$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/7e91154b-79a1-3330-9d0a-9925663cac1b.roa File: 7e91154b-79a1-3330-9d0a-9925663cac1b.roa (raw, json) Hash identifier: taJPcuvGONWErKhTaDeFKFL0CBVTlDl8hB8mtqr1QbU= Subject key identifier: 01:B9:5B:3A:39:1E:8C:C3:A7:F0:4A:1A:75:D8:FC:E6:63:D0:1F:35 Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584E78FF756E35D2E34BF452C6C0 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/7e91154b-79a1-3330-9d0a-9925663cac1b.roa Signing time: Sun 12 Jul 2026 09:00:11 +0000 ROA not before: Sun 12 Jul 2026 09:00:11 +0000 ROA not after: Sat 10 Oct 2026 09:00:11 +0000 asID: 31898 IP address blocks: 130.35.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:78:ff:75:6e:35:d2:e3:4b:f4:52:c6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Jul 12 09:00:11 2026 GMT Not After : Oct 10 09:00:11 2026 GMT Subject: CN=796d234e-3bea-4a98-95ed-d676d2a1f4cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:97:84:af:bc:61:02:c9:31:ae:5f:cf:21:63: c0:78:d4:f9:c4:18:ab:8d:5a:48:ed:38:5f:dd:51: a4:31:e6:dc:e9:bd:55:93:35:31:b9:ec:d2:d5:b3: 6b:1d:e4:75:76:6b:1f:7d:fe:0a:26:01:50:b3:5d: 0a:53:01:89:e6:6b:c4:f2:d4:55:3c:c0:92:9e:d9: ae:27:02:ae:95:63:5f:59:e4:9e:76:e4:a5:f0:45: 95:d3:d2:ab:6f:2d:39:c5:28:c8:4f:ea:9b:8c:14: 14:2e:a2:2f:d1:c3:fe:44:e5:41:84:21:45:83:f7: e8:22:18:a6:54:80:b3:f1:7f:14:88:ff:62:ff:96: ff:f9:55:e2:91:7a:b1:c2:2b:ab:20:6d:e1:20:3e: 18:fc:84:24:d9:e2:17:a7:c8:5b:59:39:5b:fd:8b: 8d:5f:69:5d:f2:f5:5b:16:7e:6a:bd:84:df:37:c4: db:30:b1:8e:04:de:66:f3:a3:fa:a4:63:5f:45:dd: ec:bd:2f:87:a0:eb:0d:18:75:a5:cf:55:2a:b9:95: a4:04:77:e1:85:98:d2:53:4a:9c:c7:1e:5d:83:c8: 64:ae:a0:b1:0b:dc:fd:aa:70:6d:bd:68:d4:fe:32: e1:09:8f:0f:b8:2f:2c:67:38:0c:f3:1f:28:fd:00: 8e:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:B9:5B:3A:39:1E:8C:C3:A7:F0:4A:1A:75:D8:FC:E6:63:D0:1F:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/7e91154b-79a1-3330-9d0a-9925663cac1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 130.35.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:f8:84:7e:44:99:ad:59:e8:3e:47:5b:4d:69:52:5a:ef:d4: 2a:8d:3b:23:31:be:9b:61:c4:00:37:58:f6:04:4f:8a:6b:a4: 8a:8e:a0:07:f5:d2:5e:70:68:9a:6b:79:1d:cc:f3:14:38:86: 37:87:87:1d:80:97:45:da:e4:f7:30:6b:c6:a7:c9:8c:2c:8b: e8:76:98:f3:41:c4:46:b3:8d:b2:6f:20:87:03:74:81:9c:b2: 43:30:ce:9b:89:08:74:b0:44:4e:b2:57:ea:48:d1:fa:9c:3a: e8:1d:55:18:4f:2a:71:97:88:3b:73:dc:25:85:56:22:5d:18: c3:89:db:96:33:6a:77:7d:44:77:d2:f3:01:8b:cb:9c:52:0f: 29:ae:4c:58:0b:44:6a:29:d4:07:0a:53:62:78:e0:5e:56:ef: 6b:04:92:13:e9:4e:53:fb:f2:14:f9:aa:52:34:d4:0d:a0:61: f8:b5:be:63:f2:4a:84:a5:94:e7:ae:3f:d2:cf:08:0f:f1:d1: 60:5c:38:e9:76:9f:62:bd:22:b5:c9:4f:22:46:54:81:b8:51: 25:5e:09:62:a6:0d:40:35:d6:58:6a:f2:f8:85:07:5b:2e:2e: df:09:a5:d0:39:b9:4d:f6:af:31:a2:78:29:53:7e:ab:3d:49: 57:a9:cd:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE54/3VuNdLjS/RSxsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDcxMjA5MDAxMVoXDTI2MTAxMDA5MDAxMVowLzEtMCsGA1UEAxMk Nzk2ZDIzNGUtM2JlYS00YTk4LTk1ZWQtZDY3NmQyYTFmNGNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0peEr7xhAskxrl/PIWPAeNT5xBirjVpI7Thf 3VGkMebc6b1VkzUxuezS1bNrHeR1dmsfff4KJgFQs10KUwGJ5mvE8tRVPMCSntmu JwKulWNfWeSeduSl8EWV09Krby05xSjIT+qbjBQULqIv0cP+ROVBhCFFg/foIhim VICz8X8UiP9i/5b/+VXikXqxwiurIG3hID4Y/IQk2eIXp8hbWTlb/YuNX2ld8vVb Fn5qvYTfN8TbMLGOBN5m86P6pGNfRd3svS+HoOsNGHWlz1UquZWkBHfhhZjSU0qc xx5dg8hkrqCxC9z9qnBtvWjU/jLhCY8PuC8sZzgM8x8o/QCOOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAG5Wzo5HozDp/BKGnXY/OZj0B81MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvN2U5MTE1NGItNzlhMS0z MzMwLTlkMGEtOTkyNTY2M2NhYzFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgiOYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC74hH5Ema1Z6D5HW01pUlrv1CqNOyMxvpthxAA3WPYET4prpIqOoAf1 0l5waJpreR3M8xQ4hjeHhx2Al0Xa5Pcwa8anyYwsi+h2mPNBxEazjbJvIIcDdIGc skMwzpuJCHSwRE6yV+pI0fqcOugdVRhPKnGXiDtz3CWFViJdGMOJ25Yzand9RHfS 8wGLy5xSDymuTFgLRGop1AcKU2J44F5W72sEkhPpTlP78hT5qlI01A2gYfi1vmPy SoSllOeuP9LPCA/x0WBcOOl2n2K9IrXJTyJGVIG4USVeCWKmDUA11lhq8viFB1su Lt8JpdA5uU32rzGieClTfqs9SVepzWs= -----END CERTIFICATE-----Generated at Fri Jul 24 11:48:47 2026 by rpki-client