$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ef44742e-e289-4929-aa2c-7657c06d160d/22f37b24-db80-36de-a961-616bf07a5ed9.roa File: 22f37b24-db80-36de-a961-616bf07a5ed9.roa (raw, json) Hash identifier: Td0RKJhvSxweXUetqiwmB9F62oGdSOPhb78SUuwlhGE= Subject key identifier: D4:5D:CB:69:2E:7B:88:17:B7:33:FF:07:4D:93:40:46:29:05:35:9F Certificate issuer: /CN=ef44742e-e289-4929-aa2c-7657c06d160d Certificate serial: 010D0C9F4328584DB4A5803826B3CFE1B7D33440 Authority key identifier: 89:77:CE:08:E3:14:EE:1A:F7:12:AF:74:96:0E:93:E7:4B:0E:86:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ef44742e-e289-4929-aa2c-7657c06d160d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ef44742e-e289-4929-aa2c-7657c06d160d/22f37b24-db80-36de-a961-616bf07a5ed9.roa Signing time: Sun 03 May 2026 01:00:23 +0000 ROA not before: Sun 03 May 2026 01:00:23 +0000 ROA not after: Sat 01 Aug 2026 01:00:23 +0000 asID: 400645 IP address blocks: 130.250.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ef44742e-e289-4929-aa2c-7657c06d160d/ef44742e-e289-4929-aa2c-7657c06d160d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ef44742e-e289-4929-aa2c-7657c06d160d/ef44742e-e289-4929-aa2c-7657c06d160d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ef44742e-e289-4929-aa2c-7657c06d160d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b4:a5:80:38:26:b3:cf:e1:b7:d3:34:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef44742e-e289-4929-aa2c-7657c06d160d Validity Not Before: May 3 01:00:23 2026 GMT Not After : Aug 1 01:00:23 2026 GMT Subject: CN=1a960417-263d-4aa2-8092-42d134d8ffc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:17:8f:7c:ec:3a:7c:43:77:87:a6:d4:fb:b9: ae:36:1d:cc:31:bd:26:00:1a:24:d7:eb:aa:44:e2: 12:28:36:8b:14:11:c6:a3:a7:13:c0:a4:30:1c:c3: 36:16:04:a1:e9:45:5d:77:6b:94:f7:4d:b2:4d:73: 08:df:10:7f:46:68:a2:7e:bc:26:0a:a1:d8:ef:08: d7:39:1a:2c:0f:cb:cd:4e:74:4e:65:6d:97:85:70: 2c:45:ef:18:fb:35:a5:23:85:d0:47:ea:bd:df:45: 6e:0f:03:19:42:9f:31:94:b5:dd:50:03:de:74:13: 62:20:36:29:3f:ac:58:c1:4a:a4:e4:08:e0:79:19: 73:5f:67:9e:1a:64:64:30:c9:94:d8:46:bc:f5:dd: f3:58:d8:92:75:3e:40:4b:13:4c:e2:db:e9:43:a2: 68:05:37:9d:b5:70:42:d4:ab:5f:77:d6:0a:9a:14: c8:ac:ed:b0:ce:60:e3:41:7a:55:c8:23:87:b6:7a: 85:17:ea:ca:f3:c4:dd:25:8b:75:b9:97:f1:83:4c: 92:97:d6:9c:ac:27:b0:38:f7:f2:7c:9d:2c:50:50: ae:2a:64:31:ee:73:e9:3a:0b:e8:e4:57:ac:b8:7a: b4:05:62:c9:5e:0b:7a:ab:a5:54:39:d7:ed:a5:b1: fa:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:5D:CB:69:2E:7B:88:17:B7:33:FF:07:4D:93:40:46:29:05:35:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ef44742e-e289-4929-aa2c-7657c06d160d/22f37b24-db80-36de-a961-616bf07a5ed9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ef44742e-e289-4929-aa2c-7657c06d160d/ef44742e-e289-4929-aa2c-7657c06d160d.crl X509v3 Authority Key Identifier: keyid:89:77:CE:08:E3:14:EE:1A:F7:12:AF:74:96:0E:93:E7:4B:0E:86:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ef44742e-e289-4929-aa2c-7657c06d160d.cer sbgp-ipAddrBlock: critical IPv4: 130.250.218.