$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4c5d045b-8e9b-44f7-b145-431d681f8f89/f056aaa2-508d-3c4b-98fa-3afabb70b1ac.roa File: f056aaa2-508d-3c4b-98fa-3afabb70b1ac.roa (raw, json) Hash identifier: dRPWLx3NW7REXpurQham1oPwE+j9afCgg2Recinws0w= Subject key identifier: 54:D4:2B:31:35:AA:FC:75:A0:45:1B:26:8A:1D:68:9F:AA:3C:57:79 Certificate issuer: /CN=4c5d045b-8e9b-44f7-b145-431d681f8f89 Certificate serial: 010D0C9F4328584F5E62E06964FF723B02604E40 Authority key identifier: 7D:8C:0C:D7:96:28:3E:AE:07:27:69:D2:12:39:FA:EE:AB:00:ED:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4c5d045b-8e9b-44f7-b145-431d681f8f89.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4c5d045b-8e9b-44f7-b145-431d681f8f89/f056aaa2-508d-3c4b-98fa-3afabb70b1ac.roa Signing time: Fri 02 Oct 2026 13:00:13 +0000 ROA not before: Fri 02 Oct 2026 13:00:13 +0000 ROA not after: Thu 31 Dec 2026 14:00:13 +0000 asID: 394019 IP address blocks: 130.12.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4c5d045b-8e9b-44f7-b145-431d681f8f89/4c5d045b-8e9b-44f7-b145-431d681f8f89.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4c5d045b-8e9b-44f7-b145-431d681f8f89/4c5d045b-8e9b-44f7-b145-431d681f8f89.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4c5d045b-8e9b-44f7-b145-431d681f8f89.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:62:e0:69:64:ff:72:3b:02:60:4e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c5d045b-8e9b-44f7-b145-431d681f8f89 Validity Not Before: Oct 2 13:00:13 2026 GMT Not After : Dec 31 14:00:13 2026 GMT Subject: CN=bcad0b20-e95f-4495-8418-864ad1762bf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:4e:f3:dc:38:56:54:dd:0d:6c:78:00:c6:08: 7a:12:0b:a9:2e:10:ed:2c:1e:90:88:71:63:ba:87: cc:6c:04:56:c9:32:5b:01:44:f6:41:5c:82:06:3e: 55:67:15:e5:d7:9f:c1:0b:d6:a9:b2:9c:6b:0e:e2: f9:f7:2a:35:0a:3b:8d:15:9f:a5:66:6b:27:1f:f9: 93:e0:d0:c6:65:89:6b:ba:97:0e:26:9d:ff:49:89: 76:c9:c1:4b:44:51:5c:7d:e2:f5:96:93:1d:20:63: f3:4a:a6:7d:a2:1b:db:d3:d6:60:48:0c:a6:b6:55: 83:83:7c:2b:8d:05:95:58:4c:9a:b5:bc:67:97:7e: 95:2c:1d:57:b5:82:ec:d7:84:d5:97:93:95:8d:32: 81:16:d5:db:64:cd:a8:23:aa:27:1f:e6:54:c5:9a: e5:0a:cf:cf:d5:a0:83:70:87:eb:ba:c0:5a:20:c7: 0b:7d:bd:39:18:43:fa:b1:e2:c9:0c:6e:e8:ef:25: 54:78:25:79:37:cf:3c:f0:64:d1:9f:b5:00:ac:42: a0:7f:d9:af:f9:62:f3:66:97:e5:d7:bc:8a:c1:6e: 42:b2:63:c7:1c:79:12:9f:a6:26:11:bf:77:3e:cf: ca:dc:61:ab:f1:83:74:27:cd:65:9d:11:f1:ae:b4: 1c:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:D4:2B:31:35:AA:FC:75:A0:45:1B:26:8A:1D:68:9F:AA:3C:57:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4c5d045b-8e9b-44f7-b145-431d681f8f89/f056aaa2-508d-3c4b-98fa-3afabb70b1ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4c5d045b-8e9b-44f7-b145-431d681f8f89/4c5d045b-8e9b-44f7-b145-431d681f8f89.crl X509v3 Authority Key Identifier: keyid:7D:8C:0C:D7:96:28:3E:AE:07:27:69:D2:12:39:FA:EE:AB:00:ED:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4c5d045b-8e9b-44f7-b145-431d681f8f89.cer sbgp-ipAddrBlock: critical IPv4: 130.12.