$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/9898e808-7103-31c9-88a2-b12fa0a7339c.roa File: 9898e808-7103-31c9-88a2-b12fa0a7339c.roa (raw, json) Hash identifier: f6RQ28HP6LKz8FL5y/cXLvis0WrbZdxjqf/W5jQAY04= Subject key identifier: FF:04:25:38:4B:EB:4C:E1:64:EB:79:76:44:62:82:8B:04:A7:87:E8 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584FA1631DD64366E967ADA2CD00 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/9898e808-7103-31c9-88a2-b12fa0a7339c.roa Signing time: Mon 26 Oct 2026 13:00:14 +0000 ROA not before: Mon 26 Oct 2026 13:00:14 +0000 ROA not after: Sun 24 Jan 2027 14:00:14 +0000 asID: 397630 IP address blocks: 130.254.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 30 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a1:63:1d:d6:43:66:e9:67:ad:a2:cd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Oct 26 13:00:14 2026 GMT Not After : Jan 24 14:00:14 2027 GMT Subject: CN=dc6f07af-c2fa-43c7-9a7b-5c16124a882a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:d5:22:b6:b3:af:ec:fe:af:c7:75:d6:5e:0e: 38:a9:c5:80:5e:56:e4:ba:1a:b3:c3:67:c2:3b:66: c1:ce:ac:b9:c7:1b:3e:52:1a:a9:e7:0b:a5:17:bb: 07:a0:8d:bc:9f:26:3c:39:7c:f3:d7:83:e9:1b:67: e1:2a:ce:a3:71:59:16:8f:f4:5d:4c:37:42:0f:14: dc:73:c0:ad:a1:e5:03:40:87:da:91:b6:80:76:0f: 45:f1:4f:1b:28:70:f5:94:9f:6c:af:1c:4d:cf:2b: 54:a8:ea:bb:50:65:fc:6a:38:9d:ea:76:11:e6:be: e5:30:95:1d:ab:8f:3b:4b:1e:36:68:0e:40:e0:3d: 5b:b1:c9:75:b6:13:83:36:10:a3:7a:fe:7c:c7:fc: a6:fa:28:66:8c:c2:ac:d3:e0:68:0f:7c:12:42:60: 3f:f9:04:00:aa:b0:6f:70:21:c5:b9:35:da:09:c4: ba:2b:a1:cb:78:42:dd:51:6a:c9:45:65:8d:cd:2a: 9d:94:fe:a3:64:ed:3b:d1:4e:a4:e2:5c:7f:86:ab: be:19:86:41:1f:24:fa:e0:e1:17:08:bc:09:02:53: c9:1a:f9:26:93:99:4a:2d:84:6b:84:d8:ac:c7:c8: c2:c2:14:bb:be:55:72:ad:2f:74:8d:f6:db:ee:8d: 3a:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:04:25:38:4B:EB:4C:E1:64:EB:79:76:44:62:82:8B:04:A7:87:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/9898e808-7103-31c9-88a2-b12fa0a7339c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 130.254.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:dc:b7:46:bc:8b:d7:d6:75:35:16:fa:64:c6:cd:f9:05:9c: af:ce:bf:ab:56:bc:d2:56:09:cb:48:fa:50:94:64:6e:bd:c0: 7a:87:df:39:7b:77:db:38:b2:ce:8d:ec:14:77:55:9b:91:50: f4:fe:bf:cf:a4:1d:8d:a8:0b:97:0c:13:8a:c5:48:75:5c:aa: 26:59:92:2d:61:1a:81:e8:13:50:60:f2:73:16:95:99:f1:ea: fd:09:56:86:61:29:58:0d:a1:02:74:d2:60:46:6f:09:81:fb: c1:41:85:ce:89:39:e7:0f:42:fb:37:75:f3:ea:c3:c0:97:2a: bd:f4:b9:a8:27:b8:67:07:6d:28:20:73:34:9b:55:b5:88:87: 5e:8d:92:0e:a8:9b:56:12:aa:c1:b5:12:1d:44:63:ca:62:c5: e9:5e:09:f3:39:fe:28:12:bc:ce:09:89:ad:af:f2:cb:ac:4b: 03:32:25:05:9e:6c:81:2d:7f:65:76:df:5c:78:e0:d4:f2:e8: 43:04:ab:f8:39:8a:a8:83:85:bb:d4:9e:1d:06:79:b9:84:69: 9e:a7:8d:0e:8d:d4:e1:2d:5e:55:48:ac:dc:46:b5:02:41:ee: 57:40:51:40:fe:d9:1c:b0:61:27:b3:1f:46:22:18:9b:3f:6a: cf:c9:bf:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+hYx3WQ2bpZ62izQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI2MTAyNjEzMDAxNFoXDTI3MDEyNDE0MDAxNFowLzEtMCsGA1UEAxMk ZGM2ZjA3YWYtYzJmYS00M2M3LTlhN2ItNWMxNjEyNGE4ODJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjtUitrOv7P6vx3XWXg44qcWAXlbkuhqzw2fC O2bBzqy5xxs+Uhqp5wulF7sHoI28nyY8OXzz14PpG2fhKs6jcVkWj/RdTDdCDxTc c8CtoeUDQIfakbaAdg9F8U8bKHD1lJ9srxxNzytUqOq7UGX8ajid6nYR5r7lMJUd q487Sx42aA5A4D1bscl1thODNhCjev58x/ym+ihmjMKs0+BoD3wSQmA/+QQAqrBv cCHFuTXaCcS6K6HLeELdUWrJRWWNzSqdlP6jZO070U6k4lx/hqu+GYZBHyT64OEX CLwJAlPJGvkmk5lKLYRrhNisx8jCwhS7vlVyrS90jfbb7o06QQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP8EJThL60zhZOt5dkRigosEp4foMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvOTg5OGU4MDgtNzEwMy0z MWM5LTg4YTItYjEyZmEwYTczMzljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgv5tMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAELct0a8i9fWdTUW+mTGzfkFnK/Ov6tWvNJWCctI+lCUZG69wHqH3zl7 d9s4ss6N7BR3VZuRUPT+v8+kHY2oC5cME4rFSHVcqiZZki1hGoHoE1Bg8nMWlZnx 6v0JVoZhKVgNoQJ00mBGbwmB+8FBhc6JOecPQvs3dfPqw8CXKr30uagnuGcHbSgg czSbVbWIh16Nkg6om1YSqsG1Eh1EY8pixeleCfM5/igSvM4Jia2v8susSwMyJQWe bIEtf2V231x44NTy6EMEq/g5iqiDhbvUnh0GebmEaZ6njQ6N1OEtXlVIrNxGtQJB 7ldAUUD+2RywYSezH0YiGJs/as/Jv0A= -----END CERTIFICATE-----Generated at Tue Oct 27 17:37:07 2026 by rpki-client