$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/40627f49-e1a3-3fbd-a773-aabf40cb447d.roa File: 40627f49-e1a3-3fbd-a773-aabf40cb447d.roa (raw, json) Hash identifier: /684Q87jMxLmaoQh4wGzsKO1Fr7Kaze5+Cq3MuW59S0= Subject key identifier: B1:E4:4A:D6:96:8B:8E:30:C7:1C:D9:65:EA:EE:D7:9D:6A:01:99:11 Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584E78FF8538AA0593843554FF80 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/40627f49-e1a3-3fbd-a773-aabf40cb447d.roa Signing time: Sun 12 Jul 2026 09:00:11 +0000 ROA not before: Sun 12 Jul 2026 09:00:11 +0000 ROA not after: Sat 10 Oct 2026 09:00:11 +0000 asID: 31898 IP address blocks: 130.35.120.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:78:ff:85:38:aa:05:93:84:35:54:ff:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Jul 12 09:00:11 2026 GMT Not After : Oct 10 09:00:11 2026 GMT Subject: CN=8f4051b8-66ac-4051-ac8b-58b4df3bd09f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:6f:a3:aa:97:11:fc:76:9e:7c:31:3b:25:26: c2:3d:e9:aa:59:f0:96:17:f4:f1:1a:e3:84:29:7e: d1:ef:29:2f:65:02:b8:27:ca:a1:88:03:f5:4a:f7: db:df:40:be:fa:91:ab:80:75:40:90:36:66:d1:02: 75:6a:eb:e4:c3:78:8b:fc:cd:88:c7:b7:7e:19:06: 2c:8f:0a:8b:a4:4f:1b:98:10:cb:47:2b:53:56:8d: e6:dc:00:67:e0:1d:73:4c:ed:e2:9d:cb:65:a1:9e: 95:34:fc:e6:4e:5c:b4:9e:02:b5:5d:df:24:17:d7: 35:fe:34:a4:c2:4e:97:ed:96:1e:bb:f5:b9:10:4d: 0f:39:92:53:39:07:ee:a4:c2:01:7d:8b:a7:2e:a1: 80:46:9c:08:cc:fe:e9:46:d2:8f:b6:f8:46:48:42: 9a:af:f2:f1:1a:47:3b:d8:7d:1b:8d:f3:41:b6:2d: 8b:64:9c:f7:9e:98:01:8a:e6:bc:81:18:fb:bb:96: 4c:65:c8:cd:c6:d4:b1:87:6e:bd:4e:f8:d9:66:8a: 0f:fe:bb:f2:99:19:91:8d:01:26:a0:de:0d:50:7f: cd:d4:ba:2a:e4:dd:be:18:28:a8:36:f9:b9:d7:d7: 00:37:ff:f5:9f:a6:23:14:d4:20:bf:fb:64:4c:55: dc:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:E4:4A:D6:96:8B:8E:30:C7:1C:D9:65:EA:EE:D7:9D:6A:01:99:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/40627f49-e1a3-3fbd-a773-aabf40cb447d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 130.35.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:67:1b:40:51:4a:9e:61:9c:f7:ce:5c:a6:6e:17:c2:a9:ce: 14:7c:b6:7a:c2:6e:5a:79:c9:4c:48:42:65:25:7a:a8:77:9a: 0c:78:1c:57:14:54:e3:e1:37:45:51:a1:95:c5:20:e9:f4:79: e7:45:27:f8:3b:32:ec:21:39:2a:0b:67:9d:35:62:68:e7:e4: 4c:5e:d6:66:ef:40:92:00:f9:9a:93:9c:26:e4:75:fa:3e:0c: 23:2f:4e:fc:37:36:b7:0b:f4:e2:80:b8:85:61:d0:0b:5a:29: d3:3c:21:95:e5:58:6b:71:e0:0c:cb:da:25:58:e4:fb:47:db: 71:95:ec:e8:db:6a:0b:4b:99:5d:23:2f:42:5d:87:da:5b:e1: 05:da:45:f2:73:2d:9c:d1:31:65:b6:08:47:31:19:7a:00:b4: 3e:c2:e9:02:4b:58:7b:58:15:79:d3:50:3f:46:ec:20:40:12: a7:97:8a:87:ef:48:da:08:b4:43:c5:bd:a2:f2:a8:4f:54:9a: 2f:97:2f:5f:40:f0:b7:0f:0c:ff:74:bf:9d:f0:6f:f7:93:05: b5:cc:a2:f5:8e:05:0d:80:27:8d:aa:6d:ff:18:b3:e8:7c:95: 4f:e0:1e:6f:20:fd:ae:0e:55:3a:71:5a:fc:65:88:0a:a6:89: 4e:b1:79:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE54/4U4qgWThDVU/4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDcxMjA5MDAxMVoXDTI2MTAxMDA5MDAxMVowLzEtMCsGA1UEAxMk OGY0MDUxYjgtNjZhYy00MDUxLWFjOGItNThiNGRmM2JkMDlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmm+jqpcR/HaefDE7JSbCPemqWfCWF/TxGuOE KX7R7ykvZQK4J8qhiAP1Svfb30C++pGrgHVAkDZm0QJ1auvkw3iL/M2Ix7d+GQYs jwqLpE8bmBDLRytTVo3m3ABn4B1zTO3inctloZ6VNPzmTly0ngK1Xd8kF9c1/jSk wk6X7ZYeu/W5EE0POZJTOQfupMIBfYunLqGARpwIzP7pRtKPtvhGSEKar/LxGkc7 2H0bjfNBti2LZJz3npgBiua8gRj7u5ZMZcjNxtSxh269TvjZZooP/rvymRmRjQEm oN4NUH/N1Loq5N2+GCioNvm519cAN//1n6YjFNQgv/tkTFXcpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLHkStaWi44wxxzZZeru151qAZkRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvNDA2MjdmNDktZTFhMy0z ZmJkLWE3NzMtYWFiZjQwY2I0NDdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDgiN4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGpnG0BRSp5hnPfOXKZuF8KpzhR8tnrCblp5yUxIQmUleqh3mgx4HFcU VOPhN0VRoZXFIOn0eedFJ/g7MuwhOSoLZ501Ymjn5Exe1mbvQJIA+ZqTnCbkdfo+ DCMvTvw3NrcL9OKAuIVh0AtaKdM8IZXlWGtx4AzL2iVY5PtH23GV7OjbagtLmV0j L0Jdh9pb4QXaRfJzLZzRMWW2CEcxGXoAtD7C6QJLWHtYFXnTUD9G7CBAEqeXiofv SNoItEPFvaLyqE9Umi+XL19A8LcPDP90v53wb/eTBbXMovWOBQ2AJ42qbf8Ys+h8 lU/gHm8g/a4OVTpxWvxliAqmiU6xeZo= -----END CERTIFICATE-----Generated at Fri Jul 24 03:17:22 2026 by rpki-client