$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0e425ca6-d583-4845-b329-c74ded17c483/f3060ed6-645e-3411-827c-8e3134e26b9e.roa File: f3060ed6-645e-3411-827c-8e3134e26b9e.roa (raw, json) Hash identifier: hiK81jnZFDa8iJItXlCVbHVQQZwARLCKKeXXVeP1nHA= Subject key identifier: 0F:2F:72:49:40:36:59:19:99:3C:E1:CC:98:C3:4B:AF:E2:85:80:F1 Certificate issuer: /CN=0e425ca6-d583-4845-b329-c74ded17c483 Certificate serial: 010D0C9F4328584DA3E566C79063AD0B4A95D9B6 Authority key identifier: AA:B3:FB:81:AE:59:95:51:87:05:0A:1C:4D:1B:70:3C:92:DC:C1:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0e425ca6-d583-4845-b329-c74ded17c483.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0e425ca6-d583-4845-b329-c74ded17c483/f3060ed6-645e-3411-827c-8e3134e26b9e.roa Signing time: Mon 27 Apr 2026 01:00:24 +0000 ROA not before: Mon 27 Apr 2026 01:00:24 +0000 ROA not after: Sun 26 Jul 2026 01:00:24 +0000 asID: 153453 IP address blocks: 130.12.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0e425ca6-d583-4845-b329-c74ded17c483/0e425ca6-d583-4845-b329-c74ded17c483.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0e425ca6-d583-4845-b329-c74ded17c483/0e425ca6-d583-4845-b329-c74ded17c483.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0e425ca6-d583-4845-b329-c74ded17c483.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a3:e5:66:c7:90:63:ad:0b:4a:95:d9:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e425ca6-d583-4845-b329-c74ded17c483 Validity Not Before: Apr 27 01:00:24 2026 GMT Not After : Jul 26 01:00:24 2026 GMT Subject: CN=d7ac280f-1c00-4607-88ee-74d8ad43daa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:c0:0e:4d:41:1e:93:97:3b:26:4e:45:3e:89: b1:94:ea:df:69:08:28:79:2c:f3:30:18:8d:9f:c6: b3:a3:86:09:35:4e:b4:10:1f:bf:47:b4:37:3f:b6: c0:dd:68:1e:92:16:fe:06:a2:a4:95:e8:19:fe:dc: c1:22:c2:9c:f0:10:e5:3c:25:7b:99:8a:ec:df:61: fe:c0:2d:ff:16:50:d9:88:b5:85:9d:44:3e:7e:32: df:9c:cb:a5:17:ce:1b:67:2c:fa:66:0a:3e:38:b7: 8a:c9:7a:b4:34:21:ed:f5:01:85:a2:d8:42:60:67: 51:22:ad:9f:2b:66:16:f5:77:b2:19:0a:b9:00:4f: 0b:ef:b4:34:cb:da:a4:b3:b8:a0:94:33:87:cf:1a: 80:58:5a:9f:96:61:c7:a1:19:05:ed:39:59:65:10: 3f:d7:fb:08:7b:64:88:89:60:36:74:be:4e:26:0c: 69:dc:49:dc:f1:65:72:4f:df:df:e3:73:a4:41:8a: fc:fe:f0:8c:4c:ac:e5:a4:a0:f3:45:c9:3d:de:f6: 37:ce:a6:03:2d:f6:2c:fe:50:3b:fc:8e:5d:26:81: 83:fc:09:ee:e6:41:c6:cf:23:72:82:d8:e0:9c:cf: 60:16:a4:35:f9:0a:68:44:3a:9d:18:58:0d:bc:a1: 88:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:2F:72:49:40:36:59:19:99:3C:E1:CC:98:C3:4B:AF:E2:85:80:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0e425ca6-d583-4845-b329-c74ded17c483/f3060ed6-645e-3411-827c-8e3134e26b9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0e425ca6-d583-4845-b329-c74ded17c483/0e425ca6-d583-4845-b329-c74ded17c483.crl X509v3 Authority Key Identifier: keyid:AA:B3:FB:81:AE:59:95:51:87:05:0A:1C:4D:1B:70:3C:92:DC:C1:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0e425ca6-d583-4845-b329-c74ded17c483.cer sbgp-ipAddrBlock: critical IPv4: 130.12.63.