$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/ef21c3a5-2cd2-30d3-805c-bcb7bdd2bb40.roa File: ef21c3a5-2cd2-30d3-805c-bcb7bdd2bb40.roa (raw, json) Hash identifier: DFOjafitADDVoOQf1Fm+TbVKz6/DxgcjAmuZqfQGh+Q= Subject key identifier: 68:6A:2A:5C:98:37:A2:B4:15:6A:25:F0:2E:FE:BF:9A:BD:FE:49:00 Certificate issuer: /CN=f2f0585e-a28e-4ead-9b1c-defd291ce54d Certificate serial: 010D0C9F4328584D44FA74655CBB687A66222F80 Authority key identifier: 7B:C6:78:77:88:93:19:53:E7:11:02:39:94:6D:8B:3D:13:7A:C2:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/ef21c3a5-2cd2-30d3-805c-bcb7bdd2bb40.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 216044 IP address blocks: 130.12.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 29 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:74:65:5c:bb:68:7a:66:22:2f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2f0585e-a28e-4ead-9b1c-defd291ce54d Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=bbd991d9-fe22-482b-8ae5-1bfc0c6f3de3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:18:9b:55:6b:22:a5:24:98:d2:4a:81:68:11: af:2d:c4:c8:c4:00:c3:aa:69:4b:38:57:ec:b7:e8: 72:52:4f:70:6b:e6:c0:e5:8d:5f:52:06:8d:a0:ab: 52:c9:c0:6f:62:2f:26:31:aa:de:d3:1e:f1:0c:90: 50:dc:39:6f:a6:85:03:40:a1:8e:8f:1b:34:1c:95: 78:1d:4b:34:21:16:41:d4:f0:b5:1d:6e:7f:12:03: a7:45:9e:af:9f:b9:89:1d:18:31:2f:14:2d:1e:4c: 7d:53:26:1e:81:8d:1b:37:e2:1f:aa:50:2b:ac:15: 6f:0f:04:cc:4a:0b:51:b3:c1:1f:e9:6f:7b:de:e0: 12:05:c0:b1:ae:0e:e9:d4:8a:32:dc:0c:3e:00:16: 5d:6e:36:93:f5:ea:a3:1e:50:2c:24:3d:79:19:63: bc:b7:67:ab:78:18:17:63:17:f7:70:db:17:6b:9d: 32:b3:d3:a6:b7:b2:39:5f:d3:9a:1b:d4:7f:a6:7c: f2:f5:da:1a:6a:9c:52:8f:68:ed:70:1d:83:3a:d4: 91:c5:2e:31:ba:bb:9a:43:f4:1c:1f:47:c5:a3:6d: 0f:d3:a6:1f:67:97:4e:c0:41:36:cb:33:43:88:34: ce:3c:07:80:94:1b:2a:55:33:ba:a5:d4:a1:34:c4: 3b:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:6A:2A:5C:98:37:A2:B4:15:6A:25:F0:2E:FE:BF:9A:BD:FE:49:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/ef21c3a5-2cd2-30d3-805c-bcb7bdd2bb40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.crl X509v3 Authority Key Identifier: keyid:7B:C6:78:77:88:93:19:53:E7:11:02:39:94:6D:8B:3D:13:7A:C2:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer sbgp-ipAddrBlock: critical IPv4: 130.12.