$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/cf9fd58f-ca9a-3d2f-a422-a2924475a7f9.roa File: cf9fd58f-ca9a-3d2f-a422-a2924475a7f9.roa (raw, json) Hash identifier: ewTAql7FQ6f7zov1bM4lEcbS7if0TlbeQY9qxmK2bMI= Subject key identifier: 19:7F:D5:31:75:E4:09:69:82:E3:5B:94:21:52:B3:3C:F8:58:4D:E4 Certificate issuer: /CN=5597247f-2d88-4c51-805a-7ab2a9af9dc5 Certificate serial: 010D0C9F4328584E66DA0C43F1883800C6F89F20 Authority key identifier: 3C:73:2A:DD:04:B3:6B:02:2D:46:03:FE:E9:87:D2:83:58:1C:8B:A4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/cf9fd58f-ca9a-3d2f-a422-a2924475a7f9.roa Signing time: Sun 05 Jul 2026 21:00:11 +0000 ROA not before: Sun 05 Jul 2026 21:00:11 +0000 ROA not after: Sat 03 Oct 2026 21:00:11 +0000 asID: 40948 IP address blocks: 130.51.132.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:66:da:0c:43:f1:88:38:00:c6:f8:9f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5597247f-2d88-4c51-805a-7ab2a9af9dc5 Validity Not Before: Jul 5 21:00:11 2026 GMT Not After : Oct 3 21:00:11 2026 GMT Subject: CN=4b7d1483-8289-46c2-be40-c67b0c6c5fc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:b2:f1:a8:31:c5:00:f1:9f:7b:32:bb:41:ea: e9:77:ae:25:66:cd:f6:75:a8:e2:d6:b1:e4:fe:7c: 8a:0e:d8:81:fd:75:87:63:0c:bc:ad:f7:ae:a6:5c: 64:ca:4b:ad:14:37:88:a3:eb:a2:7e:4d:4c:43:5c: 5f:6d:b0:ac:99:5f:5a:d2:90:7b:03:48:af:fe:d2: 49:15:69:27:a7:98:ef:95:c9:2e:ae:7c:6c:67:db: 7f:8d:2e:d0:fd:8c:52:7f:d3:94:96:c1:22:da:5f: e2:09:7e:3d:74:74:ac:b3:61:c9:d3:96:7b:49:e4: 24:6c:5b:7d:eb:7e:52:ca:22:2c:c9:39:26:d1:c0: c5:25:86:26:e8:3d:bd:51:c8:41:20:34:f3:7b:6d: 98:1a:9b:51:84:20:80:28:74:de:98:84:45:5d:26: a5:1b:b3:f9:9d:85:7e:ea:a9:36:b0:41:e4:b8:47: f1:92:da:d8:2c:f0:8b:51:c9:3b:b8:60:84:2e:f1: d1:f7:b5:be:74:a5:b3:46:7b:c3:37:da:47:3a:a9: b9:be:a6:ab:c2:42:a0:21:4c:84:0b:4e:a7:e6:08: dd:9c:ae:27:a9:b5:b3:0a:c7:fa:2a:11:27:36:3c: 51:d1:8c:21:9d:ea:76:03:2e:29:c5:d2:a0:f3:7f: 99:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:7F:D5:31:75:E4:09:69:82:E3:5B:94:21:52:B3:3C:F8:58:4D:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/cf9fd58f-ca9a-3d2f-a422-a2924475a7f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.crl X509v3 Authority Key Identifier: keyid:3C:73:2A:DD:04:B3:6B:02:2D:46:03:FE:E9:87:D2:83:58:1C:8B:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer sbgp-ipAddrBlock: critical IPv4: 130.51.