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:b4:41:18:8c:f8:67:df:a6:f0:36:cc:ed:b0:98:32:a0:0f: 6b:d0:08:ed:80:6f:c3:1f:3d:f3:57:6b:83:d5:7e:21:23:2e: 23:f0:e1:94:89:ec:cb:b4:ea:60:ea:70:e0:a2:79:ac:a2:41: 39:da:2d:31:77:a2:b8:cf:7d:22:47:19:61:27:99:44:8c:56: d5:cd:8b:0f:43:09:98:6f:e7:db:00:b6:46:89:83:33:91:d3: 0e:21:11:77:5a:c0:dc:85:28:12:b6:7c:d8:dd:a6:a5:f9:de: 43:96:59:d2:10:64:9b:83:b5:ea:9d:78:c0:09:65:44:53:3d: 19:2a:68:6f:2a:f6:d0:bf:67:c0:eb:f6:5a:be:9f:ec:39:20: 8f:74:6b:64:72:f6:19:94:f8:d0:bd:ca:f0:ee:80:64:f8:c9: cf:cb:bf:a0:a6:58:7a:bc:6c:3c:35:14:e4:1a:21:da:e6:eb: 6a:0b:2e:0d:18:8d:51:b7:bc:85:66:80:c4:b7:62:0e:63:e0: 3d:de:e2:36:88:a8:e9:81:6e:c1:a1:a3:5d:f9:d9:0c:f7:9a: d4:da:8c:54:32:48:8c:ae:c3:16:3f:86:3e:b3:cf:7a:3a:57: 7e:bf:69:56:82:17:90:1e:17:82:87:c0:b0:60:da:22:d2:2e: 7c:73:f3:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9eYuBpZP9yOwJgTkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGM1ZDA0NWItOGU5Yi00NGY3LWIxNDUtNDMxZDY4MWY4 Zjg5MB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk YmNhZDBiMjAtZTk1Zi00NDk1LTg0MTgtODY0YWQxNzYyYmY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxE7z3DhWVN0NbHgAxgh6EgupLhDtLB6QiHFj uofMbARWyTJbAUT2QVyCBj5VZxXl15/BC9apspxrDuL59yo1CjuNFZ+lZmsnH/mT 4NDGZYlrupcOJp3/SYl2ycFLRFFcfeL1lpMdIGPzSqZ9ohvb09ZgSAymtlWDg3wr jQWVWEyatbxnl36VLB1XtYLs14TVl5OVjTKBFtXbZM2oI6onH+ZUxZrlCs/P1aCD cIfrusBaIMcLfb05GEP6seLJDG7o7yVUeCV5N8888GTRn7UArEKgf9mv+WLzZpfl 17yKwW5CsmPHHHkSn6YmEb93Ps/K3GGr8YN0J81lnRHxrrQcCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFTUKzE1qvx1oEUbJoodaJ+qPFd5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi80YzVk MDQ1Yi04ZTliLTQ0ZjctYjE0NS00MzFkNjgxZjhmODkvZjA1NmFhYTItNTA4ZC0z YzRiLTk4ZmEtM2FmYWJiNzBiMWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNGM1ZDA0NWItOGU5Yi00NGY3LWIx NDUtNDMxZDY4MWY4Zjg5LzRjNWQwNDViLThlOWItNDRmNy1iMTQ1LTQzMWQ2ODFm OGY4OS5jcmwwHwYDVR0jBBgwFoAUfYwM15YoPq4HJ2nSEjn67qsA7R8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi80YzVkMDQ1Yi04ZTliLTQ0ZjctYjE0NS00MzFk NjgxZjhmODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAggzTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD+0QRiM+GffpvA2zO2wmDKgD2vQCO2Ab8MfPfNXa4PVfiEjLiPw4ZSJ 7Mu06mDqcOCieayiQTnaLTF3orjPfSJHGWEnmUSMVtXNiw9DCZhv59sAtkaJgzOR 0w4hEXdawNyFKBK2fNjdpqX53kOWWdIQZJuDteqdeMAJZURTPRkqaG8q9tC/Z8Dr 9lq+n+w5II90a2Ry9hmU+NC9yvDugGT4yc/Lv6CmWHq8bDw1FOQaIdrm62oLLg0Y jVG3vIVmgMS3Yg5j4D3e4jaIqOmBbsGho1352Qz3mtTajFQySIyuwxY/hj6zz3o6 V36/aVaCF5AeF4KHwLBg2iLSLnxz844= -----END CERTIFICATE-----Generated at Sat Oct 31 09:39:26 2026 by rpki-client