$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0cfdfc46-9137-44dd-9617-342b78c20df5/b0f19d42-e4a2-3a7d-b65d-491b6bb8d7b9.roa File: b0f19d42-e4a2-3a7d-b65d-491b6bb8d7b9.roa (raw, json) Hash identifier: /0hNvglDfES+KCfpZf5PHW6K6by+hyTx7HaQ7f3P78g= Subject key identifier: 74:3F:41:70:2B:E5:D8:6C:19:CE:CC:76:C1:74:8F:A0:13:0C:38:00 Certificate issuer: /CN=0cfdfc46-9137-44dd-9617-342b78c20df5 Certificate serial: 010D0C9F4328584F7E7DA42867D992759963BD80 Authority key identifier: 9D:85:43:E3:92:10:EA:D0:07:41:7C:4D:26:04:7C:FE:EE:59:3D:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0cfdfc46-9137-44dd-9617-342b78c20df5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0cfdfc46-9137-44dd-9617-342b78c20df5/b0f19d42-e4a2-3a7d-b65d-491b6bb8d7b9.roa Signing time: Wed 14 Oct 2026 01:00:13 +0000 ROA not before: Wed 14 Oct 2026 01:00:13 +0000 ROA not after: Tue 12 Jan 2027 02:00:13 +0000 asID: 14700 IP address blocks: 130.12.30.0/24 maxlen: 24 149.112.185.0/24 maxlen: 24 2602:f4c3::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0cfdfc46-9137-44dd-9617-342b78c20df5/0cfdfc46-9137-44dd-9617-342b78c20df5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0cfdfc46-9137-44dd-9617-342b78c20df5/0cfdfc46-9137-44dd-9617-342b78c20df5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0cfdfc46-9137-44dd-9617-342b78c20df5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7e:7d:a4:28:67:d9:92:75:99:63:bd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0cfdfc46-9137-44dd-9617-342b78c20df5 Validity Not Before: Oct 14 01:00:13 2026 GMT Not After : Jan 12 02:00:13 2027 GMT Subject: CN=984397f9-5b5e-463a-b5ff-08ab194a5320 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:04:fa:7c:50:51:f8:5b:65:80:3d:3c:b0:16: 26:65:89:24:62:f1:07:ee:73:43:30:0b:68:87:dc: 31:8a:10:d2:a7:39:3d:7c:da:41:97:92:09:58:a7: e9:29:2a:87:25:37:6d:ef:ea:e9:5b:5c:0d:f9:09: 21:da:c4:a8:12:f2:b7:fe:60:1a:82:92:84:e1:fa: e6:30:d4:ab:93:01:75:a9:c9:7b:8f:fe:56:66:78: b7:0f:b5:ae:71:6a:47:3f:66:2d:85:fc:11:a7:ba: c3:6b:6b:ec:42:65:30:e1:37:6a:88:82:7d:be:99: 4f:48:08:52:39:c9:b9:20:87:dc:9b:69:23:fe:fb: 29:af:9f:55:b1:a7:92:8f:da:d1:a0:2c:7c:8c:a8: eb:aa:f0:4d:7e:1e:50:de:00:6c:27:09:99:47:0a: 4c:a5:ea:d4:2e:b0:4f:61:4e:1d:1c:78:57:55:89: 09:dc:cc:35:61:00:47:48:25:c6:70:1f:66:f7:3c: f6:fd:ec:8c:84:88:df:77:19:c0:a2:63:93:44:b3: 81:e6:2b:00:b7:6d:d1:05:a5:b6:65:9f:b9:72:1a: df:5b:19:1e:ff:63:04:bc:11:bb:52:99:87:4c:c8: 2e:57:63:99:07:31:78:b0:04:95:14:64:16:a2:b6: 4c:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:3F:41:70:2B:E5:D8:6C:19:CE:CC:76:C1:74:8F:A0:13:0C:38:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0cfdfc46-9137-44dd-9617-342b78c20df5/b0f19d42-e4a2-3a7d-b65d-491b6bb8d7b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0cfdfc46-9137-44dd-9617-342b78c20df5/0cfdfc46-9137-44dd-9617-342b78c20df5.crl X509v3 Authority Key Identifier: