$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/3ba922e0-f822-39ef-bbf9-0ba51ae18e9a.roa File: 3ba922e0-f822-39ef-bbf9-0ba51ae18e9a.roa (raw, json) Hash identifier: GSragnJxgRidht1IiUIM6Dq6pVm/Poi1vESM75Na3mo= Subject key identifier: E7:40:EE:59:5A:F4:4F:09:17:E2:80:17:E5:54:78:5B:3D:98:BD:25 Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584F1B62558B6CFF91BAC073D000 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/3ba922e0-f822-39ef-bbf9-0ba51ae18e9a.roa Signing time: Tue 08 Sep 2026 13:00:12 +0000 ROA not before: Tue 08 Sep 2026 13:00:12 +0000 ROA not after: Mon 07 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 130.35.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1b:62:55:8b:6c:ff:91:ba:c0:73:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Sep 8 13:00:12 2026 GMT Not After : Dec 7 14:00:12 2026 GMT Subject: CN=c7115d5d-36a2-4aaf-b7d6-da6fb050c83f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:5b:81:66:4d:d8:16:55:c3:bd:a4:02:b2:5a: b5:2b:a8:27:98:48:5d:12:e3:df:e6:33:97:24:99: a7:31:94:f8:9f:66:e8:ba:d7:d8:00:62:39:0b:a9: 68:58:c9:21:bb:63:8c:01:31:69:aa:89:04:46:22: bb:01:51:b5:b3:29:f8:87:dc:df:65:6e:15:f7:be: 76:83:22:14:1e:af:1b:5e:ae:3c:cd:d6:1f:33:08: 26:0d:ed:e4:f6:04:2c:43:60:af:3a:76:6b:7d:2e: 1e:c9:97:9f:49:33:30:f1:f7:f0:48:de:f1:33:f6: 2b:41:1b:5c:ed:dd:91:31:1c:c8:55:5e:70:7e:86: a0:6a:5b:28:1f:a2:12:30:f7:1a:85:30:ee:d4:05: de:f0:54:c9:76:b9:1b:a4:d4:d1:48:fb:2a:f2:0d: fc:4f:81:4b:73:3e:ff:b4:bb:f2:1b:77:0d:d2:71: 4b:b2:5b:e8:2e:d8:b0:86:f8:50:d3:aa:d2:b7:92: 7b:2f:4b:62:5d:fa:d9:d8:f1:b2:ad:45:37:15:9f: 77:44:26:74:15:c4:62:5c:7b:9d:f5:71:7b:ba:19: 8b:a0:65:58:5e:e4:b8:a2:d9:19:58:6d:64:6d:e6: 3b:34:25:42:85:0e:b2:28:a7:de:db:59:52:6a:be: 0d:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:40:EE:59:5A:F4:4F:09:17:E2:80:17:E5:54:78:5B:3D:98:BD:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/3ba922e0-f822-39ef-bbf9-0ba51ae18e9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 130.35.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:df:f5:d2:e1:3b:21:f6:dd:34:ee:a9:2f:fb:e2:ae:b5:0a: 8e:bd:58:02:fe:d0:43:a1:e2:50:be:37:a3:4f:9e:40:2d:6f: 1f:c3:4c:4d:58:b1:62:c8:79:03:7d:6c:5f:f6:ed:6d:fa:32: 5e:b7:88:02:3f:d5:de:dc:45:6f:a9:d8:83:58:1d:7b:be:5f: a9:75:2a:86:7d:9a:f4:18:3f:44:3b:8a:54:91:e6:8c:dd:dc: be:ba:1f:5a:63:50:d8:17:3e:9a:7c:d0:3e:f5:7a:d4:03:3b: b0:fd:b9:57:a9:37:8b:a3:7f:42:cb:67:96:77:1d:7b:fa:96: de:21:d5:24:cf:43:fb:3b:36:96:ee:45:77:ac:99:67:88:f9: 38:aa:7c:c9:29:6f:c6:da:83:f3:06:00:9e:92:04:35:d6:0a: 49:94:5c:42:a6:24:6c:d0:e5:53:75:99:d7:c9:08:7c:3a:8b: 66:2c:8b:57:b1:86:b2:01:0a:72:a9:18:68:4f:6c:31:e7:aa: 97:40:7c:e7:27:b7:39:e7:f5:98:4b:d3:eb:d4:4d:e5:4b:51: cf:0d:04:01:97:9d:c5:fe:51:d1:3e:53:c9:f0:93:9f:60:93: 6c:26:9e:11:4b:c4:d4:0b:07:2b:30:e7:37:8a:e6:8a:4c:39: b8:9d:58:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8bYlWLbP+RusBz0AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDkwODEzMDAxMloXDTI2MTIwNzE0MDAxMlowLzEtMCsGA1UEAxMk YzcxMTVkNWQtMzZhMi00YWFmLWI3ZDYtZGE2ZmIwNTBjODNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvluBZk3YFlXDvaQCslq1K6gnmEhdEuPf5jOX JJmnMZT4n2boutfYAGI5C6loWMkhu2OMATFpqokERiK7AVG1syn4h9zfZW4V9752 gyIUHq8bXq48zdYfMwgmDe3k9gQsQ2CvOnZrfS4eyZefSTMw8ffwSN7xM/YrQRtc 7d2RMRzIVV5wfoagalsoH6ISMPcahTDu1AXe8FTJdrkbpNTRSPsq8g38T4FLcz7/ tLvyG3cN0nFLslvoLtiwhvhQ06rSt5J7L0tiXfrZ2PGyrUU3FZ93RCZ0FcRiXHud 9XF7uhmLoGVYXuS4otkZWG1kbeY7NCVChQ6yKKfe21lSar4NFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOdA7lla9E8JF+KAF+VUeFs9mL0lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvM2JhOTIyZTAtZjgyMi0z OWVmLWJiZjktMGJhNTFhZTE4ZTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEgiMwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHDf9dLhOyH23TTuqS/74q61Co69WAL+0EOh4lC+N6NPnkAtbx/DTE1Y sWLIeQN9bF/27W36Ml63iAI/1d7cRW+p2INYHXu+X6l1KoZ9mvQYP0Q7ilSR5ozd 3L66H1pjUNgXPpp80D71etQDO7D9uVepN4ujf0LLZ5Z3HXv6lt4h1STPQ/s7Npbu RXesmWeI+TiqfMkpb8bag/MGAJ6SBDXWCkmUXEKmJGzQ5VN1mdfJCHw6i2Ysi1ex hrIBCnKpGGhPbDHnqpdAfOcntznn9ZhL0+vUTeVLUc8NBAGXncX+UdE+U8nwk59g k2wmnhFLxNQLBysw5zeK5opMObidWCk= -----END CERTIFICATE-----Generated at Tue Sep 29 13:51:49 2026 by rpki-client