$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/9b460943-acc3-3feb-ae51-00f79b3d279c.roa File: 9b460943-acc3-3feb-ae51-00f79b3d279c.roa (raw, json) Hash identifier: rMn948a5fvj0Z7gQwTuwCCD7egQacuEkR5t2fswVi3Q= Subject key identifier: 63:27:08:28:31:4A:60:BA:EA:A5:8A:7D:66:01:76:6C:89:6B:BD:1D Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584E78FF74FD77F42B12E636B600 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/9b460943-acc3-3feb-ae51-00f79b3d279c.roa Signing time: Sun 12 Jul 2026 09:00:11 +0000 ROA not before: Sun 12 Jul 2026 09:00:11 +0000 ROA not after: Sat 10 Oct 2026 09:00:11 +0000 asID: 31898 IP address blocks: 130.35.96.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:78:ff:74:fd:77:f4:2b:12:e6:36:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Jul 12 09:00:11 2026 GMT Not After : Oct 10 09:00:11 2026 GMT Subject: CN=98a65371-8f9c-4cfa-a3b0-7f845e34d2d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:5e:e2:df:a3:53:60:62:77:92:22:88:86:95: e7:80:2f:21:af:bd:8b:3f:87:7c:54:cd:75:e6:12: 71:01:37:06:32:87:6a:e7:f0:33:e1:31:b5:24:3f: 17:05:5c:20:c7:e1:ca:ed:dd:d1:15:34:d5:c0:0c: c3:f9:d3:96:8b:8e:a5:0d:21:34:0a:44:92:da:ff: bc:c7:8d:f0:ee:ac:af:b9:cb:ca:26:a9:a1:d3:cd: 3a:4f:3a:66:15:62:d9:b2:73:d9:a3:a1:e3:23:a2: 0c:31:d5:41:bf:a3:17:30:d7:d2:e2:bb:06:7d:9a: 29:22:6d:58:7f:18:50:7b:ca:8b:85:5f:c8:7c:ff: 08:30:f3:ae:92:e9:d2:f5:f4:8d:6f:a2:85:16:c2: 89:41:8d:79:8f:88:10:22:b6:1e:0d:44:8a:7e:ae: f6:5b:6c:4d:99:5f:b2:f7:94:c6:0a:e8:58:f7:87: 62:48:dc:6d:1f:15:87:b7:e1:3a:c0:ab:8f:2e:e5: 47:60:9e:f3:3c:ce:94:ab:1b:d6:4e:a3:b6:17:44: 4e:44:60:08:a2:c5:0e:d0:46:d2:38:ca:57:65:38: 27:35:51:a1:4c:60:be:04:41:6c:9d:3b:0c:21:29: 46:c7:a9:ad:f7:cb:05:50:39:cd:57:83:db:98:98: cc:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:27:08:28:31:4A:60:BA:EA:A5:8A:7D:66:01:76:6C:89:6B:BD:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/9b460943-acc3-3feb-ae51-00f79b3d279c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 130.35.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:96:9f:15:27:3e:b0:33:d2:b4:bf:cb:44:6f:64:dd:6e:36: 59:30:51:57:66:15:e5:54:c3:cb:b2:5f:13:88:33:8d:10:9f: d2:27:72:c4:77:5a:05:f8:21:1f:a4:b5:f9:3e:16:d2:f7:d9: 07:05:9a:45:15:57:04:ba:39:80:a6:ce:fd:ee:c3:13:41:af: 34:1a:c6:d7:1a:80:9d:06:56:06:74:3d:f6:3a:ac:3c:f3:03: 98:7f:77:83:fc:1b:cc:12:e1:9b:f1:ab:9c:47:2f:e8:86:db: e1:af:ca:ab:ab:a2:ff:a4:4b:7e:a1:02:29:0f:f6:56:59:62: ae:2e:91:a4:be:dc:c3:7c:9d:33:0f:de:cb:be:8c:c5:79:ed: 06:24:b9:95:f4:7b:5a:79:35:ca:44:a0:d9:d8:82:24:6b:68: 2f:d1:72:3a:f6:25:64:ae:ac:21:01:98:9a:7f:09:85:78:36: 31:0b:39:f0:c6:ec:f9:d4:19:f1:fe:0e:d6:95:87:f5:ff:33: f7:db:a0:32:70:1f:dc:b3:e6:0b:b9:13:af:5c:fe:45:f1:53: 45:bc:89:91:3d:8d:f8:50:c0:7e:5e:05:09:64:80:2b:5b:56: 5b:e1:98:40:17:d0:10:67:d5:5e:76:a1:80:12:37:23:06:aa: 7f:56:a3:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE54/3T9d/QrEuY2tgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDcxMjA5MDAxMVoXDTI2MTAxMDA5MDAxMVowLzEtMCsGA1UEAxMk OThhNjUzNzEtOGY5Yy00Y2ZhLWEzYjAtN2Y4NDVlMzRkMmQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsV7i36NTYGJ3kiKIhpXngC8hr72LP4d8VM11 5hJxATcGModq5/Az4TG1JD8XBVwgx+HK7d3RFTTVwAzD+dOWi46lDSE0CkSS2v+8 x43w7qyvucvKJqmh0806TzpmFWLZsnPZo6HjI6IMMdVBv6MXMNfS4rsGfZopIm1Y fxhQe8qLhV/IfP8IMPOukunS9fSNb6KFFsKJQY15j4gQIrYeDUSKfq72W2xNmV+y 95TGCuhY94diSNxtHxWHt+E6wKuPLuVHYJ7zPM6UqxvWTqO2F0RORGAIosUO0EbS OMpXZTgnNVGhTGC+BEFsnTsMISlGx6mt98sFUDnNV4PbmJjMrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGMnCCgxSmC66qWKfWYBdmyJa70dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvOWI0NjA5NDMtYWNjMy0z ZmViLWFlNTEtMDBmNzliM2QyNzljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDgiNgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACqWnxUnPrAz0rS/y0RvZN1uNlkwUVdmFeVUw8uyXxOIM40Qn9IncsR3 WgX4IR+ktfk+FtL32QcFmkUVVwS6OYCmzv3uwxNBrzQaxtcagJ0GVgZ0PfY6rDzz A5h/d4P8G8wS4Zvxq5xHL+iG2+Gvyqurov+kS36hAikP9lZZYq4ukaS+3MN8nTMP 3su+jMV57QYkuZX0e1p5NcpEoNnYgiRraC/Rcjr2JWSurCEBmJp/CYV4NjELOfDG 7PnUGfH+DtaVh/X/M/fboDJwH9yz5gu5E69c/kXxU0W8iZE9jfhQwH5eBQlkgCtb VlvhmEAX0BBn1V52oYASNyMGqn9Wo0Q= -----END CERTIFICATE-----Generated at Fri Jul 24 18:04:50 2026 by rpki-client