h/rQdGgqI3qlpdzpR9aPj Aljt08FJ+4ndHnli1Jimg/ntWChNyn3riJC8fBnBRpbg7HKypR/oIjaQFWxxYDnB nCUwzofuqe8B7MGd0YUEa+xDZTVzR8TlvkyijQHAIBEt6oK3zwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNAME2SiiHF9G6mTKMPxDILhXL63MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84YWY5 NzkyYy1hZGY4LTQ1OWUtYTBhZC02YzYwZGVkOWUyNWQvOTU3NGUxNmQtMTI2Ni0z MjlkLWE3ZTgtNDNmNzRlNjdmMDFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOGFmOTc5MmMtYWRmOC00NTllLWEw YWQtNmM2MGRlZDllMjVkLzhhZjk3OTJjLWFkZjgtNDU5ZS1hMGFkLTZjNjBkZWQ5 ZTI1ZC5jcmwwHwYDVR0jBBgwFoAU+plUTXiydNMbfzvqKBV6vjvDZFgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84YWY5NzkyYy1hZGY4LTQ1OWUtYTBhZC02YzYw ZGVkOWUyNWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCggwUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFhCJIW6H3tyImxptXFoRSmpGEPIPzA6F56Q9KDbeKeQsQLXFwI6fJ4d 98kiJ8Pmc7oab/cGqhrw8DL3Hsgw8FcD3idjTjvOfkv2qaeWC1DoIAJlwQ3SATwN 6GgSVIbj7V4BqwXQuSOBMFJfeut2sh73Xfpen6CNB34Sro4wOUCMCbfikGSgBJAD EsKrox2ElWHoMzRIONFlIK57NdrOxrViaAMOCiYzDSBceqFzcgMcYVShU7JLJ1Xv GP+LlgRR9LHkUAUFlyFAmGABBsZ+7CmNamzHVhm8uBnOOTXyWApWvzZ+hQqnpKAi m0+LlcktHYpduu3vhrPxFmb2VuYeF58= -----END CERTIFICATE-----Generated at Tue Nov 4 16:53:37 2025 by rpki-client