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:43:37:bc:63:f2:e5:4b:79:06:2f:c7:53:76:4e:14:64:0c: 8a:1b:cd:84:7e:d9:03:91:6a:95:e3:76:69:4d:b1:c5:cd:0a: 28:43:01:b0:ad:da:a3:dc:78:2d:98:42:75:4d:86:f1:ee:17: 59:24:f9:c0:ac:78:d7:70:10:1c:16:3e:c6:e7:18:d1:b3:fe: c2:98:11:8b:41:3a:73:02:fb:68:f8:92:08:09:5b:9c:44:43: 25:a6:ac:0b:39:5b:8e:8c:6a:9c:60:45:0e:a4:6f:96:53:50: 0d:fd:17:b7:a6:92:9d:59:4a:f5:08:79:62:89:40:58:82:b1: c3:3f:6c:29:1d:c2:24:b5:64:49:dc:bf:a2:02:6c:06:55:ed: cb:63:d5:c2:cf:ae:c6:80:47:94:b0:f3:17:b2:25:65:c9:9a: 97:df:ba:b3:4b:c5:8f:9e:c5:9f:d2:a2:52:65:98:8a:f9:e0: e1:2b:f5:e1:ad:aa:41:55:96:41:cb:a7:6f:53:e1:22:44:b6: 18:5a:06:38:73:1a:1c:f2:1c:a6:fe:8b:cf:c5:0d:f8:5f:04: 72:8b:63:4d:58:ba:d5:9c:9f:dd:88:60:f2:41:b6:81:1f:93: 9e:6a:53:fa:c6:ff:0a:ec:96:82:09:4a:2c:b8:3b:cd:69:9f: ac:a9:25:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+nRlXLtoemYiL4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjJmMDU4NWUtYTI4ZS00ZWFkLTliMWMtZGVmZDI5MWNl NTRkMB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk YmJkOTkxZDktZmUyMi00ODJiLThhZTUtMWJmYzBjNmYzZGUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhibVWsipSSY0kqBaBGvLcTIxADDqmlLOFfs t+hyUk9wa+bA5Y1fUgaNoKtSycBvYi8mMare0x7xDJBQ3DlvpoUDQKGOjxs0HJV4 HUs0IRZB1PC1HW5/EgOnRZ6vn7mJHRgxLxQtHkx9UyYegY0bN+IfqlArrBVvDwTM SgtRs8Ef6W973uASBcCxrg7p1Ioy3Aw+ABZdbjaT9eqjHlAsJD15GWO8t2ereBgX Yxf3cNsXa50ys9Omt7I5X9OaG9R/pnzy9doaapxSj2jtcB2DOtSRxS4xuruaQ/Qc H0fFo20P06YfZ5dOwEE2yzNDiDTOPAeAlBsqVTO6pdShNMQ7EQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGhqKlyYN6K0FWol8C7+v5q9/kkAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mMmYw NTg1ZS1hMjhlLTRlYWQtOWIxYy1kZWZkMjkxY2U1NGQvZWYyMWMzYTUtMmNkMi0z MGQzLTgwNWMtYmNiN2JkZDJiYjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjJmMDU4NWUtYTI4ZS00ZWFkLTli MWMtZGVmZDI5MWNlNTRkL2YyZjA1ODVlLWEyOGUtNGVhZC05YjFjLWRlZmQyOTFj ZTU0ZC5jcmwwHwYDVR0jBBgwFoAUe8Z4d4iTGVPnEQI5lG2LPRN6wo8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mMmYwNTg1ZS1hMjhlLTRlYWQtOWIxYy1kZWZk MjkxY2U1NGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAggzzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB9DN7xj8uVLeQYvx1N2ThRkDIobzYR+2QORapXjdmlNscXNCihDAbCt 2qPceC2YQnVNhvHuF1kk+cCseNdwEBwWPsbnGNGz/sKYEYtBOnMC+2j4kggJW5xE QyWmrAs5W46MapxgRQ6kb5ZTUA39F7emkp1ZSvUIeWKJQFiCscM/bCkdwiS1ZEnc v6ICbAZV7ctj1cLPrsaAR5Sw8xeyJWXJmpffurNLxY+exZ/SolJlmIr54OEr9eGt qkFVlkHLp29T4SJEthhaBjhzGhzyHKb+i8/FDfhfBHKLY01YutWcn92IYPJBtoEf k55qU/rG/wrsloIJSiy4O81pn6ypJeY= -----END CERTIFICATE-----Generated at Sat Mar 28 12:09:46 2026 by rpki-client