$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/78d92b50-1d3f-3251-8bd4-5b59b5901aa3.roa File: 78d92b50-1d3f-3251-8bd4-5b59b5901aa3.roa (raw, json) Hash identifier: hkW7WD9UPJ6fSECRX7JK8Rl2FIJcNjobmNBvU4a0/qI= Subject key identifier: A4:9C:5D:E3:33:E7:43:04:90:34:30:2D:19:A9:15:A7:34:FF:8E:F7 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584B047C1639943E8954FEE63040 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/78d92b50-1d3f-3251-8bd4-5b59b5901aa3.roa Signing time: Fri 29 Aug 2025 13:00:41 +0000 ROA not before: Fri 29 Aug 2025 13:00:41 +0000 ROA not after: Thu 27 Nov 2025 14:00:41 +0000 asID: 64267 IP address blocks: 130.254.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 09 Sep 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:04:7c:16:39:94:3e:89:54:fe:e6:30:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Aug 29 13:00:41 2025 GMT Not After : Nov 27 14:00:41 2025 GMT Subject: CN=4fcda547-7337-4955-a371-cb7c1b6a3618 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:12:d6:7c:27:c3:de:ae:63:c9:f5:c3:49:20: d5:48:6d:02:70:9c:7e:45:aa:9e:6b:02:c4:9c:97: 0f:6d:f2:02:2a:fa:bd:83:3b:f4:9f:5a:e6:f2:79: 5e:26:30:09:97:79:de:99:ea:09:8f:08:59:c9:4b: f2:3f:bc:44:96:56:cd:36:d8:34:1b:4e:e0:2f:fd: ab:68:e6:c2:7e:19:54:3a:85:1d:eb:70:81:57:2b: b3:10:64:80:30:f2:c6:99:06:53:04:56:9a:a5:70: 34:f5:a9:21:72:8a:40:e2:ee:4c:5b:5e:e9:bd:fe: 34:d4:29:78:24:7f:93:ed:59:08:4b:d0:76:6c:53: 8f:56:50:41:9e:b9:29:6d:74:ac:0c:09:7a:7f:7e: c1:6d:ef:5b:0f:5f:a2:9c:c0:82:19:d8:94:ad:a0: 83:1f:42:94:aa:e8:a5:b2:bd:b7:ff:1e:fd:a6:5e: 7c:d7:92:49:3d:97:92:9c:24:1e:53:41:3e:02:dd: 6c:f2:09:1b:fc:29:c8:1f:5d:c0:2c:c3:49:39:30: 1a:c6:9e:bd:f9:0e:bd:88:cf:29:da:81:93:06:d0: 96:9b:fc:26:e6:28:98:d4:e5:1a:81:81:31:cc:c7: 25:c1:f7:6b:91:bf:3a:4a:50:80:1d:9a:c6:9c:90: de:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:9C:5D:E3:33:E7:43:04:90:34:30:2D:19:A9:15:A7:34:FF:8E:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/78d92b50-1d3f-3251-8bd4-5b59b5901aa3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 130.254.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:5b:9c:a9:ee:50:b0:b0:8f:46:69:74:7e:5c:7c:a4:bf:8b: 9c:2a:95:f0:40:43:2b:1c:d6:9e:c6:8d:1e:96:38:2f:73:09: 20:76:e8:91:bb:9d:79:5b:82:bb:5c:1a:cc:3d:0a:c4:59:83: 77:29:f4:ee:16:c1:8f:12:90:45:8d:eb:93:cd:60:1c:a2:4b: d2:0a:aa:63:5f:b9:28:ba:03:9e:2e:9e:54:f8:b2:80:83:74: b2:b6:de:34:15:62:b8:44:0f:92:4b:1b:f3:d1:a8:9f:65:05: 83:67:b8:e6:10:c2:c2:0f:5b:93:65:26:af:c0:54:7a:5c:a6: 55:53:6e:3e:36:ba:56:ab:6d:3d:05:5d:47:96:df:08:be:02: 80:dd:a9:d2:a3:7c:6e:e2:7f:c6:90:98:5c:64:f8:df:db:77: f7:4a:94:78:5d:1d:a2:45:88:fe:a8:f7:02:07:5d:7b:e8:ae: a9:7f:70:c6:e0:b3:19:0a:db:99:87:a9:42:13:a1:5c:dd:f9: 43:4d:e9:e1:97:a7:6f:32:da:1a:be:be:27:2f:7f:4b:69:17: 04:11:ac:83:0c:80:f3:e5:7b:f1:4a:db:19:4e:76:c8:a6:97: 30:c3:25:38:57:fd:e9:26:45:93:19:49:22:e6:11:05:21:cb: 0a:45:9e:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsEfBY5lD6JVP7mMEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MDgyOTEzMDA0MVoXDTI1MTEyNzE0MDA0MVowLzEtMCsGA1UEAxMk NGZjZGE1NDctNzMzNy00OTU1LWEzNzEtY2I3YzFiNmEzNjE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxLWfCfD3q5jyfXDSSDVSG0CcJx+RaqeawLE nJcPbfICKvq9gzv0n1rm8nleJjAJl3nemeoJjwhZyUvyP7xEllbNNtg0G07gL/2r aObCfhlUOoUd63CBVyuzEGSAMPLGmQZTBFaapXA09akhcopA4u5MW17pvf401Cl4 JH+T7VkIS9B2bFOPVlBBnrkpbXSsDAl6f37Bbe9bD1+inMCCGdiUraCDH0KUquil sr23/x79pl5815JJPZeSnCQeU0E+At1s8gkb/CnIH13ALMNJOTAaxp69+Q69iM8p 2oGTBtCWm/wm5iiY1OUagYExzMclwfdrkb86SlCAHZrGnJDeiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKScXeMz50MEkDQwLRmpFac0/473MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvNzhkOTJiNTAtMWQzZi0z MjUxLThiZDQtNWI1OWI1OTAxYWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgv5tMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADdbnKnuULCwj0ZpdH5cfKS/i5wqlfBAQysc1p7GjR6WOC9zCSB26JG7 nXlbgrtcGsw9CsRZg3cp9O4WwY8SkEWN65PNYByiS9IKqmNfuSi6A54unlT4soCD dLK23jQVYrhED5JLG/PRqJ9lBYNnuOYQwsIPW5NlJq/AVHpcplVTbj42ularbT0F XUeW3wi+AoDdqdKjfG7if8aQmFxk+N/bd/dKlHhdHaJFiP6o9wIHXXvorql/cMbg sxkK25mHqUIToVzd+UNN6eGXp28y2hq+vicvf0tpFwQRrIMMgPPle/FK2xlOdsim lzDDJThX/ekmRZMZSSLmEQUhywpFnqw= -----END CERTIFICATE-----Generated at Sun Sep 7 12:38:19 2025 by rpki-client