$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/1656c190-f3a3-3533-a64a-a5b4f175f7d2.roa File: 1656c190-f3a3-3533-a64a-a5b4f175f7d2.roa (raw, json) Hash identifier: 4OoDVft7CRx2OCpqXGMn1BlkU2Ny+yNkDXNZzRq+W5w= Subject key identifier: 19:50:39:B6:9A:48:7C:98:04:CF:5B:E7:EB:1F:B8:1D:96:09:F8:BD Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584E709F6D0674D555FBB5609100 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/1656c190-f3a3-3533-a64a-a5b4f175f7d2.roa Signing time: Thu 09 Jul 2026 09:00:13 +0000 ROA not before: Thu 09 Jul 2026 09:00:13 +0000 ROA not after: Wed 07 Oct 2026 09:00:13 +0000 asID: 31898 IP address blocks: 130.35.0.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:70:9f:6d:06:74:d5:55:fb:b5:60:91:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Jul 9 09:00:13 2026 GMT Not After : Oct 7 09:00:13 2026 GMT Subject: CN=db4ca149-c231-408e-a985-b3bbb422ed0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:37:6b:84:45:83:5d:78:ec:0c:60:dd:67:95: 15:10:a0:13:68:ad:e3:23:a8:ac:7f:5e:36:97:7d: 40:da:15:e1:eb:3e:0e:46:c7:e1:b5:9b:76:59:6b: 7b:52:0a:f7:12:6d:49:e3:24:a9:a6:aa:1e:21:77: 78:21:79:e8:fa:6f:60:40:a4:40:7a:78:92:6d:b7: f0:f4:26:90:d4:22:ba:1d:2d:fc:e9:d0:69:ef:fe: 7a:17:43:40:dd:3c:d1:ab:87:33:5e:fe:63:a8:5c: cc:84:84:df:f9:8a:29:d0:b1:66:d9:15:d7:ae:14: 40:71:87:ad:29:23:c7:0a:fb:e4:0c:97:a7:f5:92: 28:f4:b8:0b:f6:ba:5f:8b:62:f7:28:8f:23:b0:93: f9:65:c0:41:73:4d:28:5a:75:8f:36:6a:87:6a:63: 68:5e:38:72:cb:af:a4:eb:45:cb:61:16:89:2b:80: ab:37:7d:ea:55:41:78:51:73:90:0e:c6:7d:03:13: e4:45:fd:a7:a5:26:47:ac:9f:14:45:df:39:18:2c: c0:39:89:eb:ce:37:71:bd:12:18:a2:36:29:62:25: d8:4a:9c:8a:e3:d0:72:12:fb:a6:2c:4a:71:d3:2f: 28:b7:71:09:2d:96:3d:4d:72:ea:b3:9b:4d:b2:03: 57:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:50:39:B6:9A:48:7C:98:04:CF:5B:E7:EB:1F:B8:1D:96:09:F8:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/1656c190-f3a3-3533-a64a-a5b4f175f7d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 130.35.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:b9:11:e0:3a:ed:aa:d3:58:b4:87:23:8e:d3:0e:53:d7:9c: 27:c9:eb:b3:b5:5d:ce:9e:e3:49:39:62:7a:0b:4f:89:04:29: 92:6b:df:88:1e:1d:c0:a1:16:8d:e6:a5:68:e6:96:9c:a6:74: bc:90:e9:c2:5d:a2:67:10:dd:6a:17:f9:86:b3:0c:d9:62:ce: 9c:29:40:69:1a:33:40:0b:56:f2:6c:47:a0:13:90:b9:04:d0: 17:53:bf:5e:dc:85:bb:16:48:c0:05:8d:f8:7f:08:0b:48:6d: de:e3:7d:00:34:8d:95:e2:b0:08:ea:9b:28:c8:e2:93:8a:02: 75:32:ce:3d:b9:0b:e4:5d:e1:cc:73:ce:25:03:a7:b2:b8:4d: 50:75:8f:15:75:c8:3d:3c:0e:f3:52:f4:82:01:33:cb:13:01: c9:ef:1e:17:b0:1d:54:ce:2f:b5:cb:e5:dd:01:70:69:b1:f3: 0d:5a:04:3d:e4:d8:d9:fb:54:11:d5:7c:9c:b7:10:8f:f8:5f: 4d:88:2f:2d:c4:9a:b5:97:f2:71:85:91:29:66:f7:c0:17:0e: 6f:d4:30:f9:e6:eb:57:70:96:8a:54:64:fa:3f:a3:d6:33:9a: 52:94:de:03:a0:d3:81:4d:31:ca:57:a1:85:c8:be:6f:60:f7: 57:6c:92:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5wn20GdNVV+7VgkQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDcwOTA5MDAxM1oXDTI2MTAwNzA5MDAxM1owLzEtMCsGA1UEAxMk ZGI0Y2ExNDktYzIzMS00MDhlLWE5ODUtYjNiYmI0MjJlZDBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTdrhEWDXXjsDGDdZ5UVEKATaK3jI6isf142 l31A2hXh6z4ORsfhtZt2WWt7Ugr3Em1J4ySppqoeIXd4IXno+m9gQKRAeniSbbfw 9CaQ1CK6HS386dBp7/56F0NA3TzRq4czXv5jqFzMhITf+Yop0LFm2RXXrhRAcYet KSPHCvvkDJen9ZIo9LgL9rpfi2L3KI8jsJP5ZcBBc00oWnWPNmqHamNoXjhyy6+k 60XLYRaJK4CrN33qVUF4UXOQDsZ9AxPkRf2npSZHrJ8URd85GCzAOYnrzjdxvRIY ojYpYiXYSpyK49ByEvumLEpx0y8ot3EJLZY9TXLqs5tNsgNX/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBlQObaaSHyYBM9b5+sfuB2WCfi9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvMTY1NmMxOTAtZjNhMy0z NTMzLWE2NGEtYTViNGYxNzVmN2QyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgiMAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFi5EeA67arTWLSHI47TDlPXnCfJ67O1Xc6e40k5YnoLT4kEKZJr34ge HcChFo3mpWjmlpymdLyQ6cJdomcQ3WoX+YazDNlizpwpQGkaM0ALVvJsR6ATkLkE 0BdTv17chbsWSMAFjfh/CAtIbd7jfQA0jZXisAjqmyjI4pOKAnUyzj25C+Rd4cxz ziUDp7K4TVB1jxV1yD08DvNS9IIBM8sTAcnvHhewHVTOL7XL5d0BcGmx8w1aBD3k 2Nn7VBHVfJy3EI/4X02ILy3EmrWX8nGFkSlm98AXDm/UMPnm61dwlopUZPo/o9Yz mlKU3gOg04FNMcpXoYXIvm9g91dskp4= -----END CERTIFICATE-----Generated at Fri Jul 24 15:49:50 2026 by rpki-client