$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b9fac4f6-e4ac-4623-b29e-def6eb599d08/79fad947-355f-32d7-a548-ef98a818e957.roa File: 79fad947-355f-32d7-a548-ef98a818e957.roa (raw, json) Hash identifier: 4NUNh9sivGtM9cg+S2kpyguR9yWm9ywmfGaxO1LYh+o= Subject key identifier: 4A:02:36:5E:BB:BE:1B:81:75:B5:EA:E3:EE:1F:E4:36:BD:42:4C:27 Certificate issuer: /CN=b9fac4f6-e4ac-4623-b29e-def6eb599d08 Certificate serial: 010D0C9F4328584DAAE05215A9EED29E329FC700 Authority key identifier: 35:3C:B8:E4:9F:44:C9:C9:BD:56:B2:1F:0B:DC:81:55:48:DD:01:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b9fac4f6-e4ac-4623-b29e-def6eb599d08.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b9fac4f6-e4ac-4623-b29e-def6eb599d08/79fad947-355f-32d7-a548-ef98a818e957.roa Signing time: Wed 29 Apr 2026 13:00:31 +0000 ROA not before: Wed 29 Apr 2026 13:00:31 +0000 ROA not after: Tue 28 Jul 2026 13:00:31 +0000 asID: 395222 IP address blocks: 130.12.4.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b9fac4f6-e4ac-4623-b29e-def6eb599d08/b9fac4f6-e4ac-4623-b29e-def6eb599d08.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b9fac4f6-e4ac-4623-b29e-def6eb599d08/b9fac4f6-e4ac-4623-b29e-def6eb599d08.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b9fac4f6-e4ac-4623-b29e-def6eb599d08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:aa:e0:52:15:a9:ee:d2:9e:32:9f:c7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9fac4f6-e4ac-4623-b29e-def6eb599d08 Validity Not Before: Apr 29 13:00:31 2026 GMT Not After : Jul 28 13:00:31 2026 GMT Subject: CN=4bc5c1b7-bfc4-441a-81da-cf186c30c4fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f1:38:70:ad:5d:d4:dc:7a:87:3c:28:ab:f4: 25:9b:be:31:6a:4f:66:43:ed:cf:0b:13:78:48:0a: b8:97:68:50:4f:3d:f4:ae:bd:f6:c4:a6:8c:05:45: c3:f6:b9:2c:c4:72:04:82:58:28:1d:de:df:89:e4: 91:3f:cb:18:3b:15:28:59:7a:de:ae:39:ee:4c:dd: f4:f6:96:25:fb:b8:4a:a4:3a:3e:77:66:c1:88:ab: e6:3a:f4:2c:14:b4:2c:48:f9:d1:90:36:e3:ea:ec: 40:2a:bb:a1:e6:96:f4:6f:e5:f7:a9:83:fa:13:d0: bf:c1:5e:c3:42:53:9c:f7:64:59:76:4a:a3:6e:ae: b1:e5:57:53:b4:18:92:dc:f9:5a:36:84:04:ea:28: 4c:29:9a:9a:40:21:90:1f:71:58:46:a6:59:cd:cb: ff:b0:c5:cf:13:f7:7d:6e:13:7f:f1:1f:f2:4e:ad: b5:ae:b4:e0:9a:ff:5f:e7:9c:9b:a8:d8:2d:23:6a: 6d:15:30:53:1b:01:fb:ef:79:0a:a9:48:8c:e3:ad: d7:4a:3a:ba:72:12:3d:6d:2f:4d:c7:f0:08:3b:39: 2f:dc:8d:d6:09:d8:0f:d5:e8:76:22:85:c8:72:2e: e1:c9:47:0c:57:6d:e5:38:dc:c8:ca:79:1a:19:b7: 74:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:02:36:5E:BB:BE:1B:81:75:B5:EA:E3:EE:1F:E4:36:BD:42:4C:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b9fac4f6-e4ac-4623-b29e-def6eb599d08/79fad947-355f-32d7-a548-ef98a818e957.