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:55:71:00:bc:c6:22:cb:65:22:fc:b8:ef:10:9b:f3:8b:8d: da:be:47:3a:1b:2a:ea:99:b0:62:fd:66:88:52:e6:fc:32:8b: b2:d6:31:4d:14:91:1c:64:c8:74:ef:71:de:87:8f:35:d4:ac: 86:d1:36:30:9b:79:b4:85:f8:da:b4:86:a9:56:76:2f:b3:b2: 9e:ad:0b:fe:10:c0:6b:69:e1:1d:13:e7:1f:fe:e9:2d:33:dd: bc:a4:0b:c3:24:35:d2:f3:5a:a0:31:db:54:a9:a9:05:07:bf: 4f:a2:c1:36:6b:a0:06:59:89:70:35:2e:e6:3b:a5:24:c0:aa: ab:98:6b:dc:a9:96:38:3b:cf:88:d6:5f:e5:58:ad:b7:29:04: e5:d5:e9:18:1d:7e:b5:63:b5:50:93:21:ed:32:1d:b7:76:70: f6:83:18:04:28:81:dc:f3:27:ac:f5:80:77:a7:09:7e:af:bf: 18:25:83:41:1f:78:4d:9c:3a:38:18:e9:f3:12:89:ea:5f:00: ad:e3:05:70:77:1b:4a:7c:71:99:94:79:be:59:60:33:f5:14: fe:4a:5d:bd:42:20:23:71:21:b5:b6:d5:10:10:d6:43:ac:43: 82:75:b7:e1:1f:ea:b9:f5:60:23:2f:66:59:ab:85:00:a0:2f: a8:dd:91:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE20pYA4JrPP4bfTNEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWY0NDc0MmUtZTI4OS00OTI5LWFhMmMtNzY1N2MwNmQx NjBkMB4XDTI2MDUwMzAxMDAyM1oXDTI2MDgwMTAxMDAyM1owLzEtMCsGA1UEAxMk MWE5NjA0MTctMjYzZC00YWEyLTgwOTItNDJkMTM0ZDhmZmM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBePfOw6fEN3h6bU+7muNh3MMb0mABok1+uq ROISKDaLFBHGo6cTwKQwHMM2FgSh6UVdd2uU902yTXMI3xB/RmiifrwmCqHY7wjX ORosD8vNTnROZW2XhXAsRe8Y+zWlI4XQR+q930VuDwMZQp8xlLXdUAPedBNiIDYp P6xYwUqk5AjgeRlzX2eeGmRkMMmU2Ea89d3zWNiSdT5ASxNM4tvpQ6JoBTedtXBC 1Ktfd9YKmhTIrO2wzmDjQXpVyCOHtnqFF+rK88TdJYt1uZfxg0ySl9acrCewOPfy fJ0sUFCuKmQx7nPpOgvo5FesuHq0BWLJXgt6q6VUOdftpbH6zQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNRdy2kue4gXtzP/B02TQEYpBTWfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lZjQ0 NzQyZS1lMjg5LTQ5MjktYWEyYy03NjU3YzA2ZDE2MGQvMjJmMzdiMjQtZGI4MC0z NmRlLWE5NjEtNjE2YmYwN2E1ZWQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZWY0NDc0MmUtZTI4OS00OTI5LWFh MmMtNzY1N2MwNmQxNjBkL2VmNDQ3NDJlLWUyODktNDkyOS1hYTJjLTc2NTdjMDZk MTYwZC5jcmwwHwYDVR0jBBgwFoAUiXfOCOMU7hr3Eq90lg6T50sOhnwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lZjQ0NzQyZS1lMjg5LTQ5MjktYWEyYy03NjU3 YzA2ZDE2MGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgvraMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEJVcQC8xiLLZSL8uO8Qm/OLjdq+RzobKuqZsGL9ZohS5vwyi7LWMU0U kRxkyHTvcd6HjzXUrIbRNjCbebSF+Nq0hqlWdi+zsp6tC/4QwGtp4R0T5x/+6S0z 3bykC8MkNdLzWqAx21SpqQUHv0+iwTZroAZZiXA1LuY7pSTAqquYa9ypljg7z4jW X+VYrbcpBOXV6RgdfrVjtVCTIe0yHbd2cPaDGAQogdzzJ6z1gHenCX6vvxglg0Ef eE2cOjgY6fMSiepfAK3jBXB3G0p8cZmUeb5ZYDP1FP5KXb1CICNxIbW21RAQ1kOs Q4J1t+Ef6rn1YCMvZlmrhQCgL6jdkXw= -----END CERTIFICATE-----Generated at Wed May 13 09:22:14 2026 by rpki-client