$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/570595b1-8680-4be0-ba0e-5d08aa118fab/5add42d1-36f3-3157-8d5b-f7f4011d479d.roa File: 5add42d1-36f3-3157-8d5b-f7f4011d479d.roa (raw, json) Hash identifier: WQY6Jp4RU/gM4zy6XvfV6SnaOsULNkWhNQPQ1Pxh9vc= Subject key identifier: 97:4F:80:D5:1E:B7:14:ED:F2:F4:66:1D:E1:42:C5:23:2F:B3:8A:68 Certificate issuer: /CN=570595b1-8680-4be0-ba0e-5d08aa118fab Certificate serial: 010D0C9F4328584F43DD673B1A787C6D99C9FE40 Authority key identifier: FD:09:09:32:99:88:D4:8A:73:6D:0F:7F:1D:C8:55:6C:B1:30:BD:D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/570595b1-8680-4be0-ba0e-5d08aa118fab.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/570595b1-8680-4be0-ba0e-5d08aa118fab/5add42d1-36f3-3157-8d5b-f7f4011d479d.roa Signing time: Wed 23 Sep 2026 01:00:12 +0000 ROA not before: Wed 23 Sep 2026 01:00:12 +0000 ROA not after: Tue 22 Dec 2026 02:00:12 +0000 asID: 8075 IP address blocks: 130.20.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/570595b1-8680-4be0-ba0e-5d08aa118fab/570595b1-8680-4be0-ba0e-5d08aa118fab.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/570595b1-8680-4be0-ba0e-5d08aa118fab/570595b1-8680-4be0-ba0e-5d08aa118fab.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/570595b1-8680-4be0-ba0e-5d08aa118fab.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:43:dd:67:3b:1a:78:7c:6d:99:c9:fe:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=570595b1-8680-4be0-ba0e-5d08aa118fab Validity Not Before: Sep 23 01:00:12 2026 GMT Not After : Dec 22 02:00:12 2026 GMT Subject: CN=0611c103-8d62-4a55-97d1-265125a627dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:da:49:fb:27:d3:ed:15:6c:ed:6e:47:c3:86: 7a:6a:db:cf:9e:7b:6c:87:30:3a:4c:cf:ef:63:d9: 4d:4e:be:c8:c9:11:a2:c7:81:4e:36:74:0b:fb:bb: 88:f2:af:e0:33:9e:ac:c5:d9:fe:35:fc:ce:b1:cb: 8f:f5:e9:c6:86:9c:e9:95:68:a9:10:07:a2:79:dc: 7a:4f:28:dd:2d:4f:7c:29:d8:69:a6:a3:dc:b7:e4: 8f:1f:e7:29:ac:d7:a9:e7:20:6d:a6:e3:7d:09:25: ee:a3:79:de:5d:1b:dd:f1:d8:69:6c:b5:ea:08:85: d3:ed:30:29:1f:93:7d:8f:e2:a7:02:53:14:cc:f0: 92:45:e8:de:41:45:09:31:d9:4f:7b:0a:4b:79:fb: 91:7f:7f:00:fd:ee:d4:d9:57:59:54:c3:b2:1c:e0: 36:ad:ba:87:7a:94:62:e2:56:b3:42:b3:fe:f4:25: 41:c8:b7:e1:5c:ec:01:75:8a:56:55:e1:f6:ec:de: 67:b5:f1:a9:1c:98:87:6a:ec:fd:1f:16:1d:00:f1: 30:c5:ea:54:0f:16:9d:9e:70:fe:c8:98:0d:36:80: af:c2:66:12:07:7c:28:6f:dd:83:a3:e8:50:ab:90: 62:cf:c9:f0:98:c9:a8:92:50:17:27:9d:1d:81:c5: ae:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:4F:80:D5:1E:B7:14:ED:F2:F4:66:1D:E1:42:C5:23:2F:B3:8A:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/570595b1-8680-4be0-ba0e-5d08aa118fab/5add42d1-36f3-3157-8d5b-f7f4011d479d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/570595b1-8680-4be0-ba0e-5d08aa118fab/570595b1-8680-4be0-ba0e-5d08aa118fab.crl X509v3 Authority Key Identifier: keyid:FD:09:09:32:99:88:D4:8A:73:6D:0F:7F:1D:C8:55:6C:B1:30:BD:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/570595b1-8680-4be0-ba0e-5d08aa118fab.cer sbgp-ipAddrBlock: critical IPv4: 130.20.