$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a6412c9-a3f0-428f-87a2-63602f7bcc08/f522dbcb-de74-3429-9403-fa9c5f552a1c.roa File: f522dbcb-de74-3429-9403-fa9c5f552a1c.roa (raw, json) Hash identifier: qb+eQ1y5cKCq8IZhy9NZQJIGbgVyjtlcej+0GdAAHLE= Subject key identifier: E8:9B:B7:2E:BC:68:0B:6F:FC:FD:25:E3:4E:3B:1A:A4:13:12:A7:9D Certificate issuer: /CN=8a6412c9-a3f0-428f-87a2-63602f7bcc08 Certificate serial: 010D0C9F4328584F51D2A10A4958683512881980 Authority key identifier: DD:7E:3E:BE:EC:F1:5B:3A:5F:8A:6E:C8:92:18:21:C0:4F:DD:50:67 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a6412c9-a3f0-428f-87a2-63602f7bcc08.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a6412c9-a3f0-428f-87a2-63602f7bcc08/f522dbcb-de74-3429-9403-fa9c5f552a1c.roa Signing time: Mon 28 Sep 2026 01:00:12 +0000 ROA not before: Mon 28 Sep 2026 01:00:12 +0000 ROA not after: Sun 27 Dec 2026 02:00:12 +0000 asID: 399468 IP address blocks: 130.12.76.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a6412c9-a3f0-428f-87a2-63602f7bcc08/8a6412c9-a3f0-428f-87a2-63602f7bcc08.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a6412c9-a3f0-428f-87a2-63602f7bcc08/8a6412c9-a3f0-428f-87a2-63602f7bcc08.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a6412c9-a3f0-428f-87a2-63602f7bcc08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 24 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:51:d2:a1:0a:49:58:68:35:12:88:19:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a6412c9-a3f0-428f-87a2-63602f7bcc08 Validity Not Before: Sep 28 01:00:12 2026 GMT Not After : Dec 27 02:00:12 2026 GMT Subject: CN=85e5b27a-6824-4d48-95fe-f76d0e3882df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:f5:84:be:7d:18:59:51:db:60:2a:01:b6:99: 26:61:60:cf:bd:bf:d3:ce:4d:45:71:04:40:4b:34: e1:e9:d7:25:7a:14:f4:fd:cb:5a:ae:74:58:12:ac: 50:a4:cf:ee:57:69:f8:fc:a2:9c:bc:31:fb:35:55: 83:73:9a:c4:9c:e6:53:63:68:71:07:3c:b2:d8:e0: ab:16:10:3c:4c:86:33:35:0c:ad:0f:a0:90:46:93: 1f:d9:9d:2e:5f:9a:0f:df:9c:14:99:70:59:fa:f9: 27:f9:de:78:7f:da:98:d8:ce:ef:97:65:70:13:b4: 52:78:77:5f:3d:66:ae:13:05:2a:01:8c:80:b6:1f: 5e:20:c0:ac:02:ee:bf:df:76:88:76:96:16:54:95: 95:47:cf:7a:3d:ed:1a:e6:5b:0e:dd:1c:9a:aa:e6: 67:69:08:59:f7:2a:55:df:d4:f3:5c:54:27:65:17: 84:8e:b8:a6:11:a4:6f:73:67:ff:ab:2d:ed:5a:ff: bf:81:6d:37:f8:5a:f2:e5:ac:ac:3f:1f:e5:55:4d: 65:27:6f:39:0b:ff:04:d2:61:7f:04:0e:b7:2e:58: 2d:f6:de:c9:20:62:16:5a:09:5b:35:fe:86:2e:e4: d0:2c:d3:5e:7b:17:8b:cc:28:5d:07:f2:d8:23:4f: c1:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:9B:B7:2E:BC:68:0B:6F:FC:FD:25:E3:4E:3B:1A:A4:13:12:A7:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a6412c9-a3f0-428f-87a2-63602f7bcc08/f522dbcb-de74-3429-9403-fa9c5f552a1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a6412c9-a3f0-428f-87a2-63602f7bcc08/8a6412c9-a3f0-428f-87a2-63602f7bcc08.crl X509v3 Authority Key Identifier: keyid:DD:7E:3E:BE:EC:F1:5B:3A:5F:8A:6E:C8:92:18:21:C0:4F:DD:50:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a6412c9-a3f0-428f-87a2-63602f7bcc08.cer sbgp-ipAddrBlock: critical IPv4: 130.12.76.