$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/dad674c5-ebd7-3788-b544-2d295a8ac901.roa File: dad674c5-ebd7-3788-b544-2d295a8ac901.roa (raw, json) Hash identifier: CsBDqVVnIaL4571lML5MAZ0ZlScHuDoioQoIGkWucE8= Subject key identifier: 08:CC:E9:C3:09:89:F5:71:0B:DE:F5:09:34:53:55:87:15:24:37:9D Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584F1302452D610637A03A66B100 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/dad674c5-ebd7-3788-b544-2d295a8ac901.roa Signing time: Sat 05 Sep 2026 13:00:12 +0000 ROA not before: Sat 05 Sep 2026 13:00:12 +0000 ROA not after: Fri 04 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 130.35.136.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:13:02:45:2d:61:06:37:a0:3a:66:b1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Sep 5 13:00:12 2026 GMT Not After : Dec 4 14:00:12 2026 GMT Subject: CN=a1bb422d-6fd9-4e70-9970-91647279a60f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:20:9b:82:8d:15:05:ed:51:a1:55:17:18:8e: f6:60:99:a0:77:71:44:a9:d5:97:d9:03:f5:b1:7c: 13:45:93:2f:f1:64:fe:93:1c:01:95:68:3d:6a:c9: 18:3c:a3:d4:ae:4d:ac:a6:31:f2:a1:2e:20:4d:f2: 4d:84:d2:d1:c1:87:9b:69:66:d3:0d:e5:22:c6:8a: 39:e4:27:ee:ed:5b:74:34:87:de:a9:6f:6f:60:cf: ad:2d:8c:98:ff:f3:27:3c:bc:44:4d:14:b2:07:35: f1:99:1f:ea:af:ab:af:2f:e1:af:52:ee:f8:13:a1: db:a2:9c:a1:c5:cb:a3:60:30:d5:26:db:49:7d:c5: 9a:0d:36:9a:d7:ed:6a:6a:4f:22:4b:cc:61:bf:de: 93:ba:66:a6:42:ba:a6:5a:de:b4:fd:1a:43:23:dd: b7:33:7c:7b:36:a9:72:d9:7a:7a:08:99:eb:69:95: 02:7d:55:00:90:4e:65:72:87:31:e5:c1:86:9f:11: 1f:15:a4:a9:05:b8:a1:eb:6e:f7:30:34:6d:d4:ab: af:5b:bb:87:f4:99:ca:94:31:7c:35:6b:59:46:9b: ae:bd:73:5f:63:5d:cb:f6:bb:e2:16:58:db:cd:b5: e3:a5:b5:0c:07:c5:95:8c:5b:7a:3d:3c:66:f2:65: 4a:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:CC:E9:C3:09:89:F5:71:0B:DE:F5:09:34:53:55:87:15:24:37:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/dad674c5-ebd7-3788-b544-2d295a8ac901.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 130.35.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:36:3c:06:86:16:69:06:3a:fc:60:d7:34:73:e8:5d:74:e3: f8:a0:7f:7e:43:29:dd:ab:f6:54:f7:d3:61:fd:51:bc:98:e7: 88:b2:ad:95:61:6a:c8:b8:6a:03:aa:4e:36:13:01:ee:99:94: 98:5c:6c:32:fa:a1:5a:4d:59:d9:52:a7:11:bb:a8:25:79:0c: bd:0d:e5:15:79:c0:e1:2c:e4:ed:43:2e:bf:31:5d:6a:8c:5a: 5e:af:0a:8e:7e:a1:4f:64:00:55:a3:5c:71:54:39:88:24:31: 90:e4:29:dd:b6:5e:21:b9:48:49:cb:2a:c0:80:7e:59:57:7c: ec:4f:f9:b4:56:d2:11:bd:46:67:90:bf:ae:b7:e8:97:6b:ea: 53:b3:d2:35:9b:12:38:64:4a:ee:bb:79:90:83:03:8c:25:16: 1c:2f:6d:7d:cd:7f:89:36:74:f9:6e:37:b1:52:6d:d7:1b:53: ca:53:81:f1:bd:e9:6b:25:df:bb:12:92:34:e0:61:f3:a0:23: 56:ba:b8:3e:bf:f9:4a:d4:73:00:53:4a:2d:9a:df:5e:5c:26: 39:1c:92:6f:34:d1:1a:94:42:29:7f:dc:24:5b:69:09:84:c5: 2c:39:99:80:a6:21:6f:6c:a5:46:3c:98:5c:c5:03:0a:f4:90: 46:18:8d:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8TAkUtYQY3oDpmsQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDkwNTEzMDAxMloXDTI2MTIwNDE0MDAxMlowLzEtMCsGA1UEAxMk YTFiYjQyMmQtNmZkOS00ZTcwLTk5NzAtOTE2NDcyNzlhNjBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjiCbgo0VBe1RoVUXGI72YJmgd3FEqdWX2QP1 sXwTRZMv8WT+kxwBlWg9askYPKPUrk2spjHyoS4gTfJNhNLRwYebaWbTDeUixoo5 5Cfu7Vt0NIfeqW9vYM+tLYyY//MnPLxETRSyBzXxmR/qr6uvL+GvUu74E6Hbopyh xcujYDDVJttJfcWaDTaa1+1qak8iS8xhv96TumamQrqmWt60/RpDI923M3x7Nqly 2Xp6CJnraZUCfVUAkE5lcocx5cGGnxEfFaSpBbih6273MDRt1KuvW7uH9JnKlDF8 NWtZRpuuvXNfY13L9rviFljbzbXjpbUMB8WVjFt6PTxm8mVKnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAjM6cMJifVxC971CTRTVYcVJDedMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvZGFkNjc0YzUtZWJkNy0z Nzg4LWI1NDQtMmQyOTVhOGFjOTAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgiOIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIE2PAaGFmkGOvxg1zRz6F104/igf35DKd2r9lT302H9UbyY54iyrZVh asi4agOqTjYTAe6ZlJhcbDL6oVpNWdlSpxG7qCV5DL0N5RV5wOEs5O1DLr8xXWqM Wl6vCo5+oU9kAFWjXHFUOYgkMZDkKd22XiG5SEnLKsCAfllXfOxP+bRW0hG9RmeQ v6636Jdr6lOz0jWbEjhkSu67eZCDA4wlFhwvbX3Nf4k2dPluN7FSbdcbU8pTgfG9 6Wsl37sSkjTgYfOgI1a6uD6/+UrUcwBTSi2a315cJjkckm800RqUQil/3CRbaQmE xSw5mYCmIW9spUY8mFzFAwr0kEYYjfk= -----END CERTIFICATE-----Generated at Sun Sep 27 11:36:48 2026 by rpki-client