$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/2c1cf0c4-948b-38a5-8190-de4f3466996c.roa File: 2c1cf0c4-948b-38a5-8190-de4f3466996c.roa (raw, json) Hash identifier: 3j4Mjze96aLHY7TmYV0BYHYRLoz/TSa3iz6InxMM21A= Subject key identifier: 2F:F3:7C:94:49:4A:B1:26:18:61:5C:12:90:3F:47:67:3E:C0:CD:1D Certificate issuer: /CN=f2f0585e-a28e-4ead-9b1c-defd291ce54d Certificate serial: 010D0C9F4328584D359FEDFF4E34352269B6E9FB Authority key identifier: 7B:C6:78:77:88:93:19:53:E7:11:02:39:94:6D:8B:3D:13:7A:C2:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/2c1cf0c4-948b-38a5-8190-de4f3466996c.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 50842 IP address blocks: 130.12.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:9f:ed:ff:4e:34:35:22:69:b6:e9:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2f0585e-a28e-4ead-9b1c-defd291ce54d Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=333b5b16-0320-423b-924d-e0b60a393fa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:57:5a:58:3b:60:a3:da:76:54:00:b7:56:50: ec:c2:11:27:61:78:c3:88:6a:0d:e4:b9:b9:ff:21: 36:ad:d9:db:5f:ea:b6:4c:e7:52:4a:5b:8b:74:ad: f6:f0:eb:d0:d0:c0:38:b4:f3:fc:72:34:74:a7:a2: 1b:39:cb:91:29:0c:13:71:e3:65:3d:ab:41:3a:2e: 42:c9:aa:d2:64:b9:53:64:1a:52:c5:c3:66:89:6f: 29:fe:03:27:ed:d6:f8:27:3c:7f:7c:f4:b2:32:2a: 0e:17:65:48:cf:68:72:e5:c4:e1:9e:7c:fa:7d:ac: 0e:10:3e:c4:c5:c9:b9:7e:21:df:67:4c:01:0f:03: 06:eb:14:81:47:bf:05:c1:5a:1b:d5:7f:f4:b7:6f: 7d:ae:91:f7:7f:64:50:6f:70:73:af:5a:c4:71:a0: be:ed:13:19:86:88:59:f5:c2:be:89:be:77:17:35: 6a:23:97:6c:ef:33:7b:b5:77:dc:51:70:73:1c:c5: fa:1d:73:19:85:28:a2:4a:88:3e:66:b3:b5:7f:4e: 08:0e:92:36:57:bc:85:4c:61:36:da:55:16:f9:4b: 66:50:29:96:7e:e7:fe:cc:56:d9:1a:ae:ad:42:b7: 2e:36:5e:43:85:6f:fe:ab:3c:b5:fb:d4:16:a9:fd: 76:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:F3:7C:94:49:4A:B1:26:18:61:5C:12:90:3F:47:67:3E:C0:CD:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/2c1cf0c4-948b-38a5-8190-de4f3466996c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.crl X509v3 Authority Key Identifier: keyid:7B:C6:78:77:88:93:19:53:E7:11:02:39:94:6D:8B:3D:13:7A:C2:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer sbgp-ipAddrBlock: critical IPv4: 130.12.