$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afa71238-3202-40f6-8fdd-d9505c5a8635/dd3d50c1-47bf-3100-bea5-123ccdcb515f.roa File: dd3d50c1-47bf-3100-bea5-123ccdcb515f.roa (raw, json) Hash identifier: AhNE/caWym+VX9QaGuegex5ZQpbDQ64hkrfExYEhz2Q= Subject key identifier: 52:CF:3D:05:7B:05:3D:C4:C2:01:8A:66:73:EB:AF:5A:CC:0F:7E:2C Certificate issuer: /CN=afa71238-3202-40f6-8fdd-d9505c5a8635 Certificate serial: 010D0C9F4328584F5B97FF131B70A095A9762080 Authority key identifier: 5B:F6:61:9D:C4:CA:54:0A:21:F2:91:5D:E2:CE:9E:F8:1E:B8:79:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afa71238-3202-40f6-8fdd-d9505c5a8635.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afa71238-3202-40f6-8fdd-d9505c5a8635/dd3d50c1-47bf-3100-bea5-123ccdcb515f.roa Signing time: Thu 01 Oct 2026 13:00:12 +0000 ROA not before: Thu 01 Oct 2026 13:00:12 +0000 ROA not after: Wed 30 Dec 2026 14:00:12 +0000 asID: 401523 IP address blocks: 130.12.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afa71238-3202-40f6-8fdd-d9505c5a8635/afa71238-3202-40f6-8fdd-d9505c5a8635.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afa71238-3202-40f6-8fdd-d9505c5a8635/afa71238-3202-40f6-8fdd-d9505c5a8635.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afa71238-3202-40f6-8fdd-d9505c5a8635.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5b:97:ff:13:1b:70:a0:95:a9:76:20:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afa71238-3202-40f6-8fdd-d9505c5a8635 Validity Not Before: Oct 1 13:00:12 2026 GMT Not After : Dec 30 14:00:12 2026 GMT Subject: CN=8987683d-c71d-409d-9e34-1046f92c4faa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a7:b1:20:57:1a:9a:2a:d6:de:13:f0:da:f1: fc:0c:4a:2a:07:f2:5b:ed:9e:1a:f7:99:d8:cd:44: 29:85:71:42:de:ce:d2:2e:6d:97:29:99:7b:fb:7c: 26:95:9f:20:aa:4d:8f:3a:60:a5:45:e3:48:e6:8d: 1d:3a:f1:53:55:9c:10:5c:64:20:49:ab:cd:84:c6: f5:f9:ce:e5:1f:55:44:50:b2:6e:fd:49:4e:e0:82: 1a:d0:5b:71:61:3c:86:77:39:48:e5:ec:e1:b6:43: 92:bb:b5:b2:29:ab:e3:2d:25:8b:21:65:a2:16:40: 64:cb:a1:5f:ee:17:5e:3f:e0:15:ee:39:e5:5b:20: c7:03:fe:f9:74:79:44:93:34:3c:7f:60:d8:38:5c: 07:ce:0d:d0:20:c7:a7:55:ff:d1:cc:de:80:e4:2a: 8b:a1:bf:1c:3d:fe:8e:ab:81:6a:b0:6e:76:83:83: 14:4b:d9:ca:1a:98:83:c1:b6:e9:71:dc:e1:8c:de: d7:fc:6a:f3:dc:59:df:af:26:59:7c:b6:bc:49:2e: ea:ac:65:bb:3c:61:34:5a:76:78:60:b9:36:6d:38: 66:a9:b3:1a:35:55:90:30:6c:a0:67:d9:ff:d0:22: a3:78:57:1a:f8:bb:21:99:83:00:ac:92:ce:1a:ac: 71:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:CF:3D:05:7B:05:3D:C4:C2:01:8A:66:73:EB:AF:5A:CC:0F:7E:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afa71238-3202-40f6-8fdd-d9505c5a8635/dd3d50c1-47bf-3100-bea5-123ccdcb515f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afa71238-3202-40f6-8fdd-d9505c5a8635/afa71238-3202-40f6-8fdd-d9505c5a8635.crl X509v3 Authority Key Identifier: keyid:5B:F6:61:9D:C4:CA:54:0A:21:F2:91:5D:E2:CE:9E:F8:1E:B8:79:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afa71238-3202-40f6-8fdd-d9505c5a8635.cer sbgp-ipAddrBlock: critical IPv4: 130.12.