$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afa71238-3202-40f6-8fdd-d9505c5a8635/dd3d50c1-47bf-3100-bea5-123ccdcb515f.roa File: dd3d50c1-47bf-3100-bea5-123ccdcb515f.roa (raw, json) Hash identifier: HEXgnWIUgZ9W/jMIylprzQAQxoHJetVaMhM3OEaFR2E= Subject key identifier: ED:A4:5B:9D:29:76:06:01:F2:CF:F1:C2:F7:37:80:91:AD:F0:9F:E6 Certificate issuer: /CN=afa71238-3202-40f6-8fdd-d9505c5a8635 Certificate serial: 010D0C9F4328584EB9AC4DC68AAE76388475FB80 Authority key identifier: 5B:F6:61:9D:C4:CA:54:0A:21:F2:91:5D:E2:CE:9E:F8:1E:B8:79:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afa71238-3202-40f6-8fdd-d9505c5a8635.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afa71238-3202-40f6-8fdd-d9505c5a8635/dd3d50c1-47bf-3100-bea5-123ccdcb515f.roa Signing time: Tue 04 Aug 2026 13:00:12 +0000 ROA not before: Tue 04 Aug 2026 13:00:12 +0000 ROA not after: Mon 02 Nov 2026 14:00:12 +0000 asID: 401523 IP address blocks: 130.12.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afa71238-3202-40f6-8fdd-d9505c5a8635/afa71238-3202-40f6-8fdd-d9505c5a8635.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afa71238-3202-40f6-8fdd-d9505c5a8635/afa71238-3202-40f6-8fdd-d9505c5a8635.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afa71238-3202-40f6-8fdd-d9505c5a8635.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b9:ac:4d:c6:8a:ae:76:38:84:75:fb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afa71238-3202-40f6-8fdd-d9505c5a8635 Validity Not Before: Aug 4 13:00:12 2026 GMT Not After : Nov 2 14:00:12 2026 GMT Subject: CN=0efd63b4-5702-4764-a2e3-50b2dcdb23a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:08:d8:3a:1e:a0:36:0f:13:17:47:08:1f:71: c7:31:1d:12:f4:bc:5f:ea:31:f1:c4:d0:0d:33:3e: d1:44:24:4e:9d:ee:c3:6f:00:80:3d:a3:9f:de:7b: 6c:c2:06:67:63:c8:35:1f:f4:34:33:8e:29:58:78: 6a:06:ed:ff:be:f1:a1:4d:95:e7:8f:0c:e7:ad:0f: 3d:9d:13:39:de:ba:12:91:b8:4a:64:dd:2b:76:b0: 32:16:83:73:4b:c9:d8:3d:11:f3:4e:b4:b5:72:c3: 82:b8:52:86:2e:84:b0:75:ff:25:8a:5d:9f:ba:fe: dc:c3:78:7d:27:96:60:b6:29:83:7c:fa:2a:d1:e2: fb:8c:37:8d:14:41:d7:5c:e4:ae:19:85:2a:a4:f9: 57:60:08:a4:9d:56:c2:4e:ed:fc:4f:d2:e2:65:44: 7b:c6:4c:33:bb:a2:86:4d:8d:61:54:c3:47:f1:a0: 67:73:46:f3:0a:b9:f9:ed:72:17:e9:f7:a6:fc:1b: af:07:23:ae:8a:0f:8c:12:31:50:69:6c:39:c5:89: 15:ea:d1:b9:9b:eb:dd:82:cf:61:1e:9b:a3:27:40: 29:a8:df:f4:10:c0:3d:45:34:4a:3b:44:c1:57:a9: 29:57:05:9a:1c:a5:65:62:a0:69:ac:a2:ac:27:16: f6:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:A4:5B:9D:29:76:06:01:F2:CF:F1:C2:F7:37:80:91:AD:F0:9F:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afa71238-3202-40f6-8fdd-d9505c5a8635/dd3d50c1-47bf-3100-bea5-123ccdcb515f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afa71238-3202-40f6-8fdd-d9505c5a8635/afa71238-3202-40f6-8fdd-d9505c5a8635.crl X509v3 Authority Key Identifier: keyid:5B:F6:61:9D:C4:CA:54:0A:21:F2:91:5D:E2:CE:9E:F8:1E:B8:79:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afa71238-3202-40f6-8fdd-d9505c5a8635.cer sbgp-ipAddrBlock: critical IPv4: 130.12.