$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/8a509389-0c08-38b5-a0f7-fc832fca5895.roa File: 8a509389-0c08-38b5-a0f7-fc832fca5895.roa (raw, json) Hash identifier: HMwv7iltOg8LQPm76+HcrOmfp0RV/oHAI879DQ4BBcU= Subject key identifier: E0:0A:BF:6E:DF:7B:7B:B5:42:0C:5F:AD:CA:E9:F0:BB:BE:2E:80:57 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584B047C165D60C34D28874FC480 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/8a509389-0c08-38b5-a0f7-fc832fca5895.roa Signing time: Fri 29 Aug 2025 13:00:41 +0000 ROA not before: Fri 29 Aug 2025 13:00:41 +0000 ROA not after: Thu 27 Nov 2025 14:00:41 +0000 asID: 64267 IP address blocks: 130.254.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 09 Sep 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:04:7c:16:5d:60:c3:4d:28:87:4f:c4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Aug 29 13:00:41 2025 GMT Not After : Nov 27 14:00:41 2025 GMT Subject: CN=f9358235-c097-4540-957d-14ead7aa5d84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:58:1f:17:a1:78:34:33:2d:c5:11:47:d3:cd: f9:46:0d:c4:d4:69:51:90:38:f0:76:ac:99:48:6e: 82:98:17:69:9c:93:b9:f5:b7:b6:0b:9a:9b:2f:2a: 22:9d:65:12:43:0a:6a:58:c9:f4:03:42:1f:07:46: 53:30:78:b3:57:54:c0:a2:2e:1b:b3:88:ea:59:4a: 9c:70:8d:2a:96:9c:42:fc:4e:89:70:a3:77:0e:50: 5b:e1:17:35:30:99:77:a4:c4:3c:4f:9c:c6:14:d0: 29:9c:62:b0:aa:4d:3f:55:9b:18:e4:42:e7:1f:14: 70:74:c4:95:06:a3:1f:a7:3b:5d:af:1d:0b:00:f1: 7c:09:91:1c:3b:df:01:66:a9:6e:a8:82:21:96:aa: 57:f4:bb:bb:f8:0a:3c:d5:17:b7:7e:43:ed:e4:c5: 8a:0f:71:9f:de:6e:eb:7d:be:14:e3:55:20:28:a1: ea:36:ef:9f:a7:e0:86:b5:03:5c:f9:68:9e:7f:b7: 43:f5:8e:29:4f:aa:2d:ae:69:9d:7b:4e:28:7f:61: d6:4e:81:52:0e:9a:8e:90:85:6b:b4:89:d5:c2:bc: e8:2f:4e:01:c4:eb:a8:d3:1c:08:25:d2:1a:31:68: 94:cb:8d:08:08:4f:bb:cd:f7:67:87:73:89:f8:59: bb:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:0A:BF:6E:DF:7B:7B:B5:42:0C:5F:AD:CA:E9:F0:BB:BE:2E:80:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/8a509389-0c08-38b5-a0f7-fc832fca5895.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 130.254.98.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:49:9f:df:7f:3b:b4:46:18:f8:9b:e3:6d:34:16:94:87:52: ff:c1:af:05:95:4c:eb:af:04:a9:4f:f9:86:5b:dd:bb:e7:04: 60:67:8c:94:a1:c7:ad:31:ff:41:72:9a:7a:40:3c:93:82:91: dc:e8:5a:0d:88:78:c3:48:76:e4:d3:f2:2f:58:0c:0b:f8:10: e3:6c:0c:bd:ca:29:0d:5c:9e:93:bc:d5:a6:d5:73:7a:8d:12: 83:e5:0d:f6:11:8c:f0:26:fd:50:4f:a7:04:7b:33:82:2f:c2: b0:56:2d:36:6c:62:3c:46:c0:d0:cc:a3:29:2d:5c:82:42:08: f8:f9:40:31:0e:07:6e:33:70:42:fe:b0:c3:fa:84:8a:0f:a9: 56:52:ab:9c:9f:4d:cf:0f:a5:09:8a:4e:a8:c7:19:52:be:1f: 6a:5b:e8:61:3e:a8:5e:26:80:15:7d:64:72:ea:4c:bb:14:e6: 9b:6b:eb:bb:14:4a:6b:3c:fa:fd:51:05:b7:dd:53:57:cf:62: 8e:a4:9c:70:b6:41:2d:ce:81:2c:00:1d:df:92:97:69:86:bd: a0:ea:ec:35:32:95:23:9e:a4:bd:38:92:49:45:59:fa:8a:4f: 85:15:5f:ae:bd:c9:a3:39:b1:d1:a2:a2:a3:ad:70:a4:28:80: 89:25:a0:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsEfBZdYMNNKIdPxIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MDgyOTEzMDA0MVoXDTI1MTEyNzE0MDA0MVowLzEtMCsGA1UEAxMk ZjkzNTgyMzUtYzA5Ny00NTQwLTk1N2QtMTRlYWQ3YWE1ZDg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVgfF6F4NDMtxRFH0835Rg3E1GlRkDjwdqyZ SG6CmBdpnJO59be2C5qbLyoinWUSQwpqWMn0A0IfB0ZTMHizV1TAoi4bs4jqWUqc cI0qlpxC/E6JcKN3DlBb4Rc1MJl3pMQ8T5zGFNApnGKwqk0/VZsY5ELnHxRwdMSV BqMfpztdrx0LAPF8CZEcO98BZqluqIIhlqpX9Lu7+Ao81Re3fkPt5MWKD3Gf3m7r fb4U41UgKKHqNu+fp+CGtQNc+Wief7dD9Y4pT6otrmmde04of2HWToFSDpqOkIVr tInVwrzoL04BxOuo0xwIJdIaMWiUy40ICE+7zfdnh3OJ+Fm7KwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOAKv27fe3u1Qgxfrcrp8Lu+LoBXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvOGE1MDkzODktMGMwOC0z OGI1LWEwZjctZmM4MzJmY2E1ODk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgv5iMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIZJn99/O7RGGPib4200FpSHUv/BrwWVTOuvBKlP+YZb3bvnBGBnjJSh x60x/0FymnpAPJOCkdzoWg2IeMNIduTT8i9YDAv4EONsDL3KKQ1cnpO81abVc3qN EoPlDfYRjPAm/VBPpwR7M4IvwrBWLTZsYjxGwNDMoyktXIJCCPj5QDEOB24zcEL+ sMP6hIoPqVZSq5yfTc8PpQmKTqjHGVK+H2pb6GE+qF4mgBV9ZHLqTLsU5ptr67sU Sms8+v1RBbfdU1fPYo6knHC2QS3OgSwAHd+Sl2mGvaDq7DUylSOepL04kklFWfqK T4UVX669yaM5sdGioqOtcKQogIkloCA= -----END CERTIFICATE-----Generated at Sun Sep 7 15:21:20 2025 by rpki-client