$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/341487ac-a3e5-383d-bb5e-c10826c39192.roa File: 341487ac-a3e5-383d-bb5e-c10826c39192.roa (raw, json) Hash identifier: Iu8XRtpaAl//AObQVujvD/08gTvsJDmcv2eeE1iwfuo= Subject key identifier: 87:4C:FE:ED:84:71:9C:63:B9:76:05:71:10:28:F8:06:A6:89:3B:BC Certificate issuer: /CN=3a86f711-5e97-4a68-9b21-940a312b854a Certificate serial: 010D0C9F4328584B48E211C5768A1BA6F6E56680 Authority key identifier: D3:F6:F7:C7:D5:CB:2F:40:EA:DE:48:27:9A:35:C5:AA:11:11:F8:55 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/341487ac-a3e5-383d-bb5e-c10826c39192.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 401343 IP address blocks: 204.130.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/3a86f711-5e97-4a68-9b21-940a312b854a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/3a86f711-5e97-4a68-9b21-940a312b854a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e2:11:c5:76:8a:1b:a6:f6:e5:66:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a86f711-5e97-4a68-9b21-940a312b854a Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=57b0b8cf-3067-4cd3-98b5-6258e92742fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:ef:44:00:55:6f:56:79:5a:1b:6e:f5:cb:c8: fc:80:89:3b:50:0f:42:e2:18:79:e1:c2:35:77:e2: 47:04:fe:da:a9:6c:bf:51:ec:23:8f:71:05:de:21: bf:b0:10:5b:62:c2:66:db:9b:94:64:93:24:2e:b8: ab:92:cf:32:6e:b7:63:97:fc:1d:65:44:d2:fc:6f: a9:19:e5:f2:19:bc:22:7a:17:d9:f3:8f:5b:bc:08: 89:ed:9d:20:12:fa:4b:50:b0:37:9e:3f:67:db:59: 12:e4:a1:63:24:5d:cf:db:02:17:2d:de:b8:8a:bc: 91:34:b6:02:a4:14:ba:76:c8:8b:2d:f9:e5:65:17: 3d:4e:9d:54:ca:81:f3:c8:f6:e3:13:58:9f:85:fa: f0:91:59:42:ad:95:28:d5:d6:87:de:2a:9e:96:11: 42:cc:17:a3:4b:17:65:49:ac:7f:65:71:8f:8c:ca: 63:90:c6:ec:f2:e5:0d:a6:3f:f7:74:0b:24:55:63: 54:64:30:4b:3f:c0:7b:28:00:56:5c:50:10:2b:1d: 70:82:27:9f:d8:c0:4e:57:ac:72:db:a7:62:ce:e3: 91:0e:dc:f6:c5:94:96:fb:9a:5f:2f:2c:51:ff:69: 7a:63:55:2d:06:c6:00:e0:0e:67:a4:9f:d2:b8:80: bb:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:4C:FE:ED:84:71:9C:63:B9:76:05:71:10:28:F8:06:A6:89:3B:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/341487ac-a3e5-383d-bb5e-c10826c39192.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/3a86f711-5e97-4a68-9b21-940a312b854a.crl X509v3 Authority Key Identifier: keyid:D3:F6:F7:C7:D5:CB:2F:40:EA:DE:48:27:9A:35:C5:AA:11:11:F8:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a.cer sbgp-ipAddrBlock: critical IPv4: 204.130.