$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/4338433f-a208-3589-9c69-6c3b1db06a76.roa File: 4338433f-a208-3589-9c69-6c3b1db06a76.roa (raw, json) Hash identifier: MkuCdja8UeqLcwM8jl9z0WbQSsGM+rf9brAWld2J08U= Subject key identifier: F4:E4:C9:58:56:E6:90:8A:7D:20:D6:01:23:DE:AE:33:B4:00:78:27 Certificate issuer: /CN=fe86722c-27ec-4059-a1ef-757cf5e15715 Certificate serial: 010D0C9F4328584C9966F8D4F00A22029D76F400 Authority key identifier: 9C:AE:A3:9B:81:AD:00:D5:A0:53:43:BF:27:13:EF:FF:47:D6:B8:F7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/4338433f-a208-3589-9c69-6c3b1db06a76.roa Signing time: Wed 21 Jan 2026 14:00:38 +0000 ROA not before: Wed 21 Jan 2026 14:00:38 +0000 ROA not after: Tue 21 Apr 2026 13:00:38 +0000 asID: 21976 IP address blocks: 130.156.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/fe86722c-27ec-4059-a1ef-757cf5e15715.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/fe86722c-27ec-4059-a1ef-757cf5e15715.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:99:66:f8:d4:f0:0a:22:02:9d:76:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe86722c-27ec-4059-a1ef-757cf5e15715 Validity Not Before: Jan 21 14:00:38 2026 GMT Not After : Apr 21 13:00:38 2026 GMT Subject: CN=dbb71ac7-12db-4087-a919-73a645c44a4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:e6:4a:d0:ba:10:cf:04:3c:2d:1e:4e:66:85: d8:7a:68:a9:c8:1a:8f:9f:34:8c:e7:92:02:da:8e: fb:b0:80:ad:6c:29:a6:dd:65:38:49:58:e3:8b:e3: 0e:7f:71:53:37:da:c4:c0:31:1b:c4:69:15:78:61: 4f:99:33:99:ee:13:99:00:00:2c:5f:a4:2f:83:9a: fe:18:cd:e3:7e:8d:90:5a:6e:07:a4:89:2f:73:e2: 22:c5:ef:5b:e1:cc:1f:5f:64:36:54:1c:34:75:6e: e1:72:06:d2:95:94:05:0e:c2:0a:a1:ba:13:f4:bb: 1a:80:54:a4:1c:a5:f4:ed:43:6a:b7:dc:91:84:ec: 2b:62:25:dd:b6:8d:f6:2b:d1:9a:78:65:63:c6:a4: 0c:ea:1a:50:ba:d0:bc:d8:a6:d2:b7:33:66:9b:f4: 1e:f7:e0:fd:50:d6:52:57:c3:f7:2e:2f:e3:d3:c8: 92:2c:87:90:25:ed:0d:c0:5d:01:fd:2f:2b:35:a6: 52:ba:04:12:41:07:a7:64:ec:c2:22:74:26:a4:b8: 0d:e8:fa:e0:39:53:2d:26:1f:cf:54:f1:3a:29:56: 0a:e3:74:13:f5:71:d7:43:cb:04:6f:e8:c1:43:46: 9a:2b:95:f7:f4:f6:0a:ce:f3:4e:55:17:fe:24:b2: 36:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:E4:C9:58:56:E6:90:8A:7D:20:D6:01:23:DE:AE:33:B4:00:78:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/4338433f-a208-3589-9c69-6c3b1db06a76.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/fe86722c-27ec-4059-a1ef-757cf5e15715.crl X509v3 Authority Key Identifier: keyid:9C:AE:A3:9B:81:AD:00:D5:A0:53:43:BF:27:13:EF:FF:47:D6:B8:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715.cer sbgp-ipAddrBlock: critical IPv4: 130.156.