$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/6538c27d-a19b-337e-8338-0ca0b305d408.roa File: 6538c27d-a19b-337e-8338-0ca0b305d408.roa (raw, json) Hash identifier: uXgnx7BwLrAs5czMOm7Vb5fbzcwYUAjF26gP9eSS7EY= Subject key identifier: DD:9F:84:9F:BD:35:B0:E8:D4:38:DA:C7:04:D7:56:85:8C:6B:AD:2C Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584D98BAB1DD4D1959E4E16E44E0 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/6538c27d-a19b-337e-8338-0ca0b305d408.roa Signing time: Thu 23 Apr 2026 01:00:24 +0000 ROA not before: Thu 23 Apr 2026 01:00:24 +0000 ROA not after: Wed 22 Jul 2026 01:00:24 +0000 asID: 31898 IP address blocks: 130.35.188.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:98:ba:b1:dd:4d:19:59:e4:e1:6e:44:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Apr 23 01:00:24 2026 GMT Not After : Jul 22 01:00:24 2026 GMT Subject: CN=ec88955a-9e53-44b4-b2b5-a5597eb72a89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:8f:6b:25:47:11:ad:9e:e3:e7:77:b5:38:a8: d9:a3:b5:98:3d:6e:b1:73:cd:fd:c7:8d:36:74:ba: e9:75:e0:23:16:ee:d6:45:31:00:a3:f6:f0:63:54: fb:bc:c6:ef:ed:3e:cf:08:b7:d9:30:06:af:cf:ec: f4:97:37:c3:08:a9:1a:f7:02:fe:ec:51:d8:cd:e0: 41:5e:b0:a9:a8:64:e7:2e:92:bc:4b:7c:f1:7e:81: 0b:8d:97:d3:e0:d2:e7:a5:2a:3a:2b:b3:fb:ef:46: ea:a9:9c:da:eb:b0:53:38:f3:b6:f0:ab:80:bf:85: aa:12:da:97:bb:21:8d:5c:5b:93:17:e8:34:66:55: 3b:92:1c:c8:89:65:c5:1f:4e:04:cb:b0:a3:ee:8e: 36:d8:c5:c4:18:e2:96:59:25:1e:e4:a7:f6:2c:b8: 3f:83:ac:6b:a0:6f:ca:2a:d3:db:a3:0b:97:49:76: fa:c0:f7:34:8a:1b:0a:8b:29:fa:fd:61:be:b7:49: 00:dd:66:28:5a:a4:1e:36:35:12:54:81:3a:79:fb: 6f:94:30:92:b8:77:c7:06:3c:5c:26:34:a5:6b:d4: e7:62:27:45:67:62:2b:c4:9b:a8:16:64:54:62:d2: 39:63:e9:c4:13:23:65:07:c4:76:f7:91:67:35:02: 4f:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:9F:84:9F:BD:35:B0:E8:D4:38:DA:C7:04:D7:56:85:8C:6B:AD:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/6538c27d-a19b-337e-8338-0ca0b305d408.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 130.35.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:ad:be:32:d8:fb:34:a0:9a:a3:1a:a7:0e:f6:dc:cf:a7:08: f8:58:23:d6:43:27:9f:5f:6f:18:3c:b1:e9:39:07:06:47:0d: 4b:fa:f5:7c:54:cb:f4:48:da:77:6f:37:05:99:d9:06:97:09: 02:d7:b1:40:ac:5a:72:ea:aa:1b:78:27:f0:09:75:6e:56:f5: 33:da:70:7a:86:c2:68:48:45:33:f8:0a:6d:f6:a1:42:7a:4f: 36:7f:4b:5f:50:df:20:94:69:a4:2e:99:f6:56:13:4b:9a:dd: b9:ca:66:85:53:18:8b:57:60:1f:e2:04:fe:c9:a1:57:19:bc: fa:ad:54:2e:ec:45:4a:41:f8:eb:4e:b0:05:96:38:04:3e:88: e8:2c:32:cc:85:3d:71:65:05:bd:66:71:4d:0a:10:40:7d:40: 0c:bf:3b:73:23:91:ee:fa:b5:89:ef:a3:0e:71:64:53:56:50: 88:7b:bf:85:09:44:51:ea:71:40:57:00:3a:ff:e6:60:da:fe: b1:aa:dc:b0:6c:6b:88:ad:a3:00:5a:3f:f6:ee:82:dc:1c:3f: 30:20:00:aa:90:42:71:45:f0:d8:fa:5c:d1:e8:c2:b2:2d:2a: b7:1e:10:2a:83:83:3a:1b:ce:54:44:e9:1d:e4:5f:90:d2:51: 9d:52:73:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2YurHdTRlZ5OFuROAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDQyMzAxMDAyNFoXDTI2MDcyMjAxMDAyNFowLzEtMCsGA1UEAxMk ZWM4ODk1NWEtOWU1My00NGI0LWIyYjUtYTU1OTdlYjcyYTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlI9rJUcRrZ7j53e1OKjZo7WYPW6xc839x402 dLrpdeAjFu7WRTEAo/bwY1T7vMbv7T7PCLfZMAavz+z0lzfDCKka9wL+7FHYzeBB XrCpqGTnLpK8S3zxfoELjZfT4NLnpSo6K7P770bqqZza67BTOPO28KuAv4WqEtqX uyGNXFuTF+g0ZlU7khzIiWXFH04Ey7Cj7o422MXEGOKWWSUe5Kf2LLg/g6xroG/K KtPbowuXSXb6wPc0ihsKiyn6/WG+t0kA3WYoWqQeNjUSVIE6eftvlDCSuHfHBjxc JjSla9TnYidFZ2IrxJuoFmRUYtI5Y+nEEyNlB8R295FnNQJPZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN2fhJ+9NbDo1DjaxwTXVoWMa60sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvNjUzOGMyN2QtYTE5Yi0z MzdlLTgzMzgtMGNhMGIzMDVkNDA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgiO8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH6tvjLY+zSgmqMapw723M+nCPhYI9ZDJ59fbxg8sek5BwZHDUv69XxU y/RI2ndvNwWZ2QaXCQLXsUCsWnLqqht4J/AJdW5W9TPacHqGwmhIRTP4Cm32oUJ6 TzZ/S19Q3yCUaaQumfZWE0ua3bnKZoVTGItXYB/iBP7JoVcZvPqtVC7sRUpB+OtO sAWWOAQ+iOgsMsyFPXFlBb1mcU0KEEB9QAy/O3Mjke76tYnvow5xZFNWUIh7v4UJ RFHqcUBXADr/5mDa/rGq3LBsa4itowBaP/bugtwcPzAgAKqQQnFF8Nj6XNHowrIt KrceECqDgzobzlRE6R3kX5DSUZ1Sc8c= -----END CERTIFICATE-----Generated at Wed May 13 13:16:51 2026 by rpki-client