$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c7990a1d-1dec-4721-b9fc-a68ef45cb3c6/af4e37c9-a826-3d04-a795-2bfe263a40fb.roa File: af4e37c9-a826-3d04-a795-2bfe263a40fb.roa (raw, json) Hash identifier: zAjVAF1l2KDiJfrmR/c10D3rqDsgk1zevgw4F+dhZ+M= Subject key identifier: 1B:42:9D:B3:55:DC:D2:FE:4B:A0:46:DF:84:D8:8D:31:98:4A:52:9B Certificate issuer: /CN=c7990a1d-1dec-4721-b9fc-a68ef45cb3c6 Certificate serial: 010D0C9F4328584B88374463209ECD6108228EC0 Authority key identifier: DD:02:37:57:A2:47:56:D3:27:16:ED:37:0E:C5:18:21:7E:F7:0E:EC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c7990a1d-1dec-4721-b9fc-a68ef45cb3c6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c7990a1d-1dec-4721-b9fc-a68ef45cb3c6/af4e37c9-a826-3d04-a795-2bfe263a40fb.roa Signing time: Wed 15 Oct 2025 17:29:00 +0000 ROA not before: Wed 15 Oct 2025 17:29:00 +0000 ROA not after: Tue 13 Jan 2026 18:29:00 +0000 asID: 393746 IP address blocks: 130.12.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c7990a1d-1dec-4721-b9fc-a68ef45cb3c6/c7990a1d-1dec-4721-b9fc-a68ef45cb3c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c7990a1d-1dec-4721-b9fc-a68ef45cb3c6/c7990a1d-1dec-4721-b9fc-a68ef45cb3c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c7990a1d-1dec-4721-b9fc-a68ef45cb3c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:88:37:44:63:20:9e:cd:61:08:22:8e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7990a1d-1dec-4721-b9fc-a68ef45cb3c6 Validity Not Before: Oct 15 17:29:00 2025 GMT Not After : Jan 13 18:29:00 2026 GMT Subject: CN=bf876fd3-cd57-4db5-82d8-88e66a3da6d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:c7:8e:31:cf:49:8e:87:3a:a1:2c:31:1a:4b: 43:4a:c2:50:f7:1d:21:2d:4a:6d:87:14:e2:e5:ec: d2:6a:41:ce:65:39:84:da:cb:2c:b7:81:65:d4:5d: 22:57:31:5a:bc:a8:b7:4e:a3:dc:44:86:14:00:aa: af:f8:6d:22:0d:9d:f2:4a:65:10:0b:07:b6:10:5f: f1:f2:76:40:df:81:8f:a2:34:17:74:75:c4:35:af: 54:a6:ba:49:2c:87:ee:c4:bc:08:24:ab:b7:f9:da: a4:06:d9:b9:df:4f:00:9f:4c:19:81:0f:d8:86:b4: f0:9b:19:25:5d:c1:03:12:69:c6:2f:b6:8e:92:36: da:0d:79:13:31:12:f2:86:41:a3:99:5e:65:b5:70: 89:9a:2d:de:19:9d:fc:c9:cc:f6:a6:09:cb:7e:13: 9e:d1:f4:4d:56:5b:f0:93:1b:b9:34:78:90:ab:d4: e6:e9:51:b6:0c:d7:31:7d:27:4a:84:c1:d6:4b:46: 66:fa:36:d3:cf:61:c1:42:72:85:ad:71:dd:2d:9a: 64:37:6d:4b:a9:d8:b5:d5:c9:60:61:40:82:26:74: 71:42:fd:11:e5:83:4a:33:99:61:97:10:2d:a5:7c: 75:03:d8:05:99:52:ed:96:70:e0:83:1b:10:c8:7b: 92:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:42:9D:B3:55:DC:D2:FE:4B:A0:46:DF:84:D8:8D:31:98:4A:52:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c7990a1d-1dec-4721-b9fc-a68ef45cb3c6/af4e37c9-a826-3d04-a795-2bfe263a40fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c7990a1d-1dec-4721-b9fc-a68ef45cb3c6/c7990a1d-1dec-4721-b9fc-a68ef45cb3c6.crl X509v3 Authority Key Identifier: keyid:DD:02:37:57:A2:47:56:D3:27:16:ED:37:0E:C5:18:21:7E:F7:0E:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c7990a1d-1dec-4721-b9fc-a68ef45cb3c6.cer sbgp-ipAddrBlock: critical IPv4: 130.12.