$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/9a68d362-d4fb-37ce-b577-e446d82d6d77.roa File: 9a68d362-d4fb-37ce-b577-e446d82d6d77.roa (raw, json) Hash identifier: PxLs3xT5hp6VEBZtheAsJ12tDqi/AglKL1eEC7rVqW8= Subject key identifier: 90:5D:96:0B:26:49:FB:67:A7:45:90:B3:97:04:44:4D:0E:24:7E:AD Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584FBD6BCE6E2A75AD5DA7544F80 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/9a68d362-d4fb-37ce-b577-e446d82d6d77.roa Signing time: Thu 05 Nov 2026 14:00:14 +0000 ROA not before: Thu 05 Nov 2026 14:00:14 +0000 ROA not after: Wed 03 Feb 2027 14:00:14 +0000 asID: 31898 IP address blocks: 130.35.212.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:bd:6b:ce:6e:2a:75:ad:5d:a7:54:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Nov 5 14:00:14 2026 GMT Not After : Feb 3 14:00:14 2027 GMT Subject: CN=c84780fb-395d-4672-86c0-d5b2b0e3492e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:fa:bf:ee:ac:38:94:9e:29:98:ea:82:45:e0: 0f:99:2a:21:1b:ef:c0:8d:36:92:9f:6d:49:8d:e9: 86:39:f4:1d:87:05:8e:88:5e:bc:74:56:22:b4:5a: 6f:db:b1:bf:6d:16:b0:b2:70:d0:44:b3:e9:a2:46: 6f:9e:f4:47:b3:e8:0c:b6:32:6a:d3:b6:59:e7:b4: 62:a6:e5:31:0f:d4:2f:78:be:66:bc:eb:df:7b:74: 03:63:49:f3:9c:3e:8b:19:38:da:a6:4f:bf:41:11: cf:08:ad:74:69:0b:54:83:51:ec:d0:04:48:84:5d: 32:5a:0c:80:c1:f7:c6:3e:ea:c8:c0:41:c6:b5:1a: 9d:93:93:cd:19:67:9f:c3:48:26:96:9b:e7:3f:93: 70:95:80:3f:9f:bb:70:35:d7:f1:03:14:c6:c1:d6: be:0f:82:5a:4e:5e:c5:5d:ba:74:8f:f0:07:cf:fd: 1d:be:1f:6b:2f:c3:cf:b8:22:b3:4d:27:7a:c8:38: 03:9d:b3:c3:66:d3:18:0c:bf:4c:34:69:75:49:2e: 39:bc:81:3b:b6:46:3c:87:44:9f:8e:2e:46:f6:c9: a6:b4:33:99:c8:59:1f:c4:b6:fd:ef:45:88:1a:02: 60:8e:10:f6:bb:24:7f:02:9c:6a:eb:a8:28:10:fb: 84:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:5D:96:0B:26:49:FB:67:A7:45:90:B3:97:04:44:4D:0E:24:7E:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/9a68d362-d4fb-37ce-b577-e446d82d6d77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 130.35.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:58:b8:b9:40:7e:ba:7c:bd:24:0d:a4:38:82:69:b9:d7:80: 63:07:05:97:cd:7f:85:76:22:b7:54:06:fb:79:59:8a:fb:b7: 67:63:32:84:8f:3d:7b:3b:83:95:a3:22:51:b6:4b:da:9e:eb: 2d:d1:8a:ed:d0:ba:a3:06:21:b6:a5:76:19:98:8f:90:1b:e5: 37:a8:5f:93:93:ed:8a:77:22:f2:1f:9a:01:00:51:35:57:69: 69:60:4e:e6:e9:c9:5c:3c:8d:f6:26:5e:9d:f0:89:ce:40:6c: 1c:ab:16:05:d4:37:2d:10:bd:07:82:0f:4a:ff:45:eb:d7:55: 7c:9e:db:81:40:83:a0:45:fc:3a:1d:e7:8c:e4:27:74:4e:7f: 3a:87:59:1a:52:be:8c:90:06:4e:1a:f2:29:da:88:91:ea:5a: b1:fa:4c:28:6f:83:cd:72:4a:c9:38:a3:49:0d:ab:2a:1d:ae: 1c:f8:9c:4c:6c:69:cc:de:02:d6:a5:0e:6e:63:c0:bd:a0:f2: ad:7a:4e:df:cf:99:50:6a:c0:a2:a4:eb:39:8f:85:7f:2f:35: 23:76:16:3b:41:7d:28:d3:3e:6c:f0:7f:70:62:a4:83:86:bc: 3b:57:1d:e9:1e:bc:3d:93:13:a9:b0:08:a3:25:e0:da:c0:76: 04:ec:72:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+9a85uKnWtXadUT4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MTEwNTE0MDAxNFoXDTI3MDIwMzE0MDAxNFowLzEtMCsGA1UEAxMk Yzg0NzgwZmItMzk1ZC00NjcyLTg2YzAtZDViMmIwZTM0OTJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifq/7qw4lJ4pmOqCReAPmSohG+/AjTaSn21J jemGOfQdhwWOiF68dFYitFpv27G/bRawsnDQRLPpokZvnvRHs+gMtjJq07ZZ57Ri puUxD9QveL5mvOvfe3QDY0nznD6LGTjapk+/QRHPCK10aQtUg1Hs0ARIhF0yWgyA wffGPurIwEHGtRqdk5PNGWefw0gmlpvnP5NwlYA/n7twNdfxAxTGwda+D4JaTl7F Xbp0j/AHz/0dvh9rL8PPuCKzTSd6yDgDnbPDZtMYDL9MNGl1SS45vIE7tkY8h0Sf ji5G9smmtDOZyFkfxLb970WIGgJgjhD2uyR/Apxq66goEPuEQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJBdlgsmSftnp0WQs5cERE0OJH6tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvOWE2OGQzNjItZDRmYi0z N2NlLWI1NzctZTQ0NmQ4MmQ2ZDc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgiPUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGdYuLlAfrp8vSQNpDiCabnXgGMHBZfNf4V2IrdUBvt5WYr7t2djMoSP PXs7g5WjIlG2S9qe6y3Riu3QuqMGIbaldhmYj5Ab5TeoX5OT7Yp3IvIfmgEAUTVX aWlgTubpyVw8jfYmXp3wic5AbByrFgXUNy0QvQeCD0r/RevXVXye24FAg6BF/Dod 54zkJ3ROfzqHWRpSvoyQBk4a8inaiJHqWrH6TChvg81ySsk4o0kNqyodrhz4nExs aczeAtalDm5jwL2g8q16Tt/PmVBqwKKk6zmPhX8vNSN2FjtBfSjTPmzwf3BipIOG vDtXHekevD2TE6mwCKMl4NrAdgTsch4= -----END CERTIFICATE-----Generated at Sun Nov 15 21:45:55 2026 by rpki-client