$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/cbd3d565-f240-36cb-a8a1-e8218f9a14a4.roa File: cbd3d565-f240-36cb-a8a1-e8218f9a14a4.roa (raw, json) Hash identifier: aKRim+2NrdDDcBGtPU9IHfUfd6WWkDSls1oIRG/0830= Subject key identifier: B7:3C:0C:11:AD:FB:AB:AE:33:3A:FA:00:E6:65:0B:9B:EF:1D:E0:B7 Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584D905A9E5BDF89DD439605BB80 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/cbd3d565-f240-36cb-a8a1-e8218f9a14a4.roa Signing time: Mon 20 Apr 2026 01:00:24 +0000 ROA not before: Mon 20 Apr 2026 01:00:24 +0000 ROA not after: Sun 19 Jul 2026 01:00:24 +0000 asID: 31898 IP address blocks: 130.35.12.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:90:5a:9e:5b:df:89:dd:43:96:05:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Apr 20 01:00:24 2026 GMT Not After : Jul 19 01:00:24 2026 GMT Subject: CN=34534d7f-60aa-4b5f-b0b0-4f3a2d15b022 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:7f:1d:75:aa:28:0a:a6:27:a9:23:23:5c:aa: 7c:90:4f:79:25:aa:a2:6c:16:65:d2:e7:25:38:a7: 0f:84:d4:cd:17:e7:01:bf:57:52:ce:52:6b:ae:61: bb:64:1b:1f:e9:9d:99:b4:2d:0c:65:f9:07:1d:94: 31:b7:39:1a:1e:39:96:bf:e2:1b:b8:62:d6:17:3f: a6:fe:9e:e0:6c:0a:6f:be:14:43:9e:91:6f:e1:75: 34:31:50:cf:8e:e1:45:85:d5:35:b5:f4:d1:db:13: 1c:da:1f:4d:ac:bc:a8:b3:71:a9:59:cb:b4:05:7f: 0a:55:e2:10:b3:48:2a:22:2b:1f:f8:be:73:a2:13: f2:61:c5:79:52:c8:2e:97:17:6b:f1:8b:a3:a4:fa: 7d:c3:94:0d:8d:7f:a3:a4:a1:4f:44:d7:3d:4c:d9: 25:c5:4d:ee:8d:05:c4:73:16:64:72:d5:78:5b:8c: 95:92:45:63:50:30:53:82:8d:e9:5c:5e:3a:62:ac: 29:76:ac:57:0d:a6:5d:dd:59:81:fa:8d:ea:b8:93: c3:67:25:6a:db:1e:18:a5:ca:70:88:32:1f:76:c4: 1f:84:41:17:cc:cd:16:95:23:31:d4:ed:81:41:2e: e8:2a:cf:c8:03:ac:ed:0a:70:25:d1:5a:47:3e:6c: 8c:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:3C:0C:11:AD:FB:AB:AE:33:3A:FA:00:E6:65:0B:9B:EF:1D:E0:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/cbd3d565-f240-36cb-a8a1-e8218f9a14a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 130.35.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:a2:65:d1:75:16:e0:14:9d:e2:24:4c:c1:c6:d5:6d:f3:04: e2:e3:eb:2f:04:88:67:50:11:ee:e2:98:1a:9f:82:eb:74:95: ba:13:53:72:f0:94:cb:fb:7c:d2:3d:91:11:85:ae:0a:01:f1: 26:7e:2a:03:fc:98:bf:ef:f8:39:45:a4:25:66:2f:26:6d:b7: 08:42:58:0d:5d:1e:c2:ce:5e:aa:e3:44:44:0f:b0:c6:33:92: f6:8a:6f:fe:03:48:69:90:74:77:57:23:24:80:65:73:99:ab: 39:29:b9:93:1c:e0:da:e6:cf:c0:dc:f4:5b:51:f0:92:3c:12: ea:12:d4:31:8f:4f:33:3a:71:2a:56:f5:98:dc:71:c6:c4:8e: 85:0d:56:9d:91:db:bf:03:00:77:18:48:fc:5c:6f:d8:e9:22: 68:21:af:90:77:53:f7:c3:b8:70:06:66:c7:bf:bd:fe:ce:56: 57:29:a0:c7:92:58:8c:2f:42:60:e3:c6:6f:97:09:2d:4e:ab: 61:e2:a5:f1:ec:3a:c8:b8:c7:4a:80:2c:3b:43:7b:57:ad:6d: ce:b7:41:fe:f7:ca:e7:c7:73:18:bc:f5:6a:21:8f:a0:49:c1: 76:85:4a:f0:5a:20:ea:37:36:61:92:8e:80:37:ad:7b:51:b0: ef:e7:f1:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2QWp5b34ndQ5YFu4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDQyMDAxMDAyNFoXDTI2MDcxOTAxMDAyNFowLzEtMCsGA1UEAxMk MzQ1MzRkN2YtNjBhYS00YjVmLWIwYjAtNGYzYTJkMTViMDIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl38ddaooCqYnqSMjXKp8kE95JaqibBZl0ucl OKcPhNTNF+cBv1dSzlJrrmG7ZBsf6Z2ZtC0MZfkHHZQxtzkaHjmWv+IbuGLWFz+m /p7gbApvvhRDnpFv4XU0MVDPjuFFhdU1tfTR2xMc2h9NrLyos3GpWcu0BX8KVeIQ s0gqIisf+L5zohPyYcV5Usgulxdr8YujpPp9w5QNjX+jpKFPRNc9TNklxU3ujQXE cxZkctV4W4yVkkVjUDBTgo3pXF46YqwpdqxXDaZd3VmB+o3quJPDZyVq2x4Ypcpw iDIfdsQfhEEXzM0WlSMx1O2BQS7oKs/IA6ztCnAl0VpHPmyMQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLc8DBGt+6uuMzr6AOZlC5vvHeC3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvY2JkM2Q1NjUtZjI0MC0z NmNiLWE4YTEtZTgyMThmOWExNGE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgiMMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGWiZdF1FuAUneIkTMHG1W3zBOLj6y8EiGdQEe7imBqfgut0lboTU3Lw lMv7fNI9kRGFrgoB8SZ+KgP8mL/v+DlFpCVmLyZttwhCWA1dHsLOXqrjREQPsMYz kvaKb/4DSGmQdHdXIySAZXOZqzkpuZMc4Nrmz8Dc9FtR8JI8EuoS1DGPTzM6cSpW 9ZjcccbEjoUNVp2R278DAHcYSPxcb9jpImghr5B3U/fDuHAGZse/vf7OVlcpoMeS WIwvQmDjxm+XCS1Oq2HipfHsOsi4x0qALDtDe1etbc63Qf73yufHcxi89Wohj6BJ wXaFSvBaIOo3NmGSjoA3rXtRsO/n8Qc= -----END CERTIFICATE-----Generated at Wed May 13 09:04:41 2026 by rpki-client