$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/570595b1-8680-4be0-ba0e-5d08aa118fab/5add42d1-36f3-3157-8d5b-f7f4011d479d.roa File: 5add42d1-36f3-3157-8d5b-f7f4011d479d.roa (raw, json) Hash identifier: i3UmVZRy6+iyBWX6bJscNcIUM2iPcjoI1zZikioRbx8= Subject key identifier: 12:88:AD:06:40:65:30:DD:84:0A:6C:87:AA:83:8B:3C:65:B4:94:44 Certificate issuer: /CN=570595b1-8680-4be0-ba0e-5d08aa118fab Certificate serial: 010D0C9F4328584DC21DC4B1C3DB645A8D25FB80 Authority key identifier: FD:09:09:32:99:88:D4:8A:73:6D:0F:7F:1D:C8:55:6C:B1:30:BD:D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/570595b1-8680-4be0-ba0e-5d08aa118fab.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/570595b1-8680-4be0-ba0e-5d08aa118fab/5add42d1-36f3-3157-8d5b-f7f4011d479d.roa Signing time: Thu 07 May 2026 20:48:22 +0000 ROA not before: Thu 07 May 2026 20:48:22 +0000 ROA not after: Wed 05 Aug 2026 20:48:22 +0000 asID: 8075 IP address blocks: 130.20.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/570595b1-8680-4be0-ba0e-5d08aa118fab/570595b1-8680-4be0-ba0e-5d08aa118fab.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/570595b1-8680-4be0-ba0e-5d08aa118fab/570595b1-8680-4be0-ba0e-5d08aa118fab.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/570595b1-8680-4be0-ba0e-5d08aa118fab.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c2:1d:c4:b1:c3:db:64:5a:8d:25:fb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=570595b1-8680-4be0-ba0e-5d08aa118fab Validity Not Before: May 7 20:48:22 2026 GMT Not After : Aug 5 20:48:22 2026 GMT Subject: CN=b8595bc3-f611-4479-8c24-229e5c21dded Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:5f:99:ae:16:f2:79:a9:f6:4f:ac:1c:88:cd: 7b:70:ed:51:9b:5a:8a:6c:73:f8:39:b6:2e:b4:ec: db:e0:89:2f:62:d9:6d:d2:15:dd:98:ec:9e:b9:3e: 63:73:fa:e1:8c:9c:ce:f7:87:c1:c1:30:8f:e2:fe: b4:17:a4:6d:ab:11:a5:5e:48:2e:65:cc:6c:5a:7d: eb:21:50:b9:62:d7:75:06:6f:35:76:93:93:1d:fb: 05:4f:ea:d5:8d:50:26:e1:45:bf:f8:3d:a5:ec:a7: 06:d1:62:c7:9b:4c:7e:2f:10:ff:b4:87:e0:00:e8: c5:34:af:87:b8:85:e4:b1:5b:2f:c1:0c:ab:31:d9: 96:18:a1:67:c3:17:4b:55:0b:5d:3b:2e:3b:46:1a: 63:a3:53:b9:5d:55:66:7c:f1:8d:ff:d7:51:00:2b: 09:e9:b2:38:7b:66:a0:5a:f4:d0:cb:72:04:7c:0d: b7:70:65:e8:75:f7:e5:dd:d1:f4:ec:1f:a6:b4:4d: a8:9d:fa:33:23:b9:96:7c:09:e1:ba:7b:83:f5:6e: b7:09:b3:86:91:b2:99:01:94:18:e7:b9:7b:72:14: 67:57:d3:62:5c:dd:9e:19:a0:5e:f8:3e:be:c5:a6: c2:76:50:75:90:f0:80:2a:fc:33:3c:c1:ea:42:8f: 9c:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:88:AD:06:40:65:30:DD:84:0A:6C:87:AA:83:8B:3C:65:B4:94:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/570595b1-8680-4be0-ba0e-5d08aa118fab/5add42d1-36f3-3157-8d5b-f7f4011d479d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/570595b1-8680-4be0-ba0e-5d08aa118fab/570595b1-8680-4be0-ba0e-5d08aa118fab.crl X509v3 Authority Key Identifier: keyid:FD:09:09:32:99:88:D4:8A:73:6D:0F:7F:1D:C8:55:6C:B1:30:BD:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/570595b1-8680-4be0-ba0e-5d08aa118fab.cer sbgp-ipAddrBlock: critical IPv4: 130.20.