$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/3969ce54-6a81-30a0-a86e-2f5d0d4778b1.roa File: 3969ce54-6a81-30a0-a86e-2f5d0d4778b1.roa (raw, json) Hash identifier: icKCiDmPPDPh0UtTbQNJXV/MDdMvQOOMBuf7bWZjuvY= Subject key identifier: 66:47:10:59:51:86:F6:6C:80:6C:A2:46:45:96:D5:4B:24:E4:B4:20 Certificate issuer: /CN=820e56e8-763b-4037-929e-b01c8d786e75 Certificate serial: 010D0C9F4328584EF01CA81B60DA961854DCD800 Authority key identifier: 3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/3969ce54-6a81-30a0-a86e-2f5d0d4778b1.roa Signing time: Mon 24 Aug 2026 01:00:12 +0000 ROA not before: Mon 24 Aug 2026 01:00:12 +0000 ROA not after: Sun 22 Nov 2026 02:00:12 +0000 asID: 399275 IP address blocks: 130.12.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 29 Aug 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f0:1c:a8:1b:60:da:96:18:54:dc:d8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=820e56e8-763b-4037-929e-b01c8d786e75 Validity Not Before: Aug 24 01:00:12 2026 GMT Not After : Nov 22 02:00:12 2026 GMT Subject: CN=08029842-61d9-4f01-9442-ac0697ca778d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:87:81:4a:07:a4:f4:02:96:5d:c0:63:fe:93: ae:c6:0d:99:0f:70:66:e6:b0:c3:ca:99:61:aa:03: 5a:aa:1e:5c:db:ae:0a:15:04:50:a9:64:74:fa:ce: 68:7e:b6:c7:26:73:95:5b:b6:c1:b7:02:c2:b9:d7: 58:12:f8:e0:4f:1b:9c:39:45:a8:b9:0a:b9:0b:48: 6e:8c:3d:76:c3:78:12:0e:23:88:aa:ff:58:e9:ba: 63:0d:c3:df:3b:5c:3b:be:59:de:4e:70:db:09:5c: 3d:ce:c0:a3:43:34:13:68:3f:13:05:08:fa:ae:b7: a2:58:3c:71:2e:2a:61:97:a5:15:a5:90:29:cc:2e: c7:d1:f1:7d:3c:72:f2:ee:e3:06:4a:91:dd:dd:f3: 75:2e:cd:9e:5e:df:98:ee:6c:e3:34:bf:66:16:0f: d6:57:11:ec:dd:9e:c6:42:d1:d0:cb:20:f8:61:9b: 4c:86:d1:a9:ae:1a:ef:a1:d1:d3:d5:ee:0b:40:b7: b1:15:ad:ef:57:27:9e:5b:fd:08:70:5f:68:c6:2f: 8f:29:48:99:1d:e0:7a:99:7e:6f:0c:e0:f9:db:a0: 6f:80:bd:d6:ac:87:f8:ed:d3:ef:c7:2b:16:20:87: 5e:55:71:40:8e:8f:76:e6:74:e0:3c:23:ed:5b:71: b9:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:47:10:59:51:86:F6:6C:80:6C:A2:46:45:96:D5:4B:24:E4:B4:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/3969ce54-6a81-30a0-a86e-2f5d0d4778b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.crl X509v3 Authority Key Identifier: keyid:3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer sbgp-ipAddrBlock: critical IPv4: 130.12.