$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/499c620f-9409-3f5d-9b60-aa448c224932.roa File: 499c620f-9409-3f5d-9b60-aa448c224932.roa (raw, json) Hash identifier: 8Ri1NNFC2uU82xoMAlkTNhKlu4lDEoGUzjJ2zRWy89U= Subject key identifier: 69:1A:58:FC:0E:CA:B1:60:DD:44:1C:FE:9E:B0:5F:51:70:0E:09:AE Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584F1B6245C9A75FC0BA6FCB9D80 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/499c620f-9409-3f5d-9b60-aa448c224932.roa Signing time: Tue 08 Sep 2026 13:00:12 +0000 ROA not before: Tue 08 Sep 2026 13:00:12 +0000 ROA not after: Mon 07 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 130.35.16.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1b:62:45:c9:a7:5f:c0:ba:6f:cb:9d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Sep 8 13:00:12 2026 GMT Not After : Dec 7 14:00:12 2026 GMT Subject: CN=97312190-5cd6-4521-ba6f-489ef0cacdbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:33:25:0e:57:44:c6:74:f6:85:4f:33:36:a8: 94:82:25:ad:dc:f9:45:31:aa:3c:51:e9:ed:ca:ec: 06:82:52:c1:d6:1f:e1:d3:e5:e6:76:0a:a1:c5:a3: 86:31:2d:c8:83:86:52:3b:4d:7e:36:cd:ef:55:7f: b2:b8:c1:89:d1:55:68:db:85:67:b4:f4:f4:39:1b: bf:68:c5:65:f4:94:c3:ba:a7:ea:50:7c:5a:d8:40: f6:4f:f8:19:80:2d:24:72:dd:e8:12:30:00:71:b5: 3c:ea:86:b4:d0:b9:cd:02:b3:70:06:f3:8a:62:2e: 50:4f:c1:f1:18:75:4b:72:41:c4:8d:42:97:43:98: 84:b8:86:9c:c0:aa:bf:d3:26:48:02:30:4c:96:07: 5b:50:18:1b:c0:2e:72:3f:7e:d0:dd:25:f0:6e:67: c2:b3:f8:35:00:12:cf:32:4e:c5:a3:8b:cc:6f:0c: 1d:42:87:2d:a9:96:74:2a:fb:f5:70:02:b1:5a:f7: 2d:4d:50:a0:f1:ef:b3:11:85:f2:a8:8e:8e:73:e2: ef:92:57:17:2c:40:93:c0:ce:2a:4f:27:a9:3c:48: 99:67:a7:ff:a2:14:16:fd:fe:6c:df:56:ae:8a:1a: 20:89:81:72:92:98:1c:fc:df:fa:2e:bf:d0:e2:2a: 9a:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:1A:58:FC:0E:CA:B1:60:DD:44:1C:FE:9E:B0:5F:51:70:0E:09:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/499c620f-9409-3f5d-9b60-aa448c224932.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 130.35.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:fc:33:56:e9:9f:20:13:d0:12:2c:96:6a:1b:17:d2:91:46: a3:95:fc:c2:11:d4:60:28:81:5d:42:b6:b2:f5:4a:ce:c5:d7: 34:e3:f3:cd:bb:e4:88:dc:23:b4:66:22:ff:3a:c3:15:0d:33: bd:24:d7:60:7b:16:25:90:26:e5:1b:c6:4c:3d:27:19:c7:c5: c5:d1:cf:1e:ec:42:2c:49:77:32:45:d8:b0:40:68:a4:ab:82: 6a:14:11:e9:be:c3:28:ed:c9:f9:00:c4:d1:17:4a:b2:94:65: f8:a6:d5:65:11:b4:4c:10:b7:b7:ce:bd:2e:8c:fe:24:28:67: da:4c:e7:dc:2c:cd:a0:78:db:e8:ca:7b:bd:8f:b9:c4:5f:2b: 49:14:02:a2:41:92:20:d0:43:2f:03:6a:71:89:19:15:a2:d1: 43:14:83:3c:1a:f0:c5:61:50:c4:b6:b1:0a:e2:3c:94:5a:ef: cc:86:42:ed:dc:22:57:d1:b3:09:41:32:ce:18:ab:80:bf:5b: d5:bb:83:1a:69:c4:cc:be:f8:2a:18:ac:14:51:2c:55:e0:31: 50:33:d1:22:39:4f:73:25:8f:3f:5f:4f:b6:c9:a8:a9:cc:a2: 75:66:57:bd:76:13:6c:ea:1b:fa:8b:77:5c:c8:3f:5e:e2:db: 85:fd:79:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8bYkXJp1/Aum/LnYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDkwODEzMDAxMloXDTI2MTIwNzE0MDAxMlowLzEtMCsGA1UEAxMk OTczMTIxOTAtNWNkNi00NTIxLWJhNmYtNDg5ZWYwY2FjZGJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDMlDldExnT2hU8zNqiUgiWt3PlFMao8Uent yuwGglLB1h/h0+XmdgqhxaOGMS3Ig4ZSO01+Ns3vVX+yuMGJ0VVo24VntPT0ORu/ aMVl9JTDuqfqUHxa2ED2T/gZgC0kct3oEjAAcbU86oa00LnNArNwBvOKYi5QT8Hx GHVLckHEjUKXQ5iEuIacwKq/0yZIAjBMlgdbUBgbwC5yP37Q3SXwbmfCs/g1ABLP Mk7Fo4vMbwwdQoctqZZ0Kvv1cAKxWvctTVCg8e+zEYXyqI6Oc+LvklcXLECTwM4q TyepPEiZZ6f/ohQW/f5s31auihogiYFykpgc/N/6Lr/Q4iqarwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGkaWPwOyrFg3UQc/p6wX1FwDgmuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvNDk5YzYyMGYtOTQwOS0z ZjVkLTliNjAtYWE0NDhjMjI0OTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgiMQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEf8M1bpnyAT0BIslmobF9KRRqOV/MIR1GAogV1CtrL1Ss7F1zTj8827 5IjcI7RmIv86wxUNM70k12B7FiWQJuUbxkw9JxnHxcXRzx7sQixJdzJF2LBAaKSr gmoUEem+wyjtyfkAxNEXSrKUZfim1WURtEwQt7fOvS6M/iQoZ9pM59wszaB42+jK e72PucRfK0kUAqJBkiDQQy8DanGJGRWi0UMUgzwa8MVhUMS2sQriPJRa78yGQu3c IlfRswlBMs4Yq4C/W9W7gxppxMy++CoYrBRRLFXgMVAz0SI5T3Mljz9fT7bJqKnM onVmV712E2zqG/qLd1zIP17i24X9eY4= -----END CERTIFICATE-----Generated at Fri Sep 25 09:39:59 2026 by rpki-client