$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/499c620f-9409-3f5d-9b60-aa448c224932.roa File: 499c620f-9409-3f5d-9b60-aa448c224932.roa (raw, json) Hash identifier: CZUkA5cN7W95AH7uBFfPpWdDgyAJBQZS/xiwg1rxA5o= Subject key identifier: 06:F9:1B:73:C3:A2:BB:29:13:29:EE:24:9F:97:AC:E5:FD:1D:AD:3A Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584E78FF79A243582B1C2DA89410 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/499c620f-9409-3f5d-9b60-aa448c224932.roa Signing time: Sun 12 Jul 2026 09:00:11 +0000 ROA not before: Sun 12 Jul 2026 09:00:11 +0000 ROA not after: Sat 10 Oct 2026 09:00:11 +0000 asID: 31898 IP address blocks: 130.35.16.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:78:ff:79:a2:43:58:2b:1c:2d:a8:94:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Jul 12 09:00:11 2026 GMT Not After : Oct 10 09:00:11 2026 GMT Subject: CN=29bb1872-cf57-4d71-9e1b-db602f5e3ed6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e6:7b:49:b2:e0:2c:6e:98:e5:ae:84:fe:2a: ef:bd:e5:23:7a:92:94:f3:dc:a9:55:6a:39:fd:d7: 70:1f:52:92:11:62:1d:62:1c:fd:18:41:84:08:41: 1a:b8:b8:fa:9a:1b:cb:42:6f:2b:9f:7e:ea:fd:b1: 68:94:d8:ee:24:51:73:55:c8:87:53:4b:2a:ed:53: 2d:15:34:e0:07:c8:4a:89:de:72:7d:2d:98:19:16: d7:f9:41:49:fd:db:1c:80:34:52:00:19:e3:84:f3: 4b:4f:ec:45:62:2c:50:4e:79:35:84:51:23:3e:ce: 44:fa:f0:5a:bc:64:17:53:2e:f3:00:9c:d8:69:37: ff:f8:f4:c0:b4:71:f0:1c:62:5c:11:70:3f:03:57: 85:56:24:05:b9:8b:61:9e:ad:58:e1:7e:eb:27:78: ff:5b:a3:21:a9:de:cb:e1:fa:10:ad:e0:db:a4:1c: ac:24:21:64:eb:63:56:57:30:9d:e4:c4:58:f9:12: 13:e2:3e:bb:38:d2:2b:4c:7f:61:c3:02:c6:bc:49: bb:11:14:5e:34:b2:67:8c:9c:88:be:9c:51:5f:31: d9:59:5f:b5:3b:33:e4:bc:91:26:6f:68:63:34:ea: 89:6a:55:ae:6a:66:22:5e:d2:65:14:b7:2b:86:ef: 8b:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:F9:1B:73:C3:A2:BB:29:13:29:EE:24:9F:97:AC:E5:FD:1D:AD:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/499c620f-9409-3f5d-9b60-aa448c224932.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 130.35.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:de:31:2e:d5:03:cb:47:cc:72:50:a1:96:0a:5b:a7:51:d8: fa:50:4f:3f:a6:e0:c3:1e:f4:2e:46:62:27:cc:4d:1d:7c:4b: 80:ab:f3:29:12:a1:b4:0a:3b:76:89:68:1c:a0:8f:52:fc:ea: b3:b5:87:fc:b1:16:57:cd:6e:7d:6f:b5:cf:57:23:e8:1c:98: c4:c1:61:a9:b3:24:d5:d3:4f:72:f0:fb:37:e2:f2:12:ca:2e: 5b:50:f2:d3:f0:0e:d0:db:32:c9:6f:4e:49:c9:4f:94:1a:f0: 5f:73:3a:51:92:3f:68:e1:d9:7e:9c:db:40:d7:f0:cf:eb:54: 1f:26:19:a9:0e:c4:15:99:6d:a0:15:8f:91:79:1a:27:fb:8f: 11:29:4d:3b:80:9d:49:c5:ba:2e:e9:90:14:83:c4:c0:46:c4: 9f:b4:af:d9:e6:23:22:6f:b9:e6:58:f2:ef:78:98:cc:c1:a1: cb:40:3c:64:61:57:b3:75:9d:99:c6:a5:45:99:3b:7f:1e:d5: 00:55:b0:90:cb:33:a8:2d:4f:b0:43:0c:05:7c:a4:51:c2:a5: 2f:76:28:c0:66:b8:28:89:cd:91:1a:de:e9:73:6a:53:cc:e9: bb:a7:11:ad:42:3e:05:61:48:22:7f:27:b3:f7:44:04:f5:cf: 8a:d5:ff:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE54/3miQ1grHC2olBAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDcxMjA5MDAxMVoXDTI2MTAxMDA5MDAxMVowLzEtMCsGA1UEAxMk MjliYjE4NzItY2Y1Ny00ZDcxLTllMWItZGI2MDJmNWUzZWQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+Z7SbLgLG6Y5a6E/irvveUjepKU89ypVWo5 /ddwH1KSEWIdYhz9GEGECEEauLj6mhvLQm8rn37q/bFolNjuJFFzVciHU0sq7VMt FTTgB8hKid5yfS2YGRbX+UFJ/dscgDRSABnjhPNLT+xFYixQTnk1hFEjPs5E+vBa vGQXUy7zAJzYaTf/+PTAtHHwHGJcEXA/A1eFViQFuYthnq1Y4X7rJ3j/W6Mhqd7L 4foQreDbpBysJCFk62NWVzCd5MRY+RIT4j67ONIrTH9hwwLGvEm7ERReNLJnjJyI vpxRXzHZWV+1OzPkvJEmb2hjNOqJalWuamYiXtJlFLcrhu+LNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAb5G3PDorspEynuJJ+XrOX9Ha06MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvNDk5YzYyMGYtOTQwOS0z ZjVkLTliNjAtYWE0NDhjMjI0OTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgiMQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKbeMS7VA8tHzHJQoZYKW6dR2PpQTz+m4MMe9C5GYifMTR18S4Cr8ykS obQKO3aJaBygj1L86rO1h/yxFlfNbn1vtc9XI+gcmMTBYamzJNXTT3Lw+zfi8hLK LltQ8tPwDtDbMslvTknJT5Qa8F9zOlGSP2jh2X6c20DX8M/rVB8mGakOxBWZbaAV j5F5Gif7jxEpTTuAnUnFui7pkBSDxMBGxJ+0r9nmIyJvueZY8u94mMzBoctAPGRh V7N1nZnGpUWZO38e1QBVsJDLM6gtT7BDDAV8pFHCpS92KMBmuCiJzZEa3ulzalPM 6bunEa1CPgVhSCJ/J7P3RAT1z4rV/zk= -----END CERTIFICATE-----Generated at Fri Jul 24 00:42:08 2026 by rpki-client