$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d18a2206-bb2d-48cd-9bd8-7806782e1c46/8cf656e5-f384-3711-83e7-a59d8aab56c7.roa File: 8cf656e5-f384-3711-83e7-a59d8aab56c7.roa (raw, json) Hash identifier: +ega53o96KaMFzaqfeu2UjAw2yhuHXGFJXAznN6Ywtc= Subject key identifier: 34:68:53:D0:4E:6F:64:B7:EC:60:93:66:F9:47:AA:54:92:8B:9E:E8 Certificate issuer: /CN=d18a2206-bb2d-48cd-9bd8-7806782e1c46 Certificate serial: 010D0C9F4328584B79C3B3642ECC8591DDDC8DF0 Authority key identifier: 41:EF:FF:2B:26:BF:98:8A:AE:B0:5D:44:5A:FC:9E:87:AB:AD:4F:5A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d18a2206-bb2d-48cd-9bd8-7806782e1c46.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d18a2206-bb2d-48cd-9bd8-7806782e1c46/8cf656e5-f384-3711-83e7-a59d8aab56c7.roa Signing time: Fri 10 Oct 2025 13:14:49 +0000 ROA not before: Fri 10 Oct 2025 13:14:49 +0000 ROA not after: Thu 08 Jan 2026 14:14:49 +0000 asID: 7029 IP address blocks: 130.12.56.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d18a2206-bb2d-48cd-9bd8-7806782e1c46/d18a2206-bb2d-48cd-9bd8-7806782e1c46.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d18a2206-bb2d-48cd-9bd8-7806782e1c46/d18a2206-bb2d-48cd-9bd8-7806782e1c46.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d18a2206-bb2d-48cd-9bd8-7806782e1c46.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:c3:b3:64:2e:cc:85:91:dd:dc:8d:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d18a2206-bb2d-48cd-9bd8-7806782e1c46 Validity Not Before: Oct 10 13:14:49 2025 GMT Not After : Jan 8 14:14:49 2026 GMT Subject: CN=4b7faae6-8525-4f4c-b7f9-6f355645aafa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:e4:54:1d:9e:13:0a:06:b3:8b:ba:bc:9c:0b: ab:aa:23:d8:f5:75:02:ff:9c:60:44:37:05:90:42: 70:5e:66:a8:8c:e8:4f:47:75:77:e8:0c:3e:b8:31: f9:70:9f:6e:5b:a3:bd:6b:b8:e6:ba:70:85:6d:d7: 4c:2b:ae:64:b0:ae:c8:40:0b:fc:a6:c6:ea:19:56: 35:17:e2:66:54:91:53:dc:4d:81:2a:a2:cc:60:69: 37:9c:74:6d:eb:22:8d:5f:d1:5d:ff:7d:38:4c:52: 16:fd:94:5c:a6:ac:bd:80:2b:68:39:a6:cb:38:d1: d7:14:38:e1:8e:72:08:e7:6a:23:8e:bc:81:c9:33: f8:41:cb:1d:74:88:0f:a3:4e:6b:41:fe:ab:84:c3: be:0f:bc:44:7e:f7:dc:1c:98:b8:aa:8c:e1:19:e0: 56:56:1a:d9:60:06:76:ac:e6:a4:a1:6c:2c:a6:89: 0d:7e:65:23:a4:6c:3b:3b:ed:13:b3:fa:5a:d1:eb: cd:8f:3f:6f:5d:43:a8:d6:0c:80:be:26:32:4f:d8: 23:6e:82:52:e9:8b:07:00:4b:ac:6a:77:ed:cd:00: 25:a8:52:0f:d8:ae:86:4f:55:23:07:40:7f:99:95: 62:95:57:de:1e:db:0f:41:1d:5f:f1:ea:e0:6b:e2: a3:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:68:53:D0:4E:6F:64:B7:EC:60:93:66:F9:47:AA:54:92:8B:9E:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d18a2206-bb2d-48cd-9bd8-7806782e1c46/8cf656e5-f384-3711-83e7-a59d8aab56c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d18a2206-bb2d-48cd-9bd8-7806782e1c46/d18a2206-bb2d-48cd-9bd8-7806782e1c46.crl X509v3 Authority Key Identifier: keyid:41:EF:FF:2B:26:BF:98:8A:AE:B0:5D:44:5A:FC:9E:87:AB:AD:4F:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d18a2206-bb2d-48cd-9bd8-7806782e1c46.cer sbgp-ipAddrBlock: critical IPv4: 130.12.56.