$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/ef21c3a5-2cd2-30d3-805c-bcb7bdd2bb40.roa File: ef21c3a5-2cd2-30d3-805c-bcb7bdd2bb40.roa (raw, json) Hash identifier: si0Xb06RV6bFI7dMJ9m2c9Wt9uf0WqSbAWam4poU6N8= Subject key identifier: 3E:67:A9:2E:7E:D1:50:43:96:AA:7D:61:84:1B:FA:17:3F:EF:B4:E4 Certificate issuer: /CN=f2f0585e-a28e-4ead-9b1c-defd291ce54d Certificate serial: 010D0C9F4328584EC7A1EB496DCC17E848FB0758 Authority key identifier: 7B:C6:78:77:88:93:19:53:E7:11:02:39:94:6D:8B:3D:13:7A:C2:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/ef21c3a5-2cd2-30d3-805c-bcb7bdd2bb40.roa Signing time: Sun 09 Aug 2026 13:00:12 +0000 ROA not before: Sun 09 Aug 2026 13:00:12 +0000 ROA not after: Sat 07 Nov 2026 14:00:12 +0000 asID: 216044 IP address blocks: 130.12.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Aug 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c7:a1:eb:49:6d:cc:17:e8:48:fb:07:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2f0585e-a28e-4ead-9b1c-defd291ce54d Validity Not Before: Aug 9 13:00:12 2026 GMT Not After : Nov 7 14:00:12 2026 GMT Subject: CN=0ab67cde-5b25-4492-af8a-e7fd95475537 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:dd:63:dc:b2:c0:c8:11:75:88:c5:9a:1b:58: 8f:a2:4e:5e:39:57:33:ad:c9:98:6a:5c:4d:29:f1: 61:0b:8a:7d:6b:55:1a:38:d4:fb:b1:dc:f8:32:10: 1e:c9:59:ce:de:d9:2b:00:fa:03:58:af:07:3d:3a: bc:36:b7:09:c8:db:8f:3f:a6:51:8f:9f:64:15:1e: 7d:9b:04:66:ee:0c:d1:6b:05:e5:7b:1b:7e:a6:b1: eb:47:d5:ec:72:c1:c1:c6:b7:26:f9:e2:ef:e9:f5: 9b:26:35:0b:bf:3c:31:33:2a:65:7a:a8:49:b9:0d: 3c:de:ec:d1:14:54:53:cf:53:37:a1:41:0f:b5:d0: e3:1c:ba:56:84:e3:d6:78:6c:4b:3a:9f:16:34:6d: 02:a4:1d:e6:9d:ae:df:69:2c:f1:eb:ba:b0:d1:18: 0f:86:6a:c6:0c:46:11:0d:35:58:fd:2a:39:31:13: 07:90:2c:fc:08:bc:73:35:09:2a:5a:74:4b:ea:b2: 5a:2a:73:4a:96:65:ba:40:12:9d:5a:71:9f:81:bc: 6d:2c:a9:5f:04:89:f6:8e:35:de:1d:d7:a6:86:4d: 24:f4:58:52:00:57:29:4e:62:f3:fd:4a:23:94:8e: 7f:7a:9e:39:d3:37:09:b2:fd:6a:0d:ac:ba:cd:ad: c1:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:67:A9:2E:7E:D1:50:43:96:AA:7D:61:84:1B:FA:17:3F:EF:B4:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/ef21c3a5-2cd2-30d3-805c-bcb7bdd2bb40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.crl X509v3 Authority Key Identifier: keyid:7B:C6:78:77:88:93:19:53:E7:11:02:39:94:6D:8B:3D:13:7A:C2:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer sbgp-ipAddrBlock: critical IPv4: 130.12.