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c3:4a:ec:1b:9a:1a:26:c3:58:15:2b:d0:7f:b5:f8:d4:f7:f8: 6b:74:98:7d:73:67:b3:9c:e5:4f:33:70:28:08:90:d7:1b:ea: 6c:eb:8e:f3:ff:d8:5f:eb:6f:57:8c:a4:0f:df:63:da:53:ec: e7:84:22:a8:f3:67:ef:27:9f:4b:d2:a4:98:09:6e:23:58:05: 5d:fc:b6:72:f1:0c:ac:5d:95:c4:21:40:e8:f8:3d:fb:0f:0d: 5b:4b:0b:1b:ec:79:bb:3a:27:5a:61:d3:11:95:96:55:8e:4e: c9:a2:26:3c:5d:4a:ed:e3:3c:f1:f8:2f:cf:5c:39:ca:9f:96: 91:29:c7:9c:ba:fa:c2:c4:dd:76:70:59:b5:af:95:9d:06:ac: 81:7f:c2:dd:a9:19:60:5b:0f:f5:3c:a4:48:91:ea:66:7a:ea: d6:7d:e1:b1:40:50:cc:4c:5f:91:88:16:7c:b8:b4:f2:07:0d: a4:ba:60:58:a3:c6:b1:a9:b0:c8:bf:3e:94:81:e0:a5:45:cd: 1d:57:55:00:f4:5f:40:8a:83:c0:82:95:dd:c6:cb:9c:bd:0a: d0:6f:ac:e5:8b:e8:4b:11:4b:85:f4:66:3a:2a:81:41:bc:94: 51:c1:f5:a8:06:f8:23:e1:4a:7d:83:95:f8:66:c0:ff:5c:61: 1d:79:2e:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4hHFdoobpvblZoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2E4NmY3MTEtNWU5Ny00YTY4LTliMjEtOTQwYTMxMmI4 NTRhMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk NTdiMGI4Y2YtMzA2Ny00Y2QzLTk4YjUtNjI1OGU5Mjc0MmZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+9EAFVvVnlaG271y8j8gIk7UA9C4hh54cI1 d+JHBP7aqWy/Uewjj3EF3iG/sBBbYsJm25uUZJMkLrirks8ybrdjl/wdZUTS/G+p GeXyGbwiehfZ849bvAiJ7Z0gEvpLULA3nj9n21kS5KFjJF3P2wIXLd64iryRNLYC pBS6dsiLLfnlZRc9Tp1UyoHzyPbjE1ifhfrwkVlCrZUo1daH3iqelhFCzBejSxdl Sax/ZXGPjMpjkMbs8uUNpj/3dAskVWNUZDBLP8B7KABWXFAQKx1wgief2MBOV6xy 26dizuORDtz2xZSW+5pfLyxR/2l6Y1UtBsYA4A5npJ/SuIC7JQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIdM/u2EcZxjuXYFcRAo+AamiTu8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zYTg2 ZjcxMS01ZTk3LTRhNjgtOWIyMS05NDBhMzEyYjg1NGEvMzQxNDg3YWMtYTNlNS0z ODNkLWJiNWUtYzEwODI2YzM5MTkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2E4NmY3MTEtNWU5Ny00YTY4LTli MjEtOTQwYTMxMmI4NTRhLzNhODZmNzExLTVlOTctNGE2OC05YjIxLTk0MGEzMTJi ODU0YS5jcmwwHwYDVR0jBBgwFoAU0/b3x9XLL0Dq3kgnmjXFqhER+FUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zYTg2ZjcxMS01ZTk3LTRhNjgtOWIyMS05NDBh MzEyYjg1NGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzILIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMNK7BuaGibDWBUr0H+1+NT3+Gt0mH1zZ7Oc5U8zcCgIkNcb6mzrjvP/ 2F/rb1eMpA/fY9pT7OeEIqjzZ+8nn0vSpJgJbiNYBV38tnLxDKxdlcQhQOj4PfsP DVtLCxvsebs6J1ph0xGVllWOTsmiJjxdSu3jPPH4L89cOcqflpEpx5y6+sLE3XZw WbWvlZ0GrIF/wt2pGWBbD/U8pEiR6mZ66tZ94bFAUMxMX5GIFny4tPIHDaS6YFij xrGpsMi/PpSB4KVFzR1XVQD0X0CKg8CCld3Gy5y9CtBvrOWL6EsRS4X0ZjoqgUG8 lFHB9agG+CPhSn2DlfhmwP9cYR15LoY= -----END CERTIFICATE-----Generated at Tue Oct 28 13:12:13 2025 by rpki-client