$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/661fbe9f-e9fc-361c-bc88-1a82252c4398.roa File: 661fbe9f-e9fc-361c-bc88-1a82252c4398.roa (raw, json) Hash identifier: 8SBZsUVpXQZurxYyshorj9HW9sxfOxYF1jekS2Wmvs4= Subject key identifier: 00:41:2D:0C:A4:86:89:66:50:19:05:AE:F8:2C:DA:EE:BA:99:40:D0 Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584D98BAA0E831933BAEFB56FB00 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/661fbe9f-e9fc-361c-bc88-1a82252c4398.roa Signing time: Thu 23 Apr 2026 01:00:24 +0000 ROA not before: Thu 23 Apr 2026 01:00:24 +0000 ROA not after: Wed 22 Jul 2026 01:00:24 +0000 asID: 31898 IP address blocks: 130.35.216.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:98:ba:a0:e8:31:93:3b:ae:fb:56:fb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Apr 23 01:00:24 2026 GMT Not After : Jul 22 01:00:24 2026 GMT Subject: CN=2769bf03-2b85-4858-95a8-70e1162ed085 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:45:2c:12:5f:94:97:2a:e8:e3:5c:fd:e6:d1: 03:d8:5a:c2:d5:eb:52:e3:fc:8b:c2:4b:93:2d:f7: 2a:30:2c:cc:69:86:86:af:87:49:a6:de:e8:a0:85: 98:a5:ec:41:8c:e9:b6:ad:d7:e1:19:71:53:33:b3: 39:b6:27:45:20:5d:5f:cd:ad:cd:92:70:3c:4c:f8: 8a:96:9f:a0:5b:99:01:bb:ca:0e:85:f4:f8:13:8b: a6:da:4c:c3:08:93:e3:5d:80:65:2c:61:e6:e0:1a: 75:0e:6d:82:32:2f:76:fd:66:2d:2d:07:2d:68:10: 41:82:e1:31:71:0f:55:fa:1f:4a:da:ef:1e:0e:0b: 46:f3:50:18:95:17:49:0d:19:76:ec:7d:a7:10:8b: fd:bd:c8:6c:86:e7:f9:0d:14:eb:ef:55:31:64:d8: 72:34:5f:90:0f:6d:7d:23:e9:c9:13:83:d7:d0:bc: 2c:81:07:76:00:29:9e:37:63:8f:46:54:9e:94:d6: fe:1a:54:e6:0e:a8:b1:03:20:71:47:56:ea:7c:0c: 92:3a:07:aa:91:14:1d:df:0d:44:29:ef:7b:43:c6: 2c:19:ff:bb:e6:32:a6:4b:40:36:81:38:2e:00:d3: 47:59:a6:44:5b:f5:3d:d6:3f:c5:6e:f4:5e:e6:f5: d4:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:41:2D:0C:A4:86:89:66:50:19:05:AE:F8:2C:DA:EE:BA:99:40:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/661fbe9f-e9fc-361c-bc88-1a82252c4398.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 130.35.216.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:f2:d0:c7:0e:c7:a4:fb:1b:eb:1b:12:81:fe:90:7d:65:60: ae:0e:48:4e:41:37:c7:e4:df:0d:ec:bc:82:cc:ea:a6:97:f3: 79:b0:28:af:71:52:0c:d6:4a:a0:fe:aa:a4:2f:22:b8:86:a6: 6f:36:46:b5:91:e1:4b:dc:d4:48:61:d8:22:7b:da:f2:83:51: e5:e5:8b:ca:19:1f:03:a6:f9:e3:38:f9:69:2f:de:29:00:be: 89:58:bd:1c:93:8d:66:b1:03:80:22:1f:9d:11:99:ea:42:c6: bc:5c:7e:66:20:be:84:78:cb:a6:68:d3:f9:ed:00:70:e8:5f: 64:9d:ee:94:76:e9:e9:60:4d:ac:fa:b2:21:a2:b8:59:76:76: 6d:f2:2a:73:09:8c:fd:e0:bb:26:1d:bc:89:4c:8b:ac:89:07: ab:6c:4c:8b:42:ec:cf:98:be:a5:10:14:41:c7:4f:de:3c:1d: 84:c7:ab:c5:81:f1:0c:92:c7:7b:3f:d5:1f:af:ba:af:98:31: 6f:3d:19:9e:05:c7:4d:ad:c8:42:ad:e2:38:63:f0:0e:09:e4: aa:d9:f9:da:76:30:33:91:68:25:86:67:0e:22:44:ef:dd:fa: d0:d1:f0:84:11:7d:0d:82:a2:d3:9c:02:f0:02:fd:d8:75:67: cb:aa:ec:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2YuqDoMZM7rvtW+wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDQyMzAxMDAyNFoXDTI2MDcyMjAxMDAyNFowLzEtMCsGA1UEAxMk Mjc2OWJmMDMtMmI4NS00ODU4LTk1YTgtNzBlMTE2MmVkMDg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg0UsEl+Ulyro41z95tED2FrC1etS4/yLwkuT LfcqMCzMaYaGr4dJpt7ooIWYpexBjOm2rdfhGXFTM7M5tidFIF1fza3NknA8TPiK lp+gW5kBu8oOhfT4E4um2kzDCJPjXYBlLGHm4Bp1Dm2CMi92/WYtLQctaBBBguEx cQ9V+h9K2u8eDgtG81AYlRdJDRl27H2nEIv9vchshuf5DRTr71UxZNhyNF+QD219 I+nJE4PX0LwsgQd2ACmeN2OPRlSelNb+GlTmDqixAyBxR1bqfAySOgeqkRQd3w1E Ke97Q8YsGf+75jKmS0A2gTguANNHWaZEW/U91j/FbvRe5vXUHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFABBLQykholmUBkFrvgs2u66mUDQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvNjYxZmJlOWYtZTlmYy0z NjFjLWJjODgtMWE4MjI1MmM0Mzk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgiPYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJLy0McOx6T7G+sbEoH+kH1lYK4OSE5BN8fk3w3svILM6qaX83mwKK9x UgzWSqD+qqQvIriGpm82RrWR4Uvc1Ehh2CJ72vKDUeXli8oZHwOm+eM4+Wkv3ikA volYvRyTjWaxA4AiH50RmepCxrxcfmYgvoR4y6Zo0/ntAHDoX2Sd7pR26elgTaz6 siGiuFl2dm3yKnMJjP3guyYdvIlMi6yJB6tsTItC7M+YvqUQFEHHT948HYTHq8WB 8QySx3s/1R+vuq+YMW89GZ4Fx02tyEKt4jhj8A4J5KrZ+dp2MDORaCWGZw4iRO/d +tDR8IQRfQ2CotOcAvAC/dh1Z8uq7Ko= -----END CERTIFICATE-----Generated at Wed May 13 09:55:56 2026 by rpki-client