$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/bf2a86be-ddfc-3570-9f60-30127542aaa1.roa File: bf2a86be-ddfc-3570-9f60-30127542aaa1.roa (raw, json) Hash identifier: aMe2rdMW8FPUlEhy7IxFG0gDBMKVvI6TolepMCDMbd4= Subject key identifier: 8C:AD:B1:CB:A6:41:75:F9:CC:6C:D0:D0:48:5D:88:88:18:B6:B2:F5 Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584F1B625540964AEC7FC593A700 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/bf2a86be-ddfc-3570-9f60-30127542aaa1.roa Signing time: Tue 08 Sep 2026 13:00:12 +0000 ROA not before: Tue 08 Sep 2026 13:00:12 +0000 ROA not after: Mon 07 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 130.35.200.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1b:62:55:40:96:4a:ec:7f:c5:93:a7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Sep 8 13:00:12 2026 GMT Not After : Dec 7 14:00:12 2026 GMT Subject: CN=c2698f7a-619d-44c7-b2d8-2fb84d5738f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:fd:82:a8:15:b6:64:a6:14:52:3d:d1:39:e2: d0:a9:5e:3b:4e:41:18:1c:3f:bb:eb:a6:d0:b6:e8: 79:1c:f1:c1:5b:8e:bd:c1:71:64:1c:97:ae:c2:b0: 49:99:53:29:70:39:15:45:b2:e3:59:c7:23:7d:3f: 18:c8:77:1e:54:78:17:1e:25:c9:df:93:a6:08:18: 46:f4:90:ed:7a:0a:d1:e7:1e:32:ee:0a:e8:3b:4f: 4c:91:51:20:4f:70:71:d6:74:f0:73:00:3c:d5:04: 4e:f9:49:9d:5e:4a:61:52:4e:c9:f3:a5:bd:c4:69: 4a:ad:5a:8e:20:9c:78:c4:99:46:89:8b:a6:9e:ee: d6:2a:29:e5:3e:a2:8c:50:5e:ae:8f:ad:2e:f4:bd: ff:d5:07:d1:bd:9c:f0:91:64:80:da:e6:1c:2d:ac: 4c:3a:f6:d5:af:47:fb:b2:03:39:57:9c:db:8e:92: f0:80:9c:98:e2:6c:c7:45:91:37:30:32:63:2a:e6: 93:a4:58:07:c2:47:1c:2e:03:99:f6:b4:db:a1:e5: c9:c4:13:5f:d6:eb:58:6a:a3:4d:a9:af:b8:31:6e: 0e:10:66:38:0b:43:3c:3f:91:35:25:bd:be:2a:24: 68:cc:0f:d2:95:7a:de:7e:c6:72:21:9b:29:d7:49: 93:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:AD:B1:CB:A6:41:75:F9:CC:6C:D0:D0:48:5D:88:88:18:B6:B2:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/bf2a86be-ddfc-3570-9f60-30127542aaa1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 130.35.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:ab:35:3a:39:35:e3:f9:45:55:8b:ad:96:e2:36:d3:b4:c0: ea:b4:fa:56:e2:06:62:76:f4:3e:3a:38:5e:ae:e5:16:5b:07: 08:f5:0d:e7:18:89:81:27:26:b7:3a:1b:92:b9:8a:b9:16:fd: e5:35:ef:b3:6a:85:35:44:3b:a4:6b:11:d6:85:f6:e4:19:7c: e2:13:76:94:14:e7:b8:8b:23:af:d6:1e:5e:01:ec:34:2c:a2: 4c:c7:8c:60:23:0d:d8:1a:b9:bd:b3:02:91:08:06:4d:8d:56: 37:ea:67:51:8f:77:66:32:63:e3:1d:8f:29:11:27:d1:b1:8b: 8b:d0:06:2e:4f:ae:67:0e:77:b4:ab:0e:3d:2d:e6:e9:ba:3b: fc:d4:30:37:c2:b0:17:bb:c0:f1:23:31:fe:c2:9c:1c:9b:73: 4e:13:80:0f:16:28:1e:1f:9f:e3:70:c0:05:48:3e:01:4d:e6: 7c:7c:24:00:3a:5e:fc:02:af:2b:b7:13:5c:68:df:06:a1:ad: 48:bb:3f:64:7f:3f:8a:7d:57:21:44:75:9c:99:fc:0f:46:a6: 67:d9:58:9d:b5:fc:f9:ec:11:a0:09:94:80:aa:a3:ac:3f:97: db:c6:f0:6e:cd:30:53:27:89:18:02:ca:35:19:50:e2:39:a0: 77:33:92:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8bYlVAlkrsf8WTpwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDkwODEzMDAxMloXDTI2MTIwNzE0MDAxMlowLzEtMCsGA1UEAxMk YzI2OThmN2EtNjE5ZC00NGM3LWIyZDgtMmZiODRkNTczOGY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuP2CqBW2ZKYUUj3ROeLQqV47TkEYHD+766bQ tuh5HPHBW469wXFkHJeuwrBJmVMpcDkVRbLjWccjfT8YyHceVHgXHiXJ35OmCBhG 9JDtegrR5x4y7groO09MkVEgT3Bx1nTwcwA81QRO+UmdXkphUk7J86W9xGlKrVqO IJx4xJlGiYumnu7WKinlPqKMUF6uj60u9L3/1QfRvZzwkWSA2uYcLaxMOvbVr0f7 sgM5V5zbjpLwgJyY4mzHRZE3MDJjKuaTpFgHwkccLgOZ9rTboeXJxBNf1utYaqNN qa+4MW4OEGY4C0M8P5E1Jb2+KiRozA/SlXrefsZyIZsp10mT5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIytscumQXX5zGzQ0EhdiIgYtrL1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvYmYyYTg2YmUtZGRmYy0z NTcwLTlmNjAtMzAxMjc1NDJhYWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgiPIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFurNTo5NeP5RVWLrZbiNtO0wOq0+lbiBmJ29D46OF6u5RZbBwj1DecY iYEnJrc6G5K5irkW/eU177NqhTVEO6RrEdaF9uQZfOITdpQU57iLI6/WHl4B7DQs okzHjGAjDdgaub2zApEIBk2NVjfqZ1GPd2YyY+MdjykRJ9Gxi4vQBi5PrmcOd7Sr Dj0t5um6O/zUMDfCsBe7wPEjMf7CnBybc04TgA8WKB4fn+NwwAVIPgFN5nx8JAA6 XvwCryu3E1xo3wahrUi7P2R/P4p9VyFEdZyZ/A9GpmfZWJ21/PnsEaAJlICqo6w/ l9vG8G7NMFMniRgCyjUZUOI5oHczkvc= -----END CERTIFICATE-----Generated at Sat Sep 26 07:39:11 2026 by rpki-client