$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cc58e406-4d46-4ad6-892a-bf457cdcdbb0/488da631-c757-3d3c-9dee-32f02da1f756.roa File: 488da631-c757-3d3c-9dee-32f02da1f756.roa (raw, json) Hash identifier: NXwxVEwaybYGAxQiZyVDzHrJVP3yLdFNoHRJPOfCknQ= Subject key identifier: DA:1A:36:FC:7B:35:AD:9E:06:90:58:65:A4:DA:B6:9B:93:AB:60:C0 Certificate issuer: /CN=cc58e406-4d46-4ad6-892a-bf457cdcdbb0 Certificate serial: 010D0C9F4328584DADAAD69EED593169D9FB1E40 Authority key identifier: 8E:BB:F2:E3:60:81:10:44:78:D8:26:ED:81:E7:DD:3A:B5:BC:3C:AA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cc58e406-4d46-4ad6-892a-bf457cdcdbb0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cc58e406-4d46-4ad6-892a-bf457cdcdbb0/488da631-c757-3d3c-9dee-32f02da1f756.roa Signing time: Thu 30 Apr 2026 13:00:31 +0000 ROA not before: Thu 30 Apr 2026 13:00:31 +0000 ROA not after: Wed 29 Jul 2026 13:00:31 +0000 asID: 16509 IP address blocks: 130.12.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cc58e406-4d46-4ad6-892a-bf457cdcdbb0/cc58e406-4d46-4ad6-892a-bf457cdcdbb0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cc58e406-4d46-4ad6-892a-bf457cdcdbb0/cc58e406-4d46-4ad6-892a-bf457cdcdbb0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cc58e406-4d46-4ad6-892a-bf457cdcdbb0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ad:aa:d6:9e:ed:59:31:69:d9:fb:1e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc58e406-4d46-4ad6-892a-bf457cdcdbb0 Validity Not Before: Apr 30 13:00:31 2026 GMT Not After : Jul 29 13:00:31 2026 GMT Subject: CN=107098e0-2d72-4d5b-9794-4228ec30bb73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d7:24:d8:5c:da:26:6a:5b:8d:ad:30:7f:64: d3:7a:42:84:34:7e:aa:7f:3f:34:90:3a:4a:c6:e8: 5d:7e:89:e0:29:ea:b8:2e:59:6c:66:8a:18:f3:42: 82:75:00:43:37:78:13:b8:7b:01:f2:fe:63:f2:28: db:de:a0:72:e2:04:fd:f6:90:df:43:cc:dd:62:ab: c3:f8:a1:7c:18:2f:aa:81:88:54:6a:66:41:4b:5a: d6:65:f5:34:e0:31:51:e2:fc:bc:2d:54:c1:38:0b: eb:58:20:22:e7:97:b2:80:26:98:2b:25:08:ab:ad: b3:48:b6:3c:6a:d7:cb:1b:15:5b:0f:b3:89:7e:e4: e9:77:e1:a8:61:9b:20:ba:ad:d4:f2:5d:99:2a:b3: 75:34:35:32:43:c7:dd:48:50:3f:06:1a:32:83:03: 8d:3b:71:c1:0d:29:50:ca:90:29:21:f3:b5:1f:4e: ea:1f:41:71:56:53:33:f3:7e:4e:ba:80:fe:d0:19: c2:be:96:83:fe:dd:83:71:08:5e:a5:35:e3:31:94: b4:fc:d0:67:04:36:5c:20:b8:eb:50:d0:bf:35:f1: ef:25:ff:cf:d1:69:9e:22:ab:cc:4e:0e:0d:85:a3: ff:fe:00:87:3c:37:58:5c:b7:14:aa:86:f9:5b:ed: e1:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:1A:36:FC:7B:35:AD:9E:06:90:58:65:A4:DA:B6:9B:93:AB:60:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cc58e406-4d46-4ad6-892a-bf457cdcdbb0/488da631-c757-3d3c-9dee-32f02da1f756.