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:27:01:51:a7:a7:f0:52:ec:b1:d4:78:a4:1e:ee:03:99:fc: 8e:27:9e:30:e4:52:2f:72:80:40:a1:6c:0b:6e:6b:cc:9f:3e: b8:b4:56:23:e7:4c:b9:ee:25:1e:5c:db:7d:b7:4f:73:24:43: 28:bc:67:99:f7:bb:5b:2d:ec:3e:35:81:f1:4b:29:fb:4c:11: 94:8c:a9:08:52:4e:6c:53:18:9d:98:0c:f2:e9:bb:10:f0:3a: 78:d5:9c:98:70:e2:b6:a3:5a:46:e3:51:0a:18:b6:d1:55:31: a4:a5:ee:67:c0:9a:1c:6c:3d:f2:96:db:3d:3d:93:b4:78:d1: ca:20:cb:a0:13:cd:ca:69:4a:fc:38:63:0c:20:58:78:57:e1: 1e:03:90:f1:5a:17:10:ee:4c:4a:3d:6a:bc:9f:fe:55:a3:e1: 2f:db:3a:2e:cc:8e:97:02:24:65:08:df:5d:59:54:84:10:07: bb:83:40:b4:92:14:8b:f4:2d:68:72:20:73:1f:70:3a:f2:dc: 79:72:09:14:b1:a6:35:54:6f:7c:f1:ca:57:cf:f2:b3:94:13: b1:3d:03:bc:3a:b9:40:9e:8d:7e:91:72:86:35:88:81:10:9d: e2:18:d3:f1:67:62:57:0e:5a:bf:59:ed:a6:00:58:08:22:0e: 37:4c:9a:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyZZvjU8AoiAp129AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmU4NjcyMmMtMjdlYy00MDU5LWExZWYtNzU3Y2Y1ZTE1 NzE1MB4XDTI2MDEyMTE0MDAzOFoXDTI2MDQyMTEzMDAzOFowLzEtMCsGA1UEAxMk ZGJiNzFhYzctMTJkYi00MDg3LWE5MTktNzNhNjQ1YzQ0YTRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOZK0LoQzwQ8LR5OZoXYemipyBqPnzSM55IC 2o77sICtbCmm3WU4SVjji+MOf3FTN9rEwDEbxGkVeGFPmTOZ7hOZAAAsX6Qvg5r+ GM3jfo2QWm4HpIkvc+Iixe9b4cwfX2Q2VBw0dW7hcgbSlZQFDsIKoboT9LsagFSk HKX07UNqt9yRhOwrYiXdto32K9GaeGVjxqQM6hpQutC82KbStzNmm/Qe9+D9UNZS V8P3Li/j08iSLIeQJe0NwF0B/S8rNaZSugQSQQenZOzCInQmpLgN6PrgOVMtJh/P VPE6KVYK43QT9XHXQ8sEb+jBQ0aaK5X39PYKzvNOVRf+JLI2MQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPTkyVhW5pCKfSDWASPerjO0AHgnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mZTg2 NzIyYy0yN2VjLTQwNTktYTFlZi03NTdjZjVlMTU3MTUvNDMzODQzM2YtYTIwOC0z NTg5LTljNjktNmMzYjFkYjA2YTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZmU4NjcyMmMtMjdlYy00MDU5LWEx ZWYtNzU3Y2Y1ZTE1NzE1L2ZlODY3MjJjLTI3ZWMtNDA1OS1hMWVmLTc1N2NmNWUx NTcxNS5jcmwwHwYDVR0jBBgwFoAUnK6jm4GtANWgU0O/JxPv/0fWuPcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9mZTg2NzIyYy0yN2VjLTQwNTktYTFlZi03NTdj ZjVlMTU3MTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgpwUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALAnAVGnp/BS7LHUeKQe7gOZ/I4nnjDkUi9ygEChbAtua8yfPri0ViPn TLnuJR5c2323T3MkQyi8Z5n3u1st7D41gfFLKftMEZSMqQhSTmxTGJ2YDPLpuxDw OnjVnJhw4rajWkbjUQoYttFVMaSl7mfAmhxsPfKW2z09k7R40cogy6ATzcppSvw4 YwwgWHhX4R4DkPFaFxDuTEo9aryf/lWj4S/bOi7MjpcCJGUI311ZVIQQB7uDQLSS FIv0LWhyIHMfcDry3HlyCRSxpjVUb3zxylfP8rOUE7E9A7w6uUCejX6RcoY1iIEQ neIY0/FnYlcOWr9Z7aYAWAgiDjdMmkA= -----END CERTIFICATE-----Generated at Mon Mar 2 13:37:05 2026 by rpki-client