$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/74448f2d-e70e-4042-9da0-e023ba682319/5a83de84-e391-3be3-9e75-bc3e76d2e2b0.roa File: 5a83de84-e391-3be3-9e75-bc3e76d2e2b0.roa (raw, json) Hash identifier: dbLpCIzV4UTDEY7HNI8AMhAbIjEq/XPxZW3JzjH/Ncs= Subject key identifier: C9:BD:6E:31:AB:95:1E:BD:15:A4:78:09:52:F7:54:9D:08:44:59:AC Certificate issuer: /CN=74448f2d-e70e-4042-9da0-e023ba682319 Certificate serial: 010D0C9F4328584F4975BDC94548C23DC366B8E0 Authority key identifier: 63:21:A1:E6:9F:C4:E9:2F:C9:47:24:A5:3D:0B:45:50:E3:6F:BF:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/74448f2d-e70e-4042-9da0-e023ba682319.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/74448f2d-e70e-4042-9da0-e023ba682319/5a83de84-e391-3be3-9e75-bc3e76d2e2b0.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 35280 IP address blocks: 130.250.220.0/24 maxlen: 24 130.250.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/74448f2d-e70e-4042-9da0-e023ba682319/74448f2d-e70e-4042-9da0-e023ba682319.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/74448f2d-e70e-4042-9da0-e023ba682319/74448f2d-e70e-4042-9da0-e023ba682319.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/74448f2d-e70e-4042-9da0-e023ba682319.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:bd:c9:45:48:c2:3d:c3:66:b8:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74448f2d-e70e-4042-9da0-e023ba682319 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=26a5ba50-b8ae-4e2e-bdf2-b9de35d6ea11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:01:f3:9c:8a:7f:21:13:cc:d5:7e:a4:c6:c4: 00:63:59:e9:65:35:af:e2:99:ce:c2:2a:86:4f:23: 4c:41:4f:f8:aa:90:26:e1:e4:b3:61:87:70:2f:8a: b6:05:eb:e7:f4:19:1c:7b:97:85:40:13:c4:3b:be: c9:85:59:fd:83:bd:50:2d:e9:fe:ac:87:34:07:2d: 7d:8c:40:b7:49:6c:d0:36:d1:90:76:4f:29:12:24: 41:8e:da:7a:82:71:d8:52:59:e2:fe:4e:ff:7b:83: a5:3a:2c:1f:59:60:f4:53:68:04:25:ef:5b:86:eb: 85:a3:40:21:09:e3:e4:43:17:5b:f5:30:5c:43:17: c0:42:65:83:23:97:49:1d:1c:ec:84:11:41:73:06: 95:84:51:10:ed:f3:bd:f7:fd:fb:41:3f:82:34:13: 2f:47:53:6a:4e:5e:13:01:ab:0f:fa:0a:27:da:2a: 1c:19:e2:89:3a:ed:33:d5:a5:73:a8:39:fb:2f:e4: 37:dc:89:37:a4:cc:79:96:73:fe:f8:20:6b:96:92: a2:ca:67:74:e1:0f:56:d1:14:d5:cc:0a:26:56:99: 2e:f1:1b:54:54:18:ea:df:39:53:9f:44:6e:c7:7f: c0:f0:e7:b4:f7:09:80:d6:79:dc:57:8a:62:a4:18: 52:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:BD:6E:31:AB:95:1E:BD:15:A4:78:09:52:F7:54:9D:08:44:59:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/74448f2d-e70e-4042-9da0-e023ba682319/5a83de84-e391-3be3-9e75-bc3e76d2e2b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/74448f2d-e70e-4042-9da0-e023ba682319/74448f2d-e70e-4042-9da0-e023ba682319.crl X509v3 Authority Key Identifier: keyid:63:21:A1:E6:9F:C4:E9:2F:C9:47:24:A5:3D:0B:45:50:E3:6F:BF:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/74448f2d-e70e-4042-9da0-e023ba682319.cer sbgp-ipAddrBlock: critical IPv4: 130.250.220.