$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b6998fd9-7b69-498c-8135-f33f59d7256c/25789a61-8c1c-387c-8820-747f365423e3.roa File: 25789a61-8c1c-387c-8820-747f365423e3.roa (raw, json) Hash identifier: A3qmyPSL7eLX8BVk5Jvneczdnc9ow4fbwU4iZuotcpQ= Subject key identifier: 40:23:F2:D5:E3:D9:F0:0B:68:E1:7C:35:7D:B0:95:4F:CD:33:F4:2D Certificate issuer: /CN=b6998fd9-7b69-498c-8135-f33f59d7256c Certificate serial: 010D0C9F4328584D571F980AF4ABBFDC0F53BD80 Authority key identifier: 33:E5:33:4D:D8:9D:58:C6:36:03:CE:66:77:8F:66:71:0F:49:C2:0A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b6998fd9-7b69-498c-8135-f33f59d7256c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b6998fd9-7b69-498c-8135-f33f59d7256c/25789a61-8c1c-387c-8820-747f365423e3.roa Signing time: Mon 30 Mar 2026 13:00:30 +0000 ROA not before: Mon 30 Mar 2026 13:00:30 +0000 ROA not after: Sun 28 Jun 2026 13:00:30 +0000 asID: 11878 IP address blocks: 130.12.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b6998fd9-7b69-498c-8135-f33f59d7256c/b6998fd9-7b69-498c-8135-f33f59d7256c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b6998fd9-7b69-498c-8135-f33f59d7256c/b6998fd9-7b69-498c-8135-f33f59d7256c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b6998fd9-7b69-498c-8135-f33f59d7256c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:57:1f:98:0a:f4:ab:bf:dc:0f:53:bd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6998fd9-7b69-498c-8135-f33f59d7256c Validity Not Before: Mar 30 13:00:30 2026 GMT Not After : Jun 28 13:00:30 2026 GMT Subject: CN=c63a3d95-50d3-478d-8f33-65993ec2b449 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:71:de:ed:b7:8a:dc:1d:81:e6:10:5d:48:b1: 24:88:b3:79:8b:cf:9b:10:99:75:ef:c1:f3:21:06: f9:ad:e1:23:77:20:93:bd:aa:cc:d1:72:2c:37:42: 42:32:ad:86:80:a0:01:97:e2:bb:80:33:c7:70:15: 57:a3:8a:61:38:2e:9c:60:b1:e8:8a:3c:03:c9:69: 4a:92:0f:f4:5f:67:ab:58:ed:76:25:06:38:16:97: 85:9a:46:7e:66:c3:db:8f:f2:0f:ca:09:ef:38:ab: 82:f9:0c:93:50:03:b3:01:01:1d:43:24:72:96:65: d8:13:ce:ff:be:27:97:4d:5e:cf:56:20:a9:79:90: e5:28:b4:4f:62:1b:45:e4:1f:0e:24:10:93:5f:75: ac:a5:45:1d:56:e7:8c:d3:c2:9a:68:92:46:32:43: 1c:7c:e5:40:b0:f7:b5:76:18:0d:29:9f:a1:60:aa: b8:5c:4d:fc:08:ca:9a:ba:e4:16:80:9c:69:44:d6: 0b:00:57:d8:11:ae:35:cd:1c:a3:ab:40:cb:fb:f8: 78:95:7a:d8:3b:f1:b7:98:0a:2a:8e:53:e0:05:f2: fc:5f:b4:c6:9b:ec:db:0d:98:4b:97:d2:0c:60:fa: 75:60:10:f9:11:03:e1:3d:59:14:ed:e0:10:7f:c4: 5a:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:23:F2:D5:E3:D9:F0:0B:68:E1:7C:35:7D:B0:95:4F:CD:33:F4:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b6998fd9-7b69-498c-8135-f33f59d7256c/25789a61-8c1c-387c-8820-747f365423e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b6998fd9-7b69-498c-8135-f33f59d7256c/b6998fd9-7b69-498c-8135-f33f59d7256c.crl X509v3 Authority Key Identifier: keyid:33:E5:33:4D:D8:9D:58:C6:36:03:CE:66:77:8F:66:71:0F:49:C2:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b6998fd9-7b69-498c-8135-f33f59d7256c.cer sbgp-ipAddrBlock: critical IPv4: 130.12.190.