$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a/98656d1e-e062-3923-ac5a-b68e0567869e.roa File: 98656d1e-e062-3923-ac5a-b68e0567869e.roa (raw, json) Hash identifier: OC4bTPENp5owdO345EmK4+ihXEiIopxv7fof3K+aecI= Subject key identifier: CB:5F:05:66:A1:06:D5:DA:6B:90:F6:A0:99:49:EB:62:45:E8:EF:91 Certificate issuer: /CN=8fc21c27-e8e6-433a-86da-315992f3e55a Certificate serial: 010D0C9F4328584CF873753B0E8FE879C8D7D000 Authority key identifier: 95:48:71:EE:B6:BF:34:3A:E4:8E:9C:4B:5E:42:E3:3A:58:1B:F5:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a/98656d1e-e062-3923-ac5a-b68e0567869e.roa Signing time: Tue 24 Feb 2026 15:07:44 +0000 ROA not before: Tue 24 Feb 2026 15:07:44 +0000 ROA not after: Mon 25 May 2026 14:07:44 +0000 asID: 14537 IP address blocks: 130.250.100.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a/8fc21c27-e8e6-433a-86da-315992f3e55a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a/8fc21c27-e8e6-433a-86da-315992f3e55a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f8:73:75:3b:0e:8f:e8:79:c8:d7:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8fc21c27-e8e6-433a-86da-315992f3e55a Validity Not Before: Feb 24 15:07:44 2026 GMT Not After : May 25 14:07:44 2026 GMT Subject: CN=ba2206ad-371f-4dba-9e7f-8c9d0d5fa3c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:99:3d:74:23:00:88:62:cf:75:95:4f:f5:f7: 1b:80:4f:5b:4e:1f:32:7c:62:28:6a:c1:ea:00:7a: c1:f9:3e:06:b9:3c:34:9b:87:71:10:3a:51:8c:e8: 66:df:bc:a1:9d:09:1a:08:b7:ad:fb:f2:9a:ef:82: e4:ce:7f:49:c1:68:c7:40:3f:f4:e0:5d:1c:14:90: 9f:72:8d:73:54:cc:8f:b7:e9:63:4a:16:c3:04:c8: 21:9f:52:83:56:63:df:4c:d4:ca:79:f2:22:4e:7c: 3c:b8:83:11:ee:ca:71:98:5c:79:00:70:e1:46:f0: 51:7a:61:b3:40:f7:99:c4:df:f0:8e:de:21:63:41: 61:24:04:8e:8b:5d:09:f2:2f:13:56:fb:5d:94:1b: 82:b8:f9:9c:d6:c7:ff:79:c5:8d:a3:01:d2:f9:45: 1a:c9:e5:0c:ed:fd:cd:fd:fe:fc:18:7d:98:a0:b8: 71:41:9f:15:2b:9e:b7:bb:54:c1:66:66:cd:a6:1d: 3d:9c:bb:6e:85:07:60:2c:54:f9:89:b8:65:67:e3: 3b:76:5f:9f:9d:e0:64:12:8a:77:55:bd:97:70:8b: 1f:eb:5c:d8:c1:09:38:6c:24:56:9e:db:2d:2a:25: 36:c4:cc:39:2a:48:18:55:bb:eb:d6:ad:28:07:f2: 45:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:5F:05:66:A1:06:D5:DA:6B:90:F6:A0:99:49:EB:62:45:E8:EF:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a/98656d1e-e062-3923-ac5a-b68e0567869e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a/8fc21c27-e8e6-433a-86da-315992f3e55a.crl X509v3 Authority Key Identifier: keyid:95:48:71:EE:B6:BF:34:3A:E4:8E:9C:4B:5E:42:E3:3A:58:1B:F5:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a.cer sbgp-ipAddrBlock: critical IPv4: 130.250.100.