
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4c5d045b-8e9b-44f7-b145-431d681f8f89/f056aaa2-508d-3c4b-98fa-3afabb70b1ac.roa
File: f056aaa2-508d-3c4b-98fa-3afabb70b1ac.roa (raw, json)
Hash identifier: 0Pg8bmlQfSIui6b0wamgMcjli6ZI5YKTMFkzwXeO7ng=
Subject key identifier: D4:34:09:F9:8B:D9:8F:8F:F3:44:8D:71:BC:F1:E4:9C:F6:12:17:5F
Certificate issuer: /CN=4c5d045b-8e9b-44f7-b145-431d681f8f89
Certificate serial: 010D0C9F4328584D39CF68BB58608DFCD4E68B40
Authority key identifier: 7D:8C:0C:D7:96:28:3E:AE:07:27:69:D2:12:39:FA:EE:AB:00:ED:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4c5d045b-8e9b-44f7-b145-431d681f8f89.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4c5d045b-8e9b-44f7-b145-431d681f8f89/f056aaa2-508d-3c4b-98fa-3afabb70b1ac.roa
Signing time: Fri 20 Mar 2026 01:00:32 +0000
ROA not before: Fri 20 Mar 2026 01:00:32 +0000
ROA not after: Thu 18 Jun 2026 01:00:32 +0000
asID: 394019
IP address blocks: 130.12.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4c5d045b-8e9b-44f7-b145-431d681f8f89/4c5d045b-8e9b-44f7-b145-431d681f8f89.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4c5d045b-8e9b-44f7-b145-431d681f8f89/4c5d045b-8e9b-44f7-b145-431d681f8f89.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4c5d045b-8e9b-44f7-b145-431d681f8f89.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:39:cf:68:bb:58:60:8d:fc:d4:e6:8b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c5d045b-8e9b-44f7-b145-431d681f8f89
Validity
Not Before: Mar 20 01:00:32 2026 GMT
Not After : Jun 18 01:00:32 2026 GMT
Subject: CN=f11ea164-67b1-41b4-bf1a-e5d7c106ff47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:3c:ed:11:80:c6:85:10:20:0e:48:63:ff:d2:
ba:d5:40:23:82:a8:93:c8:28:b7:7b:49:2e:e1:78:
4b:f0:c5:cf:ec:3d:03:21:a3:0d:4c:9d:2f:f9:2f:
14:14:b2:2f:72:c1:9a:b4:b6:c3:fc:82:33:3a:5a:
b1:4b:1b:50:64:6e:95:78:e8:4a:58:d1:23:9d:04:
01:38:0d:f0:bd:e3:d0:12:e0:81:ec:ae:14:36:5c:
d1:16:f0:43:44:e5:80:c9:d6:99:42:b1:2a:56:3d:
f3:f9:2d:0c:e0:b5:7f:8c:7f:e9:c9:88:4f:f5:c8:
48:d4:71:da:25:6a:17:0f:b0:ab:2b:00:a3:0a:f1:
5c:bf:8e:86:a2:08:5e:91:a3:00:f3:d1:5f:8d:7d:
13:2c:f9:ea:78:ba:ec:be:7c:58:e9:c7:19:8c:52:
aa:53:0f:6b:ff:eb:c6:02:e5:11:3b:3e:6c:f5:75:
93:1c:79:9f:89:c8:48:13:1d:c7:17:0d:a1:77:fc:
00:ca:e9:cb:da:ed:fb:14:a8:e4:cc:56:b4:0f:6d:
43:cc:41:84:43:0e:d6:c8:ef:16:80:bd:a9:91:1b:
72:3b:20:3b:97:7c:0a:44:c5:28:da:39:25:7a:cf:
cc:0e:1c:d0:60:e4:e0:dc:88:81:c1:bd:40:83:3c:
5b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:34:09:F9:8B:D9:8F:8F:F3:44:8D:71:BC:F1:E4:9C:F6:12:17:5F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4c5d045b-8e9b-44f7-b145-431d681f8f89/f056aaa2-508d-3c4b-98fa-3afabb70b1ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4c5d045b-8e9b-44f7-b145-431d681f8f89/4c5d045b-8e9b-44f7-b145-431d681f8f89.crl