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:a1:c4:d4:4c:dc:6e:78:48:4e:c5:7b:26:20:01:ac:43:b3: a5:33:64:10:72:a2:d1:15:d7:f0:b2:0a:ed:ab:ad:ef:db:b8: 42:a7:e8:63:73:75:a2:47:de:3f:c2:fd:37:d1:62:a7:6a:2f: 3e:d8:37:aa:11:aa:70:e0:c9:a6:57:60:67:17:51:0d:09:a7: 5d:52:52:b9:f9:70:ad:c4:e9:79:47:11:88:0b:34:3e:bb:d5: 6c:58:83:ac:4d:ed:c8:06:fd:08:03:0b:fa:b8:fe:84:26:77: 98:61:55:bf:26:27:cc:a0:90:cf:25:f9:c6:af:ca:df:9c:26: 84:93:23:bb:66:d1:eb:d7:ec:37:ec:61:54:5b:fc:38:dd:56: 61:24:3c:01:02:c3:b3:5f:00:23:a7:b3:20:71:6c:fe:b7:72: 32:25:8d:3b:91:84:3f:bc:70:77:68:0a:e0:f5:71:e9:50:02: 5e:c7:f2:e4:0e:57:6e:f0:b7:4b:9a:90:98:9c:32:2b:fd:82: 96:c4:b8:3f:7f:2e:e6:5d:25:2a:cb:76:d3:4f:71:0d:4f:84: 48:71:a8:47:61:dd:7f:bf:fa:4c:55:91:a4:84:87:0d:90:87: 76:6d:d7:ef:07:36:1b:36:80:89:04:78:0f:c7:6c:cd:9d:65: c2:da:95:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9R0qEKSVhoNRKIGYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE2NDEyYzktYTNmMC00MjhmLTg3YTItNjM2MDJmN2Jj YzA4MB4XDTI2MDkyODAxMDAxMloXDTI2MTIyNzAyMDAxMlowLzEtMCsGA1UEAxMk ODVlNWIyN2EtNjgyNC00ZDQ4LTk1ZmUtZjc2ZDBlMzg4MmRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvWEvn0YWVHbYCoBtpkmYWDPvb/Tzk1FcQRA SzTh6dclehT0/ctarnRYEqxQpM/uV2n4/KKcvDH7NVWDc5rEnOZTY2hxBzyy2OCr FhA8TIYzNQytD6CQRpMf2Z0uX5oP35wUmXBZ+vkn+d54f9qY2M7vl2VwE7RSeHdf PWauEwUqAYyAth9eIMCsAu6/33aIdpYWVJWVR896Pe0a5lsO3RyaquZnaQhZ9ypV 39TzXFQnZReEjrimEaRvc2f/qy3tWv+/gW03+Fry5aysPx/lVU1lJ285C/8E0mF/ BA63Llgt9t7JIGIWWglbNf6GLuTQLNNeexeLzChdB/LYI0/BcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOibty68aAtv/P0l4047GqQTEqedMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84YTY0 MTJjOS1hM2YwLTQyOGYtODdhMi02MzYwMmY3YmNjMDgvZjUyMmRiY2ItZGU3NC0z NDI5LTk0MDMtZmE5YzVmNTUyYTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvOGE2NDEyYzktYTNmMC00MjhmLTg3 YTItNjM2MDJmN2JjYzA4LzhhNjQxMmM5LWEzZjAtNDI4Zi04N2EyLTYzNjAyZjdi Y2MwOC5jcmwwHwYDVR0jBBgwFoAU3X4+vuzxWzpfim7IkhghwE/dUGcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi84YTY0MTJjOS1hM2YwLTQyOGYtODdhMi02MzYw MmY3YmNjMDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCggxMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB+hxNRM3G54SE7FeyYgAaxDs6UzZBByotEV1/CyCu2rre/buEKn6GNz daJH3j/C/TfRYqdqLz7YN6oRqnDgyaZXYGcXUQ0Jp11SUrn5cK3E6XlHEYgLND67 1WxYg6xN7cgG/QgDC/q4/oQmd5hhVb8mJ8ygkM8l+cavyt+cJoSTI7tm0evX7Dfs YVRb/DjdVmEkPAECw7NfACOnsyBxbP63cjIljTuRhD+8cHdoCuD1celQAl7H8uQO V27wt0uakJicMiv9gpbEuD9/LuZdJSrLdtNPcQ1PhEhxqEdh3X+/+kxVkaSEhw2Q h3Zt1+8HNhs2gIkEeA/HbM2dZcLalTA= -----END CERTIFICATE-----Generated at Thu Oct 22 18:45:22 2026 by rpki-client