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:e1:8a:38:10:36:5d:64:c9:09:3c:00:3c:2d:07:e6:98:07: 7a:c9:c0:d3:b0:ae:79:48:f8:4e:bd:89:73:83:7e:84:5f:33: da:d9:6e:53:0b:4a:a6:91:4e:e1:43:b5:a1:da:f5:63:cd:4b: 18:27:a3:69:cb:6c:d9:d7:a9:f9:14:32:ca:8d:50:eb:bc:f5: f0:f1:76:13:53:dc:ef:b6:57:11:47:50:e5:d8:fc:5b:82:35: fb:8c:94:e1:a6:a8:f4:e5:27:28:80:f6:d3:f9:d8:6d:c0:0d: ba:97:5a:67:0b:7f:f2:5a:db:7f:a6:a6:91:ff:fc:0b:94:cb: 52:61:ae:6b:52:65:bb:dc:a2:8c:56:f4:37:87:a6:9c:d7:b4: 52:1e:8c:a0:22:94:c3:4a:0b:a0:1b:ab:0b:60:ef:62:24:eb: 78:7a:2e:7c:8f:08:ae:27:20:98:80:63:87:be:da:a8:07:27: ef:82:b3:a5:d9:b3:d9:ca:8c:5c:35:3f:42:f6:c3:57:e6:b5: 99:98:f4:a3:f6:0f:d1:c8:bf:4b:3b:be:54:c5:b2:1c:45:2b: e1:95:dd:4d:75:25:87:b8:45:2d:d8:86:e6:4c:a1:48:99:12: 70:79:d1:b3:c0:ad:ea:28:ac:94:70:58:cb:bc:75:84:7b:8b: c1:97:9c:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01n+3/TjQ1Imm26fswDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjJmMDU4NWUtYTI4ZS00ZWFkLTliMWMtZGVmZDI5MWNl NTRkMB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk MzMzYjViMTYtMDMyMC00MjNiLTkyNGQtZTBiNjBhMzkzZmExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFdaWDtgo9p2VAC3VlDswhEnYXjDiGoN5Lm5 /yE2rdnbX+q2TOdSSluLdK328OvQ0MA4tPP8cjR0p6IbOcuRKQwTceNlPatBOi5C yarSZLlTZBpSxcNmiW8p/gMn7db4Jzx/fPSyMioOF2VIz2hy5cThnnz6fawOED7E xcm5fiHfZ0wBDwMG6xSBR78FwVob1X/0t299rpH3f2RQb3Bzr1rEcaC+7RMZhohZ 9cK+ib53FzVqI5ds7zN7tXfcUXBzHMX6HXMZhSiiSog+ZrO1f04IDpI2V7yFTGE2 2lUW+UtmUCmWfuf+zFbZGq6tQrcuNl5DhW/+qzy1+9QWqf12mQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC/zfJRJSrEmGGFcEpA/R2c+wM0dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mMmYw NTg1ZS1hMjhlLTRlYWQtOWIxYy1kZWZkMjkxY2U1NGQvMmMxY2YwYzQtOTQ4Yi0z OGE1LTgxOTAtZGU0ZjM0NjY5OTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjJmMDU4NWUtYTI4ZS00ZWFkLTli MWMtZGVmZDI5MWNlNTRkL2YyZjA1ODVlLWEyOGUtNGVhZC05YjFjLWRlZmQyOTFj ZTU0ZC5jcmwwHwYDVR0jBBgwFoAUe8Z4d4iTGVPnEQI5lG2LPRN6wo8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mMmYwNTg1ZS1hMjhlLTRlYWQtOWIxYy1kZWZk MjkxY2U1NGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAggzwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAILhijgQNl1kyQk8ADwtB+aYB3rJwNOwrnlI+E69iXODfoRfM9rZblML SqaRTuFDtaHa9WPNSxgno2nLbNnXqfkUMsqNUOu89fDxdhNT3O+2VxFHUOXY/FuC NfuMlOGmqPTlJyiA9tP52G3ADbqXWmcLf/Ja23+mppH//AuUy1JhrmtSZbvcooxW 9DeHppzXtFIejKAilMNKC6Abqwtg72Ik63h6LnyPCK4nIJiAY4e+2qgHJ++Cs6XZ s9nKjFw1P0L2w1fmtZmY9KP2D9HIv0s7vlTFshxFK+GV3U11JYe4RS3YhuZMoUiZ EnB50bPAreoorJRwWMu8dYR7i8GXnAw= -----END CERTIFICATE-----Generated at Thu Mar 26 15:42:11 2026 by rpki-client