$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c7990a1d-1dec-4721-b9fc-a68ef45cb3c6/af4e37c9-a826-3d04-a795-2bfe263a40fb.roa File: af4e37c9-a826-3d04-a795-2bfe263a40fb.roa (raw, json) Hash identifier: byfzAEPl8TVI/GzND96yuSMrcp57UJqNX8OQkM0A7N0= Subject key identifier: 4C:1F:07:21:74:D4:96:22:C1:D0:1C:FA:C0:44:67:AD:C9:47:30:62 Certificate issuer: /CN=c7990a1d-1dec-4721-b9fc-a68ef45cb3c6 Certificate serial: 010D0C9F4328584ECA6C87667EDBA8C5EE4B7900 Authority key identifier: DD:02:37:57:A2:47:56:D3:27:16:ED:37:0E:C5:18:21:7E:F7:0E:EC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c7990a1d-1dec-4721-b9fc-a68ef45cb3c6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c7990a1d-1dec-4721-b9fc-a68ef45cb3c6/af4e37c9-a826-3d04-a795-2bfe263a40fb.roa Signing time: Mon 10 Aug 2026 13:00:12 +0000 ROA not before: Mon 10 Aug 2026 13:00:12 +0000 ROA not after: Sun 08 Nov 2026 14:00:12 +0000 asID: 393746 IP address blocks: 130.12.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c7990a1d-1dec-4721-b9fc-a68ef45cb3c6/c7990a1d-1dec-4721-b9fc-a68ef45cb3c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c7990a1d-1dec-4721-b9fc-a68ef45cb3c6/c7990a1d-1dec-4721-b9fc-a68ef45cb3c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c7990a1d-1dec-4721-b9fc-a68ef45cb3c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ca:6c:87:66:7e:db:a8:c5:ee:4b:79:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7990a1d-1dec-4721-b9fc-a68ef45cb3c6 Validity Not Before: Aug 10 13:00:12 2026 GMT Not After : Nov 8 14:00:12 2026 GMT Subject: CN=79de4a07-1fd5-42b6-9eae-2ac7b0d607e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:91:24:cd:79:20:b9:45:06:45:83:e2:ed:70: f0:65:93:5b:dd:ab:9a:50:0c:08:b3:b8:a2:f8:99: 72:cf:b0:4e:6d:4c:a2:d2:ef:eb:c8:ec:33:a8:b3: 09:c8:7e:fd:d5:b1:22:80:da:97:c7:c5:6f:df:73: 08:fd:99:36:19:5a:5c:33:4f:58:23:00:0a:67:fa: f3:56:75:3d:6f:5e:42:a0:fa:44:2d:90:aa:07:42: 28:27:95:3d:26:02:15:4f:27:0f:ca:8d:ab:18:a6: 20:3b:1e:c0:a6:10:8c:4e:4d:e7:92:53:3a:f7:57: 81:9c:96:6f:cf:ce:5a:70:0f:66:ba:a7:17:25:22: d2:27:e8:30:1a:45:8b:6c:98:fc:82:3d:bd:c8:e3: 9e:46:b3:16:88:cf:81:21:5d:2f:a6:e9:61:39:8a: 9c:ac:59:cc:4c:69:66:6c:a6:46:ea:d1:e7:ad:1d: 61:85:a7:34:d8:f8:b3:e9:0c:63:8f:22:85:9a:c1: 2c:35:ba:61:ee:5d:24:02:1b:52:8f:98:33:da:ae: d4:35:23:dd:78:9b:8f:e3:06:bc:47:5f:e6:a0:7c: cf:11:8d:11:69:cd:f1:8e:fe:41:90:78:b0:a7:09: 15:35:66:a9:ad:cf:6a:68:c8:26:ce:79:e4:d8:8d: 4b:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:1F:07:21:74:D4:96:22:C1:D0:1C:FA:C0:44:67:AD:C9:47:30:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c7990a1d-1dec-4721-b9fc-a68ef45cb3c6/af4e37c9-a826-3d04-a795-2bfe263a40fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c7990a1d-1dec-4721-b9fc-a68ef45cb3c6/c7990a1d-1dec-4721-b9fc-a68ef45cb3c6.crl X509v3 Authority Key Identifier: keyid:DD:02:37:57:A2:47:56:D3:27:16:ED:37:0E:C5:18:21:7E:F7:0E:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c7990a1d-1dec-4721-b9fc-a68ef45cb3c6.cer sbgp-ipAddrBlock: critical IPv4: 130.12.