$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/6538c27d-a19b-337e-8338-0ca0b305d408.roa File: 6538c27d-a19b-337e-8338-0ca0b305d408.roa (raw, json) Hash identifier: NWcQvgoVXQfZlPfmhtqOl4Vu9zvJ8RGdleRPEbYz0Z8= Subject key identifier: 95:51:05:E7:D1:3B:E6:50:99:41:F8:2A:A1:0C:CE:BD:FD:92:07:19 Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584F1B62533EAD045475D492F700 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/6538c27d-a19b-337e-8338-0ca0b305d408.roa Signing time: Tue 08 Sep 2026 13:00:12 +0000 ROA not before: Tue 08 Sep 2026 13:00:12 +0000 ROA not after: Mon 07 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 130.35.188.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1b:62:53:3e:ad:04:54:75:d4:92:f7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Sep 8 13:00:12 2026 GMT Not After : Dec 7 14:00:12 2026 GMT Subject: CN=2356b74a-7502-41e1-ad0b-3ee91922a64e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:3d:35:ac:0d:6f:8c:90:7c:54:05:2f:fd:44: ea:d9:42:36:b4:a5:ed:99:60:a7:13:85:d7:dc:f5: 4a:44:c7:5a:0b:9c:4d:33:eb:e6:c6:9d:e1:c3:0a: b9:ac:2f:6e:75:20:9d:5c:c8:33:d8:20:34:86:b1: 07:7d:cf:21:0a:01:02:94:da:76:8b:42:d6:b0:3e: cc:30:c3:1e:20:be:f8:49:9c:07:a1:f7:94:5c:d7: 04:7f:50:d1:69:5f:88:7c:e3:52:14:73:a4:66:c7: 54:f9:da:95:54:35:52:59:9e:76:ff:09:7a:4e:6e: ef:63:a8:cc:88:fa:9f:e8:09:b2:cb:5d:e9:43:2e: 47:f2:8e:09:73:ff:29:5b:8d:bf:ab:9c:6c:df:49: 35:be:28:bc:0b:70:2c:1c:ac:68:c4:05:6f:20:4a: 4f:aa:1b:07:59:e1:e6:ab:f9:17:96:61:a5:fd:b4: 4c:d7:db:4b:3e:02:bd:d4:0f:e2:bb:ca:4d:0c:5e: 96:ae:6d:78:05:db:5f:b7:ed:4f:ea:54:33:d0:20: 31:d4:96:c2:b8:b0:fc:d9:f2:0d:a9:e2:ce:5d:2b: 02:70:3f:54:cf:26:04:2b:cf:19:dc:29:69:b2:f3: bb:3d:3f:10:e1:bf:aa:26:26:10:b8:97:b6:b5:b6: 94:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:51:05:E7:D1:3B:E6:50:99:41:F8:2A:A1:0C:CE:BD:FD:92:07:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/6538c27d-a19b-337e-8338-0ca0b305d408.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 130.35.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:ce:3b:50:dd:29:c8:66:b7:d1:d0:5f:00:6f:2e:e0:c1:5f: 35:ba:93:21:d1:48:ee:e1:f6:f5:85:60:4d:89:8b:8a:aa:49: fd:ab:5e:d1:e6:9d:87:37:e9:5d:a8:e0:c9:8d:99:9c:86:40: 39:2b:c1:5e:73:1a:fc:9d:25:e8:0d:55:6e:03:07:61:ca:b3: 7b:c9:99:d4:76:f1:a3:d1:46:d2:38:59:b5:b8:53:ba:33:1e: 4b:e9:be:d6:cd:40:23:25:8f:18:b7:be:fc:4f:54:ae:19:b6: 42:52:c9:d7:e0:2c:99:fa:e8:b7:d2:51:be:39:0d:05:f0:24: b4:02:2e:97:27:54:5b:94:6b:dd:6e:07:61:13:6c:ae:af:1f: 30:1e:48:f4:0a:39:e5:5d:9c:10:bc:f5:52:e4:5c:bb:4c:fb: 85:52:68:c2:d2:89:6d:51:04:7d:58:d2:ba:18:83:e0:b6:99: c1:24:db:f4:8a:f5:72:10:61:ff:fc:3f:32:45:86:d8:db:00: 50:44:ea:26:80:7e:0a:6d:24:8e:88:c0:c1:ec:37:6b:d5:c2: e2:96:d0:ba:3b:ae:76:91:6c:41:cd:3b:b4:00:ad:dd:c6:5a: 6b:f1:d5:76:9b:14:a9:e4:fd:6c:d8:48:ac:f1:fd:31:ef:b3: f7:20:89:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8bYlM+rQRUddSS9wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDkwODEzMDAxMloXDTI2MTIwNzE0MDAxMlowLzEtMCsGA1UEAxMk MjM1NmI3NGEtNzUwMi00MWUxLWFkMGItM2VlOTE5MjJhNjRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtj01rA1vjJB8VAUv/UTq2UI2tKXtmWCnE4XX 3PVKRMdaC5xNM+vmxp3hwwq5rC9udSCdXMgz2CA0hrEHfc8hCgEClNp2i0LWsD7M MMMeIL74SZwHofeUXNcEf1DRaV+IfONSFHOkZsdU+dqVVDVSWZ52/wl6Tm7vY6jM iPqf6Amyy13pQy5H8o4Jc/8pW42/q5xs30k1vii8C3AsHKxoxAVvIEpPqhsHWeHm q/kXlmGl/bRM19tLPgK91A/iu8pNDF6Wrm14Bdtft+1P6lQz0CAx1JbCuLD82fIN qeLOXSsCcD9UzyYEK88Z3ClpsvO7PT8Q4b+qJiYQuJe2tbaUtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJVRBefRO+ZQmUH4KqEMzr39kgcZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvNjUzOGMyN2QtYTE5Yi0z MzdlLTgzMzgtMGNhMGIzMDVkNDA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgiO8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADDOO1DdKchmt9HQXwBvLuDBXzW6kyHRSO7h9vWFYE2Ji4qqSf2rXtHm nYc36V2o4MmNmZyGQDkrwV5zGvydJegNVW4DB2HKs3vJmdR28aPRRtI4WbW4U7oz HkvpvtbNQCMljxi3vvxPVK4ZtkJSydfgLJn66LfSUb45DQXwJLQCLpcnVFuUa91u B2ETbK6vHzAeSPQKOeVdnBC89VLkXLtM+4VSaMLSiW1RBH1Y0roYg+C2mcEk2/SK 9XIQYf/8PzJFhtjbAFBE6iaAfgptJI6IwMHsN2vVwuKW0Lo7rnaRbEHNO7QArd3G Wmvx1XabFKnk/WzYSKzx/THvs/cgiXs= -----END CERTIFICATE-----Generated at Sat Oct 3 23:24:27 2026 by rpki-client