$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d/a227ef4a-d27a-318b-ac66-3c488a075aec.roa File: a227ef4a-d27a-318b-ac66-3c488a075aec.roa (raw, json) Hash identifier: kht7U+OmQmmbHqMBwfJN66kJoRtJ8nAMcwMMnRAJBAo= Subject key identifier: 7E:10:59:7C:E1:03:EF:A5:F0:11:74:65:9B:7C:43:AB:0D:6B:15:3B Certificate issuer: /CN=c73e1054-5f4b-4aa5-9e55-1c5c87fb709d Certificate serial: 010D0C9F4328584D7F9AA365CC419273FF430900 Authority key identifier: AF:32:CC:82:88:DA:6B:F1:0D:BD:29:C9:B4:40:8A:F8:E8:C6:16:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d/a227ef4a-d27a-318b-ac66-3c488a075aec.roa Signing time: Tue 14 Apr 2026 01:00:24 +0000 ROA not before: Tue 14 Apr 2026 01:00:24 +0000 ROA not after: Mon 13 Jul 2026 01:00:24 +0000 asID: 400303 IP address blocks: 130.250.140.0/22 maxlen: 24 130.250.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 16 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7f:9a:a3:65:cc:41:92:73:ff:43:09:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c73e1054-5f4b-4aa5-9e55-1c5c87fb709d Validity Not Before: Apr 14 01:00:24 2026 GMT Not After : Jul 13 01:00:24 2026 GMT Subject: CN=0a789181-9cb1-4551-be65-597e74c0dc63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:dd:82:29:3c:35:fd:b9:ca:cc:6a:98:37:db: 54:cb:2f:4b:ed:0a:ed:45:02:17:16:1b:9b:59:f5: 45:b5:f4:cb:c9:06:57:2a:25:f5:f4:e6:52:f7:12: c7:46:db:3b:70:0f:05:70:f9:58:f3:e6:71:e8:62: bd:37:73:60:d9:de:82:1f:08:d2:c0:0f:47:3e:41: 8a:ca:4a:a3:fd:17:47:6a:93:60:ca:08:d2:48:72: 90:75:f7:be:27:84:c5:a8:a1:d4:6d:d0:43:b9:5f: 07:84:d5:24:77:96:80:49:25:ea:ce:2c:02:1d:16: 44:8c:5c:af:fe:85:28:8c:ad:d0:30:38:1c:cd:b7: 0f:b7:3f:9d:2e:07:ff:93:02:f1:10:9b:35:03:76: be:0b:62:f9:85:e5:08:96:4a:c3:96:14:95:c9:3f: 4e:39:5f:53:e4:3c:21:07:cb:c5:f0:36:10:b7:8c: 3a:07:fd:de:a7:71:4a:80:db:37:0a:63:79:d9:4a: bc:1c:1b:1e:34:ee:d6:ab:8a:66:96:50:13:6d:ea: 64:b3:6d:d2:c0:69:03:8c:af:3c:86:6c:44:bb:b8: af:06:18:f8:e6:c1:1f:cc:c5:92:00:d2:c4:a0:b7: 1c:1a:ba:f1:6d:05:bb:2e:49:57:74:7d:0f:f4:c3: 44:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:10:59:7C:E1:03:EF:A5:F0:11:74:65:9B:7C:43:AB:0D:6B:15:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d/a227ef4a-d27a-318b-ac66-3c488a075aec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d.crl X509v3 Authority Key Identifier: keyid:AF:32:CC:82:88:DA:6B:F1:0D:BD:29:C9:B4:40:8A:F8:E8:C6:16:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d.cer sbgp-ipAddrBlock: critical IPv4: 130.250.140.0/22 130.250.