$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/1a349d40-bdb1-36e4-bea7-10787672b7df.roa File: 1a349d40-bdb1-36e4-bea7-10787672b7df.roa (raw, json) Hash identifier: EIEW3GQLVzT3TpKl+zNHNTlz0j/K5XQ9931WG0aN154= Subject key identifier: F1:19:55:66:B0:6A:0C:34:D0:7A:46:75:C1:95:6E:58:0A:86:B4:26 Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584E709F7839A2DC428AC7B31C00 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/1a349d40-bdb1-36e4-bea7-10787672b7df.roa Signing time: Thu 09 Jul 2026 09:00:13 +0000 ROA not before: Thu 09 Jul 2026 09:00:13 +0000 ROA not after: Wed 07 Oct 2026 09:00:13 +0000 asID: 31898 IP address blocks: 130.35.4.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:70:9f:78:39:a2:dc:42:8a:c7:b3:1c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Jul 9 09:00:13 2026 GMT Not After : Oct 7 09:00:13 2026 GMT Subject: CN=ab43d05f-c8c3-476d-9f89-d8eeded9e161 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:2f:71:89:39:e2:80:50:a3:57:c5:d4:70:8d: 48:c1:58:3e:bc:eb:23:cc:0c:98:5c:98:cb:06:6d: 2d:75:0b:76:75:53:6f:7f:24:29:c6:24:6c:c5:56: d9:4b:5a:db:7d:ad:fd:53:4b:d3:d1:b3:e8:f6:08: ff:0e:f8:50:d3:12:06:b3:a2:92:12:44:b3:c1:bf: 91:76:ad:57:b4:04:c0:fd:14:ea:6b:ef:c4:c2:75: 57:e1:4d:a5:3f:7d:a9:e8:a4:41:e3:00:43:47:fe: 2a:0a:78:f8:60:54:fc:8e:96:7d:04:92:65:cf:8f: 0a:09:74:92:b0:d4:d1:a5:de:e8:fd:55:dd:3d:00: 3d:2c:9d:67:b2:73:d3:d5:6e:6d:40:e5:85:54:c3: e4:bb:7b:77:ab:ba:2d:5d:20:c6:e1:04:0a:3f:f0: ad:63:5e:3b:13:55:03:a0:26:2d:85:e8:6c:8e:b7: d2:73:7c:71:47:8e:93:74:a9:08:3e:96:09:58:ed: 75:19:c7:9d:7a:80:27:9d:1d:37:37:25:d2:2b:0e: b1:b2:d3:d2:fe:b0:48:0c:60:fd:bb:53:fe:1f:25: ef:fa:67:cf:76:03:17:cc:ca:75:0d:76:1c:83:3a: a4:90:5b:00:30:fa:4d:8a:c0:6c:2d:8b:81:d9:7d: 5a:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:19:55:66:B0:6A:0C:34:D0:7A:46:75:C1:95:6E:58:0A:86:B4:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/1a349d40-bdb1-36e4-bea7-10787672b7df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 130.35.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:38:b1:86:cb:91:4b:d1:a1:89:2f:06:fa:91:81:22:19:c8: df:23:57:2f:76:83:da:e2:3a:90:eb:66:4b:cf:15:74:1f:20: 31:38:9e:b5:1a:a2:41:0d:db:ef:22:17:f8:f4:9a:ef:5f:11: 5f:f3:bf:4f:4e:d9:70:15:23:90:3e:8c:39:61:5b:a1:80:a2: a4:94:b8:40:c2:02:50:0c:90:af:b3:b3:7a:ec:71:7d:09:7f: a1:0c:e9:36:9b:a3:70:ea:f6:f9:f4:32:82:18:cf:91:ea:a1: 7d:9c:69:ac:1d:01:d6:7d:78:0d:2f:34:4c:e6:ac:05:c3:20: c9:ba:41:5d:5f:a7:63:aa:cc:56:c1:e5:ea:08:36:c4:be:c9: de:9d:9f:5b:75:bc:22:87:bf:27:3a:35:3f:f1:ba:be:0e:dc: 6e:8d:c2:0b:46:54:27:79:f8:56:b9:90:41:e4:69:59:ed:e0: 01:41:cb:92:0c:41:34:5e:56:3c:70:ae:79:d0:d1:2a:a2:bc: 1e:24:74:9d:50:74:a6:32:36:83:83:fa:1a:f7:52:53:5f:fe: b8:f6:97:06:41:f9:25:25:8a:bd:a4:3b:46:66:99:66:63:94: 82:9d:57:8d:2f:a2:46:14:de:75:9c:03:eb:64:9c:2d:5e:53: 9a:7a:3f:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5wn3g5otxCisezHAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDcwOTA5MDAxM1oXDTI2MTAwNzA5MDAxM1owLzEtMCsGA1UEAxMk YWI0M2QwNWYtYzhjMy00NzZkLTlmODktZDhlZWRlZDllMTYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvS9xiTnigFCjV8XUcI1IwVg+vOsjzAyYXJjL Bm0tdQt2dVNvfyQpxiRsxVbZS1rbfa39U0vT0bPo9gj/DvhQ0xIGs6KSEkSzwb+R dq1XtATA/RTqa+/EwnVX4U2lP32p6KRB4wBDR/4qCnj4YFT8jpZ9BJJlz48KCXSS sNTRpd7o/VXdPQA9LJ1nsnPT1W5tQOWFVMPku3t3q7otXSDG4QQKP/CtY147E1UD oCYthehsjrfSc3xxR46TdKkIPpYJWO11GcedeoAnnR03NyXSKw6xstPS/rBIDGD9 u1P+HyXv+mfPdgMXzMp1DXYcgzqkkFsAMPpNisBsLYuB2X1aawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPEZVWawagw00HpGdcGVblgKhrQmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvMWEzNDlkNDAtYmRiMS0z NmU0LWJlYTctMTA3ODc2NzJiN2RmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgiMEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAU4sYbLkUvRoYkvBvqRgSIZyN8jVy92g9riOpDrZkvPFXQfIDE4nrUa okEN2+8iF/j0mu9fEV/zv09O2XAVI5A+jDlhW6GAoqSUuEDCAlAMkK+zs3rscX0J f6EM6Tabo3Dq9vn0MoIYz5HqoX2caawdAdZ9eA0vNEzmrAXDIMm6QV1fp2OqzFbB 5eoINsS+yd6dn1t1vCKHvyc6NT/xur4O3G6NwgtGVCd5+Fa5kEHkaVnt4AFBy5IM QTReVjxwrnnQ0SqivB4kdJ1QdKYyNoOD+hr3UlNf/rj2lwZB+SUlir2kO0ZmmWZj lIKdV40vokYU3nWcA+tknC1eU5p6P+E= -----END CERTIFICATE-----Generated at Fri Jul 24 04:04:51 2026 by rpki-client