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:81:fb:f5:a4:13:61:a9:28:b6:8b:e4:ea:67:28:73:f1:a4: 05:a0:82:a1:da:c6:52:da:cd:ef:e9:c4:c5:32:b9:16:c4:b0: e6:70:ed:da:ea:f0:1b:d9:aa:a8:77:54:63:94:84:ec:3e:8b: 94:38:47:2a:ab:cc:83:5a:99:e7:70:ee:4f:5a:24:a4:87:73: c8:55:9e:78:75:ed:d9:c8:77:6f:0f:49:22:90:d1:18:49:8d: dd:0f:d8:62:6f:fd:04:7c:cd:75:06:bb:42:19:01:d5:cd:4b: 94:fc:ef:ad:b5:8a:e2:d9:80:b7:c7:a9:be:00:ed:5d:60:df: 5b:50:53:7b:99:94:42:b7:31:76:92:6f:93:c0:d1:62:18:f2: f8:fd:c7:42:46:45:1c:30:84:cf:b6:a3:ab:94:88:22:60:93: 67:94:2f:a7:cf:d8:1f:f0:b3:34:38:a5:d2:ae:9a:f1:73:e3: 97:0c:6d:63:c4:26:2f:11:d1:cf:4d:91:1e:5c:73:ae:37:c2: 6d:ce:11:99:7c:cf:4b:ff:4f:6f:ae:ce:57:5f:68:d4:89:de: 91:dd:11:5b:c8:d3:9c:39:ad:9a:43:ec:cf:e8:d2:7e:97:15: d9:3d:4c:a2:33:40:9d:dc:64:84:8b:f4:1d:79:15:3a:ac:78: 9a:11:98:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7KbIdmftuoxe5LeQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzc5OTBhMWQtMWRlYy00NzIxLWI5ZmMtYTY4ZWY0NWNi M2M2MB4XDTI2MDgxMDEzMDAxMloXDTI2MTEwODE0MDAxMlowLzEtMCsGA1UEAxMk NzlkZTRhMDctMWZkNS00MmI2LTllYWUtMmFjN2IwZDYwN2U2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ZEkzXkguUUGRYPi7XDwZZNb3auaUAwIs7ii +Jlyz7BObUyi0u/ryOwzqLMJyH791bEigNqXx8Vv33MI/Zk2GVpcM09YIwAKZ/rz VnU9b15CoPpELZCqB0IoJ5U9JgIVTycPyo2rGKYgOx7AphCMTk3nklM691eBnJZv z85acA9muqcXJSLSJ+gwGkWLbJj8gj29yOOeRrMWiM+BIV0vpulhOYqcrFnMTGlm bKZG6tHnrR1hhac02Piz6QxjjyKFmsEsNbph7l0kAhtSj5gz2q7UNSPdeJuP4wa8 R1/moHzPEY0Rac3xjv5BkHiwpwkVNWaprc9qaMgmznnk2I1LBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEwfByF01JYiwdAc+sBEZ63JRzBiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jNzk5 MGExZC0xZGVjLTQ3MjEtYjlmYy1hNjhlZjQ1Y2IzYzYvYWY0ZTM3YzktYTgyNi0z ZDA0LWE3OTUtMmJmZTI2M2E0MGZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYzc5OTBhMWQtMWRlYy00NzIxLWI5 ZmMtYTY4ZWY0NWNiM2M2L2M3OTkwYTFkLTFkZWMtNDcyMS1iOWZjLWE2OGVmNDVj YjNjNi5jcmwwHwYDVR0jBBgwFoAU3QI3V6JHVtMnFu03DsUYIX73DuwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jNzk5MGExZC0xZGVjLTQ3MjEtYjlmYy1hNjhl ZjQ1Y2IzYzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAggxvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIKB+/WkE2GpKLaL5OpnKHPxpAWggqHaxlLaze/pxMUyuRbEsOZw7drq 8BvZqqh3VGOUhOw+i5Q4RyqrzINamedw7k9aJKSHc8hVnnh17dnId28PSSKQ0RhJ jd0P2GJv/QR8zXUGu0IZAdXNS5T87621iuLZgLfHqb4A7V1g31tQU3uZlEK3MXaS b5PA0WIY8vj9x0JGRRwwhM+2o6uUiCJgk2eUL6fP2B/wszQ4pdKumvFz45cMbWPE Ji8R0c9NkR5cc643wm3OEZl8z0v/T2+uzldfaNSJ3pHdEVvI05w5rZpD7M/o0n6X Fdk9TKIzQJ3cZISL9B15FTqseJoRmEc= -----END CERTIFICATE-----Generated at Tue Sep 22 10:09:30 2026 by rpki-client