$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/74448f2d-e70e-4042-9da0-e023ba682319/a1361cd5-da5c-35d0-9d20-2c4bd90f6f4f.roa File: a1361cd5-da5c-35d0-9d20-2c4bd90f6f4f.roa (raw, json) Hash identifier: GZqetPFlk6rqV6iZ+NjNAFGyjuDZxFyj95FOvpJhGjM= Subject key identifier: E1:2F:3E:35:0A:BA:70:5E:C4:DB:AE:8C:8F:85:53:64:AC:99:03:D2 Certificate issuer: /CN=74448f2d-e70e-4042-9da0-e023ba682319 Certificate serial: 010D0C9F4328584EA788BD4F5171E0A9ED686800 Authority key identifier: 63:21:A1:E6:9F:C4:E9:2F:C9:47:24:A5:3D:0B:45:50:E3:6F:BF:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/74448f2d-e70e-4042-9da0-e023ba682319.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/74448f2d-e70e-4042-9da0-e023ba682319/a1361cd5-da5c-35d0-9d20-2c4bd90f6f4f.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 36111 IP address blocks: 130.250.220.0/22 maxlen: 22 130.250.220.0/24 maxlen: 24 130.250.221.0/24 maxlen: 24 130.250.222.0/24 maxlen: 24 130.250.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/74448f2d-e70e-4042-9da0-e023ba682319/74448f2d-e70e-4042-9da0-e023ba682319.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/74448f2d-e70e-4042-9da0-e023ba682319/74448f2d-e70e-4042-9da0-e023ba682319.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/74448f2d-e70e-4042-9da0-e023ba682319.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:bd:4f:51:71:e0:a9:ed:68:68:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74448f2d-e70e-4042-9da0-e023ba682319 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=e3c6afa4-1570-484c-9e75-707dc864857e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:21:fd:2e:88:90:0f:c6:ea:c7:23:75:a7:28: a5:f7:17:a4:e5:31:2b:5a:d9:5d:91:81:df:81:55: dd:e9:46:47:ca:1b:68:77:68:59:1b:bf:26:aa:ea: 42:68:68:a2:4d:7e:d0:94:8f:3e:e8:eb:da:ae:ba: 91:36:35:f3:33:0e:c1:2b:99:3b:d9:f6:64:48:7a: d3:a6:1c:39:2f:72:1d:76:97:ac:4b:d4:8a:20:b3: bd:6b:46:35:0c:f3:1f:95:90:cc:e9:25:3d:0b:c2: 7d:44:89:32:13:ac:81:1e:db:07:17:22:4d:44:6f: 76:08:10:a2:91:88:6a:09:7b:89:f8:11:6a:2e:44: db:eb:bc:f8:c6:da:cd:a2:04:ec:cd:8d:2e:60:70: 5f:1f:ea:97:4e:a8:3e:71:20:20:bb:04:33:68:44: d0:a0:29:dd:85:ac:ac:84:06:32:30:d0:4a:3f:0e: 0e:59:a5:f9:5d:84:a0:d5:f0:11:5c:af:ce:c4:34: 92:4e:79:d3:42:30:4b:55:fd:7c:cc:2a:22:50:b1: 35:03:25:68:b2:1c:cd:a2:93:8c:a6:a4:d6:b4:0a: 0d:8f:b6:98:bd:24:7e:1b:cd:ec:75:a8:75:88:ed: b0:1b:e2:2a:d9:67:f5:75:ed:c6:8f:42:29:d8:44: d4:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:2F:3E:35:0A:BA:70:5E:C4:DB:AE:8C:8F:85:53:64:AC:99:03:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/74448f2d-e70e-4042-9da0-e023ba682319/a1361cd5-da5c-35d0-9d20-2c4bd90f6f4f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/74448f2d-e70e-4042-9da0-e023ba682319/74448f2d-e70e-4042-9da0-e023ba682319.crl X509v3 Authority Key Identifier: keyid:63:21:A1:E6:9F:C4:E9:2F:C9:47:24:A5:3D:0B:45:50:E3:6F:BF:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/74448f2d-e70e-4042-9da0-e023ba682319.cer sbgp-ipAddrBlock: critical IPv4: 130.250.