$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9546315b-1bef-4238-9dad-ebda966a76b5/ddef21a5-3730-351a-9a03-b7d1f4414b68.roa File: ddef21a5-3730-351a-9a03-b7d1f4414b68.roa (raw, json) Hash identifier: cSc16l7n9SV7gFwIiBCT1s3mxClYqLRBzCC+Ou0FYrI= Subject key identifier: 8F:9B:5D:49:1E:24:56:BB:96:72:EA:E0:69:3A:EE:E5:6F:C1:D0:F7 Certificate issuer: /CN=9546315b-1bef-4238-9dad-ebda966a76b5 Certificate serial: 010D0C9F4328584CCA41D8CD52ED7EE5029F5C80 Authority key identifier: F0:AA:E7:07:1E:DA:38:36:45:A2:C2:0C:60:F0:CD:C0:D8:CC:4B:AC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9546315b-1bef-4238-9dad-ebda966a76b5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9546315b-1bef-4238-9dad-ebda966a76b5/ddef21a5-3730-351a-9a03-b7d1f4414b68.roa Signing time: Sun 08 Feb 2026 02:00:32 +0000 ROA not before: Sun 08 Feb 2026 02:00:32 +0000 ROA not after: Sat 09 May 2026 01:00:32 +0000 asID: 54014 IP address blocks: 130.12.120.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9546315b-1bef-4238-9dad-ebda966a76b5/9546315b-1bef-4238-9dad-ebda966a76b5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9546315b-1bef-4238-9dad-ebda966a76b5/9546315b-1bef-4238-9dad-ebda966a76b5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9546315b-1bef-4238-9dad-ebda966a76b5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ca:41:d8:cd:52:ed:7e:e5:02:9f:5c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9546315b-1bef-4238-9dad-ebda966a76b5 Validity Not Before: Feb 8 02:00:32 2026 GMT Not After : May 9 01:00:32 2026 GMT Subject: CN=bd870ad2-cfbb-4795-b6a3-3b1d1af50bcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:0e:c6:36:e2:f0:1c:4b:27:88:3c:c7:de:7e: dc:2d:e4:da:6a:4a:0c:f9:60:45:c1:79:fc:21:77: 57:4b:10:51:f8:b2:d1:fc:26:ca:9f:74:f8:d3:fd: 39:6d:ca:d0:0f:b2:7f:0e:18:b7:49:93:f1:f8:cf: 6f:dc:96:5d:01:89:7f:40:da:a2:18:e4:46:d7:da: f2:2f:ed:04:09:6c:f6:ac:80:0e:ee:8b:c7:cb:bb: 86:df:9f:50:d3:10:a3:23:7c:57:18:64:f7:91:8d: 41:ee:75:9f:ad:85:e7:85:bc:9b:71:7d:87:b6:6e: 8d:e0:f4:cd:ed:de:ce:eb:c0:b1:31:75:5d:6c:61: 7e:25:d9:73:7b:59:42:b4:cc:08:f3:1b:0a:06:24: 1d:5f:c5:ed:b4:6b:7a:b6:51:07:f6:e7:1d:ea:85: a8:97:c1:db:b3:56:18:9f:9e:ee:e2:a1:5e:12:d1: 26:60:46:2c:35:0d:7b:4b:7e:dc:64:93:d6:a3:6c: 1b:74:1f:8f:0f:2b:c6:aa:e1:99:26:30:37:2a:42: 34:85:5b:a5:ed:c5:68:15:5a:bb:e2:48:4d:f5:07: e2:34:4d:13:e5:67:8b:da:f8:1c:64:1a:61:f2:81: ec:13:54:32:70:b3:16:f9:00:60:1f:64:5b:60:6c: eb:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:9B:5D:49:1E:24:56:BB:96:72:EA:E0:69:3A:EE:E5:6F:C1:D0:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9546315b-1bef-4238-9dad-ebda966a76b5/ddef21a5-3730-351a-9a03-b7d1f4414b68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9546315b-1bef-4238-9dad-ebda966a76b5/9546315b-1bef-4238-9dad-ebda966a76b5.crl X509v3 Authority Key Identifier: keyid:F0:AA:E7:07:1E:DA:38:36:45:A2:C2:0C:60:F0:CD:C0:D8:CC:4B:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9546315b-1bef-4238-9dad-ebda966a76b5.cer sbgp-ipAddrBlock: critical IPv4: 130.12.