$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/9e34ec51-e0ea-37a3-a13e-58c3020191b5.roa File: 9e34ec51-e0ea-37a3-a13e-58c3020191b5.roa (raw, json) Hash identifier: YdN3nnQ/H71++iN0rLs5YGyuTDZqpMuLlCXWFVfEX5s= Subject key identifier: 0A:46:60:F8:49:EA:98:AC:B8:2A:25:AF:FD:23:E4:3D:66:CE:33:1B Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584E709F78202C3CFF3329555280 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/9e34ec51-e0ea-37a3-a13e-58c3020191b5.roa Signing time: Thu 09 Jul 2026 09:00:13 +0000 ROA not before: Thu 09 Jul 2026 09:00:13 +0000 ROA not after: Wed 07 Oct 2026 09:00:13 +0000 asID: 31898 IP address blocks: 130.35.8.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:70:9f:78:20:2c:3c:ff:33:29:55:52:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Jul 9 09:00:13 2026 GMT Not After : Oct 7 09:00:13 2026 GMT Subject: CN=64a451e7-b386-4cda-aa4b-f23edccaddb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:31:f3:44:ea:94:86:86:19:01:b3:5c:67:f7: c4:b2:d8:6c:9e:e8:58:c3:ba:14:3f:71:b8:8b:22: 4b:32:55:79:fc:4c:fb:15:2a:5f:d3:ee:4c:78:6c: 6e:a7:5b:82:98:86:cf:0f:00:9c:5d:84:76:82:57: 38:1f:b6:b7:ec:35:67:52:b3:06:1f:6d:fc:e2:1e: 68:1a:31:6e:b6:64:ea:be:85:2d:4a:78:54:ab:45: 79:f8:90:f9:ad:19:c1:26:f4:4d:0b:bc:3e:6f:41: 68:bd:1f:dd:31:5a:b8:8d:13:a6:a6:50:f5:4e:2c: 19:9d:15:f6:d6:29:b2:fc:68:a3:a6:1a:fa:71:1d: 43:67:9b:6a:b2:50:ec:fa:47:73:9d:33:9b:94:e2: a7:2a:be:5a:14:79:48:da:ca:fa:c5:3a:b7:89:2a: 5d:d4:3b:95:b4:86:45:2c:e3:11:52:ff:5c:8e:2e: cb:33:e1:a1:b8:d9:1a:a6:de:a7:dc:93:51:21:73: 82:e1:17:9b:6e:fc:37:3f:10:30:2d:e1:f0:51:85: 69:7c:ac:85:cd:cf:ab:e9:06:47:84:3d:bf:c9:a4: 16:0e:55:60:61:20:cd:6f:41:cc:a1:77:de:93:9f: aa:68:ee:98:35:9f:15:f1:2e:e2:16:01:9f:cd:ca: a5:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:46:60:F8:49:EA:98:AC:B8:2A:25:AF:FD:23:E4:3D:66:CE:33:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/9e34ec51-e0ea-37a3-a13e-58c3020191b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 130.35.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:65:79:26:53:f7:e3:4e:73:f2:5f:5c:d2:ad:d5:29:dd:1d: dc:ab:81:6d:e9:aa:1b:da:cc:e3:12:36:04:0c:78:a0:62:f3: 92:91:88:20:1c:7c:28:b0:f0:c4:34:ea:65:2d:34:d2:71:e9: f2:33:3b:39:13:4b:85:74:f3:c3:ce:1f:0f:c6:8e:5b:ab:ce: 1b:f8:03:72:21:79:5d:a9:04:b4:95:b3:ee:5c:08:0b:23:43: 91:60:16:f7:f8:a3:94:08:9f:bb:85:e6:a2:55:12:49:25:08: e9:65:35:1d:42:a9:d0:7d:ff:5f:19:7b:e7:8e:b4:46:84:f1: 54:b4:e1:8d:c2:69:93:48:aa:09:f9:94:20:79:37:53:fa:df: a6:fa:61:48:20:0e:57:fa:4f:cc:cc:4f:ef:11:3f:9c:0c:33: 46:4a:71:d3:9a:fa:b5:db:40:8b:90:09:eb:c5:0d:2e:36:ce: b7:ef:34:09:1c:14:51:3b:43:67:6e:9f:15:c2:2f:97:3e:c7: f6:6e:ed:43:3b:0b:2d:be:e3:26:27:a3:44:38:c8:49:97:4a: 03:0d:03:9f:13:68:2f:ad:86:65:be:17:4c:9c:73:ac:f0:72: 90:ef:7d:97:61:18:d5:3b:64:a7:82:92:dc:84:82:53:0d:4a: e3:de:df:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5wn3ggLDz/MylVUoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDcwOTA5MDAxM1oXDTI2MTAwNzA5MDAxM1owLzEtMCsGA1UEAxMk NjRhNDUxZTctYjM4Ni00Y2RhLWFhNGItZjIzZWRjY2FkZGI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5jHzROqUhoYZAbNcZ/fEsthsnuhYw7oUP3G4 iyJLMlV5/Ez7FSpf0+5MeGxup1uCmIbPDwCcXYR2glc4H7a37DVnUrMGH2384h5o GjFutmTqvoUtSnhUq0V5+JD5rRnBJvRNC7w+b0FovR/dMVq4jROmplD1TiwZnRX2 1imy/Gijphr6cR1DZ5tqslDs+kdznTOblOKnKr5aFHlI2sr6xTq3iSpd1DuVtIZF LOMRUv9cji7LM+GhuNkapt6n3JNRIXOC4Rebbvw3PxAwLeHwUYVpfKyFzc+r6QZH hD2/yaQWDlVgYSDNb0HMoXfek5+qaO6YNZ8V8S7iFgGfzcqllQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFApGYPhJ6pisuColr/0j5D1mzjMbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvOWUzNGVjNTEtZTBlYS0z N2EzLWExM2UtNThjMzAyMDE5MWI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgiMIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE5leSZT9+NOc/JfXNKt1SndHdyrgW3pqhvazOMSNgQMeKBi85KRiCAc fCiw8MQ06mUtNNJx6fIzOzkTS4V088POHw/Gjlurzhv4A3IheV2pBLSVs+5cCAsj Q5FgFvf4o5QIn7uF5qJVEkklCOllNR1CqdB9/18Ze+eOtEaE8VS04Y3CaZNIqgn5 lCB5N1P636b6YUggDlf6T8zMT+8RP5wMM0ZKcdOa+rXbQIuQCevFDS42zrfvNAkc FFE7Q2dunxXCL5c+x/Zu7UM7Cy2+4yYno0Q4yEmXSgMNA58TaC+thmW+F0ycc6zw cpDvfZdhGNU7ZKeCktyEglMNSuPe3xc= -----END CERTIFICATE-----Generated at Fri Jul 24 01:53:56 2026 by rpki-client