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:0c:45:63:ce:48:73:64:1d:ba:af:ce:43:e1:37:20:d4:dc: 96:c1:00:39:a3:aa:9f:f6:c4:aa:e5:9e:11:aa:b4:1a:f5:5b: d4:af:6e:c4:f0:cd:a3:1f:ae:87:59:fb:df:c9:11:41:cd:f6: 3b:72:db:60:cb:aa:59:db:a6:30:17:1d:12:8b:88:97:87:46: f5:2b:f2:f0:a6:3b:50:06:0a:d2:b3:0c:6d:77:8c:21:be:83: 8d:5c:a9:55:cd:27:6e:67:97:2c:d1:80:81:ea:26:6c:67:57: 86:2e:3b:46:bc:26:91:e0:0d:f7:28:46:9c:3a:81:fb:dc:be: 14:56:92:e1:5a:d0:6a:2f:af:7c:62:52:a1:22:e0:53:63:28: 02:57:61:5e:a2:b4:42:f5:1b:41:03:7c:f6:99:f8:a4:32:db: a9:07:66:0a:38:20:86:3c:23:87:c0:8a:71:cc:57:c6:66:3a: bb:4a:7d:22:ad:47:14:4a:08:29:5f:cc:11:b7:17:3f:c8:af: a5:6e:14:08:29:91:fd:26:52:98:0d:14:a1:3f:45:46:5e:e4: e7:b8:37:db:cb:10:fe:1f:65:61:0f:5e:a0:56:e8:f4:d8:6c: 9b:3d:73:89:d2:e5:0e:65:86:25:d6:79:c5:5e:0c:dc:46:ba: b6:df:17:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niL1PUXHgqe1oaAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ0NDhmMmQtZTcwZS00MDQyLTlkYTAtZTAyM2JhNjgy MzE5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZTNjNmFmYTQtMTU3MC00ODRjLTllNzUtNzA3ZGM4NjQ4NTdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCH9LoiQD8bqxyN1pyil9xek5TErWtldkYHf gVXd6UZHyhtod2hZG78mqupCaGiiTX7QlI8+6OvarrqRNjXzMw7BK5k72fZkSHrT phw5L3IddpesS9SKILO9a0Y1DPMflZDM6SU9C8J9RIkyE6yBHtsHFyJNRG92CBCi kYhqCXuJ+BFqLkTb67z4xtrNogTszY0uYHBfH+qXTqg+cSAguwQzaETQoCndhays hAYyMNBKPw4OWaX5XYSg1fARXK/OxDSSTnnTQjBLVf18zCoiULE1AyVoshzNopOM pqTWtAoNj7aYvSR+G83sdah1iO2wG+Iq2Wf1de3Gj0Ip2ETUwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOEvPjUKunBexNuujI+FU2SsmQPSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS83NDQ0 OGYyZC1lNzBlLTQwNDItOWRhMC1lMDIzYmE2ODIzMTkvYTEzNjFjZDUtZGE1Yy0z NWQwLTlkMjAtMmM0YmQ5MGY2ZjRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNzQ0NDhmMmQtZTcwZS00MDQyLTlk YTAtZTAyM2JhNjgyMzE5Lzc0NDQ4ZjJkLWU3MGUtNDA0Mi05ZGEwLWUwMjNiYTY4 MjMxOS5jcmwwHwYDVR0jBBgwFoAUYyGh5p/E6S/JRySlPQtFUONvv4EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS83NDQ0OGYyZC1lNzBlLTQwNDItOWRhMC1lMDIz YmE2ODIzMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgvrcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAkMRWPOSHNkHbqvzkPhNyDU3JbBADmjqp/2xKrlnhGqtBr1W9SvbsTw zaMfrodZ+9/JEUHN9jty22DLqlnbpjAXHRKLiJeHRvUr8vCmO1AGCtKzDG13jCG+ g41cqVXNJ25nlyzRgIHqJmxnV4YuO0a8JpHgDfcoRpw6gfvcvhRWkuFa0Govr3xi UqEi4FNjKAJXYV6itEL1G0EDfPaZ+KQy26kHZgo4IIY8I4fAinHMV8ZmOrtKfSKt RxRKCClfzBG3Fz/Ir6VuFAgpkf0mUpgNFKE/RUZe5Oe4N9vLEP4fZWEPXqBW6PTY bJs9c4nS5Q5lhiXWecVeDNxGurbfFxw= -----END CERTIFICATE-----Generated at Wed Jul 29 07:50:12 2026 by rpki-client