$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/1656c190-f3a3-3533-a64a-a5b4f175f7d2.roa File: 1656c190-f3a3-3533-a64a-a5b4f175f7d2.roa (raw, json) Hash identifier: fH9ko5CfIYxYs9DtZjEh7J6mer4a7aGy1ed1XDp8ZO8= Subject key identifier: B6:E5:E1:BD:6A:64:B6:45:F0:B4:27:FA:61:94:57:0A:D9:7C:6D:38 Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584D905A91F9B04C8919BF173D00 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/1656c190-f3a3-3533-a64a-a5b4f175f7d2.roa Signing time: Mon 20 Apr 2026 01:00:24 +0000 ROA not before: Mon 20 Apr 2026 01:00:24 +0000 ROA not after: Sun 19 Jul 2026 01:00:24 +0000 asID: 31898 IP address blocks: 130.35.0.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:90:5a:91:f9:b0:4c:89:19:bf:17:3d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Apr 20 01:00:24 2026 GMT Not After : Jul 19 01:00:24 2026 GMT Subject: CN=016d421a-7a77-427e-9bcd-292b120e0b78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:e1:24:d1:c6:0d:2b:58:1d:59:b4:e4:7d:65: c8:28:c3:df:40:7b:11:77:70:e1:81:5f:1e:fd:20: 69:64:b7:e7:42:64:12:65:0f:c2:fb:f3:42:f5:3c: ad:4c:60:fa:30:fd:bb:ed:74:83:9b:4e:3d:46:5d: 03:03:ae:0e:b9:4c:49:ce:bb:5f:36:d0:cd:5d:71: 46:6d:b3:95:9f:1d:94:e1:2d:80:47:1e:96:98:bb: 51:1a:64:10:38:03:c6:40:6a:30:7a:01:56:3e:e8: 5f:ac:f3:0e:76:12:b1:70:a7:ed:ac:ff:7e:76:74: 85:45:b9:82:1b:e8:e1:62:10:f2:37:11:7d:d3:a8: e5:87:8c:a3:97:8b:1f:53:84:ea:30:59:e4:5e:8f: 7b:50:7f:2f:01:ff:45:4a:c5:4c:5d:8e:4d:2e:44: 75:33:1d:ab:ff:cb:8a:04:f0:4f:15:08:0b:47:11: 6e:4b:af:dc:95:f9:9b:1f:a6:bc:1b:42:bd:c4:e7: 37:56:0a:0b:8a:f3:52:86:6f:2f:1d:6a:41:dd:c1: bb:6a:f9:d0:1d:72:ee:c3:61:19:ec:13:a4:cf:38: ef:50:08:42:0f:f2:ae:73:40:dd:06:c0:be:7f:6a: 31:e1:48:53:cb:9d:93:79:2f:c0:ad:d8:e2:46:6a: 3d:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:E5:E1:BD:6A:64:B6:45:F0:B4:27:FA:61:94:57:0A:D9:7C:6D:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/1656c190-f3a3-3533-a64a-a5b4f175f7d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 130.35.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:b2:0a:27:f2:7c:44:8d:7d:2c:64:eb:25:60:2b:93:51:d3: 78:78:53:af:e2:98:64:ea:8b:da:8f:93:22:f2:e3:19:f3:d4: bc:e3:67:8c:0d:15:4b:5f:e3:8f:b5:0a:41:fd:97:40:c4:c2: b7:80:90:1c:f3:a5:63:b0:67:70:66:f0:9c:a9:a7:b3:fa:72: a9:2a:72:49:a3:7f:5b:72:5a:d3:51:ee:49:31:97:77:eb:5f: 5e:3a:60:a8:47:cd:1b:b0:22:b4:ec:d6:1a:40:68:56:a5:29: db:00:99:79:2b:32:56:af:e1:5d:49:a6:2b:e0:fd:a3:f9:1a: 85:33:61:cc:12:fd:e2:40:ba:93:f5:a4:22:a9:b0:84:b3:5a: fc:2c:b2:8d:f9:0a:ec:13:76:5d:18:a0:61:af:9c:7d:da:4d: a1:a7:8f:b3:02:a0:3e:5a:c3:74:3a:fc:77:4e:53:f9:ae:1e: d4:c9:6c:9a:61:7a:61:bd:07:96:56:5b:50:db:58:b2:77:0b: 4a:a3:b0:6a:ff:39:4c:08:86:3a:49:3b:a9:4a:67:68:70:a5: d3:c9:7b:24:9e:53:34:e7:16:20:02:80:3c:73:2f:02:60:ab: 69:5f:5a:64:c7:82:70:4f:b1:0d:c4:fe:88:36:e5:b6:53:b4: 74:99:8b:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2QWpH5sEyJGb8XPQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDQyMDAxMDAyNFoXDTI2MDcxOTAxMDAyNFowLzEtMCsGA1UEAxMk MDE2ZDQyMWEtN2E3Ny00MjdlLTliY2QtMjkyYjEyMGUwYjc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOEk0cYNK1gdWbTkfWXIKMPfQHsRd3DhgV8e /SBpZLfnQmQSZQ/C+/NC9TytTGD6MP277XSDm049Rl0DA64OuUxJzrtfNtDNXXFG bbOVnx2U4S2ARx6WmLtRGmQQOAPGQGowegFWPuhfrPMOdhKxcKftrP9+dnSFRbmC G+jhYhDyNxF906jlh4yjl4sfU4TqMFnkXo97UH8vAf9FSsVMXY5NLkR1Mx2r/8uK BPBPFQgLRxFuS6/clfmbH6a8G0K9xOc3VgoLivNShm8vHWpB3cG7avnQHXLuw2EZ 7BOkzzjvUAhCD/Kuc0DdBsC+f2ox4UhTy52TeS/ArdjiRmo9LwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLbl4b1qZLZF8LQn+mGUVwrZfG04MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvMTY1NmMxOTAtZjNhMy0z NTMzLWE2NGEtYTViNGYxNzVmN2QyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgiMAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFuyCifyfESNfSxk6yVgK5NR03h4U6/imGTqi9qPkyLy4xnz1LzjZ4wN FUtf44+1CkH9l0DEwreAkBzzpWOwZ3Bm8Jypp7P6cqkqckmjf1tyWtNR7kkxl3fr X146YKhHzRuwIrTs1hpAaFalKdsAmXkrMlav4V1Jpivg/aP5GoUzYcwS/eJAupP1 pCKpsISzWvwsso35CuwTdl0YoGGvnH3aTaGnj7MCoD5aw3Q6/HdOU/muHtTJbJph emG9B5ZWW1DbWLJ3C0qjsGr/OUwIhjpJO6lKZ2hwpdPJeySeUzTnFiACgDxzLwJg q2lfWmTHgnBPsQ3E/og25bZTtHSZi/U= -----END CERTIFICATE-----Generated at Wed May 13 14:18:28 2026 by rpki-client