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:7d:30:c8:af:1d:15:98:32:d1:25:70:0f:86:bb:26:08:64: cc:30:5a:03:fe:39:aa:b0:12:6e:3a:b7:f9:c5:ed:ce:e0:39: 23:21:3e:36:0a:ac:d8:fc:48:58:ee:9f:4c:21:24:30:d1:60: 8f:4f:10:d3:dd:0c:4c:09:7e:70:f0:db:85:af:27:9f:98:bd: 08:1a:1d:dc:d6:ff:7a:30:77:55:4c:a9:38:08:4b:57:46:f9: 50:4c:9d:b7:20:d8:9d:80:31:48:82:ff:50:6c:3c:d9:90:d8: a9:60:0d:72:38:77:ae:80:f1:48:94:9d:a4:94:59:5b:67:72: 5b:5e:88:c2:17:44:54:ec:be:9b:3a:0c:d4:44:70:42:82:f6: fd:52:b7:cc:e6:27:95:16:d5:60:b7:9e:78:97:5b:ca:0e:8b: ba:70:66:49:59:e7:a2:7c:22:5b:44:0d:1a:a0:1e:0c:63:23: 4b:43:09:a9:9f:1e:02:83:c4:50:e2:c4:e0:54:9b:4c:b2:01: af:10:69:28:4f:5d:ce:98:e5:3e:eb:57:8f:a2:54:29:a3:92: 7b:40:77:e4:8e:1e:27:ef:98:9c:d6:cc:de:5f:e6:74:61:c4: 95:e5:d9:67:7c:f7:85:06:99:a6:68:f0:c1:8a:32:c4:e7:c7: 65:81:09:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE65rE3Giq52OIR1+4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZhNzEyMzgtMzIwMi00MGY2LThmZGQtZDk1MDVjNWE4 NjM1MB4XDTI2MDgwNDEzMDAxMloXDTI2MTEwMjE0MDAxMlowLzEtMCsGA1UEAxMk MGVmZDYzYjQtNTcwMi00NzY0LWEyZTMtNTBiMmRjZGIyM2EyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAjYOh6gNg8TF0cIH3HHMR0S9Lxf6jHxxNAN Mz7RRCROne7DbwCAPaOf3ntswgZnY8g1H/Q0M44pWHhqBu3/vvGhTZXnjwznrQ89 nRM53roSkbhKZN0rdrAyFoNzS8nYPRHzTrS1csOCuFKGLoSwdf8lil2fuv7cw3h9 J5ZgtimDfPoq0eL7jDeNFEHXXOSuGYUqpPlXYAiknVbCTu38T9LiZUR7xkwzu6KG TY1hVMNH8aBnc0bzCrn57XIX6fem/BuvByOuig+MEjFQaWw5xYkV6tG5m+vdgs9h HpujJ0ApqN/0EMA9RTRKO0TBV6kpVwWaHKVlYqBprKKsJxb2UQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO2kW50pdgYB8s/xwvc3gJGt8J/mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hZmE3 MTIzOC0zMjAyLTQwZjYtOGZkZC1kOTUwNWM1YTg2MzUvZGQzZDUwYzEtNDdiZi0z MTAwLWJlYTUtMTIzY2NkY2I1MTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWZhNzEyMzgtMzIwMi00MGY2LThm ZGQtZDk1MDVjNWE4NjM1L2FmYTcxMjM4LTMyMDItNDBmNi04ZmRkLWQ5NTA1YzVh ODYzNS5jcmwwHwYDVR0jBBgwFoAUW/ZhncTKVAoh8pFd4s6e+B64eY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hZmE3MTIzOC0zMjAyLTQwZjYtOGZkZC1kOTUw NWM1YTg2MzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAggwdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALB9MMivHRWYMtElcA+GuyYIZMwwWgP+OaqwEm46t/nF7c7gOSMhPjYK rNj8SFjun0whJDDRYI9PENPdDEwJfnDw24WvJ5+YvQgaHdzW/3owd1VMqTgIS1dG +VBMnbcg2J2AMUiC/1BsPNmQ2KlgDXI4d66A8UiUnaSUWVtnclteiMIXRFTsvps6 DNREcEKC9v1St8zmJ5UW1WC3nniXW8oOi7pwZklZ56J8IltEDRqgHgxjI0tDCamf HgKDxFDixOBUm0yyAa8QaShPXc6Y5T7rV4+iVCmjkntAd+SOHifvmJzWzN5f5nRh xJXl2Wd894UGmaZo8MGKMsTnx2WBCaw= -----END CERTIFICATE-----Generated at Tue Aug 25 21:13:58 2026 by rpki-client