$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4c5d045b-8e9b-44f7-b145-431d681f8f89/8110ef80-db4c-374d-bd9a-832954ed4a60.roa File: 8110ef80-db4c-374d-bd9a-832954ed4a60.roa (raw, json) Hash identifier: Sn24kp/sUhYFkPew57eYq7iBzPFRXdZBU+OKTyEwerc= Subject key identifier: 54:C7:27:CB:62:25:9B:AD:81:40:B3:5D:25:FD:B2:D2:BB:9A:85:0C Certificate issuer: /CN=4c5d045b-8e9b-44f7-b145-431d681f8f89 Certificate serial: 010D0C9F4328584F17324623023982901F488F80 Authority key identifier: 7D:8C:0C:D7:96:28:3E:AE:07:27:69:D2:12:39:FA:EE:AB:00:ED:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4c5d045b-8e9b-44f7-b145-431d681f8f89.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4c5d045b-8e9b-44f7-b145-431d681f8f89/8110ef80-db4c-374d-bd9a-832954ed4a60.roa Signing time: Mon 07 Sep 2026 01:00:11 +0000 ROA not before: Mon 07 Sep 2026 01:00:11 +0000 ROA not after: Sun 06 Dec 2026 02:00:11 +0000 asID: 393572 IP address blocks: 130.12.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4c5d045b-8e9b-44f7-b145-431d681f8f89/4c5d045b-8e9b-44f7-b145-431d681f8f89.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4c5d045b-8e9b-44f7-b145-431d681f8f89/4c5d045b-8e9b-44f7-b145-431d681f8f89.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4c5d045b-8e9b-44f7-b145-431d681f8f89.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Sep 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:17:32:46:23:02:39:82:90:1f:48:8f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c5d045b-8e9b-44f7-b145-431d681f8f89 Validity Not Before: Sep 7 01:00:11 2026 GMT Not After : Dec 6 02:00:11 2026 GMT Subject: CN=77b479c2-4101-4d35-8a50-386251da3960 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:a9:e9:de:44:8c:29:56:1d:93:7b:9e:bd:39: 03:3b:59:88:cf:8b:45:fa:95:de:4b:0c:a4:59:db: 7b:65:75:34:41:c8:aa:ab:02:94:af:e8:50:f6:6b: 98:3d:aa:56:d2:2a:7b:9a:e4:a2:8e:d1:0f:2b:ba: 30:a1:9f:81:f6:a7:12:39:25:ed:2e:58:06:ce:c4: d5:4f:a4:35:f5:f8:45:d3:6f:42:33:d7:69:84:ca: 7f:40:5c:69:35:70:94:3d:84:93:58:24:2c:2b:62: 60:f9:ac:ef:dd:ad:2c:da:ed:83:77:c9:43:43:57: 37:d4:72:23:e0:cf:c0:40:e2:24:8f:ec:2d:62:d0: cf:e0:63:61:a2:52:c7:3d:07:3e:ca:1a:d1:ea:3b: 1a:bb:37:2f:36:fa:e4:71:97:96:e5:b1:d3:d6:15: b6:7f:65:d3:1b:ed:bf:d7:c6:a6:6a:2d:e8:d6:aa: 1e:8e:5c:50:2e:74:9b:af:cf:60:26:77:ea:ab:8f: 91:28:28:a2:20:fc:ff:41:0b:cd:98:77:12:b8:49: de:3d:f1:fc:1e:9b:13:f5:51:00:8f:10:e3:ef:94: 36:c7:a9:7a:00:f4:a5:82:f7:53:50:c9:e7:25:32: 74:73:9d:c3:08:f8:36:e3:c3:3f:74:ef:7f:b8:33: 23:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:C7:27:CB:62:25:9B:AD:81:40:B3:5D:25:FD:B2:D2:BB:9A:85:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4c5d045b-8e9b-44f7-b145-431d681f8f89/8110ef80-db4c-374d-bd9a-832954ed4a60.