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:a9:91:cb:64:2d:4f:d4:62:57:1c:ea:12:ed:6f:64:f8:94: 5b:53:72:03:ac:92:64:c6:14:4e:3b:80:f0:36:a2:0a:28:9b: 8b:9a:a9:ca:fd:4b:3c:bc:e1:47:44:71:97:a2:98:14:f2:6a: 9f:92:b8:76:cc:71:da:91:67:5b:30:69:b6:0f:77:4c:41:f1: 80:d0:f2:11:47:fe:6e:e9:8d:6c:4c:3f:81:9b:ec:ec:32:0d: 00:c3:76:03:2e:7b:11:8b:5d:c6:60:63:a2:1c:1a:5a:8b:49: 8d:30:bb:84:63:6b:7f:ad:64:0a:38:54:05:86:8f:c9:84:3b: ab:8e:bf:b2:ae:cc:b7:c2:fe:f1:dc:18:0d:12:f1:26:75:bd: 6b:2e:44:bd:77:ff:89:39:b6:ef:2d:4f:f5:47:71:eb:e9:30: 69:e2:03:5d:2f:19:a1:40:ff:ba:00:a0:c6:f9:5a:78:e5:1a: e6:5a:d5:2f:7d:62:30:44:b0:f0:9a:03:00:b6:cf:05:91:b7: e1:e0:ce:f0:59:9d:a4:0d:9a:5c:70:d7:03:71:c1:36:f7:bc: 73:b1:2b:40:81:4c:6e:73:2d:f2:d5:fc:52:ca:56:13:a3:3b: 94:53:2d:21:81:17:04:24:db:3c:69:7b:fe:4a:ab:2b:f3:02: d6:20:5d:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9D3Wc7Gnh8bZnJ/kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTcwNTk1YjEtODY4MC00YmUwLWJhMGUtNWQwOGFhMTE4 ZmFiMB4XDTI2MDkyMzAxMDAxMloXDTI2MTIyMjAyMDAxMlowLzEtMCsGA1UEAxMk MDYxMWMxMDMtOGQ2Mi00YTU1LTk3ZDEtMjY1MTI1YTYyN2RkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltpJ+yfT7RVs7W5Hw4Z6atvPnntshzA6TM/v Y9lNTr7IyRGix4FONnQL+7uI8q/gM56sxdn+NfzOscuP9enGhpzplWipEAeiedx6 TyjdLU98KdhppqPct+SPH+cprNep5yBtpuN9CSXuo3neXRvd8dhpbLXqCIXT7TAp H5N9j+KnAlMUzPCSRejeQUUJMdlPewpLefuRf38A/e7U2VdZVMOyHOA2rbqHepRi 4lazQrP+9CVByLfhXOwBdYpWVeH27N5ntfGpHJiHauz9HxYdAPEwxepUDxadnnD+ yJgNNoCvwmYSB3wob92Do+hQq5Biz8nwmMmoklAXJ50dgcWu5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJdPgNUetxTt8vRmHeFCxSMvs4poMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi81NzA1 OTViMS04NjgwLTRiZTAtYmEwZS01ZDA4YWExMThmYWIvNWFkZDQyZDEtMzZmMy0z MTU3LThkNWItZjdmNDAxMWQ0NzlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNTcwNTk1YjEtODY4MC00YmUwLWJh MGUtNWQwOGFhMTE4ZmFiLzU3MDU5NWIxLTg2ODAtNGJlMC1iYTBlLTVkMDhhYTEx OGZhYi5jcmwwHwYDVR0jBBgwFoAU/QkJMpmI1IpzbQ9/HchVbLEwvdAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi81NzA1OTViMS04NjgwLTRiZTAtYmEwZS01ZDA4 YWExMThmYWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAghQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADepkctkLU/UYlcc6hLtb2T4lFtTcgOskmTGFE47gPA2ogoom4uaqcr9 Szy84UdEcZeimBTyap+SuHbMcdqRZ1swabYPd0xB8YDQ8hFH/m7pjWxMP4Gb7Owy DQDDdgMuexGLXcZgY6IcGlqLSY0wu4Rja3+tZAo4VAWGj8mEO6uOv7KuzLfC/vHc GA0S8SZ1vWsuRL13/4k5tu8tT/VHcevpMGniA10vGaFA/7oAoMb5WnjlGuZa1S99 YjBEsPCaAwC2zwWRt+HgzvBZnaQNmlxw1wNxwTb3vHOxK0CBTG5zLfLV/FLKVhOj O5RTLSGBFwQk2zxpe/5KqyvzAtYgXds= -----END CERTIFICATE-----Generated at Sat Oct 10 16:27:33 2026 by rpki-client