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:61:40:52:58:ac:fc:01:f5:65:e6:96:47:dd:c2:74:36:83: 35:bb:9b:92:87:18:a1:b0:26:08:99:67:d0:45:bc:c8:0e:e0: e1:97:1c:ad:25:03:6f:07:64:3e:e9:19:5b:52:44:2c:37:89: 22:3f:1b:73:0b:ae:81:49:47:88:e8:dd:97:07:e0:61:eb:43: b0:84:44:8f:dd:90:14:81:3c:00:ad:9c:76:3c:2d:0c:f2:65: 4c:f6:ae:37:ce:35:47:68:03:14:bd:dd:ba:1e:aa:72:81:91: 63:6d:67:e9:cc:0f:6d:79:de:be:b0:5b:87:43:7d:14:ee:b9: 61:25:94:1e:c6:59:46:b1:64:f9:18:c0:99:c4:79:85:c4:89: 89:b4:fb:42:cd:cf:50:12:82:db:0b:21:f1:6c:51:de:23:f6: 0a:59:5d:00:85:c6:02:7b:12:b8:1f:71:74:6a:5e:34:75:33: 0e:4d:39:a6:94:32:fe:b1:00:d4:93:47:38:8a:0a:99:8d:69: 79:08:36:e4:26:5b:8f:81:85:02:7d:13:a0:6b:ec:90:19:ce: 75:30:86:d1:1e:75:bb:bb:4c:b5:4a:79:24:80:5f:a9:26:5f: 93:2c:02:4b:88:bc:81:58:88:91:52:0c:5c:e4:57:66:4f:6a: 57:d7:ff:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1XH5gK9Ku/3A9TvYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjY5OThmZDktN2I2OS00OThjLTgxMzUtZjMzZjU5ZDcy NTZjMB4XDTI2MDMzMDEzMDAzMFoXDTI2MDYyODEzMDAzMFowLzEtMCsGA1UEAxMk YzYzYTNkOTUtNTBkMy00NzhkLThmMzMtNjU5OTNlYzJiNDQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3He7beK3B2B5hBdSLEkiLN5i8+bEJl178Hz IQb5reEjdyCTvarM0XIsN0JCMq2GgKABl+K7gDPHcBVXo4phOC6cYLHoijwDyWlK kg/0X2erWO12JQY4FpeFmkZ+ZsPbj/IPygnvOKuC+QyTUAOzAQEdQyRylmXYE87/ vieXTV7PViCpeZDlKLRPYhtF5B8OJBCTX3WspUUdVueM08KaaJJGMkMcfOVAsPe1 dhgNKZ+hYKq4XE38CMqauuQWgJxpRNYLAFfYEa41zRyjq0DL+/h4lXrYO/G3mAoq jlPgBfL8X7TGm+zbDZhLl9IMYPp1YBD5EQPhPVkU7eAQf8RavQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEAj8tXj2fALaOF8NX2wlU/NM/QtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9iNjk5 OGZkOS03YjY5LTQ5OGMtODEzNS1mMzNmNTlkNzI1NmMvMjU3ODlhNjEtOGMxYy0z ODdjLTg4MjAtNzQ3ZjM2NTQyM2UzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYjY5OThmZDktN2I2OS00OThjLTgx MzUtZjMzZjU5ZDcyNTZjL2I2OTk4ZmQ5LTdiNjktNDk4Yy04MTM1LWYzM2Y1OWQ3 MjU2Yy5jcmwwHwYDVR0jBBgwFoAUM+UzTdidWMY2A85md49mcQ9JwgowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9iNjk5OGZkOS03YjY5LTQ5OGMtODEzNS1mMzNm NTlkNzI1NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAggy+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJRhQFJYrPwB9WXmlkfdwnQ2gzW7m5KHGKGwJgiZZ9BFvMgO4OGXHK0l A28HZD7pGVtSRCw3iSI/G3MLroFJR4jo3ZcH4GHrQ7CERI/dkBSBPACtnHY8LQzy ZUz2rjfONUdoAxS93boeqnKBkWNtZ+nMD2153r6wW4dDfRTuuWEllB7GWUaxZPkY wJnEeYXEiYm0+0LNz1ASgtsLIfFsUd4j9gpZXQCFxgJ7ErgfcXRqXjR1Mw5NOaaU Mv6xANSTRziKCpmNaXkINuQmW4+BhQJ9E6Br7JAZznUwhtEedbu7TLVKeSSAX6km X5MsAkuIvIFYiJFSDFzkV2ZPalfX/y8= -----END CERTIFICATE-----Generated at Fri Apr 17 21:32:27 2026 by rpki-client