$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/bf2a86be-ddfc-3570-9f60-30127542aaa1.roa File: bf2a86be-ddfc-3570-9f60-30127542aaa1.roa (raw, json) Hash identifier: LXtbQuVwAXKZDCEhDUO+0pkeV8T/v1Md3L3m6E28dTU= Subject key identifier: E5:24:A7:8B:9F:34:DF:56:0F:59:2A:07:8C:C2:5C:46:93:9C:3E:FC Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584E78FF874D8B76BB6F747C29C0 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/bf2a86be-ddfc-3570-9f60-30127542aaa1.roa Signing time: Sun 12 Jul 2026 09:00:11 +0000 ROA not before: Sun 12 Jul 2026 09:00:11 +0000 ROA not after: Sat 10 Oct 2026 09:00:11 +0000 asID: 31898 IP address blocks: 130.35.200.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:78:ff:87:4d:8b:76:bb:6f:74:7c:29:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Jul 12 09:00:11 2026 GMT Not After : Oct 10 09:00:11 2026 GMT Subject: CN=a70a8bb7-f4d4-41db-ad48-38b7baba6632 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:85:19:af:ad:54:82:a4:b1:76:30:e7:34:67: 0d:80:1d:43:23:f2:6e:25:10:85:b4:31:32:29:0f: 02:18:11:80:2b:05:06:b0:26:c7:6b:c6:25:15:f7: 8c:d9:bb:5a:b6:9b:01:1c:b2:a3:f2:92:60:df:9c: a5:43:d9:c9:47:34:15:1f:84:c4:9f:c1:f1:2b:ad: 61:e7:84:01:87:9a:cd:02:6d:70:f3:b3:a7:52:7a: f8:d7:65:cc:08:71:de:23:7c:ba:3f:f8:a9:15:c7: 25:95:36:94:95:bc:cb:af:a5:11:9a:f9:77:b1:d2: 19:70:f9:f3:40:d9:89:e6:7e:7e:82:52:b4:f7:72: 1d:99:f6:d1:3a:08:fa:d3:4d:39:82:92:2d:7d:73: 1d:bf:4b:91:54:79:99:1f:d6:45:f4:a6:6e:ea:27: c2:bb:f2:a7:ad:0e:5b:35:6a:49:33:a5:3c:ab:d8: 38:3d:7c:71:8e:b9:93:12:ad:ee:d7:e5:37:7e:67: 21:f3:82:c8:85:b8:0d:7f:d8:5b:83:e2:7b:89:45: 81:27:5a:54:7a:2c:50:3d:da:fd:79:65:79:2e:f8: d2:5b:ac:92:e0:d7:91:83:b9:bf:d6:5a:9f:8b:93: 7d:67:2a:c0:33:d1:81:15:32:56:e1:9c:aa:33:6e: 73:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:24:A7:8B:9F:34:DF:56:0F:59:2A:07:8C:C2:5C:46:93:9C:3E:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/bf2a86be-ddfc-3570-9f60-30127542aaa1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 130.35.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:56:7f:61:a8:a2:a7:58:3e:0b:82:ba:06:fb:db:d3:56:02: b8:ab:cf:e4:53:75:5d:1e:5b:16:10:cc:b6:f8:8f:5b:15:1f: 51:b4:bb:a9:57:14:d3:b8:f4:82:bf:4c:53:77:37:3e:32:4f: 12:ce:d8:37:65:f0:c5:b8:f6:3e:ea:74:5d:91:73:6e:92:bc: db:be:f9:d9:c2:ad:f1:63:f1:60:c0:af:30:c6:90:f0:80:c3: f0:03:69:cf:5f:2a:0d:ed:15:f3:48:8b:49:60:6c:47:04:a4: ec:5f:c6:5c:35:11:a0:5f:62:b1:09:96:9f:00:fe:1c:b3:88: 28:ee:cb:15:57:cc:85:3a:7d:91:9f:40:4f:d2:8f:76:43:9a: 33:6b:9e:d5:b4:5e:10:ca:85:cb:ab:c5:da:2b:a5:c9:b4:3c: 79:f8:b8:a9:8c:b1:e6:c5:d8:43:4b:47:b0:fa:cb:31:7e:88: 2d:2a:21:88:2d:24:bf:1e:cd:58:31:c9:41:8d:a3:1b:51:76: e7:ae:d4:20:f0:21:52:94:98:5a:20:7b:31:7c:7a:86:d3:4b: 48:b9:89:d4:fb:e6:48:a0:45:be:30:68:89:9d:a4:c0:ca:fd: ed:a4:9b:3d:2a:8e:4a:87:04:32:11:ad:0f:e6:5f:49:f7:52: 73:5d:db:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE54/4dNi3a7b3R8KcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDcxMjA5MDAxMVoXDTI2MTAxMDA5MDAxMVowLzEtMCsGA1UEAxMk YTcwYThiYjctZjRkNC00MWRiLWFkNDgtMzhiN2JhYmE2NjMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8oUZr61UgqSxdjDnNGcNgB1DI/JuJRCFtDEy KQ8CGBGAKwUGsCbHa8YlFfeM2btatpsBHLKj8pJg35ylQ9nJRzQVH4TEn8HxK61h 54QBh5rNAm1w87OnUnr412XMCHHeI3y6P/ipFccllTaUlbzLr6URmvl3sdIZcPnz QNmJ5n5+glK093IdmfbROgj60005gpItfXMdv0uRVHmZH9ZF9KZu6ifCu/KnrQ5b NWpJM6U8q9g4PXxxjrmTEq3u1+U3fmch84LIhbgNf9hbg+J7iUWBJ1pUeixQPdr9 eWV5LvjSW6yS4NeRg7m/1lqfi5N9ZyrAM9GBFTJW4ZyqM25zAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOUkp4ufNN9WD1kqB4zCXEaTnD78MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvYmYyYTg2YmUtZGRmYy0z NTcwLTlmNjAtMzAxMjc1NDJhYWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgiPIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFVWf2GooqdYPguCugb729NWArirz+RTdV0eWxYQzLb4j1sVH1G0u6lX FNO49IK/TFN3Nz4yTxLO2Ddl8MW49j7qdF2Rc26SvNu++dnCrfFj8WDArzDGkPCA w/ADac9fKg3tFfNIi0lgbEcEpOxfxlw1EaBfYrEJlp8A/hyziCjuyxVXzIU6fZGf QE/Sj3ZDmjNrntW0XhDKhcurxdorpcm0PHn4uKmMsebF2ENLR7D6yzF+iC0qIYgt JL8ezVgxyUGNoxtRdueu1CDwIVKUmFogezF8eobTS0i5idT75kigRb4waImdpMDK /e2kmz0qjkqHBDIRrQ/mX0n3UnNd2zQ= -----END CERTIFICATE-----Generated at Fri Jul 24 09:42:00 2026 by rpki-client