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c1:81:ae:af:92:ec:7b:33:2b:44:3f:3e:df:8e:06:5e:c0:7e: cf:f5:27:40:d7:84:14:93:e5:bc:0a:ca:e5:c6:2c:d2:99:45: b0:cf:bc:7d:20:7a:56:d9:be:ad:85:aa:ed:4e:71:5b:a9:d0: 55:d3:ed:2d:ad:bd:61:e7:81:0c:e7:f0:de:27:5a:e5:6f:4f: 30:14:7d:0e:1e:b4:4d:45:70:4c:88:a1:4c:55:78:29:25:0d: 05:75:00:a1:29:51:58:96:3e:ad:c0:c2:3b:b1:33:2d:27:30: 19:a4:87:89:b3:ac:5d:52:eb:1a:85:10:03:b2:88:e6:8f:a6: 0e:95:c3:6c:9a:18:3a:76:4e:db:b9:e9:b7:d0:57:87:4b:ee: 0d:24:7b:42:86:d9:e7:18:1d:75:74:ca:40:f2:98:dc:04:be: 52:72:db:b9:3b:54:56:f0:2c:af:ef:d1:cf:86:a0:0a:0b:41: be:fa:f7:7b:ee:5b:d5:89:f6:d4:0b:1d:cf:8c:49:cb:8d:41: b4:19:dd:27:44:04:d7:42:be:3b:4e:6e:9f:46:d6:93:7f:81: 11:93:f8:8d:a5:96:58:5a:36:16:79:72:2a:99:6a:17:6e:77: 94:7d:c7:a6:56:b0:41:dd:b5:d9:3e:02:82:3e:88:1b:36:ad: 68:b5:0a:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2j5WbHkGOtC0qV2bYwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGU0MjVjYTYtZDU4My00ODQ1LWIzMjktYzc0ZGVkMTdj NDgzMB4XDTI2MDQyNzAxMDAyNFoXDTI2MDcyNjAxMDAyNFowLzEtMCsGA1UEAxMk ZDdhYzI4MGYtMWMwMC00NjA3LTg4ZWUtNzRkOGFkNDNkYWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgcAOTUEek5c7Jk5FPomxlOrfaQgoeSzzMBiN n8azo4YJNU60EB+/R7Q3P7bA3Wgekhb+BqKklegZ/tzBIsKc8BDlPCV7mYrs32H+ wC3/FlDZiLWFnUQ+fjLfnMulF84bZyz6Zgo+OLeKyXq0NCHt9QGFothCYGdRIq2f K2YW9XeyGQq5AE8L77Q0y9qks7iglDOHzxqAWFqflmHHoRkF7TlZZRA/1/sIe2SI iWA2dL5OJgxp3Enc8WVyT9/f43OkQYr8/vCMTKzlpKDzRck93vY3zqYDLfYs/lA7 /I5dJoGD/Anu5kHGzyNygtjgnM9gFqQ1+QpoRDqdGFgNvKGIvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA8vcklANlkZmTzhzJjDS6/ihYDxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wZTQy NWNhNi1kNTgzLTQ4NDUtYjMyOS1jNzRkZWQxN2M0ODMvZjMwNjBlZDYtNjQ1ZS0z NDExLTgyN2MtOGUzMTM0ZTI2YjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMGU0MjVjYTYtZDU4My00ODQ1LWIz MjktYzc0ZGVkMTdjNDgzLzBlNDI1Y2E2LWQ1ODMtNDg0NS1iMzI5LWM3NGRlZDE3 YzQ4My5jcmwwHwYDVR0jBBgwFoAUqrP7ga5ZlVGHBQocTRtwPJLcwQQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wZTQyNWNhNi1kNTgzLTQ4NDUtYjMyOS1jNzRk ZWQxN2M0ODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAggw/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMGBrq+S7HszK0Q/Pt+OBl7Afs/1J0DXhBST5bwKyuXGLNKZRbDPvH0g elbZvq2Fqu1OcVup0FXT7S2tvWHngQzn8N4nWuVvTzAUfQ4etE1FcEyIoUxVeCkl DQV1AKEpUViWPq3AwjuxMy0nMBmkh4mzrF1S6xqFEAOyiOaPpg6Vw2yaGDp2Ttu5 6bfQV4dL7g0ke0KG2ecYHXV0ykDymNwEvlJy27k7VFbwLK/v0c+GoAoLQb7693vu W9WJ9tQLHc+MScuNQbQZ3SdEBNdCvjtObp9G1pN/gRGT+I2lllhaNhZ5ciqZahdu d5R9x6ZWsEHdtdk+AoI+iBs2rWi1CiI= -----END CERTIFICATE-----Generated at Wed May 13 14:38:16 2026 by rpki-client