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:e9:79:2c:b4:6d:8f:7e:1d:cb:56:2c:55:f9:5b:57:41:70: e9:b0:42:4a:3f:0a:a3:e6:80:72:7a:e0:34:f2:d2:f4:86:45: 8e:c3:28:91:2e:b4:8b:0a:c4:8c:d2:6b:27:e5:d6:3d:c6:7b: 02:bf:07:a9:25:70:58:87:e6:fd:5c:c9:7a:e4:87:78:8f:07: 27:2b:a4:ee:37:1c:a7:4e:4d:cf:25:d0:3f:db:5c:e3:af:b4: 68:67:fb:8b:57:20:e7:46:bd:42:bf:2f:e5:29:91:71:0b:91: ff:ad:b2:d3:1d:6c:5f:a0:bd:e5:61:95:cc:ac:89:d7:15:e7: b9:c2:b9:94:0c:d4:3c:1e:32:b4:78:b8:99:cb:d0:3b:f4:35: 71:a2:43:19:54:7b:e0:c9:e1:83:73:62:f5:7b:34:53:fb:0e: 1e:81:47:cc:48:b7:e0:df:c1:fb:d4:f5:62:5e:ab:6c:fd:ab: 79:bd:c2:b9:95:30:06:32:88:b6:b4:85:f0:d5:df:85:7e:98: 41:38:f3:12:65:0d:f0:1b:41:6c:e5:eb:5f:01:ec:4a:05:7c: 1e:f0:b4:69:72:56:d7:b5:26:85:b9:74:06:91:87:c6:f7:c7: dc:e8:b1:db:33:9e:a0:db:16:87:a7:59:35:52:a1:e2:5d:96: f0:42:3d:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jdb3JRUjCPcNmuOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ0NDhmMmQtZTcwZS00MDQyLTlkYTAtZTAyM2JhNjgy MzE5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MjZhNWJhNTAtYjhhZS00ZTJlLWJkZjItYjlkZTM1ZDZlYTExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQHznIp/IRPM1X6kxsQAY1npZTWv4pnOwiqG TyNMQU/4qpAm4eSzYYdwL4q2Bevn9Bkce5eFQBPEO77JhVn9g71QLen+rIc0By19 jEC3SWzQNtGQdk8pEiRBjtp6gnHYUlni/k7/e4OlOiwfWWD0U2gEJe9bhuuFo0Ah CePkQxdb9TBcQxfAQmWDI5dJHRzshBFBcwaVhFEQ7fO99/37QT+CNBMvR1NqTl4T AasP+gon2iocGeKJOu0z1aVzqDn7L+Q33Ik3pMx5lnP++CBrlpKiymd04Q9W0RTV zAomVpku8RtUVBjq3zlTn0Rux3/A8Oe09wmA1nncV4pipBhS2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMm9bjGrlR69FaR4CVL3VJ0IRFmsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS83NDQ0 OGYyZC1lNzBlLTQwNDItOWRhMC1lMDIzYmE2ODIzMTkvNWE4M2RlODQtZTM5MS0z YmUzLTllNzUtYmMzZTc2ZDJlMmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNzQ0NDhmMmQtZTcwZS00MDQyLTlk YTAtZTAyM2JhNjgyMzE5Lzc0NDQ4ZjJkLWU3MGUtNDA0Mi05ZGEwLWUwMjNiYTY4 MjMxOS5jcmwwHwYDVR0jBBgwFoAUYyGh5p/E6S/JRySlPQtFUONvv4EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS83NDQ0OGYyZC1lNzBlLTQwNDItOWRhMC1lMDIz YmE2ODIzMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgvrcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ7peSy0bY9+HctWLFX5W1dBcOmwQko/CqPmgHJ64DTy0vSGRY7DKJEu tIsKxIzSayfl1j3GewK/B6klcFiH5v1cyXrkh3iPBycrpO43HKdOTc8l0D/bXOOv tGhn+4tXIOdGvUK/L+UpkXELkf+tstMdbF+gveVhlcysidcV57nCuZQM1DweMrR4 uJnL0Dv0NXGiQxlUe+DJ4YNzYvV7NFP7Dh6BR8xIt+DfwfvU9WJeq2z9q3m9wrmV MAYyiLa0hfDV34V+mEE48xJlDfAbQWzl618B7EoFfB7wtGlyVte1JoW5dAaRh8b3 x9zosdsznqDbFoenWTVSoeJdlvBCPQw= -----END CERTIFICATE-----Generated at Fri Sep 25 08:35:45 2026 by rpki-client