$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afa71238-3202-40f6-8fdd-d9505c5a8635/dd3d50c1-47bf-3100-bea5-123ccdcb515f.roa File: dd3d50c1-47bf-3100-bea5-123ccdcb515f.roa (raw, json) Hash identifier: YKVVj8q0J9UnZTV2EQ2S08vVzJR8lYj+fFpCnsZ5yB4= Subject key identifier: CF:49:6D:A2:A0:4F:7F:CE:38:8F:1F:B7:7A:B6:93:D8:87:EC:CD:7C Certificate issuer: /CN=afa71238-3202-40f6-8fdd-d9505c5a8635 Certificate serial: 010D0C9F4328584D3704BA5CDC4D0F72B1C9C240 Authority key identifier: 5B:F6:61:9D:C4:CA:54:0A:21:F2:91:5D:E2:CE:9E:F8:1E:B8:79:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afa71238-3202-40f6-8fdd-d9505c5a8635.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afa71238-3202-40f6-8fdd-d9505c5a8635/dd3d50c1-47bf-3100-bea5-123ccdcb515f.roa Signing time: Thu 19 Mar 2026 01:00:31 +0000 ROA not before: Thu 19 Mar 2026 01:00:31 +0000 ROA not after: Wed 17 Jun 2026 01:00:31 +0000 asID: 401523 IP address blocks: 130.12.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afa71238-3202-40f6-8fdd-d9505c5a8635/afa71238-3202-40f6-8fdd-d9505c5a8635.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afa71238-3202-40f6-8fdd-d9505c5a8635/afa71238-3202-40f6-8fdd-d9505c5a8635.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afa71238-3202-40f6-8fdd-d9505c5a8635.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:37:04:ba:5c:dc:4d:0f:72:b1:c9:c2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afa71238-3202-40f6-8fdd-d9505c5a8635 Validity Not Before: Mar 19 01:00:31 2026 GMT Not After : Jun 17 01:00:31 2026 GMT Subject: CN=ecde0663-f70e-4328-897f-92ea670abf9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:9e:61:a3:b4:be:41:71:66:64:45:e8:ab:42: 12:db:8c:f6:64:0e:4f:bd:34:aa:84:d8:61:e6:1e: 5e:a3:7b:c0:bd:f8:0c:bc:9f:bc:2e:a5:aa:f4:a0: 1b:b1:8b:4a:88:ed:f1:b1:2c:69:b8:d4:ce:4a:22: 73:ff:58:f0:7d:16:28:80:aa:3d:96:b1:f9:3b:8c: 90:b5:67:08:9d:a4:e5:56:7c:1f:0d:94:3b:59:3e: a1:04:24:95:8b:bb:42:e3:a1:8b:bb:9f:89:1e:82: 0b:4e:ca:37:0a:75:2c:1b:c3:0b:e1:de:ae:ef:58: 24:d4:1e:95:3a:48:5f:47:81:f2:81:b0:9a:c9:c5: 34:de:73:c8:b6:2c:94:87:43:1f:4e:e4:a8:bd:b8: db:b6:1b:7b:23:e0:09:17:0f:a5:64:31:d7:d5:a0: 94:30:df:4a:6a:d6:26:c8:d6:c9:f6:8e:91:ee:e3: 7c:d8:8f:4c:8b:c9:bf:72:a9:c4:9f:21:f0:e6:38: 2f:8a:bf:1c:2b:3f:0c:1f:b5:11:1e:c5:97:bd:42: 12:20:85:db:d2:b1:19:f2:30:c4:71:c5:9c:35:12: cc:9e:15:89:8e:d2:95:fa:22:71:18:b4:8e:e3:ae: ca:9b:8e:bf:73:97:1b:c4:e4:81:33:58:17:bf:b9: 52:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:49:6D:A2:A0:4F:7F:CE:38:8F:1F:B7:7A:B6:93:D8:87:EC:CD:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afa71238-3202-40f6-8fdd-d9505c5a8635/dd3d50c1-47bf-3100-bea5-123ccdcb515f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afa71238-3202-40f6-8fdd-d9505c5a8635/afa71238-3202-40f6-8fdd-d9505c5a8635.crl X509v3 Authority Key Identifier: keyid:5B:F6:61:9D:C4:CA:54:0A:21:F2:91:5D:E2:CE:9E:F8:1E:B8:79:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afa71238-3202-40f6-8fdd-d9505c5a8635.cer sbgp-ipAddrBlock: critical IPv4: 130.12.