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:0a:39:0f:82:0a:56:46:2b:ab:d1:b0:f7:64:13:b4:1d:e1: 2b:4f:55:01:8a:bf:08:52:81:f3:09:0f:76:0e:27:ea:7e:b0: 9d:f7:35:76:08:78:15:7a:6d:cb:89:a2:80:ed:05:3d:bb:de: 99:17:bc:07:6f:7f:b2:91:a9:dc:44:f7:7c:fd:17:96:5d:c4: df:36:75:4b:d9:da:51:3d:28:c4:25:d3:40:f5:b6:1a:43:83: 7c:c9:88:d9:ab:f1:06:42:46:8c:c3:78:ab:07:2f:93:23:ce: ab:50:99:54:6b:7f:22:57:ca:f0:79:33:43:be:bf:f3:0d:40: 1e:5b:2f:00:20:bf:23:a3:8a:6a:4f:b9:93:97:18:a3:78:26: c1:ee:40:e8:5d:9d:5c:35:4e:85:d3:fb:c7:4a:65:bb:71:8a: d0:42:2f:87:73:31:07:0c:b0:35:d7:73:5b:4f:a3:b9:35:0e: d6:a7:26:6b:2e:8a:67:0d:95:f5:10:fe:db:a8:82:48:5e:4a: 82:4b:41:b4:be:96:7f:df:a0:bf:85:f0:4f:f4:a9:30:3b:96: 97:7b:5a:35:a0:fd:1b:2a:ae:ca:a0:0c:8f:4f:4f:ab:52:e9: 21:98:b6:7d:20:da:f8:13:43:4a:76:6c:ad:b3:99:a1:db:54: f9:14:44:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz4c3U7Do/oecjX0AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGZjMjFjMjctZThlNi00MzNhLTg2ZGEtMzE1OTkyZjNl NTVhMB4XDTI2MDIyNDE1MDc0NFoXDTI2MDUyNTE0MDc0NFowLzEtMCsGA1UEAxMk YmEyMjA2YWQtMzcxZi00ZGJhLTllN2YtOGM5ZDBkNWZhM2M2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJk9dCMAiGLPdZVP9fcbgE9bTh8yfGIoasHq AHrB+T4GuTw0m4dxEDpRjOhm37yhnQkaCLet+/Ka74Lkzn9JwWjHQD/04F0cFJCf co1zVMyPt+ljShbDBMghn1KDVmPfTNTKefIiTnw8uIMR7spxmFx5AHDhRvBRemGz QPeZxN/wjt4hY0FhJASOi10J8i8TVvtdlBuCuPmc1sf/ecWNowHS+UUayeUM7f3N /f78GH2YoLhxQZ8VK563u1TBZmbNph09nLtuhQdgLFT5ibhlZ+M7dl+fneBkEop3 Vb2XcIsf61zYwQk4bCRWntstKiU2xMw5KkgYVbvr1q0oB/JFMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMtfBWahBtXaa5D2oJlJ62JF6O+RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84ZmMy MWMyNy1lOGU2LTQzM2EtODZkYS0zMTU5OTJmM2U1NWEvOTg2NTZkMWUtZTA2Mi0z OTIzLWFjNWEtYjY4ZTA1Njc4NjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOGZjMjFjMjctZThlNi00MzNhLTg2 ZGEtMzE1OTkyZjNlNTVhLzhmYzIxYzI3LWU4ZTYtNDMzYS04NmRhLTMxNTk5MmYz ZTU1YS5jcmwwHwYDVR0jBBgwFoAUlUhx7ra/NDrkjpxLXkLjOlgb9bUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84ZmMyMWMyNy1lOGU2LTQzM2EtODZkYS0zMTU5 OTJmM2U1NWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgvpkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKgKOQ+CClZGK6vRsPdkE7Qd4StPVQGKvwhSgfMJD3YOJ+p+sJ33NXYI eBV6bcuJooDtBT273pkXvAdvf7KRqdxE93z9F5ZdxN82dUvZ2lE9KMQl00D1thpD g3zJiNmr8QZCRozDeKsHL5MjzqtQmVRrfyJXyvB5M0O+v/MNQB5bLwAgvyOjimpP uZOXGKN4JsHuQOhdnVw1ToXT+8dKZbtxitBCL4dzMQcMsDXXc1tPo7k1DtanJmsu imcNlfUQ/tuogkheSoJLQbS+ln/foL+F8E/0qTA7lpd7WjWg/RsqrsqgDI9PT6tS 6SGYtn0g2vgTQ0p2bK2zmaHbVPkURPg= -----END CERTIFICATE-----Generated at Mon Mar 2 19:20:00 2026 by rpki-client