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:65:d0:57:3a:62:f9:b2:33:00:33:f1:06:00:d4:75:98:af: 83:91:8e:8f:dd:72:09:76:10:70:50:7f:0f:b1:47:b3:bd:c8: dc:dc:10:00:d8:4e:50:4d:3a:86:96:98:27:f3:13:6d:5b:5c: 45:0d:51:99:ce:cb:cf:32:38:37:97:00:48:b2:a0:da:fd:36: d5:77:d4:fd:11:34:0e:54:0c:a2:eb:ad:29:72:b7:a2:f1:0c: f5:76:da:93:17:18:18:b7:1f:f5:d4:ac:c2:92:c7:ef:7a:f3: 58:51:95:bd:74:fe:f2:6d:09:29:57:aa:b6:1a:ac:f8:a2:2d: 08:fc:c0:ff:46:bd:30:16:e7:d2:fe:16:b8:98:01:5e:e5:68: c2:1b:70:0a:11:db:af:a6:27:f0:a0:39:76:ba:4f:02:5b:bb: da:09:95:d2:78:6a:23:ff:92:05:c1:81:0d:1c:c8:53:25:7c: f1:83:d2:ba:c6:fd:a5:7a:6e:63:b9:1f:31:db:2b:18:48:dd: 8a:9c:2a:de:65:6d:35:33:92:b6:d0:67:34:9e:51:2c:e9:3d: bf:34:63:23:01:16:d2:ff:7f:23:bf:ae:7e:28:8b:c5:b1:72: e0:44:2c:db:80:dc:1d:09:86:7b:3b:0b:82:13:11:e1:5f:fe: 0f:01:22:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7wHKgbYNqWGFTc2AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODIwZTU2ZTgtNzYzYi00MDM3LTkyOWUtYjAxYzhkNzg2 ZTc1MB4XDTI2MDgyNDAxMDAxMloXDTI2MTEyMjAyMDAxMlowLzEtMCsGA1UEAxMk MDgwMjk4NDItNjFkOS00ZjAxLTk0NDItYWMwNjk3Y2E3NzhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhIeBSgek9AKWXcBj/pOuxg2ZD3Bm5rDDyplh qgNaqh5c264KFQRQqWR0+s5ofrbHJnOVW7bBtwLCuddYEvjgTxucOUWouQq5C0hu jD12w3gSDiOIqv9Y6bpjDcPfO1w7vlneTnDbCVw9zsCjQzQTaD8TBQj6rreiWDxx Liphl6UVpZApzC7H0fF9PHLy7uMGSpHd3fN1Ls2eXt+Y7mzjNL9mFg/WVxHs3Z7G QtHQyyD4YZtMhtGprhrvodHT1e4LQLexFa3vVyeeW/0IcF9oxi+PKUiZHeB6mX5v DOD526BvgL3WrIf47dPvxysWIIdeVXFAjo925nTgPCPtW3G5twIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGZHEFlRhvZsgGyiRkWW1Usk5LQgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84MjBl NTZlOC03NjNiLTQwMzctOTI5ZS1iMDFjOGQ3ODZlNzUvMzk2OWNlNTQtNmE4MS0z MGEwLWE4NmUtMmY1ZDBkNDc3OGIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODIwZTU2ZTgtNzYzYi00MDM3LTky OWUtYjAxYzhkNzg2ZTc1LzgyMGU1NmU4LTc2M2ItNDAzNy05MjllLWIwMWM4ZDc4 NmU3NS5jcmwwHwYDVR0jBBgwFoAUP3013qVs2g7sbxhuEQO8bIfW0y0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84MjBlNTZlOC03NjNiLTQwMzctOTI5ZS1iMDFj OGQ3ODZlNzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAggyrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJVl0Fc6YvmyMwAz8QYA1HWYr4ORjo/dcgl2EHBQfw+xR7O9yNzcEADY TlBNOoaWmCfzE21bXEUNUZnOy88yODeXAEiyoNr9NtV31P0RNA5UDKLrrSlyt6Lx DPV22pMXGBi3H/XUrMKSx+9681hRlb10/vJtCSlXqrYarPiiLQj8wP9GvTAW59L+ FriYAV7laMIbcAoR26+mJ/CgOXa6TwJbu9oJldJ4aiP/kgXBgQ0cyFMlfPGD0rrG /aV6bmO5HzHbKxhI3YqcKt5lbTUzkrbQZzSeUSzpPb80YyMBFtL/fyO/rn4oi8Wx cuBELNuA3B0Jhns7C4ITEeFf/g8BIpI= -----END CERTIFICATE-----Generated at Thu Aug 27 17:03:01 2026 by rpki-client