$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9546315b-1bef-4238-9dad-ebda966a76b5/ddef21a5-3730-351a-9a03-b7d1f4414b68.roa File: ddef21a5-3730-351a-9a03-b7d1f4414b68.roa (raw, json) Hash identifier: bQt8hth2FSx/5t3r9AQeXHMp+7bxb805hPcVBtlIU2A= Subject key identifier: 8F:76:F8:1C:98:19:AA:C2:E8:16:F7:8F:44:61:42:CA:50:C5:E7:5F Certificate issuer: /CN=9546315b-1bef-4238-9dad-ebda966a76b5 Certificate serial: 010D0C9F4328584F2D87DF27341EC2A122857C80 Authority key identifier: F0:AA:E7:07:1E:DA:38:36:45:A2:C2:0C:60:F0:CD:C0:D8:CC:4B:AC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9546315b-1bef-4238-9dad-ebda966a76b5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9546315b-1bef-4238-9dad-ebda966a76b5/ddef21a5-3730-351a-9a03-b7d1f4414b68.roa Signing time: Tue 15 Sep 2026 01:00:12 +0000 ROA not before: Tue 15 Sep 2026 01:00:12 +0000 ROA not after: Mon 14 Dec 2026 02:00:12 +0000 asID: 54014 IP address blocks: 130.12.120.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9546315b-1bef-4238-9dad-ebda966a76b5/9546315b-1bef-4238-9dad-ebda966a76b5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9546315b-1bef-4238-9dad-ebda966a76b5/9546315b-1bef-4238-9dad-ebda966a76b5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9546315b-1bef-4238-9dad-ebda966a76b5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2d:87:df:27:34:1e:c2:a1:22:85:7c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9546315b-1bef-4238-9dad-ebda966a76b5 Validity Not Before: Sep 15 01:00:12 2026 GMT Not After : Dec 14 02:00:12 2026 GMT Subject: CN=c942691a-e1d2-45f7-b836-70dc01ed0186 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:b7:d2:87:9b:19:dd:5f:0c:fc:26:de:db:be: 0d:98:9d:51:20:e2:25:15:30:53:78:e7:8f:dd:a9: 2c:3d:fd:ce:8b:2c:1c:25:4c:67:f9:ba:b2:9f:43: cd:31:35:66:66:7b:31:6c:6c:50:31:7a:5f:9c:a1: 82:72:41:81:1b:6b:8b:23:e8:6c:ca:3a:27:06:90: d6:3a:8e:c9:e0:42:ac:01:c4:e5:28:31:fb:2e:94: 90:50:f2:1a:4e:99:eb:30:2d:b3:26:48:2b:c5:5f: 53:20:8a:2b:4d:1c:98:c8:32:c8:f6:9a:c9:d7:3b: eb:73:c6:fb:4e:a8:1d:ee:9e:58:47:35:0f:b1:e4: 2b:58:91:92:48:1e:93:cf:a1:8f:14:1a:07:6f:22: 92:d6:b3:f1:3d:cb:8b:c4:2b:a4:1b:29:b6:1d:14: da:ef:4d:5d:53:71:2e:91:a3:01:66:54:56:23:bc: 27:ae:9f:dd:7c:e7:c7:e4:0d:e3:94:a5:8f:2e:6a: a8:f6:07:46:e5:87:54:dc:7d:9d:a3:86:85:c1:86: 14:fe:b9:4b:df:f0:da:8c:b0:da:98:4c:bf:ea:cb: 77:55:aa:b1:a5:cc:34:3e:72:10:6b:06:24:b2:a1: 97:7e:5a:7c:6d:83:21:67:df:bd:35:27:53:9b:5f: 04:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:76:F8:1C:98:19:AA:C2:E8:16:F7:8F:44:61:42:CA:50:C5:E7:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9546315b-1bef-4238-9dad-ebda966a76b5/ddef21a5-3730-351a-9a03-b7d1f4414b68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9546315b-1bef-4238-9dad-ebda966a76b5/9546315b-1bef-4238-9dad-ebda966a76b5.crl X509v3 Authority Key Identifier: keyid:F0:AA:E7:07:1E:DA:38:36:45:A2:C2:0C:60:F0:CD:C0:D8:CC:4B:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9546315b-1bef-4238-9dad-ebda966a76b5.cer sbgp-ipAddrBlock: critical IPv4: 130.12.