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:3d:16:45:a3:09:c9:d8:ce:0e:b9:09:51:39:e7:a9:95:24: a6:6c:c5:e8:6d:8d:81:cb:76:da:79:6f:4e:8e:41:cc:08:fb: 20:db:7d:95:80:d6:0a:11:23:94:05:53:7b:92:92:aa:75:39: 69:7c:82:07:e7:49:c4:b8:d1:b5:fc:e7:7b:06:7d:f7:86:98: 27:65:a5:28:a9:a5:62:12:a1:7c:56:d7:3c:b9:91:f6:74:0a: 64:28:a3:b5:2e:24:41:2e:33:98:5e:60:fe:aa:cf:1a:37:2e: 6f:a8:d2:8f:df:ee:71:02:28:97:e1:45:f2:bc:b6:60:27:f6: c5:2c:ea:79:83:7a:50:bc:3b:ac:97:c4:f6:dc:7d:f2:26:b6: cb:0c:9c:10:c7:07:07:5b:ae:fb:54:52:47:88:24:d1:c6:cf: 15:82:44:f3:37:4f:9f:f9:55:84:6c:0a:5a:72:88:78:30:5d: 73:a0:b6:58:42:a5:e7:d1:a0:e4:a7:ff:37:78:d5:82:0d:3a: c7:a1:b5:3f:21:43:65:9d:b5:65:21:aa:c1:51:8f:c9:c0:2a: 4a:2f:be:44:f0:52:cc:05:14:f5:a7:ce:cb:5a:94:23:8f:b2: 07:b9:f1:fd:b7:49:a3:ed:fe:0b:f9:e9:da:7c:91:d8:db:56: b1:4c:d9:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5m2gxD8Yg4AMb4nyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTU5NzI0N2YtMmQ4OC00YzUxLTgwNWEtN2FiMmE5YWY5 ZGM1MB4XDTI2MDcwNTIxMDAxMVoXDTI2MTAwMzIxMDAxMVowLzEtMCsGA1UEAxMk NGI3ZDE0ODMtODI4OS00NmMyLWJlNDAtYzY3YjBjNmM1ZmM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLLxqDHFAPGfezK7Qerpd64lZs32daji1rHk /nyKDtiB/XWHYwy8rfeuplxkykutFDeIo+uifk1MQ1xfbbCsmV9a0pB7A0iv/tJJ FWknp5jvlckurnxsZ9t/jS7Q/YxSf9OUlsEi2l/iCX49dHSss2HJ05Z7SeQkbFt9 635SyiIsyTkm0cDFJYYm6D29UchBIDTze22YGptRhCCAKHTemIRFXSalG7P5nYV+ 6qk2sEHkuEfxktrYLPCLUck7uGCELvHR97W+dKWzRnvDN9pHOqm5vqarwkKgIUyE C06n5gjdnK4nqbWzCsf6KhEnNjxR0Ywhnep2Ay4pxdKg83+ZPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBl/1TF15AlpguNblCFSszz4WE3kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81NTk3 MjQ3Zi0yZDg4LTRjNTEtODA1YS03YWIyYTlhZjlkYzUvY2Y5ZmQ1OGYtY2E5YS0z ZDJmLWE0MjItYTI5MjQ0NzVhN2Y5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTU5NzI0N2YtMmQ4OC00YzUxLTgw NWEtN2FiMmE5YWY5ZGM1LzU1OTcyNDdmLTJkODgtNGM1MS04MDVhLTdhYjJhOWFm OWRjNS5jcmwwHwYDVR0jBBgwFoAUPHMq3QSzawItRgP+6YfSg1gci6QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81NTk3MjQ3Zi0yZDg4LTRjNTEtODA1YS03YWIy YTlhZjlkYzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgjOEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIM9FkWjCcnYzg65CVE556mVJKZsxehtjYHLdtp5b06OQcwI+yDbfZWA 1goRI5QFU3uSkqp1OWl8ggfnScS40bX853sGffeGmCdlpSippWISoXxW1zy5kfZ0 CmQoo7UuJEEuM5heYP6qzxo3Lm+o0o/f7nECKJfhRfK8tmAn9sUs6nmDelC8O6yX xPbcffImtssMnBDHBwdbrvtUUkeIJNHGzxWCRPM3T5/5VYRsClpyiHgwXXOgtlhC pefRoOSn/zd41YINOsehtT8hQ2WdtWUhqsFRj8nAKkovvkTwUswFFPWnzstalCOP sge58f23SaPt/gv56dp8kdjbVrFM2Xg= -----END CERTIFICATE-----Generated at Fri Jul 24 06:37:47 2026 by rpki-client