$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c501b1e0-0018-475e-9d4b-5090237060ae/b70dc82f-f8f0-340d-af3e-5810fada5e45.roa File: b70dc82f-f8f0-340d-af3e-5810fada5e45.roa (raw, json) Hash identifier: 1qhzyL3nCqiZJ5O5yjjAnJ8cew2+ijq3LIz6OCdZgFs= Subject key identifier: 3A:7F:A8:0A:48:16:55:49:AB:E1:B0:36:F0:F5:54:2C:99:9C:29:BA Certificate issuer: /CN=c501b1e0-0018-475e-9d4b-5090237060ae Certificate serial: 010D0C9F4328584D237A6A8B6BF80DE5CB6AB1E0 Authority key identifier: CB:88:97:9D:A7:79:1F:C4:E2:01:65:FC:6C:5D:DC:10:BB:BA:AC:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c501b1e0-0018-475e-9d4b-5090237060ae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c501b1e0-0018-475e-9d4b-5090237060ae/b70dc82f-f8f0-340d-af3e-5810fada5e45.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 54840 IP address blocks: 130.250.158.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c501b1e0-0018-475e-9d4b-5090237060ae/c501b1e0-0018-475e-9d4b-5090237060ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c501b1e0-0018-475e-9d4b-5090237060ae/c501b1e0-0018-475e-9d4b-5090237060ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c501b1e0-0018-475e-9d4b-5090237060ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:6a:8b:6b:f8:0d:e5:cb:6a:b1:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c501b1e0-0018-475e-9d4b-5090237060ae Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=91e5098a-7621-4853-b1cc-f26fd706ea0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:64:40:77:e1:8a:62:9c:df:35:f9:3b:3b:36: 1b:31:f6:aa:24:f3:d4:b2:f0:d3:ef:0a:ff:ae:7e: 3d:7b:e9:48:45:29:88:af:96:dc:8a:34:12:46:3a: 13:81:82:35:0c:7a:b7:b9:51:52:6e:73:ac:9b:1e: f7:77:a8:e4:a8:b6:47:8f:1b:db:57:49:bc:c9:40: af:cf:80:fe:0e:46:d2:08:bf:1f:15:5f:26:18:35: 32:ac:65:08:3e:70:7e:06:ed:8e:74:2a:93:45:a5: 16:1d:c2:ab:c9:20:b0:36:74:07:8b:ce:ba:89:e2: b4:6c:16:5e:3c:8f:48:1f:01:ac:3d:be:30:1a:06: ab:7b:f2:39:a1:29:51:7d:f2:55:f4:99:97:69:6e: 06:31:9c:4d:db:ab:f0:a8:97:4f:e2:a9:b9:13:a2: 1b:04:2c:87:61:ab:59:a0:63:dd:b2:1a:aa:83:9c: c0:b1:e6:ba:09:f5:c0:68:40:87:9e:8b:ef:66:eb: ae:63:b2:c8:83:20:6b:08:81:da:32:98:ee:b5:e2: f4:0b:d2:67:be:06:0a:fc:0b:ef:ea:47:9c:dd:56: 64:5c:31:07:fa:0e:04:63:56:79:a4:12:aa:f0:34: 07:a9:f1:48:cc:bb:b9:62:4d:49:da:49:73:b5:f9: 81:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:7F:A8:0A:48:16:55:49:AB:E1:B0:36:F0:F5:54:2C:99:9C:29:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c501b1e0-0018-475e-9d4b-5090237060ae/b70dc82f-f8f0-340d-af3e-5810fada5e45.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c501b1e0-0018-475e-9d4b-5090237060ae/c501b1e0-0018-475e-9d4b-5090237060ae.crl X509v3 Authority Key Identifier: keyid:CB:88:97:9D:A7:79:1F:C4:E2:01:65:FC:6C:5D:DC:10:BB:BA:AC:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c501b1e0-0018-475e-9d4b-5090237060ae.cer sbgp-ipAddrBlock: critical IPv4: 130.250.158.