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b9fac4f6-e4ac-4623-b29e-def6eb599d08/b9fac4f6-e4ac-4623-b29e-def6eb599d08.crl X509v3 Authority Key Identifier: keyid:35:3C:B8:E4:9F:44:C9:C9:BD:56:B2:1F:0B:DC:81:55:48:DD:01:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b9fac4f6-e4ac-4623-b29e-def6eb599d08.cer sbgp-ipAddrBlock: critical IPv4: 130.12.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:c5:f4:ac:34:43:ea:c9:f4:74:75:8b:72:f2:01:de:83:47: e7:f1:95:59:8a:9b:06:c1:54:e9:c5:49:92:c6:16:c8:97:c4: eb:ab:da:04:f8:89:14:99:68:c8:62:9c:5e:89:94:ca:ee:6b: f5:24:84:57:d6:e3:e5:71:b2:43:5f:56:2f:7c:9d:42:30:15: d6:9e:4a:f9:e7:c4:7f:f1:fc:54:5e:b1:f2:dc:31:61:2d:b5: a9:27:e2:34:24:dc:1f:ca:80:1e:10:f2:56:ac:19:0b:2b:e7: 0b:27:0f:9b:1b:e5:2e:7f:97:7c:e7:3d:fc:e8:e1:44:8c:b1: 4e:fe:d5:aa:f9:c4:6d:f7:0a:a5:24:ac:02:bc:9b:03:58:2b: 76:40:9a:6a:0e:ca:5b:27:0a:47:d9:da:57:45:9e:a8:3b:c1: ce:3a:86:91:21:df:6f:5b:92:3c:96:d5:d0:f2:8d:a3:d0:f9: 0b:11:84:d1:0a:34:99:0a:66:2c:f8:dd:c2:de:77:6d:e0:93: cb:c8:cc:c9:3c:55:b0:da:a8:62:18:f4:36:8f:23:79:e4:2a: 56:3e:f1:b5:81:08:35:2a:ac:79:0e:3b:f2:96:ea:ab:0e:18: 5f:63:c2:b9:72:f7:88:96:6f:4b:c8:70:c0:a8:d4:2b:fc:c3: ba:a8:8e:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2q4FIVqe7SnjKfxwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjlmYWM0ZjYtZTRhYy00NjIzLWIyOWUtZGVmNmViNTk5 ZDA4MB4XDTI2MDQyOTEzMDAzMVoXDTI2MDcyODEzMDAzMVowLzEtMCsGA1UEAxMk NGJjNWMxYjctYmZjNC00NDFhLTgxZGEtY2YxODZjMzBjNGZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPE4cK1d1Nx6hzwoq/Qlm74xak9mQ+3PCxN4 SAq4l2hQTz30rr32xKaMBUXD9rksxHIEglgoHd7fieSRP8sYOxUoWXrerjnuTN30 9pYl+7hKpDo+d2bBiKvmOvQsFLQsSPnRkDbj6uxAKruh5pb0b+X3qYP6E9C/wV7D QlOc92RZdkqjbq6x5VdTtBiS3PlaNoQE6ihMKZqaQCGQH3FYRqZZzcv/sMXPE/d9 bhN/8R/yTq21rrTgmv9f55ybqNgtI2ptFTBTGwH773kKqUiM463XSjq6chI9bS9N x/AIOzkv3I3WCdgP1eh2IoXIci7hyUcMV23lONzIynkaGbd0NwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEoCNl67vhuBdbXq4+4f5Da9QkwnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9iOWZh YzRmNi1lNGFjLTQ2MjMtYjI5ZS1kZWY2ZWI1OTlkMDgvNzlmYWQ5NDctMzU1Zi0z MmQ3LWE1NDgtZWY5OGE4MThlOTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYjlmYWM0ZjYtZTRhYy00NjIzLWIy OWUtZGVmNmViNTk5ZDA4L2I5ZmFjNGY2LWU0YWMtNDYyMy1iMjllLWRlZjZlYjU5 OWQwOC5jcmwwHwYDVR0jBBgwFoAUNTy45J9Eycm9VrIfC9yBVUjdAeYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9iOWZhYzRmNi1lNGFjLTQ2MjMtYjI5ZS1kZWY2 ZWI1OTlkMDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCggwEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKnF9Kw0Q+rJ9HR1i3LyAd6DR+fxlVmKmwbBVOnFSZLGFsiXxOur2gT4 iRSZaMhinF6JlMrua/UkhFfW4+VxskNfVi98nUIwFdaeSvnnxH/x/FResfLcMWEt takn4jQk3B/KgB4Q8lasGQsr5wsnD5sb5S5/l3znPfzo4USMsU7+1ar5xG33CqUk rAK8mwNYK3ZAmmoOylsnCkfZ2ldFnqg7wc46hpEh329bkjyW1dDyjaPQ+QsRhNEK NJkKZiz43cLed23gk8vIzMk8VbDaqGIY9DaPI3nkKlY+8bWBCDUqrHkOO/KW6qsO GF9jwrly94iWb0vIcMCo1Cv8w7qojvM= -----END CERTIFICATE-----Generated at Wed May 13 01:23:06 2026 by rpki-client