$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/f290cce8-3336-3ab3-b1c5-e84890c02a5b.roa File: f290cce8-3336-3ab3-b1c5-e84890c02a5b.roa (raw, json) Hash identifier: nrSfkimfx8TTMMYrpzEL1s7/MAVVoUCqBHS+gE0GK1E= Subject key identifier: 5E:F5:49:0F:A7:A8:96:1E:07:A7:82:84:3F:54:5E:FE:06:9F:77:6E Certificate issuer: /CN=324346b5-3875-43b0-bb0d-8052274567d4 Certificate serial: 010D0C9F4328584ECBD1E107950CAF681EC58740 Authority key identifier: 4A:29:34:C5:92:66:79:E9:E9:E0:0B:FE:7F:B6:F0:E8:29:76:5E:24 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/f290cce8-3336-3ab3-b1c5-e84890c02a5b.roa Signing time: Tue 11 Aug 2026 01:00:11 +0000 ROA not before: Tue 11 Aug 2026 01:00:11 +0000 ROA not after: Mon 09 Nov 2026 02:00:11 +0000 asID: 55 IP address blocks: 130.91.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/324346b5-3875-43b0-bb0d-8052274567d4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/324346b5-3875-43b0-bb0d-8052274567d4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:cb:d1:e1:07:95:0c:af:68:1e:c5:87:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=324346b5-3875-43b0-bb0d-8052274567d4 Validity Not Before: Aug 11 01:00:11 2026 GMT Not After : Nov 9 02:00:11 2026 GMT Subject: CN=0d27441e-b326-45ee-bedd-f4c77e3c1b9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ca:16:f9:77:32:06:f0:c2:c8:9f:87:29:37: 55:79:cb:07:7e:8a:ad:85:8c:d1:bc:0f:84:41:7b: 76:6c:58:e9:5c:e3:a7:23:a2:1b:d5:48:56:8b:4a: 76:73:64:b2:1a:18:80:65:73:a9:5f:60:11:65:a2: 97:88:db:bd:6c:d4:47:63:98:5f:4e:84:55:22:b6: c8:e8:ef:fe:a3:fc:e4:8e:4b:ce:6e:ab:22:47:8d: be:a7:16:2c:0d:5c:a4:6b:4a:14:06:4f:cf:17:40: 68:4f:3d:48:3d:bf:65:dd:e6:10:59:3f:01:95:6e: 85:16:b7:fc:4b:43:08:5c:d1:36:f0:f3:fb:ec:b6: d4:c5:34:82:18:28:b9:b0:28:42:c0:71:35:fc:25: 64:2d:41:e7:5d:ab:ec:b5:7a:de:c4:1c:3b:2e:d8: 37:ed:7d:b0:81:c0:bd:a3:73:5b:3c:c4:3a:30:62: cc:57:e5:e4:27:dd:2d:b3:18:10:60:dd:e1:75:7b: b9:55:51:32:55:98:bf:a5:bd:b4:b4:d4:30:6e:f5: 57:1b:52:fc:16:c2:50:c2:61:29:48:c3:16:cf:eb: fa:20:76:c9:dd:93:5a:52:17:be:de:bb:ea:13:b3: 6a:02:1f:11:50:42:41:94:bb:36:a3:d8:f7:c4:e8: e9:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:F5:49:0F:A7:A8:96:1E:07:A7:82:84:3F:54:5E:FE:06:9F:77:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/f290cce8-3336-3ab3-b1c5-e84890c02a5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/324346b5-3875-43b0-bb0d-8052274567d4.crl X509v3 Authority Key Identifier: keyid:4A:29:34:C5:92:66:79:E9:E9:E0:0B:FE:7F:B6:F0:E8:29:76:5E:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4.cer sbgp-ipAddrBlock: critical IPv4: 130.91.