$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4c5d045b-8e9b-44f7-b145-431d681f8f89/f056aaa2-508d-3c4b-98fa-3afabb70b1ac.roa File: f056aaa2-508d-3c4b-98fa-3afabb70b1ac.roa (raw, json) Hash identifier: Y8Q82J67M8OkqbMYuhlbezwxy/bIt9ZAKgU4Lg026uc= Subject key identifier: DC:85:6F:5D:72:15:8D:20:A4:69:D5:D7:DD:68:65:13:2E:E6:18:69 Certificate issuer: /CN=4c5d045b-8e9b-44f7-b145-431d681f8f89 Certificate serial: 010D0C9F4328584EBC76FFC62C0DC291E29AF100 Authority key identifier: 7D:8C:0C:D7:96:28:3E:AE:07:27:69:D2:12:39:FA:EE:AB:00:ED:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4c5d045b-8e9b-44f7-b145-431d681f8f89.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4c5d045b-8e9b-44f7-b145-431d681f8f89/f056aaa2-508d-3c4b-98fa-3afabb70b1ac.roa Signing time: Wed 05 Aug 2026 13:00:12 +0000 ROA not before: Wed 05 Aug 2026 13:00:12 +0000 ROA not after: Tue 03 Nov 2026 14:00:12 +0000 asID: 394019 IP address blocks: 130.12.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4c5d045b-8e9b-44f7-b145-431d681f8f89/4c5d045b-8e9b-44f7-b145-431d681f8f89.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4c5d045b-8e9b-44f7-b145-431d681f8f89/4c5d045b-8e9b-44f7-b145-431d681f8f89.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4c5d045b-8e9b-44f7-b145-431d681f8f89.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:bc:76:ff:c6:2c:0d:c2:91:e2:9a:f1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c5d045b-8e9b-44f7-b145-431d681f8f89 Validity Not Before: Aug 5 13:00:12 2026 GMT Not After : Nov 3 14:00:12 2026 GMT Subject: CN=d441d7ce-4930-4973-b35f-b11d365efbc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:55:08:ca:66:a2:09:52:df:fe:a4:d0:ad:31: 39:e3:12:a5:57:91:e1:75:3b:57:3f:a7:39:98:1e: 00:85:8d:55:4f:4b:98:41:27:66:33:d4:89:f3:f6: f7:1c:2d:f6:5a:fb:61:2d:68:f1:fe:3a:2a:8e:df: d6:22:a0:cc:b1:a2:43:cb:99:5b:8b:70:f5:2d:88: 10:80:f8:7e:3b:20:39:40:33:92:af:6a:ea:1b:3c: 79:19:15:8c:aa:89:1d:17:3a:67:fc:20:76:a6:0e: 20:bb:1f:fd:b2:81:63:c4:95:5c:e6:58:12:82:9e: dc:c5:ee:62:bb:13:ce:32:b8:39:6c:6b:0d:3a:8c: 33:f2:3e:54:99:a5:84:95:eb:f3:ec:17:7b:ad:20: ab:7e:0e:71:d2:38:24:b6:11:96:af:97:c2:d4:d1: 8f:54:e6:5b:ae:a9:48:31:0e:22:c5:64:3e:93:ba: cc:a3:bd:ac:dc:27:7a:61:ed:d6:e9:b6:0b:90:99: 7a:f3:29:85:36:f5:44:51:c9:a9:37:c7:f3:5f:e0: 52:40:64:8f:d9:c6:6a:a8:08:57:89:82:8a:b3:d2: a1:ae:3c:91:ed:85:cd:e6:b7:ad:1c:ee:48:bc:f6: 68:07:af:72:8f:de:5c:12:3b:77:9a:46:5c:96:18: e3:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:85:6F:5D:72:15:8D:20:A4:69:D5:D7:DD:68:65:13:2E:E6:18:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4c5d045b-8e9b-44f7-b145-431d681f8f89/f056aaa2-508d-3c4b-98fa-3afabb70b1ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4c5d045b-8e9b-44f7-b145-431d681f8f89/4c5d045b-8e9b-44f7-b145-431d681f8f89.crl X509v3 Authority Key Identifier: keyid:7D:8C:0C:D7:96:28:3E:AE:07:27:69:D2:12:39:FA:EE:AB:00:ED:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4c5d045b-8e9b-44f7-b145-431d681f8f89.cer sbgp-ipAddrBlock: critical IPv4: 130.12.