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption e1:83:74:46:a5:c3:cc:ee:8c:36:f8:99:46:07:db:7b:67:53: b9:ce:98:7c:27:fc:31:02:08:69:2a:16:a8:3d:1d:1e:9f:e9: aa:88:02:b9:5b:54:98:1b:b3:66:40:b2:57:d1:33:a3:6b:37: 43:91:3d:d3:1f:fd:ab:d0:68:8d:50:e9:7d:94:a0:18:f4:73: d8:ad:99:59:40:98:cc:a8:c1:3d:3a:9b:3f:75:11:a1:00:50: ea:94:51:f5:22:11:4a:6e:f2:fa:89:0d:ec:7b:38:99:2c:9b: 0b:8d:d5:3c:d3:4d:f2:49:a8:71:d1:0e:a7:05:cb:c3:0b:2a: 62:7c:53:c5:8c:48:5f:10:9e:17:fe:49:50:a4:44:fa:50:fb: af:a2:11:cd:bd:32:95:a8:ef:61:89:b3:75:8f:b6:b3:cd:b4: 5a:04:19:c9:8c:0b:4b:87:bf:09:1d:e5:a0:ae:16:16:1c:13: c8:5e:fa:fb:f7:bf:b8:0f:74:0d:5d:6d:59:18:61:db:cb:fa: 2c:1a:ec:92:c3:1d:2b:d5:c9:19:40:57:75:4b:02:0e:60:d8: af:a2:69:c1:12:b3:80:1e:9f:17:43:9b:42:2d:65:65:98:a3: 72:b4:14:04:47:61:d8:36:7e:7d:35:6d:6c:2a:39:0f:fd:14: 19:ca:71:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9bl/8TG3Cglal2IIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZhNzEyMzgtMzIwMi00MGY2LThmZGQtZDk1MDVjNWE4 NjM1MB4XDTI2MTAwMTEzMDAxMloXDTI2MTIzMDE0MDAxMlowLzEtMCsGA1UEAxMk ODk4NzY4M2QtYzcxZC00MDlkLTllMzQtMTA0NmY5MmM0ZmFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKexIFcamirW3hPw2vH8DEoqB/Jb7Z4a95nY zUQphXFC3s7SLm2XKZl7+3wmlZ8gqk2POmClReNI5o0dOvFTVZwQXGQgSavNhMb1 +c7lH1VEULJu/UlO4IIa0FtxYTyGdzlI5ezhtkOSu7WyKavjLSWLIWWiFkBky6Ff 7hdeP+AV7jnlWyDHA/75dHlEkzQ8f2DYOFwHzg3QIMenVf/RzN6A5CqLob8cPf6O q4FqsG52g4MUS9nKGpiDwbbpcdzhjN7X/Grz3FnfryZZfLa8SS7qrGW7PGE0WnZ4 YLk2bThmqbMaNVWQMGygZ9n/0CKjeFca+LshmYMArJLOGqxxpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFLPPQV7BT3EwgGKZnPrr1rMD34sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hZmE3 MTIzOC0zMjAyLTQwZjYtOGZkZC1kOTUwNWM1YTg2MzUvZGQzZDUwYzEtNDdiZi0z MTAwLWJlYTUtMTIzY2NkY2I1MTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWZhNzEyMzgtMzIwMi00MGY2LThm ZGQtZDk1MDVjNWE4NjM1L2FmYTcxMjM4LTMyMDItNDBmNi04ZmRkLWQ5NTA1YzVh ODYzNS5jcmwwHwYDVR0jBBgwFoAUW/ZhncTKVAoh8pFd4s6e+B64eY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hZmE3MTIzOC0zMjAyLTQwZjYtOGZkZC1kOTUw NWM1YTg2MzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAggwdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAOGDdEalw8zujDb4mUYH23tnU7nOmHwn/DECCGkqFqg9HR6f6aqIArlb VJgbs2ZAslfRM6NrN0ORPdMf/avQaI1Q6X2UoBj0c9itmVlAmMyowT06mz91EaEA UOqUUfUiEUpu8vqJDex7OJksmwuN1TzTTfJJqHHRDqcFy8MLKmJ8U8WMSF8Qnhf+ SVCkRPpQ+6+iEc29MpWo72GJs3WPtrPNtFoEGcmMC0uHvwkd5aCuFhYcE8he+vv3 v7gPdA1dbVkYYdvL+iwa7JLDHSvVyRlAV3VLAg5g2K+iacESs4AenxdDm0ItZWWY o3K0FARHYdg2fn01bWwqOQ/9FBnKcYo= -----END CERTIFICATE-----Generated at Wed Oct 14 03:15:15 2026 by rpki-client