$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/221cdd91-10e9-41bb-8765-69edc6f1e631/89985742-301c-3ae6-9196-8515917104c8.roa File: 89985742-301c-3ae6-9196-8515917104c8.roa (raw, json) Hash identifier: VwbQ6KVWWrkN1X7//0iDoaLlCMf79HTQA5K86CAxkxI= Subject key identifier: 71:73:48:D9:43:DC:3E:94:67:FE:82:63:76:F3:F7:DC:DE:20:26:4F Certificate issuer: /CN=221cdd91-10e9-41bb-8765-69edc6f1e631 Certificate serial: 010D0C9F4328584D492A5BF848CC18543356CC40 Authority key identifier: D4:0C:BD:52:74:20:06:4C:A1:FA:04:8B:7D:02:D2:8B:6E:9F:21:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/221cdd91-10e9-41bb-8765-69edc6f1e631.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/221cdd91-10e9-41bb-8765-69edc6f1e631/89985742-301c-3ae6-9196-8515917104c8.roa Signing time: Wed 25 Mar 2026 13:00:41 +0000 ROA not before: Wed 25 Mar 2026 13:00:41 +0000 ROA not after: Tue 23 Jun 2026 13:00:41 +0000 asID: 14618 IP address blocks: 130.50.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/221cdd91-10e9-41bb-8765-69edc6f1e631/221cdd91-10e9-41bb-8765-69edc6f1e631.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/221cdd91-10e9-41bb-8765-69edc6f1e631/221cdd91-10e9-41bb-8765-69edc6f1e631.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/221cdd91-10e9-41bb-8765-69edc6f1e631.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:2a:5b:f8:48:cc:18:54:33:56:cc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=221cdd91-10e9-41bb-8765-69edc6f1e631 Validity Not Before: Mar 25 13:00:41 2026 GMT Not After : Jun 23 13:00:41 2026 GMT Subject: CN=9c2097c8-37ed-40fe-85f3-dbda87549894 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:61:91:24:5a:3e:2c:b2:e9:bd:22:a8:aa:b6: 74:b4:ae:29:50:80:b3:03:32:fa:17:36:f8:2f:b3: 8b:33:e6:df:dc:a5:86:d7:b9:e4:d6:aa:3d:6a:39: b4:d1:b3:8a:1f:74:06:cd:ca:f0:c1:8a:6e:81:f2: 87:3c:14:71:49:4b:80:1f:e4:22:85:53:4e:be:90: 1f:53:85:7f:1a:36:9b:ce:2f:7a:da:da:68:0e:39: 8c:64:64:a6:52:a3:2f:f4:38:a9:10:e1:21:5b:1b: 43:fc:d5:54:d8:04:da:92:01:b5:88:9c:e0:20:71: 26:e6:29:49:ca:40:95:16:ba:b4:c0:80:6d:03:19: c6:bb:92:79:3f:73:30:ae:76:27:d5:91:da:bd:4a: 8a:41:e1:b8:7d:b3:5f:dc:e1:67:dc:96:86:ae:08: aa:3f:8d:c7:85:38:f5:7a:92:b1:dd:a1:1c:0d:82: 1f:33:7e:5b:be:94:4b:3b:04:57:de:db:34:ec:e9: 86:3c:65:db:1a:42:e5:0a:05:01:0a:52:99:e7:1f: 01:12:53:92:3e:22:ba:43:79:40:10:9f:fa:a4:6c: 85:de:39:16:a3:bb:7b:33:b0:ac:43:6b:87:2a:0a: b6:8e:e1:e0:35:a1:16:36:cc:59:2c:f7:28:fc:b0: e5:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:73:48:D9:43:DC:3E:94:67:FE:82:63:76:F3:F7:DC:DE:20:26:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/221cdd91-10e9-41bb-8765-69edc6f1e631/89985742-301c-3ae6-9196-8515917104c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/221cdd91-10e9-41bb-8765-69edc6f1e631/221cdd91-10e9-41bb-8765-69edc6f1e631.crl X509v3 Authority Key Identifier: keyid:D4:0C:BD:52:74:20:06:4C:A1:FA:04:8B:7D:02:D2:8B:6E:9F:21:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/221cdd91-10e9-41bb-8765-69edc6f1e631.cer sbgp-ipAddrBlock: critical IPv4: 130.50.