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:68:f5:53:5d:e4:95:8b:56:59:2c:52:f0:4f:9f:4a:74:53: 33:91:e3:2e:b9:af:77:d4:1e:50:d5:24:e8:2e:b7:98:89:36: 97:03:b5:bf:8d:be:8e:71:c8:de:9b:f3:d9:e9:9f:ac:6e:3a: 68:fc:a9:8c:cc:54:dc:53:75:27:6e:5f:3b:d8:3f:2d:45:9a: 1d:0a:e9:dc:51:3d:92:76:55:11:f9:a8:42:75:0a:cd:a2:75: 70:be:dd:71:2b:a7:ad:a4:c5:99:70:d6:e1:a6:b3:d5:91:dc: 9b:f4:74:46:51:1c:d2:da:b4:01:ba:61:e9:0b:90:33:b7:4a: 7c:ea:74:7f:cf:72:68:8a:0f:24:d4:1f:94:1b:fc:f2:86:56: 86:b9:f0:e1:9f:c7:a4:bc:35:16:65:1e:b5:8b:38:a8:51:68: 36:87:17:d5:32:c8:fb:bd:20:fe:18:ac:cc:68:d7:c9:57:0c: 46:16:77:0f:6e:fc:00:8a:aa:b0:4b:93:29:f4:28:b2:6b:10: 8d:ac:89:64:04:1f:9d:2e:f9:13:0e:3b:be:bd:df:d6:81:db: 04:19:b5:cf:0c:c9:4b:4e:fa:08:89:c0:e9:bc:1c:9f:20:c3: 41:9c:0a:f9:29:3f:da:e4:81:2b:61:ea:f2:fe:a1:7e:55:9f: bd:24:b5:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE68dv/GLA3CkeKa8QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGM1ZDA0NWItOGU5Yi00NGY3LWIxNDUtNDMxZDY4MWY4 Zjg5MB4XDTI2MDgwNTEzMDAxMloXDTI2MTEwMzE0MDAxMlowLzEtMCsGA1UEAxMk ZDQ0MWQ3Y2UtNDkzMC00OTczLWIzNWYtYjExZDM2NWVmYmMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFUIymaiCVLf/qTQrTE54xKlV5HhdTtXP6c5 mB4AhY1VT0uYQSdmM9SJ8/b3HC32WvthLWjx/joqjt/WIqDMsaJDy5lbi3D1LYgQ gPh+OyA5QDOSr2rqGzx5GRWMqokdFzpn/CB2pg4gux/9soFjxJVc5lgSgp7cxe5i uxPOMrg5bGsNOowz8j5UmaWElevz7Bd7rSCrfg5x0jgkthGWr5fC1NGPVOZbrqlI MQ4ixWQ+k7rMo72s3Cd6Ye3W6bYLkJl68ymFNvVEUcmpN8fzX+BSQGSP2cZqqAhX iYKKs9KhrjyR7YXN5retHO5IvPZoB69yj95cEjt3mkZclhjjdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNyFb11yFY0gpGnV191oZRMu5hhpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi80YzVk MDQ1Yi04ZTliLTQ0ZjctYjE0NS00MzFkNjgxZjhmODkvZjA1NmFhYTItNTA4ZC0z YzRiLTk4ZmEtM2FmYWJiNzBiMWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNGM1ZDA0NWItOGU5Yi00NGY3LWIx NDUtNDMxZDY4MWY4Zjg5LzRjNWQwNDViLThlOWItNDRmNy1iMTQ1LTQzMWQ2ODFm OGY4OS5jcmwwHwYDVR0jBBgwFoAUfYwM15YoPq4HJ2nSEjn67qsA7R8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi80YzVkMDQ1Yi04ZTliLTQ0ZjctYjE0NS00MzFk NjgxZjhmODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAggzTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC9o9VNd5JWLVlksUvBPn0p0UzOR4y65r3fUHlDVJOgut5iJNpcDtb+N vo5xyN6b89npn6xuOmj8qYzMVNxTdSduXzvYPy1Fmh0K6dxRPZJ2VRH5qEJ1Cs2i dXC+3XErp62kxZlw1uGms9WR3Jv0dEZRHNLatAG6YekLkDO3SnzqdH/PcmiKDyTU H5Qb/PKGVoa58OGfx6S8NRZlHrWLOKhRaDaHF9UyyPu9IP4YrMxo18lXDEYWdw9u /ACKqrBLkyn0KLJrEI2siWQEH50u+RMOO76939aB2wQZtc8MyUtO+giJwOm8HJ8g w0GcCvkpP9rkgSth6vL+oX5Vn70ktb8= -----END CERTIFICATE-----Generated at Sun Sep 13 15:00:59 2026 by rpki-client