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:8e:c6:54:66:2c:21:e2:cd:e1:07:a8:89:c2:84:6a:e5:55: 68:aa:8d:e1:58:41:a2:4e:b5:be:49:1a:f5:4e:02:95:cf:31: bd:00:d2:d1:1d:90:7a:1c:88:2f:b0:20:77:d1:d1:23:2d:5c: 2a:e8:3a:db:d4:c4:c7:3d:70:e8:eb:56:e7:34:b9:72:0b:9f: 87:06:fd:95:ba:f6:9e:ff:a1:61:08:26:9e:71:39:04:d4:0d: 4a:ad:20:3e:d6:c6:23:db:26:a2:23:04:5f:a5:2b:45:f7:b5: 69:f4:59:1d:16:ee:2e:01:4a:8c:24:ba:92:0b:14:7c:60:04: 01:1f:0c:29:a1:be:d9:3b:d6:ab:13:50:10:6a:26:ef:a6:a2: a3:d6:87:82:24:da:4a:6d:40:da:5e:ff:54:a4:d7:d5:2e:a5: 7e:46:bc:ca:27:3d:33:cf:4c:4b:d0:b6:69:ce:f2:f3:7e:4e: fb:3e:77:2b:a6:eb:2b:56:ed:bd:7e:cb:2e:6d:8f:eb:39:94: 16:a9:82:f0:99:35:17:ee:c9:3d:4d:35:5f:89:0f:2b:1e:f7: d1:be:c7:12:3d:0d:cd:1d:9c:2d:15:7b:5f:86:b0:bf:57:04: db:43:f9:be:90:23:ed:80:fb:0e:cf:02:61:77:8e:96:64:93: 7d:c1:a6:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7HoetJbcwX6Ej7B1gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjJmMDU4NWUtYTI4ZS00ZWFkLTliMWMtZGVmZDI5MWNl NTRkMB4XDTI2MDgwOTEzMDAxMloXDTI2MTEwNzE0MDAxMlowLzEtMCsGA1UEAxMk MGFiNjdjZGUtNWIyNS00NDkyLWFmOGEtZTdmZDk1NDc1NTM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApt1j3LLAyBF1iMWaG1iPok5eOVczrcmYalxN KfFhC4p9a1UaONT7sdz4MhAeyVnO3tkrAPoDWK8HPTq8NrcJyNuPP6ZRj59kFR59 mwRm7gzRawXlext+prHrR9XscsHBxrcm+eLv6fWbJjULvzwxMypleqhJuQ083uzR FFRTz1M3oUEPtdDjHLpWhOPWeGxLOp8WNG0CpB3mna7faSzx67qw0RgPhmrGDEYR DTVY/So5MRMHkCz8CLxzNQkqWnRL6rJaKnNKlmW6QBKdWnGfgbxtLKlfBIn2jjXe Hdemhk0k9FhSAFcpTmLz/UojlI5/ep450zcJsv1qDay6za3B1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD5nqS5+0VBDlqp9YYQb+hc/77TkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mMmYw NTg1ZS1hMjhlLTRlYWQtOWIxYy1kZWZkMjkxY2U1NGQvZWYyMWMzYTUtMmNkMi0z MGQzLTgwNWMtYmNiN2JkZDJiYjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjJmMDU4NWUtYTI4ZS00ZWFkLTli MWMtZGVmZDI5MWNlNTRkL2YyZjA1ODVlLWEyOGUtNGVhZC05YjFjLWRlZmQyOTFj ZTU0ZC5jcmwwHwYDVR0jBBgwFoAUe8Z4d4iTGVPnEQI5lG2LPRN6wo8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mMmYwNTg1ZS1hMjhlLTRlYWQtOWIxYy1kZWZk MjkxY2U1NGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAggzzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGiOxlRmLCHizeEHqInChGrlVWiqjeFYQaJOtb5JGvVOApXPMb0A0tEd kHociC+wIHfR0SMtXCroOtvUxMc9cOjrVuc0uXILn4cG/ZW69p7/oWEIJp5xOQTU DUqtID7WxiPbJqIjBF+lK0X3tWn0WR0W7i4BSowkupILFHxgBAEfDCmhvtk71qsT UBBqJu+moqPWh4Ik2kptQNpe/1Sk19UupX5GvMonPTPPTEvQtmnO8vN+Tvs+dyum 6ytW7b1+yy5tj+s5lBapgvCZNRfuyT1NNV+JDyse99G+xxI9Dc0dnC0Ve1+GsL9X BNtD+b6QI+2A+w7PAmF3jpZkk33BptQ= -----END CERTIFICATE-----Generated at Tue Aug 25 23:40:34 2026 by rpki-client