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:ca:62:c9:ba:33:a0:48:30:16:2a:9e:7b:62:1f:81:92:5c: 94:e5:eb:d9:49:37:ff:a8:d0:31:73:d6:27:a9:bb:5c:4f:84: 8f:8c:a8:a6:e7:8a:ba:fc:85:c4:3c:db:cc:3c:8c:35:42:be: e3:9f:34:a8:9b:a2:a5:e3:35:e2:f6:23:e1:fb:9d:b0:82:8a: 14:63:bd:be:aa:1a:8e:f8:40:9f:d6:b7:87:59:42:1a:52:4d: 3a:58:f4:b3:59:6d:65:c2:f9:c9:e5:85:73:17:40:da:69:b1: a8:d2:eb:ca:eb:d1:90:a0:d9:5e:35:32:45:28:63:5c:97:16: 3c:ee:13:76:6e:82:cb:fd:09:4c:94:7e:22:64:82:c4:4d:c8: 36:08:25:6e:4b:75:00:d9:34:fd:47:82:d0:19:f8:39:5b:7d: 5f:64:a2:4b:96:0e:ee:18:aa:3f:12:63:a8:85:dd:10:46:0d: ce:13:6d:5f:d1:3c:b3:55:9b:00:66:c4:42:43:d6:e3:0f:89: c8:85:4e:e6:e1:6d:f6:0a:1e:70:0d:b4:d4:23:6e:a3:74:fb: 1a:58:27:b1:d9:d5:c4:c4:12:79:eb:e5:93:51:bd:9b:e6:ba: 02:93:43:b6:3c:c0:ed:60:10:9b:72:59:29:1a:58:0d:eb:a2: d3:36:e2:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt5w7NkLsyFkd3cjfAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDE4YTIyMDYtYmIyZC00OGNkLTliZDgtNzgwNjc4MmUx YzQ2MB4XDTI1MTAxMDEzMTQ0OVoXDTI2MDEwODE0MTQ0OVowLzEtMCsGA1UEAxMk NGI3ZmFhZTYtODUyNS00ZjRjLWI3ZjktNmYzNTU2NDVhYWZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhuRUHZ4TCgazi7q8nAurqiPY9XUC/5xgRDcF kEJwXmaojOhPR3V36Aw+uDH5cJ9uW6O9a7jmunCFbddMK65ksK7IQAv8psbqGVY1 F+JmVJFT3E2BKqLMYGk3nHRt6yKNX9Fd/304TFIW/ZRcpqy9gCtoOabLONHXFDjh jnII52ojjryByTP4QcsddIgPo05rQf6rhMO+D7xEfvfcHJi4qozhGeBWVhrZYAZ2 rOakoWwspokNfmUjpGw7O+0Ts/pa0evNjz9vXUOo1gyAviYyT9gjboJS6YsHAEus anftzQAlqFIP2K6GT1UjB0B/mZVilVfeHtsPQR1f8erga+KjXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDRoU9BOb2S37GCTZvlHqlSSi57oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kMThh MjIwNi1iYjJkLTQ4Y2QtOWJkOC03ODA2NzgyZTFjNDYvOGNmNjU2ZTUtZjM4NC0z NzExLTgzZTctYTU5ZDhhYWI1NmM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZDE4YTIyMDYtYmIyZC00OGNkLTli ZDgtNzgwNjc4MmUxYzQ2L2QxOGEyMjA2LWJiMmQtNDhjZC05YmQ4LTc4MDY3ODJl MWM0Ni5jcmwwHwYDVR0jBBgwFoAUQe//Kya/mIqusF1EWvyeh6utT1owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kMThhMjIwNi1iYjJkLTQ4Y2QtOWJkOC03ODA2 NzgyZTFjNDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCggw4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJTKYsm6M6BIMBYqnntiH4GSXJTl69lJN/+o0DFz1iepu1xPhI+MqKbn irr8hcQ828w8jDVCvuOfNKiboqXjNeL2I+H7nbCCihRjvb6qGo74QJ/Wt4dZQhpS TTpY9LNZbWXC+cnlhXMXQNppsajS68rr0ZCg2V41MkUoY1yXFjzuE3Zugsv9CUyU fiJkgsRNyDYIJW5LdQDZNP1HgtAZ+DlbfV9kokuWDu4Yqj8SY6iF3RBGDc4TbV/R PLNVmwBmxEJD1uMPiciFTubhbfYKHnANtNQjbqN0+xpYJ7HZ1cTEEnnr5ZNRvZvm ugKTQ7Y8wO1gEJtyWSkaWA3rotM24mY= -----END CERTIFICATE-----Generated at Sun Oct 19 18:34:28 2025 by rpki-client