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:eb:26:16:96:3b:2b:f8:69:03:b2:82:ba:34:d2:8a:44:32: a6:cc:8e:cd:b1:a4:44:86:ca:89:8a:05:36:e6:f1:f7:8b:69: e6:75:8b:f8:58:1a:20:e1:6a:46:f3:d5:05:16:58:9d:9b:6a: ea:14:c8:f4:f1:59:a1:78:f1:65:c9:6c:74:4e:d6:c9:68:fd: 0c:76:49:6f:69:76:ae:a4:de:58:a9:f5:f8:18:46:7f:26:92: 8f:a1:e7:0b:4f:82:20:f7:68:b4:6a:48:ea:89:ab:05:7b:fb: 7e:5f:a8:79:7a:11:36:54:47:89:21:68:be:95:80:b5:5c:a9: e3:e1:65:8c:55:3e:37:12:3c:58:1d:4e:c4:ee:53:5a:24:ee: 63:7c:9d:d8:ce:36:96:2d:34:9d:37:cb:29:7e:ba:68:7e:54: a6:24:b5:d8:c2:65:37:23:c7:3c:a9:96:05:0b:8d:81:49:6b: 84:36:4b:8a:e1:09:63:31:9a:b6:fa:46:ec:28:ef:c5:1d:08: dc:bf:8b:2f:68:01:1e:1e:5e:01:b2:79:09:8f:b5:ee:8a:e6: 6b:96:eb:45:c8:4f:cb:18:a5:61:9f:44:97:df:47:2c:06:0b: 2e:21:32:a6:76:6a:2a:b5:15:86:cb:d4:73:80:6e:e5:5d:84: 89:92:c4:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jemqLa/gN5ctqseAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzUwMWIxZTAtMDAxOC00NzVlLTlkNGItNTA5MDIzNzA2 MGFlMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk OTFlNTA5OGEtNzYyMS00ODUzLWIxY2MtZjI2ZmQ3MDZlYTBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2RAd+GKYpzfNfk7OzYbMfaqJPPUsvDT7wr/ rn49e+lIRSmIr5bcijQSRjoTgYI1DHq3uVFSbnOsmx73d6jkqLZHjxvbV0m8yUCv z4D+DkbSCL8fFV8mGDUyrGUIPnB+Bu2OdCqTRaUWHcKrySCwNnQHi866ieK0bBZe PI9IHwGsPb4wGgare/I5oSlRffJV9JmXaW4GMZxN26vwqJdP4qm5E6IbBCyHYatZ oGPdshqqg5zAsea6CfXAaECHnovvZuuuY7LIgyBrCIHaMpjuteL0C9JnvgYK/Avv 6kec3VZkXDEH+g4EY1Z5pBKq8DQHqfFIzLu5Yk1J2klztfmBdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDp/qApIFlVJq+GwNvD1VCyZnCm6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jNTAx YjFlMC0wMDE4LTQ3NWUtOWQ0Yi01MDkwMjM3MDYwYWUvYjcwZGM4MmYtZjhmMC0z NDBkLWFmM2UtNTgxMGZhZGE1ZTQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzUwMWIxZTAtMDAxOC00NzVlLTlk NGItNTA5MDIzNzA2MGFlL2M1MDFiMWUwLTAwMTgtNDc1ZS05ZDRiLTUwOTAyMzcw NjBhZS5jcmwwHwYDVR0jBBgwFoAUy4iXnad5H8TiAWX8bF3cELu6rMUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jNTAxYjFlMC0wMDE4LTQ3NWUtOWQ0Yi01MDkw MjM3MDYwYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgvqeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKbrJhaWOyv4aQOygro00opEMqbMjs2xpESGyomKBTbm8feLaeZ1i/hY GiDhakbz1QUWWJ2bauoUyPTxWaF48WXJbHRO1slo/Qx2SW9pdq6k3lip9fgYRn8m ko+h5wtPgiD3aLRqSOqJqwV7+35fqHl6ETZUR4khaL6VgLVcqePhZYxVPjcSPFgd TsTuU1ok7mN8ndjONpYtNJ03yyl+umh+VKYktdjCZTcjxzyplgULjYFJa4Q2S4rh CWMxmrb6Ruwo78UdCNy/iy9oAR4eXgGyeQmPte6K5muW60XIT8sYpWGfRJffRywG Cy4hMqZ2aiq1FYbL1HOAbuVdhImSxGw= -----END CERTIFICATE-----Generated at Thu Mar 26 20:15:31 2026 by rpki-client