$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70bed85-1ab7-44a0-a0b7-401891be2082/acc2f20d-d9b5-323e-881e-c18c6ec77c4c.roa File: acc2f20d-d9b5-323e-881e-c18c6ec77c4c.roa (raw, json) Hash identifier: F8tfVIpuDYCtYAtT5W3wZVHo6C07McGDtdiN5ozvOxQ= Subject key identifier: CF:CB:E0:1B:AF:1A:B7:45:D0:08:09:64:B8:F5:C8:E8:55:97:DC:C4 Certificate issuer: /CN=f70bed85-1ab7-44a0-a0b7-401891be2082 Certificate serial: 010D0C9F4328584D39CF9E7DB47701E2DB6B8B00 Authority key identifier: 3A:04:E6:83:03:36:15:97:E2:32:DB:32:D9:D3:81:96:05:4F:E7:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70bed85-1ab7-44a0-a0b7-401891be2082.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70bed85-1ab7-44a0-a0b7-401891be2082/acc2f20d-d9b5-323e-881e-c18c6ec77c4c.roa Signing time: Fri 20 Mar 2026 01:00:32 +0000 ROA not before: Fri 20 Mar 2026 01:00:32 +0000 ROA not after: Thu 18 Jun 2026 01:00:32 +0000 asID: 397041 IP address blocks: 130.12.164.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70bed85-1ab7-44a0-a0b7-401891be2082/f70bed85-1ab7-44a0-a0b7-401891be2082.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70bed85-1ab7-44a0-a0b7-401891be2082/f70bed85-1ab7-44a0-a0b7-401891be2082.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70bed85-1ab7-44a0-a0b7-401891be2082.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:39:cf:9e:7d:b4:77:01:e2:db:6b:8b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f70bed85-1ab7-44a0-a0b7-401891be2082 Validity Not Before: Mar 20 01:00:32 2026 GMT Not After : Jun 18 01:00:32 2026 GMT Subject: CN=3c280de1-1ec7-45af-be33-a346d2792171 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:3f:9e:77:bb:22:26:c4:79:33:12:a5:19:68: c2:05:a7:68:4d:2c:0c:da:ad:65:ef:a8:0c:f9:9b: 6c:ad:fd:cc:ef:9a:9d:66:60:44:22:4d:08:f9:3b: bc:b2:9e:4b:b0:31:92:e0:08:1a:f1:15:61:b7:13: 39:c8:74:5f:58:4e:2a:8c:ff:0c:3c:44:7a:61:64: 05:3e:aa:fe:f1:ba:6a:72:9e:15:95:29:6a:c1:48: 18:7c:f0:47:3d:67:13:40:c5:03:4c:51:81:ad:2f: 7f:aa:79:b4:5f:96:d7:30:b1:6d:f0:20:11:70:6b: a0:48:4f:52:e8:19:50:a6:27:c0:eb:fa:3b:ee:db: 86:eb:d4:d2:98:b0:03:1b:1c:aa:9d:5d:a0:81:27: a2:ca:27:2d:1b:2f:1d:85:db:db:9b:f0:fa:a1:e6: be:12:cd:2d:e9:1f:be:78:19:9a:de:23:6b:e5:54: 69:31:eb:62:53:1e:04:68:21:26:60:c7:3b:fc:2a: a1:e7:5c:69:aa:f9:b0:1e:4d:26:e0:25:fe:1f:61: 82:e6:be:22:66:15:a3:05:43:1d:d2:1c:83:49:67: da:ef:15:08:ad:86:43:63:e1:c9:7b:42:d8:99:46: 15:b8:ff:72:9d:b2:ba:55:c0:1a:6a:64:10:78:8a: 78:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:CB:E0:1B:AF:1A:B7:45:D0:08:09:64:B8:F5:C8:E8:55:97:DC:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70bed85-1ab7-44a0-a0b7-401891be2082/acc2f20d-d9b5-323e-881e-c18c6ec77c4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70bed85-1ab7-44a0-a0b7-401891be2082/f70bed85-1ab7-44a0-a0b7-401891be2082.crl X509v3 Authority Key Identifier: keyid:3A:04:E6:83:03:36:15:97:E2:32:DB:32:D9:D3:81:96:05:4F:E7:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70bed85-1ab7-44a0-a0b7-401891be2082.cer sbgp-ipAddrBlock: critical IPv4: 130.12.164.