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:08:ab:ba:dc:da:91:3f:54:cf:c4:5b:6c:3e:07:aa:41:71: 6d:30:e4:70:f5:57:99:42:c6:06:57:39:ab:c6:52:31:7a:29: 58:d3:93:d3:cc:2f:f8:b6:4d:fa:7a:87:51:2d:00:ac:2e:d2: 3d:58:18:0a:c5:73:c9:72:ed:b9:42:e4:3c:0d:bb:20:0b:31: cc:71:84:7d:3a:42:9e:8b:82:ca:99:bb:67:7f:fb:cb:5c:8c: 78:d3:6c:f5:87:be:98:7a:bf:52:48:9e:28:b9:ac:ce:23:85: 00:a7:4f:35:75:71:94:80:02:bb:f4:c2:38:cd:c1:25:66:b5: 76:b3:68:da:2c:da:c2:7f:3a:7c:41:cc:59:e9:79:87:c2:1f: d9:81:fa:b4:38:59:7e:a2:8c:10:85:6f:30:b4:5e:65:5b:99: d7:48:4d:70:f3:54:93:81:f8:9b:58:6c:ea:00:05:21:c9:de: 5a:21:8d:18:9c:15:3c:60:5b:ac:80:3b:81:9e:76:4f:e6:26: e6:5c:fb:60:f4:7c:57:bf:ec:3d:00:c6:e1:02:a6:f7:88:fa: f2:4f:4b:f1:eb:7b:13:64:19:e7:99:06:73:c4:f4:d5:d1:56: 54:95:c3:75:3e:87:1b:09:da:b8:d2:8a:ae:79:8b:1d:d5:c2: bb:46:41:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzKQdjNUu1+5QKfXIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTU0NjMxNWItMWJlZi00MjM4LTlkYWQtZWJkYTk2NmE3 NmI1MB4XDTI2MDIwODAyMDAzMloXDTI2MDUwOTAxMDAzMlowLzEtMCsGA1UEAxMk YmQ4NzBhZDItY2ZiYi00Nzk1LWI2YTMtM2IxZDFhZjUwYmNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiw7GNuLwHEsniDzH3n7cLeTaakoM+WBFwXn8 IXdXSxBR+LLR/CbKn3T40/05bcrQD7J/Dhi3SZPx+M9v3JZdAYl/QNqiGORG19ry L+0ECWz2rIAO7ovHy7uG359Q0xCjI3xXGGT3kY1B7nWfrYXnhbybcX2Htm6N4PTN 7d7O68CxMXVdbGF+Jdlze1lCtMwI8xsKBiQdX8XttGt6tlEH9ucd6oWol8Hbs1YY n57u4qFeEtEmYEYsNQ17S37cZJPWo2wbdB+PDyvGquGZJjA3KkI0hVul7cVoFVq7 4khN9QfiNE0T5WeL2vgcZBph8oHsE1QycLMW+QBgH2RbYGzrawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI+bXUkeJFa7lnLq4Gk67uVvwdD3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85NTQ2 MzE1Yi0xYmVmLTQyMzgtOWRhZC1lYmRhOTY2YTc2YjUvZGRlZjIxYTUtMzczMC0z NTFhLTlhMDMtYjdkMWY0NDE0YjY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOTU0NjMxNWItMWJlZi00MjM4LTlk YWQtZWJkYTk2NmE3NmI1Lzk1NDYzMTViLTFiZWYtNDIzOC05ZGFkLWViZGE5NjZh NzZiNS5jcmwwHwYDVR0jBBgwFoAU8KrnBx7aODZFosIMYPDNwNjMS6wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi85NTQ2MzE1Yi0xYmVmLTQyMzgtOWRhZC1lYmRh OTY2YTc2YjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAggx4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGsIq7rc2pE/VM/EW2w+B6pBcW0w5HD1V5lCxgZXOavGUjF6KVjTk9PM L/i2Tfp6h1EtAKwu0j1YGArFc8ly7blC5DwNuyALMcxxhH06Qp6LgsqZu2d/+8tc jHjTbPWHvph6v1JInii5rM4jhQCnTzV1cZSAArv0wjjNwSVmtXazaNos2sJ/OnxB zFnpeYfCH9mB+rQ4WX6ijBCFbzC0XmVbmddITXDzVJOB+JtYbOoABSHJ3lohjRic FTxgW6yAO4Gedk/mJuZc+2D0fFe/7D0AxuECpveI+vJPS/HrexNkGeeZBnPE9NXR VlSVw3U+hxsJ2rjSiq55ix3VwrtGQcw= -----END CERTIFICATE-----Generated at Mon Mar 2 11:21:28 2026 by rpki-client