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:02:3e:64:c8:37:60:91:a5:e4:40:5f:e6:33:75:c5:e6:d2: 14:d0:48:e2:bd:cb:17:cf:40:09:d7:9b:69:79:8e:00:fd:fe: 7a:9f:ad:2b:6e:f9:82:76:4a:31:33:08:9f:4f:75:43:d2:89: df:c5:e4:21:45:eb:f2:8b:50:33:d2:9b:1a:87:13:b1:6e:8f: 17:32:c9:df:c4:f5:88:35:f8:b9:f7:ca:05:08:31:17:20:82: 5e:c1:c5:be:bc:9a:d6:2f:31:02:6d:b7:06:43:40:69:ed:20: d1:90:06:08:44:d2:03:d9:46:5b:e0:e6:c5:9a:af:43:6b:eb: 69:5c:a0:45:90:a4:c2:23:f8:e4:4f:65:3e:ac:ee:60:84:ca: bd:3e:b6:21:08:8a:6b:b5:4b:27:4f:69:b0:8f:6b:6d:95:df: 65:33:b1:1c:69:82:e7:d0:75:23:c1:16:a6:39:a6:58:cc:e8: f7:b8:2d:d7:8f:d4:34:ff:1a:6a:da:bc:f3:aa:b7:72:c1:c7: e4:37:15:ee:db:d6:d4:b4:9c:74:3c:42:75:87:2a:61:32:1e: 25:63:a4:e3:dd:2c:4e:03:00:18:22:10:6f:fd:b7:f4:e8:90: 22:41:ff:73:51:df:a8:4d:af:17:4d:1a:68:d6:a7:de:78:d8: 5f:76:33:b2 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE7L0eEHlQyvaB7Fh0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzI0MzQ2YjUtMzg3NS00M2IwLWJiMGQtODA1MjI3NDU2 N2Q0MB4XDTI2MDgxMTAxMDAxMVoXDTI2MTEwOTAyMDAxMVowLzEtMCsGA1UEAxMk MGQyNzQ0MWUtYjMyNi00NWVlLWJlZGQtZjRjNzdlM2MxYjljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3MoW+XcyBvDCyJ+HKTdVecsHfoqthYzRvA+E QXt2bFjpXOOnI6Ib1UhWi0p2c2SyGhiAZXOpX2ARZaKXiNu9bNRHY5hfToRVIrbI 6O/+o/zkjkvObqsiR42+pxYsDVyka0oUBk/PF0BoTz1IPb9l3eYQWT8BlW6FFrf8 S0MIXNE28PP77LbUxTSCGCi5sChCwHE1/CVkLUHnXavstXrexBw7Ltg37X2wgcC9 o3NbPMQ6MGLMV+XkJ90tsxgQYN3hdXu5VVEyVZi/pb20tNQwbvVXG1L8FsJQwmEp SMMWz+v6IHbJ3ZNaUhe+3rvqE7NqAh8RUEJBlLs2o9j3xOjpqwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFF71SQ+nqJYeB6eChD9UXv4Gn3duMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zMjQz NDZiNS0zODc1LTQzYjAtYmIwZC04MDUyMjc0NTY3ZDQvZjI5MGNjZTgtMzMzNi0z YWIzLWIxYzUtZTg0ODkwYzAyYTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzI0MzQ2YjUtMzg3NS00M2IwLWJi MGQtODA1MjI3NDU2N2Q0LzMyNDM0NmI1LTM4NzUtNDNiMC1iYjBkLTgwNTIyNzQ1 NjdkNC5jcmwwHwYDVR0jBBgwFoAUSik0xZJmeenp4Av+f7bw6Cl2XiQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zMjQzNDZiNS0zODc1LTQzYjAtYmIwZC04MDUy Mjc0NTY3ZDQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAglswVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEATAI+ZMg3YJGl5EBf5jN1xebSFNBI4r3LF89ACdebaXmOAP3+ep+tK275 gnZKMTMIn091Q9KJ38XkIUXr8otQM9KbGocTsW6PFzLJ38T1iDX4uffKBQgxFyCC XsHFvrya1i8xAm23BkNAae0g0ZAGCETSA9lGW+DmxZqvQ2vraVygRZCkwiP45E9l PqzuYITKvT62IQiKa7VLJ09psI9rbZXfZTOxHGmC59B1I8EWpjmmWMzo97gt14/U NP8aatq886q3csHH5DcV7tvW1LScdDxCdYcqYTIeJWOk490sTgMAGCIQb/239OiQ IkH/c1HfqE2vF00aaNan3njYX3Yzsg== -----END CERTIFICATE-----Generated at Sat Sep 26 19:09:25 2026 by rpki-client