$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/c9e354c6-120c-3abf-85d8-1e2a6bf0bf86.roa File: c9e354c6-120c-3abf-85d8-1e2a6bf0bf86.roa (raw, json) Hash identifier: i20O9i2g2qXPNt9Irme9og2I7kXXQRYwXzJqC48slmw= Subject key identifier: 55:7E:75:7B:F3:2C:67:56:79:1C:C4:DF:08:69:7D:F3:F9:8B:4A:97 Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584F1302477BB591A55E9EE7B540 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/c9e354c6-120c-3abf-85d8-1e2a6bf0bf86.roa Signing time: Sat 05 Sep 2026 13:00:12 +0000 ROA not before: Sat 05 Sep 2026 13:00:12 +0000 ROA not after: Fri 04 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 130.35.132.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:13:02:47:7b:b5:91:a5:5e:9e:e7:b5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Sep 5 13:00:12 2026 GMT Not After : Dec 4 14:00:12 2026 GMT Subject: CN=3e0a2633-2fdb-42df-ab37-9db242f5fd30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:fb:c4:ce:cd:1a:0a:c3:63:2d:4e:75:02:8e: 1d:a5:32:b7:48:98:c4:4e:ab:c0:4c:22:70:b7:6f: c9:48:55:9d:7d:06:3f:37:e0:43:1f:0a:2d:7d:f2: d6:69:fe:c0:45:62:90:31:52:4c:93:d4:e6:21:aa: a2:0c:3f:7f:52:18:cf:8d:9e:f5:d9:bf:13:ea:00: e8:12:70:a1:64:63:68:31:91:28:19:81:9f:4f:6c: 23:bd:01:20:05:f5:2f:ad:f3:c7:b2:75:da:17:a1: 2f:00:60:58:4a:c5:ca:d5:53:06:0c:7e:d6:89:ba: 6b:d4:94:b1:7c:93:2c:15:76:0f:6f:6a:69:f2:c5: 13:c2:06:2b:c9:b1:9d:fc:f9:11:3c:d3:36:77:c8: a8:25:21:4d:45:ad:33:f4:bc:2e:2c:64:7e:7c:2e: 8c:b6:b1:62:3b:16:b7:36:33:0b:21:98:7b:6e:1a: 40:f3:ea:d4:1f:c0:df:54:fa:a4:e8:bb:a2:22:75: 7e:ff:f0:c6:92:dd:29:5a:df:23:65:07:33:5e:72: 64:de:47:4f:a0:c3:28:4b:f8:b0:65:5e:4a:cb:0b: 1d:0e:ae:a2:d2:e8:65:5c:79:93:8e:bd:36:00:95: 7c:ea:e8:72:db:84:ea:e2:95:a7:dc:3d:3c:18:7f: 8d:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:7E:75:7B:F3:2C:67:56:79:1C:C4:DF:08:69:7D:F3:F9:8B:4A:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/c9e354c6-120c-3abf-85d8-1e2a6bf0bf86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 130.35.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:b7:82:86:c1:96:33:28:66:06:c5:82:eb:d4:03:cb:0c:12: b9:2e:f3:ce:61:e9:6a:01:45:3d:74:35:8c:e2:bd:65:ce:c9: ba:55:fc:78:52:af:af:2d:33:b8:ab:12:6b:60:ae:d9:e6:ea: 54:f2:66:ca:4d:19:c2:63:ee:31:a3:25:42:07:4f:87:fe:ac: e5:00:48:77:b6:81:01:37:fa:a0:7b:bb:b4:3a:92:5a:d8:43: a6:b8:5e:80:7a:29:3f:f2:fe:83:22:ee:a9:13:b4:b7:ec:e4: 13:ea:31:cc:4d:fc:34:ba:e5:44:6b:12:db:d4:24:1a:92:04: f4:ad:3a:d5:1c:e2:41:65:6d:3e:7a:67:4c:b0:d3:0e:71:83: 1e:97:bb:e9:23:2d:4a:ad:59:c3:93:da:49:39:f0:54:7a:08: 17:ba:85:44:d3:48:67:85:88:fc:ee:e7:f5:d0:72:5a:c5:c6: 54:02:24:92:54:6c:30:a1:df:d0:f5:47:66:aa:2d:f7:79:82: 3b:48:46:cd:3d:bf:c4:76:ae:ee:83:91:c0:f7:39:ac:c8:ee: 15:ce:47:87:ef:b8:8a:d2:de:9d:87:0d:1c:de:34:ef:f9:2b: 27:2b:9b:ca:65:23:d1:b4:25:69:ac:b8:10:e2:d0:19:23:f3: 52:29:55:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8TAkd7tZGlXp7ntUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDkwNTEzMDAxMloXDTI2MTIwNDE0MDAxMlowLzEtMCsGA1UEAxMk M2UwYTI2MzMtMmZkYi00MmRmLWFiMzctOWRiMjQyZjVmZDMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvvEzs0aCsNjLU51Ao4dpTK3SJjETqvATCJw t2/JSFWdfQY/N+BDHwotffLWaf7ARWKQMVJMk9TmIaqiDD9/UhjPjZ712b8T6gDo EnChZGNoMZEoGYGfT2wjvQEgBfUvrfPHsnXaF6EvAGBYSsXK1VMGDH7Wibpr1JSx fJMsFXYPb2pp8sUTwgYrybGd/PkRPNM2d8ioJSFNRa0z9LwuLGR+fC6MtrFiOxa3 NjMLIZh7bhpA8+rUH8DfVPqk6LuiInV+//DGkt0pWt8jZQczXnJk3kdPoMMoS/iw ZV5KywsdDq6i0uhlXHmTjr02AJV86uhy24Tq4pWn3D08GH+NhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFV+dXvzLGdWeRzE3whpffP5i0qXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvYzllMzU0YzYtMTIwYy0z YWJmLTg1ZDgtMWUyYTZiZjBiZjg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgiOEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAK3gobBljMoZgbFguvUA8sMErku885h6WoBRT10NYzivWXOybpV/HhS r68tM7irEmtgrtnm6lTyZspNGcJj7jGjJUIHT4f+rOUASHe2gQE3+qB7u7Q6klrY Q6a4XoB6KT/y/oMi7qkTtLfs5BPqMcxN/DS65URrEtvUJBqSBPStOtUc4kFlbT56 Z0yw0w5xgx6Xu+kjLUqtWcOT2kk58FR6CBe6hUTTSGeFiPzu5/XQclrFxlQCJJJU bDCh39D1R2aqLfd5gjtIRs09v8R2ru6DkcD3OazI7hXOR4fvuIrS3p2HDRzeNO/5 Kycrm8plI9G0JWmsuBDi0Bkj81IpVaY= -----END CERTIFICATE-----Generated at Wed Sep 23 01:48:42 2026 by rpki-client