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:74:02:79:74:60:c7:00:26:67:ba:29:da:6e:00:65:aa:63: 18:f3:14:90:73:7a:cd:3c:7e:a7:d3:e6:90:9a:d5:19:10:32: e3:9e:f8:f5:0d:5c:f4:af:08:3c:42:4f:3f:7a:09:c1:e9:07: 68:64:28:e3:87:27:d1:fb:3c:c5:10:31:16:bd:08:63:50:ea: 42:79:6e:cf:e9:3c:55:23:15:6e:05:4a:d2:e4:dc:7d:16:8c: 6c:00:3f:27:8b:43:60:60:4e:bf:e4:f7:70:d5:c1:34:a3:60: a1:92:a6:e3:1a:16:2c:9c:4e:2e:95:5e:d7:c1:b3:36:d5:be: 1d:42:9f:8b:ba:1b:cb:65:41:22:64:7d:42:77:3d:46:2c:8d: c5:d6:01:35:89:57:66:32:b9:d9:16:95:8c:e3:07:ea:bb:b8: 30:37:93:81:1d:17:1c:57:2a:65:96:18:20:f3:1b:29:b6:a4: 11:41:56:bc:41:1b:e2:ae:26:fb:52:f1:33:a3:44:4e:a9:1b: 24:6c:9b:21:e9:d9:bd:db:c8:ca:aa:73:b8:41:f7:d7:0d:fd: 09:f6:9d:da:b8:d1:9f:fd:4a:7d:1d:b5:7d:b3:dd:de:6a:bd: 21:7f:f9:b2:f9:71:46:2e:81:4a:48:69:72:a5:24:01:de:f5: ef:31:f5:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE05z559tHcB4ttriwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjcwYmVkODUtMWFiNy00NGEwLWEwYjctNDAxODkxYmUy MDgyMB4XDTI2MDMyMDAxMDAzMloXDTI2MDYxODAxMDAzMlowLzEtMCsGA1UEAxMk M2MyODBkZTEtMWVjNy00NWFmLWJlMzMtYTM0NmQyNzkyMTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArz+ed7siJsR5MxKlGWjCBadoTSwM2q1l76gM +Ztsrf3M75qdZmBEIk0I+Tu8sp5LsDGS4Aga8RVhtxM5yHRfWE4qjP8MPER6YWQF Pqr+8bpqcp4VlSlqwUgYfPBHPWcTQMUDTFGBrS9/qnm0X5bXMLFt8CARcGugSE9S 6BlQpifA6/o77tuG69TSmLADGxyqnV2ggSeiyictGy8dhdvbm/D6oea+Es0t6R++ eBma3iNr5VRpMetiUx4EaCEmYMc7/Cqh51xpqvmwHk0m4CX+H2GC5r4iZhWjBUMd 0hyDSWfa7xUIrYZDY+HJe0LYmUYVuP9ynbK6VcAaamQQeIp4pQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM/L4BuvGrdF0AgJZLj1yOhVl9zEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mNzBi ZWQ4NS0xYWI3LTQ0YTAtYTBiNy00MDE4OTFiZTIwODIvYWNjMmYyMGQtZDliNS0z MjNlLTg4MWUtYzE4YzZlYzc3YzRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZjcwYmVkODUtMWFiNy00NGEwLWEw YjctNDAxODkxYmUyMDgyL2Y3MGJlZDg1LTFhYjctNDRhMC1hMGI3LTQwMTg5MWJl MjA4Mi5jcmwwHwYDVR0jBBgwFoAUOgTmgwM2FZfiMtsy2dOBlgVP53QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9mNzBiZWQ4NS0xYWI3LTQ0YTAtYTBiNy00MDE4 OTFiZTIwODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCggykMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAZ0Anl0YMcAJme6KdpuAGWqYxjzFJBzes08fqfT5pCa1RkQMuOe+PUN XPSvCDxCTz96CcHpB2hkKOOHJ9H7PMUQMRa9CGNQ6kJ5bs/pPFUjFW4FStLk3H0W jGwAPyeLQ2BgTr/k93DVwTSjYKGSpuMaFiycTi6VXtfBszbVvh1Cn4u6G8tlQSJk fUJ3PUYsjcXWATWJV2YyudkWlYzjB+q7uDA3k4EdFxxXKmWWGCDzGym2pBFBVrxB G+KuJvtS8TOjRE6pGyRsmyHp2b3byMqqc7hB99cN/Qn2ndq40Z/9Sn0dtX2z3d5q vSF/+bL5cUYugUpIaXKlJAHe9e8x9Us= -----END CERTIFICATE-----Generated at Thu Mar 26 15:30:23 2026 by rpki-client