X509v3 Authority Key Identifier:
keyid:7D:8C:0C:D7:96:28:3E:AE:07:27:69:D2:12:39:FA:EE:AB:00:ED:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4c5d045b-8e9b-44f7-b145-431d681f8f89.cer
sbgp-ipAddrBlock: critical
IPv4:
130.12.211.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:65:6d:e2:e7:89:44:42:ae:a4:f6:34:16:6a:92:ac:4d:dc:
e3:1d:36:84:20:7d:b9:15:ea:38:b1:6e:9b:3d:a4:4b:01:51:
6b:2a:96:01:f6:6b:b4:3c:e4:00:eb:ca:e6:d3:ca:01:21:48:
e8:d2:c6:8e:8f:ed:b6:fc:96:f5:ac:38:ec:ed:db:c0:d8:87:
65:0f:d2:50:5a:a4:f5:b2:f0:00:79:46:46:f2:e7:0d:fe:6b:
bd:15:fa:7f:cf:8c:15:4e:97:12:c3:d1:b2:b7:64:59:b1:d9:
0d:04:c2:9c:1d:56:9f:10:2b:c4:80:32:88:20:37:1e:87:e3:
89:f5:02:3a:20:71:fe:a7:f2:9d:a1:c4:fa:03:f7:95:f9:c3:
ac:13:23:9e:01:5e:ae:5a:68:66:9f:6d:7d:56:f8:89:16:a9:
4d:0c:05:d3:47:83:b5:a9:7c:3a:30:ad:8d:b4:6e:a3:c4:91:
97:0a:75:c3:6c:6a:42:08:72:48:71:f4:e7:95:9d:eb:5f:4d:
4e:be:63:76:e0:c4:20:21:fd:b8:15:e6:0d:83:00:7f:b1:e1:
c7:d8:b1:43:ad:e0:f3:9e:51:d9:34:b4:c6:2e:14:1a:9c:53:
02:af:ee:30:1a:86:f1:26:b9:a6:c9:d2:fb:ce:b9:e4:dc:74:
a5:0c:1d:08
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE05z2i7WGCN/NTmi0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGM1ZDA0NWItOGU5Yi00NGY3LWIxNDUtNDMxZDY4MWY4
Zjg5MB4XDTI2MDMyMDAxMDAzMloXDTI2MDYxODAxMDAzMlowLzEtMCsGA1UEAxMk
ZjExZWExNjQtNjdiMS00MWI0LWJmMWEtZTVkN2MxMDZmZjQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4TztEYDGhRAgDkhj/9K61UAjgqiTyCi3e0ku
4XhL8MXP7D0DIaMNTJ0v+S8UFLIvcsGatLbD/IIzOlqxSxtQZG6VeOhKWNEjnQQB
OA3wvePQEuCB7K4UNlzRFvBDROWAydaZQrEqVj3z+S0M4LV/jH/pyYhP9chI1HHa
JWoXD7CrKwCjCvFcv46GoghekaMA89FfjX0TLPnqeLrsvnxY6ccZjFKqUw9r/+vG
AuUROz5s9XWTHHmfichIEx3HFw2hd/wAyunL2u37FKjkzFa0D21DzEGEQw7WyO8W
gL2pkRtyOyA7l3wKRMUo2jkles/MDhzQYOTg3IiBwb1AgzxbbwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNQ0CfmL2Y+P80SNcbzx5Jz2EhdfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi80YzVk
MDQ1Yi04ZTliLTQ0ZjctYjE0NS00MzFkNjgxZjhmODkvZjA1NmFhYTItNTA4ZC0z
YzRiLTk4ZmEtM2FmYWJiNzBiMWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNGM1ZDA0NWItOGU5Yi00NGY3LWIx
NDUtNDMxZDY4MWY4Zjg5LzRjNWQwNDViLThlOWItNDRmNy1iMTQ1LTQzMWQ2ODFm
OGY4OS5jcmwwHwYDVR0jBBgwFoAUfYwM15YoPq4HJ2nSEjn67qsA7R8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi80YzVkMDQ1Yi04ZTliLTQ0ZjctYjE0NS00MzFk
NjgxZjhmODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAggzTMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB5lbeLniURCrqT2NBZqkqxN3OMdNoQgfbkV6jixbps9pEsBUWsqlgH2
a7Q85ADryubTygEhSOjSxo6P7bb8lvWsOOzt28DYh2UP0lBapPWy8AB5Rkby5w3+
a70V+n/PjBVOlxLD0bK3ZFmx2Q0EwpwdVp8QK8SAMoggNx6H44n1Ajogcf6n8p2h
xPoD95X5w6wTI54BXq5aaGafbX1W+IkWqU0MBdNHg7WpfDowrY20bqPEkZcKdcNs
akIIckhx9OeVnetfTU6+Y3bgxCAh/bgV5g2DAH+x4cfYsUOt4POeUdk0tMYuFBqc
UwKv7jAahvEmuabJ0vvOueTcdKUMHQg=
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:45 2026 by rpki-client