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:40:a4:3c:3c:aa:a4:61:3d:03:c6:66:eb:43:c0:94:9e:71: c6:9f:82:8f:f2:d8:a8:58:c9:13:3d:dd:6b:29:1c:83:71:81: 6b:b8:78:96:7f:7c:01:31:1b:2a:65:d4:bf:33:50:9c:28:8c: 55:09:55:6c:24:e8:6a:05:29:39:a5:fa:1b:b2:06:21:f9:ca: 4c:fd:b7:7e:35:b3:a8:81:a6:fb:4d:c3:a7:9b:23:ea:32:a3: 75:ba:ed:e4:b4:0e:bb:50:82:2b:3e:1d:3a:2b:14:aa:81:a1: 5d:d6:c6:64:49:6b:42:e8:a0:a9:ac:ce:15:b6:de:de:7c:fa: 1a:34:34:4b:9e:41:52:85:67:53:8e:da:49:62:e9:f8:d9:79: 2a:4e:7f:d5:5a:bb:d7:f3:05:a9:6b:65:54:50:ba:04:bc:89: 91:f2:f9:0a:6d:0e:b9:46:4b:8f:ff:b7:02:78:42:bf:67:1c: 20:28:87:e0:6b:6f:07:d3:cb:76:89:75:2d:81:d0:e9:94:21: 16:61:fb:fc:b5:cb:81:7a:33:b0:ab:30:79:61:de:25:01:d3: 7f:ff:42:7a:17:b7:0a:20:f8:ee:3d:d4:05:68:a4:5f:b5:44: 43:01:b1:86:ed:eb:51:de:1e:39:cf:d5:a9:b9:4a:dc:f8:6b: 01:13:fe:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE03BLpc3E0PcrHJwkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZhNzEyMzgtMzIwMi00MGY2LThmZGQtZDk1MDVjNWE4 NjM1MB4XDTI2MDMxOTAxMDAzMVoXDTI2MDYxNzAxMDAzMVowLzEtMCsGA1UEAxMk ZWNkZTA2NjMtZjcwZS00MzI4LTg5N2YtOTJlYTY3MGFiZjljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq55ho7S+QXFmZEXoq0IS24z2ZA5PvTSqhNhh 5h5eo3vAvfgMvJ+8LqWq9KAbsYtKiO3xsSxpuNTOSiJz/1jwfRYogKo9lrH5O4yQ tWcInaTlVnwfDZQ7WT6hBCSVi7tC46GLu5+JHoILTso3CnUsG8ML4d6u71gk1B6V OkhfR4HygbCaycU03nPItiyUh0MfTuSovbjbtht7I+AJFw+lZDHX1aCUMN9KatYm yNbJ9o6R7uN82I9Mi8m/cqnEnyHw5jgvir8cKz8MH7URHsWXvUISIIXb0rEZ8jDE ccWcNRLMnhWJjtKV+iJxGLSO467Km46/c5cbxOSBM1gXv7lSwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM9JbaKgT3/OOI8ft3q2k9iH7M18MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hZmE3 MTIzOC0zMjAyLTQwZjYtOGZkZC1kOTUwNWM1YTg2MzUvZGQzZDUwYzEtNDdiZi0z MTAwLWJlYTUtMTIzY2NkY2I1MTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWZhNzEyMzgtMzIwMi00MGY2LThm ZGQtZDk1MDVjNWE4NjM1L2FmYTcxMjM4LTMyMDItNDBmNi04ZmRkLWQ5NTA1YzVh ODYzNS5jcmwwHwYDVR0jBBgwFoAUW/ZhncTKVAoh8pFd4s6e+B64eY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hZmE3MTIzOC0zMjAyLTQwZjYtOGZkZC1kOTUw NWM1YTg2MzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAggwdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADRApDw8qqRhPQPGZutDwJSeccafgo/y2KhYyRM93WspHINxgWu4eJZ/ fAExGypl1L8zUJwojFUJVWwk6GoFKTml+huyBiH5ykz9t341s6iBpvtNw6ebI+oy o3W67eS0DrtQgis+HTorFKqBoV3WxmRJa0LooKmszhW23t58+ho0NEueQVKFZ1OO 2kli6fjZeSpOf9Vau9fzBalrZVRQugS8iZHy+QptDrlGS4//twJ4Qr9nHCAoh+Br bwfTy3aJdS2B0OmUIRZh+/y1y4F6M7CrMHlh3iUB03//QnoXtwog+O491AVopF+1 REMBsYbt61HeHjnP1am5Stz4awET/uI= -----END CERTIFICATE-----Generated at Thu Mar 26 11:33:39 2026 by rpki-client