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:2a:a5:6a:3f:20:0d:8f:5c:a7:08:52:8d:3f:e0:af:f7:c0: 94:3d:98:64:62:c6:47:d3:36:3e:21:c5:7e:47:27:b7:b6:ed: 7c:c9:19:39:fc:85:e4:5e:b4:e9:12:a1:d9:0a:9e:e7:5c:38: d2:26:4b:10:27:53:09:50:87:bf:59:01:55:79:32:e7:9b:58: ad:fd:d1:98:b0:60:58:43:9a:fc:e0:41:91:3c:b5:52:9a:a5: 35:33:33:1b:40:14:a8:90:77:ea:c0:50:84:22:18:11:4c:a9: 0e:ae:f5:d9:42:8f:ce:56:43:ba:6b:54:db:b0:73:e3:0e:66: c5:1a:17:a6:b0:d4:4c:a3:c3:35:71:e5:da:a8:dc:21:14:81: c3:99:a7:73:c2:79:51:a0:9c:97:e6:f7:2b:93:8f:e8:96:c0: cb:73:f0:d3:4b:a4:24:0a:51:01:e0:a2:5f:46:b0:62:1a:36: 7a:13:6a:26:00:0f:09:c0:9d:5c:9e:30:13:21:5c:be:45:43: d1:ad:92:93:29:de:1e:48:b9:a3:c2:98:9e:b4:12:2a:63:05: 09:8b:79:78:57:e2:13:ac:29:a6:50:fc:07:6f:1c:ad:7c:f5: 28:8d:35:66:fb:63:bf:e7:c0:a2:c4:10:a2:58:29:5a:f9:2e: 30:38:8f:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1JKlv4SMwYVDNWzEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjIxY2RkOTEtMTBlOS00MWJiLTg3NjUtNjllZGM2ZjFl NjMxMB4XDTI2MDMyNTEzMDA0MVoXDTI2MDYyMzEzMDA0MVowLzEtMCsGA1UEAxMk OWMyMDk3YzgtMzdlZC00MGZlLTg1ZjMtZGJkYTg3NTQ5ODk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlmGRJFo+LLLpvSKoqrZ0tK4pUICzAzL6Fzb4 L7OLM+bf3KWG17nk1qo9ajm00bOKH3QGzcrwwYpugfKHPBRxSUuAH+QihVNOvpAf U4V/Gjabzi962tpoDjmMZGSmUqMv9DipEOEhWxtD/NVU2ATakgG1iJzgIHEm5ilJ ykCVFrq0wIBtAxnGu5J5P3MwrnYn1ZHavUqKQeG4fbNf3OFn3JaGrgiqP43HhTj1 epKx3aEcDYIfM35bvpRLOwRX3ts07OmGPGXbGkLlCgUBClKZ5x8BElOSPiK6Q3lA EJ/6pGyF3jkWo7t7M7CsQ2uHKgq2juHgNaEWNsxZLPco/LDlCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHFzSNlD3D6UZ/6CY3bz99zeICZPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yMjFj ZGQ5MS0xMGU5LTQxYmItODc2NS02OWVkYzZmMWU2MzEvODk5ODU3NDItMzAxYy0z YWU2LTkxOTYtODUxNTkxNzEwNGM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjIxY2RkOTEtMTBlOS00MWJiLTg3 NjUtNjllZGM2ZjFlNjMxLzIyMWNkZDkxLTEwZTktNDFiYi04NzY1LTY5ZWRjNmYx ZTYzMS5jcmwwHwYDVR0jBBgwFoAU1Ay9UnQgBkyh+gSLfQLSi26fIUswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yMjFjZGQ5MS0xMGU5LTQxYmItODc2NS02OWVk YzZmMWU2MzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgjJ9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJoqpWo/IA2PXKcIUo0/4K/3wJQ9mGRixkfTNj4hxX5HJ7e27XzJGTn8 heRetOkSodkKnudcONImSxAnUwlQh79ZAVV5MuebWK390ZiwYFhDmvzgQZE8tVKa pTUzMxtAFKiQd+rAUIQiGBFMqQ6u9dlCj85WQ7prVNuwc+MOZsUaF6aw1EyjwzVx 5dqo3CEUgcOZp3PCeVGgnJfm9yuTj+iWwMtz8NNLpCQKUQHgol9GsGIaNnoTaiYA DwnAnVyeMBMhXL5FQ9GtkpMp3h5IuaPCmJ60EipjBQmLeXhX4hOsKaZQ/AdvHK18 9SiNNWb7Y7/nwKLEEKJYKVr5LjA4j9s= -----END CERTIFICATE-----Generated at Thu Mar 26 19:17:37 2026 by rpki-client