$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0cfdfc46-9137-44dd-9617-342b78c20df5/b0f19d42-e4a2-3a7d-b65d-491b6bb8d7b9.roa File: b0f19d42-e4a2-3a7d-b65d-491b6bb8d7b9.roa (raw, json) Hash identifier: z6QHEiP077GKSPTSZkM56UWzP9nwOxnndIuGPWTSZiM= Subject key identifier: AF:F8:75:6B:E6:0E:46:42:97:B2:07:AE:02:F9:81:A2:24:0E:9C:41 Certificate issuer: /CN=0cfdfc46-9137-44dd-9617-342b78c20df5 Certificate serial: 010D0C9F4328584D59EA4A064AF28E9FF0EA8100 Authority key identifier: 9D:85:43:E3:92:10:EA:D0:07:41:7C:4D:26:04:7C:FE:EE:59:3D:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0cfdfc46-9137-44dd-9617-342b78c20df5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0cfdfc46-9137-44dd-9617-342b78c20df5/b0f19d42-e4a2-3a7d-b65d-491b6bb8d7b9.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 14700 IP address blocks: 130.12.30.0/24 maxlen: 24 149.112.185.0/24 maxlen: 24 2602:f4c3::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0cfdfc46-9137-44dd-9617-342b78c20df5/0cfdfc46-9137-44dd-9617-342b78c20df5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0cfdfc46-9137-44dd-9617-342b78c20df5/0cfdfc46-9137-44dd-9617-342b78c20df5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0cfdfc46-9137-44dd-9617-342b78c20df5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:4a:06:4a:f2:8e:9f:f0:ea:81:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0cfdfc46-9137-44dd-9617-342b78c20df5 Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=cbb1977e-0e1b-4bca-b687-017b747adadc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:71:dd:b5:4d:29:5d:0f:8e:b8:4a:82:0b:54: bb:e0:9f:8e:a4:06:56:d8:63:e0:c8:1f:b7:cf:68: a3:3a:9f:11:fd:ed:37:53:5b:a5:a9:e2:81:73:77: 1a:00:fa:06:4b:7d:25:83:8c:19:d6:de:84:f8:40: 8f:7f:41:b3:5c:2e:c3:4c:ea:c5:a5:de:1b:9e:cc: bf:c9:96:88:b8:a8:62:bc:89:bb:c2:fe:4c:21:57: 44:06:57:61:ad:5b:93:fc:36:40:d5:04:ff:3e:ac: a3:be:a2:21:cb:95:49:84:e1:d0:39:16:33:b1:7f: a2:8d:33:29:f2:8c:c6:37:c9:2b:1c:cf:64:6a:5f: b6:fe:52:40:0e:3c:a2:d4:c8:8e:84:5c:0b:d7:c7: 21:82:4a:14:09:9e:e0:c4:39:3c:32:b5:04:c8:cd: 93:ac:87:0a:c8:69:cf:96:fb:34:c2:24:91:8c:d0: 08:da:d4:71:2c:3d:8b:ed:34:84:cf:a1:bb:e3:9b: 38:a6:f5:c0:e1:6b:49:a0:11:a4:4f:b4:9a:5b:57: 24:c4:88:e9:00:61:e6:d2:7c:d2:12:fd:f2:2b:49: e5:a1:85:4a:03:46:c7:e6:69:e5:f5:53:5a:5a:3c: 78:9c:41:02:c2:13:ab:41:17:c4:e3:00:cd:bb:59: 42:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:F8:75:6B:E6:0E:46:42:97:B2:07:AE:02:F9:81:A2:24:0E:9C:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0cfdfc46-9137-44dd-9617-342b78c20df5/b0f19d42-e4a2-3a7d-b65d-491b6bb8d7b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0cfdfc46-9137-44dd-9617-342b78c20df5/0cfdfc46-9137-44dd-9617-342b78c20df5.crl X509v3 Authority Key Identifier: