$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4b439f01-1270-40c3-9c4f-92fda6473e3d/31a42a29-1dfe-34a8-ae78-fb73af442044.roa File: 31a42a29-1dfe-34a8-ae78-fb73af442044.roa (raw, json) Hash identifier: Bl4W5mjcCTbaX1xzCxyxwxVSXa4U/PMn+Smj9KP091M= Subject key identifier: 8C:B1:D7:FD:1D:05:7B:85:48:1A:A5:E8:1A:5B:E8:37:B5:7D:31:32 Certificate issuer: /CN=4b439f01-1270-40c3-9c4f-92fda6473e3d Certificate serial: 010D0C9F4328584D93254BCF139A40DD4891E740 Authority key identifier: AF:8C:86:8A:48:9D:8C:9F:36:5D:5E:15:66:60:F3:77:2A:B8:BF:57 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4b439f01-1270-40c3-9c4f-92fda6473e3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4b439f01-1270-40c3-9c4f-92fda6473e3d/31a42a29-1dfe-34a8-ae78-fb73af442044.roa Signing time: Tue 21 Apr 2026 01:00:24 +0000 ROA not before: Tue 21 Apr 2026 01:00:24 +0000 ROA not after: Mon 20 Jul 2026 01:00:24 +0000 asID: 399347 IP address blocks: 130.250.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4b439f01-1270-40c3-9c4f-92fda6473e3d/4b439f01-1270-40c3-9c4f-92fda6473e3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4b439f01-1270-40c3-9c4f-92fda6473e3d/4b439f01-1270-40c3-9c4f-92fda6473e3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4b439f01-1270-40c3-9c4f-92fda6473e3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:93:25:4b:cf:13:9a:40:dd:48:91:e7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b439f01-1270-40c3-9c4f-92fda6473e3d Validity Not Before: Apr 21 01:00:24 2026 GMT Not After : Jul 20 01:00:24 2026 GMT Subject: CN=d95ddf6b-7d20-437b-95da-8b63d019c982 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:a8:16:ee:77:cf:f9:15:0b:be:d2:3c:20:60: 8e:f9:6c:e8:85:97:bb:b4:b5:75:33:e1:51:12:fb: f5:46:22:21:c5:b8:83:78:71:3d:c7:76:81:85:24: 7f:0d:f2:e6:16:9e:f0:25:e3:f6:63:15:33:2b:61: 51:5a:7d:cf:4b:f1:fe:a4:37:5f:f2:7e:ba:b4:b3: 3c:09:16:f7:d8:a6:23:94:21:d1:be:c5:d6:b7:9b: 12:da:df:65:f4:12:7e:aa:59:d5:b5:22:f0:7e:da: 1b:30:48:74:a2:98:ce:e9:6a:55:5c:19:38:36:a5: 74:38:8a:70:6d:a1:7e:90:e4:41:be:80:ac:19:98: 93:55:21:76:a3:87:0b:2c:28:74:48:f4:e3:39:78: 3c:2b:11:81:fe:d8:11:e2:9a:8a:08:98:51:79:5e: d7:79:52:ec:43:f0:5c:79:5f:33:1b:0b:a0:81:92: 50:4f:45:2e:ca:60:66:b1:5f:6d:97:3f:ac:7f:a8: 9f:51:2f:11:83:1b:a1:11:74:61:ea:fd:74:37:bd: e4:57:62:14:ac:92:e7:4c:2f:0c:8e:14:e3:3e:2c: 84:a6:4d:fe:61:0e:7c:fb:d7:64:2b:e6:52:c1:7e: 14:b3:21:d8:9e:fa:e4:bb:7b:33:0b:68:fb:cc:f4: 1f:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:B1:D7:FD:1D:05:7B:85:48:1A:A5:E8:1A:5B:E8:37:B5:7D:31:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4b439f01-1270-40c3-9c4f-92fda6473e3d/31a42a29-1dfe-34a8-ae78-fb73af442044.