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:a7:7a:f4:33:18:06:b8:98:73:62:b0:aa:c9:95:d3:f7:b9: 30:96:16:cc:80:e2:70:4b:9f:50:15:b4:ad:4e:10:36:29:f9: 7d:9b:1a:89:29:4b:c5:94:15:2f:ca:61:e7:dd:99:73:31:b8: ba:39:8f:19:e0:f7:40:04:b7:89:17:b4:30:e9:1d:62:03:5b: 83:e3:11:d4:b6:32:e2:c2:cc:96:b4:e5:58:d4:09:e5:4b:33: 19:fa:32:33:f0:fe:bf:7f:a4:7d:bb:ad:13:62:32:22:d3:57: cb:a4:58:64:60:99:8a:4f:db:08:23:56:79:02:aa:66:e2:28: ab:f0:06:f5:59:da:5d:8d:d6:ee:2d:a2:fd:d1:80:63:61:cb: 0f:b9:c4:b7:12:2f:82:ea:c1:fe:dc:ec:80:f8:f9:6c:1f:d1: a1:96:ae:24:02:15:6f:f7:1a:d6:db:8a:4a:a2:d6:38:33:8b: fd:a4:6a:23:60:c5:79:76:48:f0:4a:08:00:20:e6:84:b6:68: 78:ed:2f:b0:e8:30:32:32:1a:f7:4f:b1:74:b5:11:43:0f:6a: c8:50:33:ab:01:5a:cb:ac:1b:4b:b8:5f:dc:e7:a3:67:62:25: 22:e2:c2:86:bd:fe:57:25:8e:0c:c6:f4:e5:9f:7b:d0:3d:fc: f8:74:3f:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuIN0RjIJ7NYQgijsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzc5OTBhMWQtMWRlYy00NzIxLWI5ZmMtYTY4ZWY0NWNi M2M2MB4XDTI1MTAxNTE3MjkwMFoXDTI2MDExMzE4MjkwMFowLzEtMCsGA1UEAxMk YmY4NzZmZDMtY2Q1Ny00ZGI1LTgyZDgtODhlNjZhM2RhNmQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8eOMc9Jjoc6oSwxGktDSsJQ9x0hLUpthxTi 5ezSakHOZTmE2ssst4Fl1F0iVzFavKi3TqPcRIYUAKqv+G0iDZ3ySmUQCwe2EF/x 8nZA34GPojQXdHXENa9UprpJLIfuxLwIJKu3+dqkBtm5308An0wZgQ/YhrTwmxkl XcEDEmnGL7aOkjbaDXkTMRLyhkGjmV5ltXCJmi3eGZ38ycz2pgnLfhOe0fRNVlvw kxu5NHiQq9Tm6VG2DNcxfSdKhMHWS0Zm+jbTz2HBQnKFrXHdLZpkN21Lqdi11clg YUCCJnRxQv0R5YNKM5lhlxAtpXx1A9gFmVLtlnDggxsQyHuSZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBtCnbNV3NL+S6BG34TYjTGYSlKbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jNzk5 MGExZC0xZGVjLTQ3MjEtYjlmYy1hNjhlZjQ1Y2IzYzYvYWY0ZTM3YzktYTgyNi0z ZDA0LWE3OTUtMmJmZTI2M2E0MGZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYzc5OTBhMWQtMWRlYy00NzIxLWI5 ZmMtYTY4ZWY0NWNiM2M2L2M3OTkwYTFkLTFkZWMtNDcyMS1iOWZjLWE2OGVmNDVj YjNjNi5jcmwwHwYDVR0jBBgwFoAU3QI3V6JHVtMnFu03DsUYIX73DuwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jNzk5MGExZC0xZGVjLTQ3MjEtYjlmYy1hNjhl ZjQ1Y2IzYzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAggxvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAECnevQzGAa4mHNisKrJldP3uTCWFsyA4nBLn1AVtK1OEDYp+X2bGokp S8WUFS/KYefdmXMxuLo5jxng90AEt4kXtDDpHWIDW4PjEdS2MuLCzJa05VjUCeVL Mxn6MjPw/r9/pH27rRNiMiLTV8ukWGRgmYpP2wgjVnkCqmbiKKvwBvVZ2l2N1u4t ov3RgGNhyw+5xLcSL4Lqwf7c7ID4+Wwf0aGWriQCFW/3Gtbbikqi1jgzi/2kaiNg xXl2SPBKCAAg5oS2aHjtL7DoMDIyGvdPsXS1EUMPashQM6sBWsusG0u4X9zno2di JSLiwoa9/lcljgzG9OWfe9A9/Ph0P98= -----END CERTIFICATE-----Generated at Mon Nov 3 08:41:28 2025 by rpki-client