$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/221cdd91-10e9-41bb-8765-69edc6f1e631/e2027b58-c8f2-3fc8-85a7-ce6af4b914bd.roa File: e2027b58-c8f2-3fc8-85a7-ce6af4b914bd.roa (raw, json) Hash identifier: QiSGbDOllqqnlsc2slpSEyhaYKXg13WTy0+Gx6FZFV8= Subject key identifier: B4:B5:11:27:4E:1A:93:D7:82:FD:27:65:AA:D8:88:47:79:49:1D:4A Certificate issuer: /CN=221cdd91-10e9-41bb-8765-69edc6f1e631 Certificate serial: 010D0C9F4328584ECBD1D0CAC1F4BE634C426840 Authority key identifier: D4:0C:BD:52:74:20:06:4C:A1:FA:04:8B:7D:02:D2:8B:6E:9F:21:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/221cdd91-10e9-41bb-8765-69edc6f1e631.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/221cdd91-10e9-41bb-8765-69edc6f1e631/e2027b58-c8f2-3fc8-85a7-ce6af4b914bd.roa Signing time: Tue 11 Aug 2026 01:00:11 +0000 ROA not before: Tue 11 Aug 2026 01:00:11 +0000 ROA not after: Mon 09 Nov 2026 02:00:11 +0000 asID: 16509 IP address blocks: 130.50.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/221cdd91-10e9-41bb-8765-69edc6f1e631/221cdd91-10e9-41bb-8765-69edc6f1e631.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/221cdd91-10e9-41bb-8765-69edc6f1e631/221cdd91-10e9-41bb-8765-69edc6f1e631.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/221cdd91-10e9-41bb-8765-69edc6f1e631.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:cb:d1:d0:ca:c1:f4:be:63:4c:42:68:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=221cdd91-10e9-41bb-8765-69edc6f1e631 Validity Not Before: Aug 11 01:00:11 2026 GMT Not After : Nov 9 02:00:11 2026 GMT Subject: CN=ff9f0693-c6c9-4aa8-91e8-1a21eb85213c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:86:f6:e3:16:f3:42:b4:ce:55:90:fb:b1:75: d8:a5:f3:78:81:6c:f8:c1:fd:9f:d2:4c:16:bd:a5: ed:6c:b7:b2:56:65:a6:7a:11:5c:c2:6f:d0:b0:21: e4:3a:87:3e:c8:91:74:a2:2d:aa:e0:30:cd:61:08: eb:53:d7:cf:d4:78:19:fe:83:5e:46:8d:fa:07:09: 0c:d3:41:82:1e:65:37:c6:34:5e:af:f9:a3:c1:bf: 83:72:04:89:8a:75:cf:bc:1a:1d:86:1d:6d:d7:03: 3c:c0:57:ab:db:7c:b9:97:13:32:cd:9f:f1:26:af: ee:c5:7c:fd:49:22:f4:15:8f:13:c4:b5:96:2e:1b: e6:a1:87:24:89:ad:60:66:6d:bb:25:8e:00:90:01: 98:a9:11:9d:90:62:0e:d5:ff:a2:13:5c:ae:96:52: cf:4d:03:55:9e:07:68:d9:15:f8:09:6f:9c:b4:41: ec:85:36:7f:e4:6f:b7:17:f7:04:16:70:60:87:af: 22:32:bf:d3:41:f9:2d:8e:2e:05:bb:ff:59:67:e9: df:dc:b5:11:ba:14:b8:58:84:57:3a:c9:28:05:56: 36:09:41:4a:19:c8:1e:6c:0f:7f:52:d4:17:58:c4: 02:d6:96:0d:dc:4f:ca:86:8c:bf:b4:3d:ef:60:34: 90:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:B5:11:27:4E:1A:93:D7:82:FD:27:65:AA:D8:88:47:79:49:1D:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/221cdd91-10e9-41bb-8765-69edc6f1e631/e2027b58-c8f2-3fc8-85a7-ce6af4b914bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/221cdd91-10e9-41bb-8765-69edc6f1e631/221cdd91-10e9-41bb-8765-69edc6f1e631.crl X509v3 Authority Key Identifier: keyid:D4:0C:BD:52:74:20:06:4C:A1:FA:04:8B:7D:02:D2:8B:6E:9F:21:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/221cdd91-10e9-41bb-8765-69edc6f1e631.cer sbgp-ipAddrBlock: critical IPv4: 130.50.