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:52:85:6d:50:b7:33:93:56:1b:cd:0a:c9:59:5d:cf:0e:53: 15:dc:04:0a:35:73:2e:76:a3:62:c0:c4:68:21:5b:98:7d:ae: e6:93:47:f7:ea:0a:04:4c:73:01:cc:ec:aa:c9:32:33:fa:83: 95:a0:50:2f:da:b0:50:be:0b:87:5f:6e:d3:05:15:a9:21:cb: 3b:6b:19:88:fe:f3:a0:27:d8:4d:26:f4:24:58:54:c3:9f:93: 59:2b:02:da:8d:32:3f:f6:40:fd:11:86:7b:2e:a6:e3:53:bd: 36:a1:63:aa:2a:6a:87:16:f4:ed:40:8b:b7:40:6b:47:c0:90: 33:3e:64:a1:ae:4e:ab:73:c6:a9:b2:de:79:50:70:ab:57:c8: 3e:be:da:b7:02:02:55:f0:dc:e0:3e:7a:8a:e1:53:85:e6:b4: 6b:69:b3:98:61:2d:aa:55:19:13:2f:d7:25:e8:9b:2d:b7:46: 2e:d3:fd:ef:5e:ca:1b:ba:e1:1c:cc:b0:de:39:b1:72:ae:90: ce:b7:f3:43:b8:2f:79:17:07:2f:1b:69:55:47:c9:d5:a9:09: 61:a6:43:bb:88:7d:92:19:72:46:76:f9:0e:6c:a4:91:98:bc: c3:ab:84:4c:de:38:54:d1:f9:1c:84:8d:66:57:92:1c:cf:34: 82:4c:b4:a2 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE1/mqNlzEGSc/9DCQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzczZTEwNTQtNWY0Yi00YWE1LTllNTUtMWM1Yzg3ZmI3 MDlkMB4XDTI2MDQxNDAxMDAyNFoXDTI2MDcxMzAxMDAyNFowLzEtMCsGA1UEAxMk MGE3ODkxODEtOWNiMS00NTUxLWJlNjUtNTk3ZTc0YzBkYzYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm92CKTw1/bnKzGqYN9tUyy9L7QrtRQIXFhub WfVFtfTLyQZXKiX19OZS9xLHRts7cA8FcPlY8+Zx6GK9N3Ng2d6CHwjSwA9HPkGK ykqj/RdHapNgygjSSHKQdfe+J4TFqKHUbdBDuV8HhNUkd5aASSXqziwCHRZEjFyv /oUojK3QMDgczbcPtz+dLgf/kwLxEJs1A3a+C2L5heUIlkrDlhSVyT9OOV9T5Dwh B8vF8DYQt4w6B/3ep3FKgNs3CmN52Uq8HBseNO7Wq4pmllATbepks23SwGkDjK88 hmxEu7ivBhj45sEfzMWSANLEoLccGrrxbQW7LklXdH0P9MNE1QIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFH4QWXzhA++l8BF0ZZt8Q6sNaxU7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9jNzNl MTA1NC01ZjRiLTRhYTUtOWU1NS0xYzVjODdmYjcwOWQvYTIyN2VmNGEtZDI3YS0z MThiLWFjNjYtM2M0ODhhMDc1YWVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYzczZTEwNTQtNWY0Yi00YWE1LTll NTUtMWM1Yzg3ZmI3MDlkL2M3M2UxMDU0LTVmNGItNGFhNS05ZTU1LTFjNWM4N2Zi NzA5ZC5jcmwwHwYDVR0jBBgwFoAUrzLMgojaa/ENvSnJtECK+OjGFtgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9jNzNlMTA1NC01ZjRiLTRhYTUtOWU1NS0xYzVj ODdmYjcwOWQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCgvqMAwQA gvqYMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAClShW1QtzOTVhvNCslZXc8OUxXcBAo1cy52o2LAxGghW5h9 ruaTR/fqCgRMcwHM7KrJMjP6g5WgUC/asFC+C4dfbtMFFakhyztrGYj+86An2E0m 9CRYVMOfk1krAtqNMj/2QP0RhnsupuNTvTahY6oqaocW9O1Ai7dAa0fAkDM+ZKGu Tqtzxqmy3nlQcKtXyD6+2rcCAlXw3OA+eorhU4XmtGtps5hhLapVGRMv1yXomy23 Ri7T/e9eyhu64RzMsN45sXKukM6380O4L3kXBy8baVVHydWpCWGmQ7uIfZIZckZ2 +Q5spJGYvMOrhEzeOFTR+RyEjWZXkhzPNIJMtKI= -----END CERTIFICATE-----Generated at Wed Apr 15 16:01:09 2026 by rpki-client