$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4e15d598-623b-4ab3-ad43-b720fb599027/685f8e1c-9504-3a12-9a45-150f4112b640.roa File: 685f8e1c-9504-3a12-9a45-150f4112b640.roa (raw, json) Hash identifier: kjvEUWxsdwDhrVyJP5AiwYLJyrjj5p8CKkj9mFX7Ows= Subject key identifier: 02:86:46:63:3D:4E:40:98:DD:2B:04:2A:F4:99:4A:5F:2D:C9:4F:03 Certificate issuer: /CN=4e15d598-623b-4ab3-ad43-b720fb599027 Certificate serial: 010D0C9F4328584EA79BAD9FFD8409FF1B6E5280 Authority key identifier: B0:0B:40:9A:14:8B:AE:3F:03:86:25:50:26:AB:3F:80:15:AD:E5:8A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4e15d598-623b-4ab3-ad43-b720fb599027.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4e15d598-623b-4ab3-ad43-b720fb599027/685f8e1c-9504-3a12-9a45-150f4112b640.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 17176 IP address blocks: 130.12.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4e15d598-623b-4ab3-ad43-b720fb599027/4e15d598-623b-4ab3-ad43-b720fb599027.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4e15d598-623b-4ab3-ad43-b720fb599027/4e15d598-623b-4ab3-ad43-b720fb599027.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4e15d598-623b-4ab3-ad43-b720fb599027.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Aug 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9b:ad:9f:fd:84:09:ff:1b:6e:52:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e15d598-623b-4ab3-ad43-b720fb599027 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=448fbe06-3715-48e9-9cc6-170c7ceae7eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:2f:b5:17:91:e1:45:55:2a:c5:1c:fb:1b:2b: 2e:dc:a8:50:b4:55:fd:e0:4d:34:4b:77:06:3f:61: 03:53:0a:20:d3:76:ea:1e:c3:ee:5d:85:9e:62:32: dc:26:47:20:ad:23:a3:aa:7c:4d:1f:43:94:1c:ba: c6:f1:3f:12:15:d4:17:10:d5:31:56:ed:e6:f6:92: 4c:cd:60:d8:0f:d0:ac:74:e8:c7:13:7d:2c:e7:5a: 0e:de:67:8f:2e:d4:95:be:76:ae:0c:d4:52:37:45: 95:2b:c9:39:77:72:92:72:94:1e:4b:26:a6:34:d5: d2:c7:f2:8c:52:b5:df:d8:d5:6a:25:35:71:c9:6c: a5:fc:eb:fa:8c:a3:71:91:7e:2b:fe:2a:1a:cc:90: b0:c6:75:01:69:24:65:96:43:3c:1c:cc:5a:d6:f6: 65:6d:1f:e8:69:9d:d5:67:06:04:cb:04:ae:0a:c2: 01:9d:cd:8d:85:10:10:fb:d3:0d:a3:da:c7:cd:e3: fb:a5:92:a8:37:5f:03:8e:68:08:dc:b6:1d:92:71: c2:37:57:f7:9d:21:d5:0d:32:02:b6:60:bb:fc:88: fc:19:3a:08:15:d8:f7:07:0c:9b:10:d2:41:4b:90: e4:5d:a3:06:8c:41:92:97:80:c4:c1:ac:df:e7:8c: a3:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:86:46:63:3D:4E:40:98:DD:2B:04:2A:F4:99:4A:5F:2D:C9:4F:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4e15d598-623b-4ab3-ad43-b720fb599027/685f8e1c-9504-3a12-9a45-150f4112b640.