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:6a:57:f7:1e:d9:dd:56:20:6e:7e:35:20:48:13:3a:5a:6d: dd:f1:75:e6:a8:55:83:e7:f5:92:a5:4e:0c:6e:e1:3e:1a:0d: 55:9e:06:71:98:76:1a:37:44:9f:c2:f3:58:23:29:41:b3:a8: eb:2a:a9:f5:65:b8:8e:24:38:b4:fc:a1:b1:64:2f:a8:c2:98: 48:75:b4:4a:e6:74:6d:63:60:ff:ac:86:f4:29:92:21:e5:98: 5d:d7:47:6e:a0:71:de:8b:e2:b3:f1:c9:87:94:7e:43:64:a3: 6a:77:ab:63:f4:55:25:cc:b2:5f:f1:13:d4:53:d4:33:1f:35: a5:31:8c:fd:c7:47:f0:8d:30:f2:5a:90:e0:05:46:c0:93:07: 7b:eb:ad:e4:03:b4:aa:63:f7:ff:c9:b3:69:2f:06:6c:1b:b3: 23:d9:09:56:86:0e:22:b5:27:4b:57:ba:b9:70:83:75:02:b7: 5a:b5:fa:db:f4:7a:72:5c:97:7a:e1:12:cb:99:bc:d6:74:e8: 51:24:6f:e0:da:a3:bf:08:3f:39:f8:a5:31:36:1c:e9:73:e5: 52:14:b1:d2:b8:91:59:5c:05:f4:fd:79:99:0e:2a:d5:24:ef: 80:29:01:8a:60:55:06:7f:ca:4a:e5:0a:f4:cf:85:52:5b:7e: da:16:4f:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7L0dDKwfS+Y0xCaEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjIxY2RkOTEtMTBlOS00MWJiLTg3NjUtNjllZGM2ZjFl NjMxMB4XDTI2MDgxMTAxMDAxMVoXDTI2MTEwOTAyMDAxMVowLzEtMCsGA1UEAxMk ZmY5ZjA2OTMtYzZjOS00YWE4LTkxZTgtMWEyMWViODUyMTNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4b24xbzQrTOVZD7sXXYpfN4gWz4wf2f0kwW vaXtbLeyVmWmehFcwm/QsCHkOoc+yJF0oi2q4DDNYQjrU9fP1HgZ/oNeRo36BwkM 00GCHmU3xjRer/mjwb+DcgSJinXPvBodhh1t1wM8wFer23y5lxMyzZ/xJq/uxXz9 SSL0FY8TxLWWLhvmoYckia1gZm27JY4AkAGYqRGdkGIO1f+iE1yullLPTQNVngdo 2RX4CW+ctEHshTZ/5G+3F/cEFnBgh68iMr/TQfktji4Fu/9ZZ+nf3LURuhS4WIRX OskoBVY2CUFKGcgebA9/UtQXWMQC1pYN3E/Khoy/tD3vYDSQvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLS1ESdOGpPXgv0nZarYiEd5SR1KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yMjFj ZGQ5MS0xMGU5LTQxYmItODc2NS02OWVkYzZmMWU2MzEvZTIwMjdiNTgtYzhmMi0z ZmM4LTg1YTctY2U2YWY0YjkxNGJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjIxY2RkOTEtMTBlOS00MWJiLTg3 NjUtNjllZGM2ZjFlNjMxLzIyMWNkZDkxLTEwZTktNDFiYi04NzY1LTY5ZWRjNmYx ZTYzMS5jcmwwHwYDVR0jBBgwFoAU1Ay9UnQgBkyh+gSLfQLSi26fIUswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yMjFjZGQ5MS0xMGU5LTQxYmItODc2NS02OWVk YzZmMWU2MzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgjJ9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACtqV/ce2d1WIG5+NSBIEzpabd3xdeaoVYPn9ZKlTgxu4T4aDVWeBnGY dho3RJ/C81gjKUGzqOsqqfVluI4kOLT8obFkL6jCmEh1tErmdG1jYP+shvQpkiHl mF3XR26gcd6L4rPxyYeUfkNko2p3q2P0VSXMsl/xE9RT1DMfNaUxjP3HR/CNMPJa kOAFRsCTB3vrreQDtKpj9//Js2kvBmwbsyPZCVaGDiK1J0tXurlwg3UCt1q1+tv0 enJcl3rhEsuZvNZ06FEkb+Dao78IPzn4pTE2HOlz5VIUsdK4kVlcBfT9eZkOKtUk 74ApAYpgVQZ/ykrlCvTPhVJbftoWT00= -----END CERTIFICATE-----Generated at Thu Aug 20 23:37:52 2026 by rpki-client