keyid:9D:85:43:E3:92:10:EA:D0:07:41:7C:4D:26:04:7C:FE:EE:59:3D:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0cfdfc46-9137-44dd-9617-342b78c20df5.cer sbgp-ipAddrBlock: critical IPv4: 130.12.30.0/24 149.112.185.0/24 IPv6: 2602:f4c3::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:ba:37:19:f8:e5:f9:37:9c:50:4b:75:94:3a:3f:d6:9e:2d: 90:4d:c1:8c:f3:d3:1a:56:27:c0:f8:8a:eb:e8:55:9a:23:d9: c0:cd:35:ca:c9:60:44:49:fc:58:51:bf:ff:df:8a:37:6e:ca: 97:d1:e3:6a:76:8e:19:43:38:66:af:fb:dd:33:97:ec:5c:d4: 20:43:43:2d:08:df:b3:51:72:83:53:e3:82:7d:de:33:b5:c0: 1c:ff:42:ea:cc:de:01:d7:a9:37:7b:7f:fc:90:95:1b:59:80: ec:a8:7d:f8:79:c1:15:bd:c1:86:ff:23:79:a5:a8:2d:b0:dd: 7c:8a:15:d0:b9:2f:2b:c8:16:98:a2:58:34:e8:15:3f:10:d0: d6:a9:60:35:34:6f:41:69:da:e9:08:66:3e:a8:db:74:33:31: 7f:ab:67:e2:17:74:09:3d:dc:2e:17:15:6f:f0:8d:34:0c:90: 7c:97:a0:7a:35:b0:e4:02:96:43:4b:64:cf:c2:82:94:ff:7c: 11:42:76:68:1b:39:f8:f4:70:8d:62:bb:15:89:e0:aa:c8:ab: 9f:6e:ab:11:2d:90:6f:38:06:d0:7e:d2:4b:e4:85:cc:10:1b: be:4f:be:fe:64:80:17:8c:a0:13:4a:d5:17:3e:17:db:a3:67: 80:08:13:8f -----BEGIN CERTIFICATE----- MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWE1Z6koGSvKOn/DqgQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGNmZGZjNDYtOTEzNy00NGRkLTk2MTctMzQyYjc4YzIw ZGY1MB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk Y2JiMTk3N2UtMGUxYi00YmNhLWI2ODctMDE3Yjc0N2FkYWRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmnHdtU0pXQ+OuEqCC1S74J+OpAZW2GPgyB+3 z2ijOp8R/e03U1ulqeKBc3caAPoGS30lg4wZ1t6E+ECPf0GzXC7DTOrFpd4bnsy/ yZaIuKhivIm7wv5MIVdEBldhrVuT/DZA1QT/PqyjvqIhy5VJhOHQORYzsX+ijTMp 8ozGN8krHM9kal+2/lJADjyi1MiOhFwL18chgkoUCZ7gxDk8MrUEyM2TrIcKyGnP lvs0wiSRjNAI2tRxLD2L7TSEz6G745s4pvXA4WtJoBGkT7SaW1ckxIjpAGHm0nzS Ev3yK0nloYVKA0bH5mnl9VNaWjx4nEECwhOrQRfE4wDNu1lCEwIDAQABo4IDazCC A2cwHQYDVR0OBBYEFK/4dWvmDkZCl7IHrgL5gaIkDpxBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8wY2Zk ZmM0Ni05MTM3LTQ0ZGQtOTYxNy0zNDJiNzhjMjBkZjUvYjBmMTlkNDItZTRhMi0z YTdkLWI2NWQtNDkxYjZiYjhkN2I5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMGNmZGZjNDYtOTEzNy00NGRkLTk2 MTctMzQyYjc4YzIwZGY1LzBjZmRmYzQ2LTkxMzctNDRkZC05NjE3LTM0MmI3OGMy MGRmNS5jcmwwHwYDVR0jBBgwFoAUnYVD45IQ6tAHQXxNJgR8/u5ZPSAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8wY2ZkZmM0Ni05MTM3LTQ0ZGQtOTYxNy0zNDJi NzhjMjBkZjUuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQAggweAwQA lXC5MA4EAgACMAgDBgAmAvTDADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCBujcZ+OX5N5xQS3WUOj/Wni2Q TcGM89MaVifA+Irr6FWaI9nAzTXKyWBESfxYUb//34o3bsqX0eNqdo4ZQzhmr/vd M5fsXNQgQ0MtCN+zUXKDU+OCfd4ztcAc/0LqzN4B16k3e3/8kJUbWYDsqH34ecEV vcGG/yN5pagtsN18ihXQuS8ryBaYolg06BU/ENDWqWA1NG9BadrpCGY+qNt0MzF/ q2fiF3QJPdwuFxVv8I00DJB8l6B6NbDkApZDS2TPwoKU/3wRQnZoGzn49HCNYrsV ieCqyKufbqsRLZBvOAbQftJL5IXMEBu+T77+ZIAXjKATStUXPhfbo2eACBOP -----END CERTIFICATE-----Generated at Mon Apr 13 12:08:27 2026 by rpki-client