$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/41fd7014-304a-4567-8e40-00c686067021/0de929d5-8b84-34bb-8469-40a278d444dd.roa File: 0de929d5-8b84-34bb-8469-40a278d444dd.roa (raw, json) Hash identifier: E9rz03BbuvXHfc9h3Dlabc1LO6Rf/gdBlUBgulPcmkY= Subject key identifier: BB:9B:46:FF:CE:45:26:25:85:F1:AD:14:A0:C5:C5:6F:D0:9D:91:92 Certificate issuer: /CN=41fd7014-304a-4567-8e40-00c686067021 Certificate serial: 010D0C9F4328584D3F64D1BEE26BE4E29DAFA660 Authority key identifier: BF:02:DB:00:C4:CC:5B:8C:84:38:99:A1:A1:3C:21:B4:11:26:EC:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/41fd7014-304a-4567-8e40-00c686067021.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/41fd7014-304a-4567-8e40-00c686067021/0de929d5-8b84-34bb-8469-40a278d444dd.roa Signing time: Sun 22 Mar 2026 01:00:32 +0000 ROA not before: Sun 22 Mar 2026 01:00:32 +0000 ROA not after: Sat 20 Jun 2026 01:00:32 +0000 asID: 31788 IP address blocks: 130.12.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/41fd7014-304a-4567-8e40-00c686067021/41fd7014-304a-4567-8e40-00c686067021.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/41fd7014-304a-4567-8e40-00c686067021/41fd7014-304a-4567-8e40-00c686067021.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/41fd7014-304a-4567-8e40-00c686067021.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:64:d1:be:e2:6b:e4:e2:9d:af:a6:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41fd7014-304a-4567-8e40-00c686067021 Validity Not Before: Mar 22 01:00:32 2026 GMT Not After : Jun 20 01:00:32 2026 GMT Subject: CN=ee825540-536b-4eaf-b1f9-c245c3646d77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:26:5c:91:41:82:e1:a3:fb:f1:4e:c6:51:28: 0f:ef:33:ce:45:df:48:09:ab:c1:07:ae:6f:ab:31: 1d:29:32:c4:b8:95:d5:fe:72:a1:0a:06:28:c0:96: de:ff:a7:4c:5a:a5:b1:87:af:78:99:b6:4d:29:b8: be:5f:25:56:90:60:27:30:78:a5:8c:2b:6b:f4:00: c2:49:ba:b1:ea:c4:0f:1e:e1:c9:b0:54:a7:87:66: 72:e4:f3:0d:00:40:47:25:85:ba:cc:cf:af:9d:51: d6:00:a9:63:4a:e5:e7:59:a2:ee:53:9d:76:4c:3e: c9:91:5f:db:42:ce:38:b5:34:37:a5:d1:35:5c:fd: 2f:ba:95:4b:9f:91:c9:21:ea:42:fc:e6:d3:fc:80: 46:d7:c2:d9:5b:d5:35:3b:56:89:72:34:a8:58:e0: 9d:fd:59:a4:ef:6d:5d:fa:7c:fa:b4:45:8c:61:d4: ee:e5:df:95:c2:1f:c0:86:76:14:45:ba:c1:b7:7f: a1:dc:0f:2e:8b:53:9b:83:36:35:47:2b:b3:6a:3c: b0:56:75:27:57:2a:d7:a5:77:4b:b3:da:14:47:7f: 51:db:5c:d9:ff:1a:e3:6a:42:94:ae:38:81:d7:23: fa:07:c3:02:8b:9c:4f:bf:17:d7:ff:a0:d4:1d:ee: d9:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:9B:46:FF:CE:45:26:25:85:F1:AD:14:A0:C5:C5:6F:D0:9D:91:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/41fd7014-304a-4567-8e40-00c686067021/0de929d5-8b84-34bb-8469-40a278d444dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/41fd7014-304a-4567-8e40-00c686067021/41fd7014-304a-4567-8e40-00c686067021.crl X509v3 Authority Key Identifier: keyid:BF:02:DB:00:C4:CC:5B:8C:84:38:99:A1:A1:3C:21:B4:11:26:EC:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/41fd7014-304a-4567-8e40-00c686067021.cer sbgp-ipAddrBlock: critical IPv4: 130.12.100.