keyid:9D:85:43:E3:92:10:EA:D0:07:41:7C:4D:26:04:7C:FE:EE:59:3D:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0cfdfc46-9137-44dd-9617-342b78c20df5.cer sbgp-ipAddrBlock: critical IPv4: 130.12.30.0/24 149.112.185.0/24 IPv6: 2602:f4c3::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c9:78:0c:9c:69:4e:66:2d:a1:6f:18:f7:78:be:57:42:3a:3b: 85:55:4a:cd:59:d7:b1:e2:b5:5f:73:22:e5:34:2f:9b:83:c8: 52:1a:85:db:a2:be:59:81:5e:a0:04:3e:0b:ac:10:df:d4:9e: 20:7e:88:f9:01:cf:8e:16:fe:af:d6:eb:cf:7a:3e:ba:3d:85: 42:ec:61:d5:56:0b:18:e5:00:ea:4a:73:d2:33:b8:d2:9a:c4: 13:97:90:c6:18:51:47:cd:6b:d0:03:31:f1:42:8d:ac:c6:ba: 96:a5:e8:d1:ed:04:72:29:ee:05:44:8c:b9:c9:7e:1b:44:9f: d3:07:03:5e:fa:0c:6a:09:3b:30:54:32:7a:cc:d4:fb:dd:62: 6c:8b:92:14:46:a4:c9:d7:6f:13:f4:f4:fb:98:df:20:9f:7b: 54:fb:54:f9:fa:03:f7:9e:00:52:56:07:11:eb:2d:64:dd:d6: 0a:5c:d1:31:9c:10:19:ef:b7:4e:5e:a1:2a:da:a9:d7:71:72: 75:98:70:fa:05:13:75:8f:3a:aa:09:b6:0d:ef:d9:8e:07:a2: 26:74:9e:1b:b3:6a:36:a9:cc:0d:13:87:c3:f1:bd:27:14:94: 53:5e:ff:c7:49:28:da:eb:29:2f:d2:a9:ea:82:33:54:0c:9e: 8a:93:90:b0 -----BEGIN CERTIFICATE----- MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWE9+faQoZ9mSdZljvYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGNmZGZjNDYtOTEzNy00NGRkLTk2MTctMzQyYjc4YzIw ZGY1MB4XDTI2MTAxNDAxMDAxM1oXDTI3MDExMjAyMDAxM1owLzEtMCsGA1UEAxMk OTg0Mzk3ZjktNWI1ZS00NjNhLWI1ZmYtMDhhYjE5NGE1MzIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwT6fFBR+FtlgD08sBYmZYkkYvEH7nNDMAto h9wxihDSpzk9fNpBl5IJWKfpKSqHJTdt7+rpW1wN+Qkh2sSoEvK3/mAagpKE4frm MNSrkwF1qcl7j/5WZni3D7WucWpHP2YthfwRp7rDa2vsQmUw4TdqiIJ9vplPSAhS Ocm5IIfcm2kj/vspr59VsaeSj9rRoCx8jKjrqvBNfh5Q3gBsJwmZRwpMperULrBP YU4dHHhXVYkJ3Mw1YQBHSCXGcB9m9zz2/eyMhIjfdxnAomOTRLOB5isAt23RBaW2 ZZ+5chrfWxke/2MEvBG7UpmHTMguV2OZBzF4sASVFGQWorZMiQIDAQABo4IDazCC A2cwHQYDVR0OBBYEFHQ/QXAr5dhsGc7MdsF0j6ATDDgAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8wY2Zk ZmM0Ni05MTM3LTQ0ZGQtOTYxNy0zNDJiNzhjMjBkZjUvYjBmMTlkNDItZTRhMi0z YTdkLWI2NWQtNDkxYjZiYjhkN2I5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMGNmZGZjNDYtOTEzNy00NGRkLTk2 MTctMzQyYjc4YzIwZGY1LzBjZmRmYzQ2LTkxMzctNDRkZC05NjE3LTM0MmI3OGMy MGRmNS5jcmwwHwYDVR0jBBgwFoAUnYVD45IQ6tAHQXxNJgR8/u5ZPSAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8wY2ZkZmM0Ni05MTM3LTQ0ZGQtOTYxNy0zNDJi NzhjMjBkZjUuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQAggweAwQA lXC5MA4EAgACMAgDBgAmAvTDADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQDJeAycaU5mLaFvGPd4vldCOjuF VUrNWdex4rVfcyLlNC+bg8hSGoXbor5ZgV6gBD4LrBDf1J4gfoj5Ac+OFv6v1uvP ej66PYVC7GHVVgsY5QDqSnPSM7jSmsQTl5DGGFFHzWvQAzHxQo2sxrqWpejR7QRy Ke4FRIy5yX4bRJ/TBwNe+gxqCTswVDJ6zNT73WJsi5IURqTJ128T9PT7mN8gn3tU +1T5+gP3ngBSVgcR6y1k3dYKXNExnBAZ77dOXqEq2qnXcXJ1mHD6BRN1jzqqCbYN 79mOB6ImdJ4bs2o2qcwNE4fD8b0nFJRTXv/HSSja6ykv0qnqgjNUDJ6Kk5Cw -----END CERTIFICATE-----Generated at Thu Nov 5 10:15:44 2026 by rpki-client