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cc58e406-4d46-4ad6-892a-bf457cdcdbb0/cc58e406-4d46-4ad6-892a-bf457cdcdbb0.crl X509v3 Authority Key Identifier: keyid:8E:BB:F2:E3:60:81:10:44:78:D8:26:ED:81:E7:DD:3A:B5:BC:3C:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cc58e406-4d46-4ad6-892a-bf457cdcdbb0.cer sbgp-ipAddrBlock: critical IPv4: 130.12.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c9:fa:28:83:68:19:02:66:17:be:03:64:1b:11:29:6f:1f:9d: 47:87:c7:d4:db:eb:5b:23:3d:b1:78:d7:96:7b:7e:58:12:b5: c2:b2:81:73:5c:55:48:13:7b:9d:4b:b5:f6:9e:1b:cd:8b:56: 14:87:da:b7:f9:bb:d8:73:41:75:f3:70:d9:08:51:51:02:f7: 58:d5:32:fa:1d:e0:0d:47:15:37:ba:bf:c5:46:35:4b:10:1e: b8:65:7f:4a:a2:a6:44:40:f2:6c:04:00:f8:ac:b7:8b:17:d6: 18:47:f3:af:f6:d4:1a:a5:da:73:31:7c:b7:16:6f:79:31:c5: fa:6f:66:04:07:c0:ae:22:00:c2:58:70:46:23:ab:47:d5:48: 07:de:ee:31:91:c7:57:18:c8:b4:da:be:f7:ae:a2:ad:1d:e7: 32:eb:fb:41:d4:da:23:70:aa:0d:40:90:0e:53:3a:b6:59:5d: 6c:78:28:ce:59:fc:5c:2b:a0:9b:9b:dc:31:a6:87:fe:d1:e8: b9:09:15:4d:cd:0a:f5:db:da:9f:ca:be:61:07:24:67:7e:d3: c5:33:a1:7d:6b:2e:74:54:93:13:2c:bb:f9:93:e5:b8:7f:ff: 6c:a3:40:01:59:f1:8d:3d:ad:31:3f:fb:44:f4:34:09:6d:0e: ed:dd:56:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2tqtae7Vkxadn7HkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2M1OGU0MDYtNGQ0Ni00YWQ2LTg5MmEtYmY0NTdjZGNk YmIwMB4XDTI2MDQzMDEzMDAzMVoXDTI2MDcyOTEzMDAzMVowLzEtMCsGA1UEAxMk MTA3MDk4ZTAtMmQ3Mi00ZDViLTk3OTQtNDIyOGVjMzBiYjczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdck2FzaJmpbja0wf2TTekKENH6qfz80kDpK xuhdfongKeq4LllsZooY80KCdQBDN3gTuHsB8v5j8ijb3qBy4gT99pDfQ8zdYqvD +KF8GC+qgYhUamZBS1rWZfU04DFR4vy8LVTBOAvrWCAi55eygCaYKyUIq62zSLY8 atfLGxVbD7OJfuTpd+GoYZsguq3U8l2ZKrN1NDUyQ8fdSFA/BhoygwONO3HBDSlQ ypApIfO1H07qH0FxVlMz835OuoD+0BnCvpaD/t2DcQhepTXjMZS0/NBnBDZcILjr UNC/NfHvJf/P0WmeIqvMTg4NhaP//gCHPDdYXLcUqob5W+3hJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNoaNvx7Na2eBpBYZaTatpuTq2DAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9jYzU4 ZTQwNi00ZDQ2LTRhZDYtODkyYS1iZjQ1N2NkY2RiYjAvNDg4ZGE2MzEtYzc1Ny0z ZDNjLTlkZWUtMzJmMDJkYTFmNzU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvY2M1OGU0MDYtNGQ0Ni00YWQ2LTg5 MmEtYmY0NTdjZGNkYmIwL2NjNThlNDA2LTRkNDYtNGFkNi04OTJhLWJmNDU3Y2Rj ZGJiMC5jcmwwHwYDVR0jBBgwFoAUjrvy42CBEER42CbtgefdOrW8PKowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9jYzU4ZTQwNi00ZDQ2LTRhZDYtODkyYS1iZjQ1 N2NkY2RiYjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAggxWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMn6KINoGQJmF74DZBsRKW8fnUeHx9Tb61sjPbF415Z7flgStcKygXNc VUgTe51LtfaeG82LVhSH2rf5u9hzQXXzcNkIUVEC91jVMvod4A1HFTe6v8VGNUsQ Hrhlf0qipkRA8mwEAPist4sX1hhH86/21Bql2nMxfLcWb3kxxfpvZgQHwK4iAMJY cEYjq0fVSAfe7jGRx1cYyLTavveuoq0d5zLr+0HU2iNwqg1AkA5TOrZZXWx4KM5Z /FwroJub3DGmh/7R6LkJFU3NCvXb2p/KvmEHJGd+08UzoX1rLnRUkxMsu/mT5bh/ /2yjQAFZ8Y09rTE/+0T0NAltDu3dVkQ= -----END CERTIFICATE-----Generated at Wed May 13 02:36:07 2026 by rpki-client