$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d445edaf-9a6f-4523-9772-3e1b997c1a4b/a6a3d677-abb4-3852-b894-abb6993ea5df.roa File: a6a3d677-abb4-3852-b894-abb6993ea5df.roa (raw, json) Hash identifier: MoTe/ixM0AEbJKKfhp7V0+mRDh1SyWaiLKrnqcuYpFA= Subject key identifier: 85:E3:D3:36:F1:4C:20:71:F8:E4:C8:42:82:25:46:79:3D:7A:07:98 Certificate issuer: /CN=d445edaf-9a6f-4523-9772-3e1b997c1a4b Certificate serial: 010D0C9F4328584BA192A3CF91F45F0FBD651380 Authority key identifier: DD:1D:3C:4F:CD:FF:BF:00:E2:C7:88:65:3C:E8:64:20:46:E1:C1:EC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d445edaf-9a6f-4523-9772-3e1b997c1a4b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d445edaf-9a6f-4523-9772-3e1b997c1a4b/a6a3d677-abb4-3852-b894-abb6993ea5df.roa Signing time: Fri 24 Oct 2025 19:28:18 +0000 ROA not before: Fri 24 Oct 2025 19:28:18 +0000 ROA not after: Thu 22 Jan 2026 20:28:18 +0000 asID: 397423 IP address blocks: 130.12.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d445edaf-9a6f-4523-9772-3e1b997c1a4b/d445edaf-9a6f-4523-9772-3e1b997c1a4b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d445edaf-9a6f-4523-9772-3e1b997c1a4b/d445edaf-9a6f-4523-9772-3e1b997c1a4b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d445edaf-9a6f-4523-9772-3e1b997c1a4b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a1:92:a3:cf:91:f4:5f:0f:bd:65:13:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d445edaf-9a6f-4523-9772-3e1b997c1a4b Validity Not Before: Oct 24 19:28:18 2025 GMT Not After : Jan 22 20:28:18 2026 GMT Subject: CN=4a035c9c-5bda-4ca9-9050-258801e2111c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:ce:ac:6c:c5:4c:b7:40:dd:2a:68:c4:68:6a: 07:2c:8b:db:db:e8:e1:8c:75:8f:b8:b1:bf:85:52: 6b:88:07:fb:85:d3:c9:d8:01:03:f5:05:e1:df:5a: 66:45:08:25:b6:17:0b:c8:66:ae:ab:7d:4c:b4:ea: c4:00:9d:04:97:b6:09:f8:49:84:42:dd:5d:7a:3e: 5c:92:4b:4a:a4:50:a6:ba:49:85:04:e8:29:12:b3: 2f:48:4a:a9:42:65:cd:eb:5b:a0:48:b8:cd:e2:28: e4:b3:04:e3:5b:12:d3:e8:d7:4d:c3:c6:24:a0:7e: a0:27:a6:d7:cd:3b:c4:05:4b:cb:65:57:79:e1:45: 0e:c0:b0:ee:dc:4a:14:13:22:3a:ab:13:4e:4f:8f: d6:17:3b:4e:7a:01:9a:76:75:45:24:21:80:99:da: 41:b8:e7:5b:43:e6:be:5c:55:9b:2d:dd:49:fa:d4: 9a:ba:22:06:ac:cf:8b:ea:d7:bc:f5:92:f4:73:9e: 60:61:61:37:5c:a4:10:e0:f3:3a:05:aa:99:4e:2d: 77:fe:9f:c4:76:a5:47:2a:93:3f:ec:a7:7f:d6:6b: 9a:70:80:64:4c:09:89:f6:fa:57:31:1d:f8:59:98: 16:2f:38:cb:a6:49:fe:2e:71:c0:6c:89:ec:02:21: 86:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:E3:D3:36:F1:4C:20:71:F8:E4:C8:42:82:25:46:79:3D:7A:07:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d445edaf-9a6f-4523-9772-3e1b997c1a4b/a6a3d677-abb4-3852-b894-abb6993ea5df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d445edaf-9a6f-4523-9772-3e1b997c1a4b/d445edaf-9a6f-4523-9772-3e1b997c1a4b.crl X509v3 Authority Key Identifier: keyid:DD:1D:3C:4F:CD:FF:BF:00:E2:C7:88:65:3C:E8:64:20:46:E1:C1:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d445edaf-9a6f-4523-9772-3e1b997c1a4b.cer sbgp-ipAddrBlock: critical IPv4: 130.12.