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4b439f01-1270-40c3-9c4f-92fda6473e3d/4b439f01-1270-40c3-9c4f-92fda6473e3d.crl X509v3 Authority Key Identifier: keyid:AF:8C:86:8A:48:9D:8C:9F:36:5D:5E:15:66:60:F3:77:2A:B8:BF:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4b439f01-1270-40c3-9c4f-92fda6473e3d.cer sbgp-ipAddrBlock: critical IPv4: 130.250.226.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:f1:28:af:8d:14:75:a6:70:7a:e9:45:6b:ec:aa:2d:2b:26: c0:d1:93:1d:6f:de:67:60:1d:8b:0f:b1:8b:dd:42:fc:12:42: ef:0a:d6:79:0a:c9:42:cc:46:75:ac:2d:06:1c:c8:0c:f2:eb: af:d2:47:b4:b6:c6:58:48:34:3f:2e:bd:84:77:f9:14:1a:11: b8:4e:ea:ca:df:24:bb:61:27:60:5c:db:1e:f7:3c:28:5b:a6: cf:ed:0f:0b:ec:5a:b0:7a:11:5a:fe:2f:3f:64:36:f9:1c:35: 72:a6:30:08:6b:44:d8:6d:d6:77:66:56:17:9d:a8:b6:81:4a: 6c:66:e0:c3:96:fd:67:a1:e9:cd:0f:3a:30:c2:37:8d:fe:4c: ca:15:16:e6:0f:3e:41:e6:c6:b6:17:83:bd:47:ac:db:0f:f5: 6a:61:9a:48:b5:62:d1:79:e6:7d:a7:f4:a2:86:aa:92:cd:d8: f9:8c:4f:d8:b4:0b:e8:53:ed:fc:31:ad:85:ee:5e:69:b8:59: d1:54:19:41:98:41:4e:c6:5a:f0:f7:18:ed:b9:91:10:08:ce: 91:eb:d9:0c:3d:c5:07:db:19:32:13:73:05:74:92:e8:be:2d: 34:76:76:be:da:68:67:fd:92:11:03:ca:53:8f:d7:f4:7f:b1: 22:21:64:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2TJUvPE5pA3UiR50AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGI0MzlmMDEtMTI3MC00MGMzLTljNGYtOTJmZGE2NDcz ZTNkMB4XDTI2MDQyMTAxMDAyNFoXDTI2MDcyMDAxMDAyNFowLzEtMCsGA1UEAxMk ZDk1ZGRmNmItN2QyMC00MzdiLTk1ZGEtOGI2M2QwMTljOTgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5agW7nfP+RULvtI8IGCO+WzohZe7tLV1M+FR Evv1RiIhxbiDeHE9x3aBhSR/DfLmFp7wJeP2YxUzK2FRWn3PS/H+pDdf8n66tLM8 CRb32KYjlCHRvsXWt5sS2t9l9BJ+qlnVtSLwftobMEh0opjO6WpVXBk4NqV0OIpw baF+kORBvoCsGZiTVSF2o4cLLCh0SPTjOXg8KxGB/tgR4pqKCJhReV7XeVLsQ/Bc eV8zGwuggZJQT0UuymBmsV9tlz+sf6ifUS8RgxuhEXRh6v10N73kV2IUrJLnTC8M jhTjPiyEpk3+YQ58+9dkK+ZSwX4UsyHYnvrku3szC2j7zPQfOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIyx1/0dBXuFSBql6Bpb6De1fTEyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80YjQz OWYwMS0xMjcwLTQwYzMtOWM0Zi05MmZkYTY0NzNlM2QvMzFhNDJhMjktMWRmZS0z NGE4LWFlNzgtZmI3M2FmNDQyMDQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNGI0MzlmMDEtMTI3MC00MGMzLTlj NGYtOTJmZGE2NDczZTNkLzRiNDM5ZjAxLTEyNzAtNDBjMy05YzRmLTkyZmRhNjQ3 M2UzZC5jcmwwHwYDVR0jBBgwFoAUr4yGikidjJ82XV4VZmDzdyq4v1cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80YjQzOWYwMS0xMjcwLTQwYzMtOWM0Zi05MmZk YTY0NzNlM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgvriMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI/xKK+NFHWmcHrpRWvsqi0rJsDRkx1v3mdgHYsPsYvdQvwSQu8K1nkK yULMRnWsLQYcyAzy66/SR7S2xlhIND8uvYR3+RQaEbhO6srfJLthJ2Bc2x73PChb ps/tDwvsWrB6EVr+Lz9kNvkcNXKmMAhrRNht1ndmVhedqLaBSmxm4MOW/Weh6c0P OjDCN43+TMoVFuYPPkHmxrYXg71HrNsP9Wphmki1YtF55n2n9KKGqpLN2PmMT9i0 C+hT7fwxrYXuXmm4WdFUGUGYQU7GWvD3GO25kRAIzpHr2Qw9xQfbGTITcwV0kui+ LTR2dr7aaGf9khEDylOP1/R/sSIhZAM= -----END CERTIFICATE-----Generated at Wed May 13 10:53:28 2026 by rpki-client