$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/cf2d46e9-d6f4-37f8-98d7-6b9515235e1d.roa File: cf2d46e9-d6f4-37f8-98d7-6b9515235e1d.roa (raw, json) Hash identifier: 4bALs62w6awLb94efAgCWEeXe9Qz2CdJovEgtS8QwJ8= Subject key identifier: DF:89:7E:67:45:EA:E2:40:0F:17:6B:7A:55:F7:F7:30:D0:B3:66:56 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584E8F55011051805358895BFEC0 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/cf2d46e9-d6f4-37f8-98d7-6b9515235e1d.roa Signing time: Mon 20 Jul 2026 09:00:11 +0000 ROA not before: Mon 20 Jul 2026 09:00:11 +0000 ROA not after: Sun 18 Oct 2026 09:00:11 +0000 asID: 3949 IP address blocks: 130.94.240.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8f:55:01:10:51:80:53:58:89:5b:fe:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Jul 20 09:00:11 2026 GMT Not After : Oct 18 09:00:11 2026 GMT Subject: CN=016b10df-ad6e-4a5d-9e27-c5112116e8e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:96:ba:d5:9c:6d:2c:ea:9b:59:19:da:e6:8f: c0:6c:cd:1b:a2:cf:4e:fc:dc:a7:f5:ff:15:64:12: 89:10:91:48:9c:65:ce:16:a1:88:70:9c:21:c6:00: bc:61:36:5e:3c:d3:c5:58:c6:17:3f:38:6b:41:da: 4b:a9:1e:2c:cf:62:e0:3f:cf:df:fa:7f:f5:12:58: 07:32:2d:b4:36:33:be:d9:98:ca:7d:2c:8d:6d:36: 05:7c:97:a8:e1:26:7f:cd:05:0f:5a:d3:75:fa:7b: 86:65:68:62:ac:a0:aa:20:19:d2:66:d2:3d:86:a5: b5:c9:9d:3a:cb:22:e7:c7:a1:de:fb:20:1f:f8:ac: 0f:11:5e:76:6b:1a:02:5f:11:e3:e1:9c:82:3c:1d: c3:86:4e:96:a4:9b:7e:ca:5e:2e:47:10:80:e6:8e: 28:c2:e3:b1:f6:aa:3d:fb:29:41:d6:34:39:4e:c6: 51:c1:27:fe:9e:a6:d1:95:bc:1f:75:b3:ef:95:fd: 90:1b:d9:86:e1:ec:5d:aa:91:34:0c:38:3e:0f:83: 31:46:8d:d4:c6:e0:af:00:2f:86:74:fa:b4:a0:8c: ca:12:ac:5c:71:f4:05:12:37:fc:8b:50:44:2c:8c: 42:1e:65:3d:e1:b8:a2:23:8f:ee:05:e2:ad:10:3e: e4:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:89:7E:67:45:EA:E2:40:0F:17:6B:7A:55:F7:F7:30:D0:B3:66:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/cf2d46e9-d6f4-37f8-98d7-6b9515235e1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 130.94.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c1:28:02:8d:d4:1c:7f:9b:f4:7f:29:b8:45:9a:c1:f2:a7:3a: b3:e6:9f:09:e8:08:e5:b9:85:f3:3a:0c:73:e1:02:ed:19:2c: 18:b1:87:ce:35:b1:c5:10:81:20:9e:d3:55:3f:f9:1a:bf:37: 85:de:e7:4b:90:08:9e:07:b0:2b:87:9b:ed:43:61:93:4b:72: 49:87:f8:67:c2:5a:23:95:a0:7e:ba:66:be:3a:27:18:02:b3: 53:ad:a1:91:21:d0:7f:90:fb:a7:b7:ec:95:32:14:fd:33:e3: bc:f6:73:c5:e2:84:fb:5b:28:28:13:2e:bb:15:53:be:77:e2: de:b3:8a:c8:82:89:3e:31:0f:98:4a:46:48:46:07:33:18:86: 13:dc:82:89:dd:5a:30:65:75:40:ef:91:e1:0d:09:1f:07:35: c6:b6:07:3e:72:b8:af:0a:ba:20:71:77:c6:fd:8a:96:a4:57: ff:20:83:2c:dd:8f:ed:4f:1a:6f:8c:25:f8:39:12:be:d9:b1: f5:96:48:38:34:f0:47:94:f9:48:54:ca:a4:bb:0b:4e:e2:97: f4:8d:8a:fd:7d:2f:b4:cf:a3:68:f4:56:fe:f9:ee:e7:e4:74: 7c:d3:e4:3d:34:64:99:ac:77:ad:5b:b9:42:62:9f:32:65:68: c5:b8:dc:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6PVQEQUYBTWIlb/sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDcyMDA5MDAxMVoXDTI2MTAxODA5MDAxMVowLzEtMCsGA1UEAxMk MDE2YjEwZGYtYWQ2ZS00YTVkLTllMjctYzUxMTIxMTZlOGU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZa61ZxtLOqbWRna5o/AbM0bos9O/Nyn9f8V ZBKJEJFInGXOFqGIcJwhxgC8YTZePNPFWMYXPzhrQdpLqR4sz2LgP8/f+n/1ElgH Mi20NjO+2ZjKfSyNbTYFfJeo4SZ/zQUPWtN1+nuGZWhirKCqIBnSZtI9hqW1yZ06 yyLnx6He+yAf+KwPEV52axoCXxHj4ZyCPB3Dhk6WpJt+yl4uRxCA5o4owuOx9qo9 +ylB1jQ5TsZRwSf+nqbRlbwfdbPvlf2QG9mG4exdqpE0DDg+D4MxRo3UxuCvAC+G dPq0oIzKEqxccfQFEjf8i1BELIxCHmU94biiI4/uBeKtED7klwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN+JfmdF6uJADxdrelX39zDQs2ZWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvY2YyZDQ2ZTktZDZmNC0z N2Y4LTk4ZDctNmI5NTE1MjM1ZTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgl7wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMEoAo3UHH+b9H8puEWawfKnOrPmnwnoCOW5hfM6DHPhAu0ZLBixh841 scUQgSCe01U/+Rq/N4Xe50uQCJ4HsCuHm+1DYZNLckmH+GfCWiOVoH66Zr46JxgC s1OtoZEh0H+Q+6e37JUyFP0z47z2c8XihPtbKCgTLrsVU7534t6zisiCiT4xD5hK RkhGBzMYhhPcgondWjBldUDvkeENCR8HNca2Bz5yuK8KuiBxd8b9ipakV/8ggyzd j+1PGm+MJfg5Er7ZsfWWSDg08EeU+UhUyqS7C07il/SNiv19L7TPo2j0Vv757ufk dHzT5D00ZJmsd61buUJinzJlaMW43Ag= -----END CERTIFICATE-----Generated at Thu Jul 23 23:08:44 2026 by rpki-client