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:20:0e:1f:e1:fb:08:55:5c:06:d0:d1:18:a9:b4:6b:c9:1a: 56:75:42:f5:32:ad:81:1e:aa:44:42:e0:4c:50:a9:a6:1f:aa: 48:28:1b:df:c4:55:09:75:b0:e9:b5:14:71:b6:ec:9a:fe:63: 10:a5:d7:c4:10:da:17:98:6a:a9:85:7f:65:67:cc:87:a8:e5: 7a:1e:dc:d6:15:02:eb:f8:5b:29:e8:5e:36:19:0a:97:51:e2: 1b:de:fd:49:21:9d:87:76:43:01:e5:70:cc:d8:54:14:c0:4e: 2b:b7:6a:db:62:59:e2:24:aa:07:89:57:c1:ff:a8:dd:7e:e0: 64:3e:40:d0:4c:c1:9e:27:91:44:b6:fd:2a:48:ca:8d:aa:3d: fa:90:8d:53:f7:af:48:d8:00:d4:c6:a3:97:63:8e:d0:fe:40: be:e9:84:03:fc:45:62:71:26:d4:25:e8:bf:15:3a:6a:e3:6e: e9:ee:73:a2:68:49:1a:5d:0d:21:c6:1e:bf:59:2b:60:4b:7d: 6e:9a:c4:d1:1d:e4:7d:8b:c2:a4:7e:31:a2:e0:37:b4:0b:64: 45:ba:87:8e:fa:3f:2f:c5:dd:c6:9b:ae:ef:37:05:d1:61:60: eb:c8:43:00:eb:50:38:eb:8b:bb:75:9b:16:0c:5a:3c:aa:8b: 9c:b7:a6:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuhkqPPkfRfD71lE4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ0NWVkYWYtOWE2Zi00NTIzLTk3NzItM2UxYjk5N2Mx YTRiMB4XDTI1MTAyNDE5MjgxOFoXDTI2MDEyMjIwMjgxOFowLzEtMCsGA1UEAxMk NGEwMzVjOWMtNWJkYS00Y2E5LTkwNTAtMjU4ODAxZTIxMTFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi86sbMVMt0DdKmjEaGoHLIvb2+jhjHWPuLG/ hVJriAf7hdPJ2AED9QXh31pmRQglthcLyGauq31MtOrEAJ0El7YJ+EmEQt1dej5c kktKpFCmukmFBOgpErMvSEqpQmXN61ugSLjN4ijkswTjWxLT6NdNw8YkoH6gJ6bX zTvEBUvLZVd54UUOwLDu3EoUEyI6qxNOT4/WFztOegGadnVFJCGAmdpBuOdbQ+a+ XFWbLd1J+tSauiIGrM+L6te89ZL0c55gYWE3XKQQ4PM6BaqZTi13/p/EdqVHKpM/ 7Kd/1muacIBkTAmJ9vpXMR34WZgWLzjLpkn+LnHAbInsAiGG4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIXj0zbxTCBx+OTIQoIlRnk9egeYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9kNDQ1 ZWRhZi05YTZmLTQ1MjMtOTc3Mi0zZTFiOTk3YzFhNGIvYTZhM2Q2NzctYWJiNC0z ODUyLWI4OTQtYWJiNjk5M2VhNWRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZDQ0NWVkYWYtOWE2Zi00NTIzLTk3 NzItM2UxYjk5N2MxYTRiL2Q0NDVlZGFmLTlhNmYtNDUyMy05NzcyLTNlMWI5OTdj MWE0Yi5jcmwwHwYDVR0jBBgwFoAU3R08T83/vwDix4hlPOhkIEbhwewwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9kNDQ1ZWRhZi05YTZmLTQ1MjMtOTc3Mi0zZTFi OTk3YzFhNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAggx+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFwgDh/h+whVXAbQ0RiptGvJGlZ1QvUyrYEeqkRC4ExQqaYfqkgoG9/E VQl1sOm1FHG27Jr+YxCl18QQ2heYaqmFf2VnzIeo5Xoe3NYVAuv4WynoXjYZCpdR 4hve/UkhnYd2QwHlcMzYVBTATiu3attiWeIkqgeJV8H/qN1+4GQ+QNBMwZ4nkUS2 /SpIyo2qPfqQjVP3r0jYANTGo5djjtD+QL7phAP8RWJxJtQl6L8VOmrjbunuc6Jo SRpdDSHGHr9ZK2BLfW6axNEd5H2LwqR+MaLgN7QLZEW6h476Py/F3cabru83BdFh YOvIQwDrUDjri7t1mxYMWjyqi5y3pow= -----END CERTIFICATE-----Generated at Tue Nov 4 08:01:09 2025 by rpki-client