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4c5d045b-8e9b-44f7-b145-431d681f8f89/4c5d045b-8e9b-44f7-b145-431d681f8f89.crl X509v3 Authority Key Identifier: keyid:7D:8C:0C:D7:96:28:3E:AE:07:27:69:D2:12:39:FA:EE:AB:00:ED:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4c5d045b-8e9b-44f7-b145-431d681f8f89.cer sbgp-ipAddrBlock: critical IPv4: 130.12.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:c1:a5:27:a1:17:d5:23:71:f2:ee:60:26:b9:38:af:fb:ba: 75:b2:da:41:e6:c9:2e:d1:c1:6f:38:58:38:93:0a:56:6f:4e: 7d:67:98:fc:cd:48:60:15:19:ce:51:34:f3:48:fd:01:63:bc: 9f:5a:b4:95:83:6b:14:86:32:65:0e:57:51:a9:3d:d8:47:db: 9f:1b:09:22:02:07:77:79:8f:e6:3a:04:6c:52:be:69:8f:8b: df:eb:0d:ce:55:18:cb:bd:5e:02:52:1c:2f:3b:70:43:c8:17: 19:26:47:5e:04:4e:0b:bd:65:dc:17:b2:0f:fa:53:49:e6:0f: 86:7e:11:45:09:9f:9c:d2:fa:29:24:89:94:68:38:93:64:13: 06:f8:15:0a:be:aa:ad:5f:56:fe:af:9a:f8:8a:17:48:ba:2f: 4a:0a:69:17:b6:17:a4:d8:53:f3:fb:10:59:29:12:b4:cc:21: 44:38:35:d1:c4:f5:a1:aa:01:f8:4d:6a:b6:80:33:a1:05:dc: 35:8b:18:d4:2c:fe:24:28:d3:07:3a:1f:10:ae:a2:e4:e8:92: 88:60:f1:a1:00:11:5b:60:eb:80:75:49:e6:7f:2e:dd:f5:29: 6e:cc:d9:ab:e1:c2:a1:ac:9a:fe:9c:33:95:c9:54:c6:05:f7: 05:45:0a:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8XMkYjAjmCkB9Ij4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGM1ZDA0NWItOGU5Yi00NGY3LWIxNDUtNDMxZDY4MWY4 Zjg5MB4XDTI2MDkwNzAxMDAxMVoXDTI2MTIwNjAyMDAxMVowLzEtMCsGA1UEAxMk NzdiNDc5YzItNDEwMS00ZDM1LThhNTAtMzg2MjUxZGEzOTYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6np3kSMKVYdk3uevTkDO1mIz4tF+pXeSwyk Wdt7ZXU0QciqqwKUr+hQ9muYPapW0ip7muSijtEPK7owoZ+B9qcSOSXtLlgGzsTV T6Q19fhF029CM9dphMp/QFxpNXCUPYSTWCQsK2Jg+azv3a0s2u2Dd8lDQ1c31HIj 4M/AQOIkj+wtYtDP4GNholLHPQc+yhrR6jsauzcvNvrkcZeW5bHT1hW2f2XTG+2/ 18amai3o1qoejlxQLnSbr89gJnfqq4+RKCiiIPz/QQvNmHcSuEnePfH8HpsT9VEA jxDj75Q2x6l6APSlgvdTUMnnJTJ0c53DCPg248M/dO9/uDMjzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFTHJ8tiJZutgUCzXSX9stK7moUMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi80YzVk MDQ1Yi04ZTliLTQ0ZjctYjE0NS00MzFkNjgxZjhmODkvODExMGVmODAtZGI0Yy0z NzRkLWJkOWEtODMyOTU0ZWQ0YTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNGM1ZDA0NWItOGU5Yi00NGY3LWIx NDUtNDMxZDY4MWY4Zjg5LzRjNWQwNDViLThlOWItNDRmNy1iMTQ1LTQzMWQ2ODFm OGY4OS5jcmwwHwYDVR0jBBgwFoAUfYwM15YoPq4HJ2nSEjn67qsA7R8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi80YzVkMDQ1Yi04ZTliLTQ0ZjctYjE0NS00MzFk NjgxZjhmODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAggzTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAETBpSehF9UjcfLuYCa5OK/7unWy2kHmyS7RwW84WDiTClZvTn1nmPzN SGAVGc5RNPNI/QFjvJ9atJWDaxSGMmUOV1GpPdhH258bCSICB3d5j+Y6BGxSvmmP i9/rDc5VGMu9XgJSHC87cEPIFxkmR14ETgu9ZdwXsg/6U0nmD4Z+EUUJn5zS+ikk iZRoOJNkEwb4FQq+qq1fVv6vmviKF0i6L0oKaRe2F6TYU/P7EFkpErTMIUQ4NdHE 9aGqAfhNaraAM6EF3DWLGNQs/iQo0wc6HxCuouTokohg8aEAEVtg64B1SeZ/Lt31 KW7M2avhwqGsmv6cM5XJVMYF9wVFCtM= -----END CERTIFICATE-----Generated at Sun Sep 13 17:23:57 2026 by rpki-client