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:d4:fe:6c:69:14:da:90:d7:a2:de:b6:2e:c0:d7:4a:63:f6: 26:41:af:9a:40:98:37:51:f5:09:70:63:f0:7f:a9:e4:dd:c3: fb:79:fe:c0:5d:78:14:5a:56:63:fc:47:89:ac:5c:7c:96:9e: 12:7e:71:cc:43:ee:8d:f4:05:f5:30:9b:09:5b:63:57:28:f2: 04:2e:53:97:eb:92:80:9d:41:de:05:1f:ce:9b:b5:1b:d9:63: 4a:ee:e9:8d:35:a4:64:5f:06:b8:e7:6b:97:f5:8e:b9:7b:ca: 41:92:d2:8c:b0:19:fc:0a:1c:1f:37:b5:22:11:00:46:6b:41: 94:3d:cd:46:4c:94:96:98:68:3e:4e:b1:fb:25:49:51:89:4a: 65:6e:f4:cc:ab:eb:92:b5:dc:5d:11:2c:f9:5a:9e:68:37:82: ad:e0:d6:b3:49:15:a6:34:af:d5:7d:62:ad:63:ab:a6:06:c9: 5d:11:39:de:5a:32:34:ca:a4:f9:6c:a4:1d:c4:fe:d7:ba:48: 5a:80:20:c7:90:7d:9a:b3:d6:ef:fb:f6:b0:83:83:ea:1e:8a: 8e:18:d7:71:d8:d9:98:ed:13:ec:9c:b3:2a:8e:e0:97:0d:ae: 70:c0:90:44:8d:ef:2c:ed:95:24:6d:6e:f7:6d:d8:1c:5e:04: 64:81:e8:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0/ZNG+4mvk4p2vpmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFmZDcwMTQtMzA0YS00NTY3LThlNDAtMDBjNjg2MDY3 MDIxMB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk ZWU4MjU1NDAtNTM2Yi00ZWFmLWIxZjktYzI0NWMzNjQ2ZDc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhiZckUGC4aP78U7GUSgP7zPORd9ICavBB65v qzEdKTLEuJXV/nKhCgYowJbe/6dMWqWxh694mbZNKbi+XyVWkGAnMHiljCtr9ADC Sbqx6sQPHuHJsFSnh2Zy5PMNAEBHJYW6zM+vnVHWAKljSuXnWaLuU512TD7JkV/b Qs44tTQ3pdE1XP0vupVLn5HJIepC/ObT/IBG18LZW9U1O1aJcjSoWOCd/Vmk721d +nz6tEWMYdTu5d+Vwh/AhnYURbrBt3+h3A8ui1ObgzY1RyuzajywVnUnVyrXpXdL s9oUR39R21zZ/xrjakKUrjiB1yP6B8MCi5xPvxfX/6DUHe7ZbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLubRv/ORSYlhfGtFKDFxW/QnZGSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80MWZk NzAxNC0zMDRhLTQ1NjctOGU0MC0wMGM2ODYwNjcwMjEvMGRlOTI5ZDUtOGI4NC0z NGJiLTg0NjktNDBhMjc4ZDQ0NGRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDFmZDcwMTQtMzA0YS00NTY3LThl NDAtMDBjNjg2MDY3MDIxLzQxZmQ3MDE0LTMwNGEtNDU2Ny04ZTQwLTAwYzY4NjA2 NzAyMS5jcmwwHwYDVR0jBBgwFoAUvwLbAMTMW4yEOJmhoTwhtBEm7D0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80MWZkNzAxNC0zMDRhLTQ1NjctOGU0MC0wMGM2 ODYwNjcwMjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAggxkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABnU/mxpFNqQ16Leti7A10pj9iZBr5pAmDdR9QlwY/B/qeTdw/t5/sBd eBRaVmP8R4msXHyWnhJ+ccxD7o30BfUwmwlbY1co8gQuU5frkoCdQd4FH86btRvZ Y0ru6Y01pGRfBrjna5f1jrl7ykGS0oywGfwKHB83tSIRAEZrQZQ9zUZMlJaYaD5O sfslSVGJSmVu9Myr65K13F0RLPlanmg3gq3g1rNJFaY0r9V9Yq1jq6YGyV0ROd5a MjTKpPlspB3E/te6SFqAIMeQfZqz1u/79rCDg+oeio4Y13HY2ZjtE+ycsyqO4JcN rnDAkESN7yztlSRtbvdt2BxeBGSB6CE= -----END CERTIFICATE-----Generated at Thu Mar 26 16:29:56 2026 by rpki-client