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:b6:5d:1b:9a:7f:4c:3f:28:71:cc:8f:8e:26:b9:96:25:03: 91:b7:f4:8b:b6:ce:8b:32:c9:96:dc:e5:c0:a4:24:3b:c7:f7: 2c:92:4a:5b:d4:f8:68:a3:02:d5:5a:54:29:3c:ce:d0:74:d8: 63:35:48:56:2e:db:23:8b:1f:b8:aa:2f:d8:d3:98:e7:a9:ea: 56:96:b6:eb:85:5a:db:1a:19:07:7d:44:07:bb:9b:af:16:c7: 41:28:c6:5d:ac:0d:93:89:40:76:af:bb:5f:35:bc:96:a5:d5: b1:b9:f6:27:38:ef:af:24:99:4c:7d:12:18:2c:8e:d9:cd:fc: f0:56:af:3c:21:08:dd:43:a7:9d:91:d2:d7:95:95:35:43:6d: df:b4:c8:2b:68:98:4e:83:2e:7c:53:98:5f:36:a7:9d:b1:d9: 47:16:fe:70:1f:c6:12:90:4d:9e:4d:b4:bc:69:b3:7e:cc:de: 0f:27:cf:36:de:d4:b5:ea:da:4a:32:95:9e:75:f2:5c:59:b0: c9:bd:3a:19:8f:10:a0:a4:74:9e:bf:3d:56:47:a8:76:de:41: 19:7f:29:72:3e:2c:86:62:85:6d:6e:08:d4:97:c6:ab:da:73: 35:78:3c:3d:03:77:5b:f9:d1:64:85:30:29:e5:ed:69:b5:e7: 8c:a6:6c:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3CHcSxw9tkWo0l+4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTcwNTk1YjEtODY4MC00YmUwLWJhMGUtNWQwOGFhMTE4 ZmFiMB4XDTI2MDUwNzIwNDgyMloXDTI2MDgwNTIwNDgyMlowLzEtMCsGA1UEAxMk Yjg1OTViYzMtZjYxMS00NDc5LThjMjQtMjI5ZTVjMjFkZGVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnF+Zrhbyean2T6wciM17cO1Rm1qKbHP4ObYu tOzb4IkvYtlt0hXdmOyeuT5jc/rhjJzO94fBwTCP4v60F6RtqxGlXkguZcxsWn3r IVC5Ytd1Bm81dpOTHfsFT+rVjVAm4UW/+D2l7KcG0WLHm0x+LxD/tIfgAOjFNK+H uIXksVsvwQyrMdmWGKFnwxdLVQtdOy47Rhpjo1O5XVVmfPGN/9dRACsJ6bI4e2ag WvTQy3IEfA23cGXodffl3dH07B+mtE2onfozI7mWfAnhunuD9W63CbOGkbKZAZQY 57l7chRnV9NiXN2eGaBe+D6+xabCdlB1kPCAKvwzPMHqQo+c6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBKIrQZAZTDdhApsh6qDizxltJREMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi81NzA1 OTViMS04NjgwLTRiZTAtYmEwZS01ZDA4YWExMThmYWIvNWFkZDQyZDEtMzZmMy0z MTU3LThkNWItZjdmNDAxMWQ0NzlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNTcwNTk1YjEtODY4MC00YmUwLWJh MGUtNWQwOGFhMTE4ZmFiLzU3MDU5NWIxLTg2ODAtNGJlMC1iYTBlLTVkMDhhYTEx OGZhYi5jcmwwHwYDVR0jBBgwFoAU/QkJMpmI1IpzbQ9/HchVbLEwvdAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi81NzA1OTViMS04NjgwLTRiZTAtYmEwZS01ZDA4 YWExMThmYWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAghQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEu2XRuaf0w/KHHMj44muZYlA5G39Iu2zosyyZbc5cCkJDvH9yySSlvU +GijAtVaVCk8ztB02GM1SFYu2yOLH7iqL9jTmOep6laWtuuFWtsaGQd9RAe7m68W x0Eoxl2sDZOJQHavu181vJal1bG59ic4768kmUx9EhgsjtnN/PBWrzwhCN1Dp52R 0teVlTVDbd+0yCtomE6DLnxTmF82p52x2UcW/nAfxhKQTZ5NtLxps37M3g8nzzbe 1LXq2koylZ518lxZsMm9OhmPEKCkdJ6/PVZHqHbeQRl/KXI+LIZihW1uCNSXxqva czV4PD0Dd1v50WSFMCnl7Wm154ymbFs= -----END CERTIFICATE-----Generated at Wed May 13 13:42:11 2026 by rpki-client