$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/1656c190-f3a3-3533-a64a-a5b4f175f7d2.roa File: 1656c190-f3a3-3533-a64a-a5b4f175f7d2.roa (raw, json) Hash identifier: X/2TDNQs+fGHK6Lzi+O+lsaF4WOKiXq0iNVXpNMpHnI= Subject key identifier: 59:F0:A7:3A:D1:7D:DA:4C:A9:C8:42:FD:FC:30:A9:AF:08:9F:CE:44 Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584F130238AAA38F2504ED4BB780 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/1656c190-f3a3-3533-a64a-a5b4f175f7d2.roa Signing time: Sat 05 Sep 2026 13:00:12 +0000 ROA not before: Sat 05 Sep 2026 13:00:12 +0000 ROA not after: Fri 04 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 130.35.0.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:13:02:38:aa:a3:8f:25:04:ed:4b:b7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Sep 5 13:00:12 2026 GMT Not After : Dec 4 14:00:12 2026 GMT Subject: CN=b5d3922d-30bc-4dfe-8301-b72c9ebac4a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c5:f8:f6:5e:20:8e:91:84:5c:2e:3f:0e:ba: 1d:c4:49:0d:fd:4a:e8:7d:cb:cc:6e:e3:14:69:6e: 64:86:ae:0f:62:e6:59:30:45:0a:86:6b:95:11:80: e4:67:e8:bb:bb:93:08:c2:5e:b4:6b:04:d2:5f:fa: 8a:a2:ea:eb:56:f0:19:8c:99:93:bf:35:c6:7e:d3: 2d:4d:b3:54:92:33:5b:78:37:cc:dd:ad:0f:34:a2: 69:6b:01:92:ed:b2:95:6b:41:db:f6:7e:f9:43:8f: 04:a0:b5:db:9c:ea:4e:39:a8:30:e7:a2:df:df:18: 01:81:43:d3:52:b2:20:bb:56:e2:97:ec:b9:ca:ca: 1e:c2:56:09:dc:2e:31:a3:95:46:db:3a:8d:2f:79: 90:23:71:61:1a:c4:cf:4e:64:47:44:9e:5c:59:dd: ab:05:22:43:c9:20:b9:83:4d:d6:9b:9f:88:79:58: cf:31:45:d8:6a:f2:fc:6c:0b:2f:f0:11:c8:44:60: 19:62:16:f6:1a:21:26:03:9c:da:e8:71:7a:40:2f: 3d:00:58:96:e2:ac:18:44:d4:66:e4:17:6a:d4:49: 15:49:11:b0:27:68:bc:e6:0f:2f:a4:77:6d:f9:34: db:80:b4:f0:19:7a:44:c0:34:7b:e4:c9:07:d4:66: 2f:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:F0:A7:3A:D1:7D:DA:4C:A9:C8:42:FD:FC:30:A9:AF:08:9F:CE:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/1656c190-f3a3-3533-a64a-a5b4f175f7d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 130.35.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:5b:50:84:e4:d7:22:19:2a:e2:44:d1:2d:63:17:9b:c4:1b: b5:8f:40:d1:2f:ee:39:82:09:fc:08:f6:df:e7:4a:f7:48:eb: 2d:e1:53:6a:8b:47:52:34:fb:86:89:b7:32:c1:9f:31:1f:9a: 91:80:f6:d3:c0:aa:13:1f:f6:1f:f3:cc:e6:71:c6:28:17:03: 86:eb:4d:c0:53:61:15:45:a8:bc:49:5b:ea:8e:bb:1b:07:98: d9:2b:b0:88:0e:94:80:c8:b3:ab:74:42:8b:63:4c:d5:7c:41: b1:0a:f8:9e:94:e9:3e:be:0e:d9:e7:65:84:49:15:3c:4a:4b: 54:20:bc:26:c0:ca:65:3a:3f:5c:44:63:08:e9:78:ae:15:40: f4:42:ad:df:fb:f5:d2:47:06:26:51:04:ad:df:18:97:c4:67: da:77:bc:ca:94:8a:09:9a:df:26:71:37:fc:b2:18:89:62:df: 14:f0:ca:f2:ad:9f:d1:12:71:39:36:e2:e4:9b:c0:4c:7a:cf: 64:90:bb:e6:64:28:53:30:4b:c0:55:98:53:85:02:35:23:43: f9:2f:96:1d:1d:39:8f:2d:6c:d3:9a:57:9d:0f:6f:f9:39:ed: 01:fc:d4:9b:e5:bd:ca:79:fe:3e:4e:ad:f0:5d:92:a4:ac:04: 85:b3:5b:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8TAjiqo48lBO1Lt4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDkwNTEzMDAxMloXDTI2MTIwNDE0MDAxMlowLzEtMCsGA1UEAxMk YjVkMzkyMmQtMzBiYy00ZGZlLTgzMDEtYjcyYzllYmFjNGE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApsX49l4gjpGEXC4/DrodxEkN/UrofcvMbuMU aW5khq4PYuZZMEUKhmuVEYDkZ+i7u5MIwl60awTSX/qKourrVvAZjJmTvzXGftMt TbNUkjNbeDfM3a0PNKJpawGS7bKVa0Hb9n75Q48EoLXbnOpOOagw56Lf3xgBgUPT UrIgu1bil+y5ysoewlYJ3C4xo5VG2zqNL3mQI3FhGsTPTmRHRJ5cWd2rBSJDySC5 g03Wm5+IeVjPMUXYavL8bAsv8BHIRGAZYhb2GiEmA5za6HF6QC89AFiW4qwYRNRm 5Bdq1EkVSRGwJ2i85g8vpHdt+TTbgLTwGXpEwDR75MkH1GYvsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFnwpzrRfdpMqchC/fwwqa8In85EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvMTY1NmMxOTAtZjNhMy0z NTMzLWE2NGEtYTViNGYxNzVmN2QyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgiMAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGJbUITk1yIZKuJE0S1jF5vEG7WPQNEv7jmCCfwI9t/nSvdI6y3hU2qL R1I0+4aJtzLBnzEfmpGA9tPAqhMf9h/zzOZxxigXA4brTcBTYRVFqLxJW+qOuxsH mNkrsIgOlIDIs6t0QotjTNV8QbEK+J6U6T6+DtnnZYRJFTxKS1QgvCbAymU6P1xE YwjpeK4VQPRCrd/79dJHBiZRBK3fGJfEZ9p3vMqUigma3yZxN/yyGIli3xTwyvKt n9EScTk24uSbwEx6z2SQu+ZkKFMwS8BVmFOFAjUjQ/kvlh0dOY8tbNOaV50Pb/k5 7QH81Jvlvcp5/j5OrfBdkqSsBIWzW70= -----END CERTIFICATE-----Generated at Sun Oct 4 08:01:00 2026 by rpki-client