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4e15d598-623b-4ab3-ad43-b720fb599027/4e15d598-623b-4ab3-ad43-b720fb599027.crl X509v3 Authority Key Identifier: keyid:B0:0B:40:9A:14:8B:AE:3F:03:86:25:50:26:AB:3F:80:15:AD:E5:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4e15d598-623b-4ab3-ad43-b720fb599027.cer sbgp-ipAddrBlock: critical IPv4: 130.12.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:f3:8b:ad:45:4f:62:e2:36:69:a9:a7:e0:a2:84:ec:ba:73: b1:52:71:0a:dd:ab:22:6a:8c:59:d6:9e:99:fd:20:32:a4:ac: b6:38:93:06:bc:53:7f:dc:2f:6b:2b:83:74:a8:a6:7c:5b:09: b5:0b:b2:d5:dd:ca:59:62:b4:f6:8f:7d:5a:93:9d:e9:ce:57: fa:70:d3:b8:5f:e7:0f:3c:17:49:ff:b4:00:66:0c:57:a9:c3: fb:80:d5:75:f8:34:ce:4d:b3:13:77:0f:5c:c2:f2:f7:6b:1a: e4:ba:a8:f3:c8:1e:11:05:2c:b1:a4:15:ce:d3:d9:ba:ca:75: 31:88:14:31:b6:96:44:eb:6a:11:98:e9:83:b0:6b:f2:44:cb: 46:69:95:b6:07:e3:38:c3:14:8e:0f:93:9d:e0:f3:ec:45:d0: 7e:a2:83:92:30:ef:38:58:a9:41:ee:61:d3:e9:dd:94:c3:c8: b0:21:18:ea:98:38:19:e8:b6:af:57:cc:0c:a3:0c:fa:99:20: 78:ec:6a:76:75:e1:39:9a:91:f8:64:8a:87:f4:60:1a:e2:6c: c0:2b:74:fc:04:d9:b4:88:78:54:8d:f1:2c:ab:2f:98:3d:31: 0e:51:a4:77:fa:46:fc:f0:06:98:51:93:5e:79:d1:1d:d1:26: 1b:99:8e:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nm62f/YQJ/xtuUoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUxNWQ1OTgtNjIzYi00YWIzLWFkNDMtYjcyMGZiNTk5 MDI3MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NDQ4ZmJlMDYtMzcxNS00OGU5LTljYzYtMTcwYzdjZWFlN2ViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlC+1F5HhRVUqxRz7Gysu3KhQtFX94E00S3cG P2EDUwog03bqHsPuXYWeYjLcJkcgrSOjqnxNH0OUHLrG8T8SFdQXENUxVu3m9pJM zWDYD9CsdOjHE30s51oO3mePLtSVvnauDNRSN0WVK8k5d3KScpQeSyamNNXSx/KM UrXf2NVqJTVxyWyl/Ov6jKNxkX4r/ioazJCwxnUBaSRllkM8HMxa1vZlbR/oaZ3V ZwYEywSuCsIBnc2NhRAQ+9MNo9rHzeP7pZKoN18DjmgI3LYdknHCN1f3nSHVDTIC tmC7/Ij8GToIFdj3BwybENJBS5DkXaMGjEGSl4DEwazf54yjMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAKGRmM9TkCY3SsEKvSZSl8tyU8DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80ZTE1 ZDU5OC02MjNiLTRhYjMtYWQ0My1iNzIwZmI1OTkwMjcvNjg1ZjhlMWMtOTUwNC0z YTEyLTlhNDUtMTUwZjQxMTJiNjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNGUxNWQ1OTgtNjIzYi00YWIzLWFk NDMtYjcyMGZiNTk5MDI3LzRlMTVkNTk4LTYyM2ItNGFiMy1hZDQzLWI3MjBmYjU5 OTAyNy5jcmwwHwYDVR0jBBgwFoAUsAtAmhSLrj8DhiVQJqs/gBWt5YowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80ZTE1ZDU5OC02MjNiLTRhYjMtYWQ0My1iNzIw ZmI1OTkwMjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAggwMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIXzi61FT2LiNmmpp+CihOy6c7FScQrdqyJqjFnWnpn9IDKkrLY4kwa8 U3/cL2srg3SopnxbCbULstXdyllitPaPfVqTnenOV/pw07hf5w88F0n/tABmDFep w/uA1XX4NM5NsxN3D1zC8vdrGuS6qPPIHhEFLLGkFc7T2brKdTGIFDG2lkTrahGY 6YOwa/JEy0ZplbYH4zjDFI4Pk53g8+xF0H6ig5Iw7zhYqUHuYdPp3ZTDyLAhGOqY OBnotq9XzAyjDPqZIHjsanZ14Tmakfhkiof0YBribMArdPwE2bSIeFSN8SyrL5g9 MQ5RpHf6RvzwBphRk1550R3RJhuZju8= -----END CERTIFICATE-----Generated at Tue Aug 25 20:25:08 2026 by rpki-client