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:31:63:ef:57:cc:04:5d:28:06:82:73:be:ad:59:c7:d2:11: b7:b5:97:d6:d6:b8:61:1f:e3:c5:e0:46:6d:fd:2b:58:0e:97: 63:3b:6e:de:15:e2:2e:97:c9:37:fa:16:26:2d:b6:d1:33:25: aa:ae:1b:08:4c:af:49:95:16:96:26:f5:06:6e:11:c2:69:27: b1:a6:50:e3:5c:16:e0:d3:60:0a:df:72:60:ac:02:1c:66:77: c7:92:3f:3e:58:c9:e3:17:5e:a0:f2:a1:31:61:6d:f7:d7:cc: ad:02:4f:af:0c:51:42:cd:d1:a4:ae:c8:83:b8:29:1e:d0:6d: d2:f9:be:43:29:7a:c1:39:dd:f7:ea:9b:f0:a8:07:54:00:c0: ce:dd:51:40:6d:e5:88:b4:35:07:a4:b6:56:09:95:1f:65:7b: 8a:65:0f:8f:fc:22:d2:6c:62:d1:7d:de:e0:d8:c7:38:ca:60: b8:26:34:24:d6:5f:08:d9:f6:19:ea:94:f1:29:f3:11:07:95: 8b:c3:11:9f:a6:41:4d:6c:65:c6:d3:7f:7e:4a:77:df:15:45: 85:3a:23:6e:38:4a:86:e3:f3:7d:5e:3b:a2:48:a2:c7:0b:15: 92:16:fa:9a:f0:4f:01:c7:82:7e:b4:94:49:26:51:ad:36:5d: 5d:5e:2d:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8th98nNB7CoSKFfIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTU0NjMxNWItMWJlZi00MjM4LTlkYWQtZWJkYTk2NmE3 NmI1MB4XDTI2MDkxNTAxMDAxMloXDTI2MTIxNDAyMDAxMlowLzEtMCsGA1UEAxMk Yzk0MjY5MWEtZTFkMi00NWY3LWI4MzYtNzBkYzAxZWQwMTg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7fSh5sZ3V8M/Cbe274NmJ1RIOIlFTBTeOeP 3aksPf3OiywcJUxn+bqyn0PNMTVmZnsxbGxQMXpfnKGCckGBG2uLI+hsyjonBpDW Oo7J4EKsAcTlKDH7LpSQUPIaTpnrMC2zJkgrxV9TIIorTRyYyDLI9prJ1zvrc8b7 Tqgd7p5YRzUPseQrWJGSSB6Tz6GPFBoHbyKS1rPxPcuLxCukGym2HRTa701dU3Eu kaMBZlRWI7wnrp/dfOfH5A3jlKWPLmqo9gdG5YdU3H2do4aFwYYU/rlL3/DajLDa mEy/6st3Vaqxpcw0PnIQawYksqGXflp8bYMhZ9+9NSdTm18E4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI92+ByYGarC6Bb3j0RhQspQxedfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85NTQ2 MzE1Yi0xYmVmLTQyMzgtOWRhZC1lYmRhOTY2YTc2YjUvZGRlZjIxYTUtMzczMC0z NTFhLTlhMDMtYjdkMWY0NDE0YjY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOTU0NjMxNWItMWJlZi00MjM4LTlk YWQtZWJkYTk2NmE3NmI1Lzk1NDYzMTViLTFiZWYtNDIzOC05ZGFkLWViZGE5NjZh NzZiNS5jcmwwHwYDVR0jBBgwFoAU8KrnBx7aODZFosIMYPDNwNjMS6wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi85NTQ2MzE1Yi0xYmVmLTQyMzgtOWRhZC1lYmRh OTY2YTc2YjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAggx4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEkxY+9XzARdKAaCc76tWcfSEbe1l9bWuGEf48XgRm39K1gOl2M7bt4V 4i6XyTf6FiYtttEzJaquGwhMr0mVFpYm9QZuEcJpJ7GmUONcFuDTYArfcmCsAhxm d8eSPz5YyeMXXqDyoTFhbffXzK0CT68MUULN0aSuyIO4KR7QbdL5vkMpesE53ffq m/CoB1QAwM7dUUBt5Yi0NQektlYJlR9le4plD4/8ItJsYtF93uDYxzjKYLgmNCTW XwjZ9hnqlPEp8xEHlYvDEZ+mQU1sZcbTf35Kd98VRYU6I244Sobj831eO6JIoscL FZIW+prwTwHHgn60lEkmUa02XV1eLWo= -----END CERTIFICATE-----Generated at Thu Sep 24 18:29:26 2026 by rpki-client