$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/1a349d40-bdb1-36e4-bea7-10787672b7df.roa File: 1a349d40-bdb1-36e4-bea7-10787672b7df.roa (raw, json) Hash identifier: LtP+nKSWiWQUP0QPKV6xhbc+YzA+ZUNZfzvqleBwjrA= Subject key identifier: E7:05:A0:CA:E3:26:6C:A0:04:AE:EB:D3:98:0A:7F:2C:8A:53:5B:CF Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584D905A9BE81BB2671B09188880 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/1a349d40-bdb1-36e4-bea7-10787672b7df.roa Signing time: Mon 20 Apr 2026 01:00:24 +0000 ROA not before: Mon 20 Apr 2026 01:00:24 +0000 ROA not after: Sun 19 Jul 2026 01:00:24 +0000 asID: 31898 IP address blocks: 130.35.4.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:90:5a:9b:e8:1b:b2:67:1b:09:18:88:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Apr 20 01:00:24 2026 GMT Not After : Jul 19 01:00:24 2026 GMT Subject: CN=9f027232-e75b-4213-9724-364210ed7440 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f0:83:b4:01:d1:ff:db:5d:73:af:e9:8f:c3: 4a:af:86:9d:9e:16:31:9a:0f:d7:02:91:1a:90:e8: 81:df:62:aa:8d:67:ef:b2:c1:5b:af:67:b6:52:e6: 22:5c:98:1c:b9:79:da:da:dc:8b:fe:87:d7:82:9b: b3:3a:38:08:b3:a1:93:70:86:6f:0a:6a:da:d3:7e: 91:03:1c:d8:23:e9:6f:d2:d1:f8:e5:14:9f:86:7e: 3e:6d:27:bd:9b:8f:69:89:8f:c6:21:71:ce:88:ac: 16:d0:9b:9c:48:05:a6:74:13:35:d0:d0:8d:dd:40: 9f:52:39:08:c5:57:4b:93:d1:b2:c7:cd:18:82:0a: c2:2b:38:00:bb:dc:57:06:c9:22:cb:11:30:c7:f4: a2:20:e3:88:57:99:b5:01:83:5b:22:85:d0:13:ca: 8c:8d:f0:3e:21:1a:be:98:a3:e1:66:88:4b:f9:4e: be:57:59:d5:49:77:19:ce:5b:f8:b6:32:58:61:14: f4:21:d0:5a:60:9b:fc:ec:e0:8a:af:2c:f8:12:cf: 0b:46:00:da:00:28:90:d1:e5:d6:e5:33:56:6f:9a: e7:d4:dc:f0:4c:a4:4c:cb:77:44:95:92:e5:1e:2d: ae:ec:7b:3f:5e:0e:4d:96:d1:0e:75:66:09:e7:c7: 47:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:05:A0:CA:E3:26:6C:A0:04:AE:EB:D3:98:0A:7F:2C:8A:53:5B:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/1a349d40-bdb1-36e4-bea7-10787672b7df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 130.35.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:ef:52:52:c9:6e:6c:cd:cb:f7:2a:2b:d8:80:b2:b2:55:96: e8:0b:59:93:36:03:1b:da:10:51:bb:a7:bb:26:1f:ec:aa:26: cc:09:e3:97:5b:53:db:84:d8:3e:c5:09:92:31:56:5d:5e:b2: fd:64:18:17:fa:01:bd:ce:d4:a4:a6:d0:87:07:c8:dc:ec:7c: 36:9d:f5:10:5f:2b:17:9e:96:21:2b:0f:20:90:d2:21:aa:a7: c5:07:5a:a8:ee:07:e4:aa:05:5f:6a:7e:6b:84:ab:78:16:e2: 3b:61:f8:00:67:36:c9:65:f2:c6:51:00:36:b5:7b:bf:05:bc: 79:80:aa:12:be:d0:29:1e:bc:e4:0a:9a:78:21:33:80:a5:1e: b8:84:0d:30:c0:9d:78:2c:ce:50:2f:6f:0f:d5:89:dc:ad:18: 1e:e7:ce:1c:76:0c:a1:09:83:4f:86:56:01:3c:98:0e:b6:97: a8:c2:1d:eb:ec:36:64:51:55:b9:28:91:2a:7b:cb:1e:22:b2: 29:6f:9e:3a:e9:44:fc:ac:15:7d:9e:19:6e:14:55:e9:d2:e8: aa:82:60:09:ff:e8:68:65:d3:ed:03:13:0c:af:e7:4f:97:06: e5:09:76:ca:0c:12:ae:92:7c:92:82:a9:1d:e1:1c:6c:d7:15: 6d:5e:e8:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2QWpvoG7JnGwkYiIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDQyMDAxMDAyNFoXDTI2MDcxOTAxMDAyNFowLzEtMCsGA1UEAxMk OWYwMjcyMzItZTc1Yi00MjEzLTk3MjQtMzY0MjEwZWQ3NDQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPCDtAHR/9tdc6/pj8NKr4adnhYxmg/XApEa kOiB32KqjWfvssFbr2e2UuYiXJgcuXna2tyL/ofXgpuzOjgIs6GTcIZvCmra036R AxzYI+lv0tH45RSfhn4+bSe9m49piY/GIXHOiKwW0JucSAWmdBM10NCN3UCfUjkI xVdLk9Gyx80YggrCKzgAu9xXBskiyxEwx/SiIOOIV5m1AYNbIoXQE8qMjfA+IRq+ mKPhZohL+U6+V1nVSXcZzlv4tjJYYRT0IdBaYJv87OCKryz4Es8LRgDaACiQ0eXW 5TNWb5rn1NzwTKRMy3dElZLlHi2u7Hs/Xg5NltEOdWYJ58dH2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOcFoMrjJmygBK7r05gKfyyKU1vPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvMWEzNDlkNDAtYmRiMS0z NmU0LWJlYTctMTA3ODc2NzJiN2RmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgiMEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGnvUlLJbmzNy/cqK9iAsrJVlugLWZM2AxvaEFG7p7smH+yqJswJ45db U9uE2D7FCZIxVl1esv1kGBf6Ab3O1KSm0IcHyNzsfDad9RBfKxeeliErDyCQ0iGq p8UHWqjuB+SqBV9qfmuEq3gW4jth+ABnNsll8sZRADa1e78FvHmAqhK+0CkevOQK mnghM4ClHriEDTDAnXgszlAvbw/VidytGB7nzhx2DKEJg0+GVgE8mA62l6jCHevs NmRRVbkokSp7yx4isilvnjrpRPysFX2eGW4UVenS6KqCYAn/6Ghl0+0DEwyv50+X BuUJdsoMEq6SfJKCqR3hHGzXFW1e6Kg= -----END CERTIFICATE-----Generated at Wed May 13 12:20:22 2026 by rpki-client