$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/dad674c5-ebd7-3788-b544-2d295a8ac901.roa File: dad674c5-ebd7-3788-b544-2d295a8ac901.roa (raw, json) Hash identifier: 3JB1SJCXxonbaP4HT55ctrAlU8cvgSb4d1bN8sBQT7Y= Subject key identifier: 6D:6E:67:16:E7:72:49:0B:A3:72:51:9A:85:56:92:0D:88:D3:D0:05 Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584E709F774DCC9D6E93C96CF670 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/dad674c5-ebd7-3788-b544-2d295a8ac901.roa Signing time: Thu 09 Jul 2026 09:00:13 +0000 ROA not before: Thu 09 Jul 2026 09:00:13 +0000 ROA not after: Wed 07 Oct 2026 09:00:13 +0000 asID: 31898 IP address blocks: 130.35.136.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:70:9f:77:4d:cc:9d:6e:93:c9:6c:f6:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Jul 9 09:00:13 2026 GMT Not After : Oct 7 09:00:13 2026 GMT Subject: CN=6b06916d-90a2-4902-aefa-bcd9a9debc7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:2f:f9:2a:4b:68:39:78:12:91:08:1e:84:d6: c4:32:72:2c:89:92:fa:62:04:c8:64:2d:0e:6e:41: f0:31:f6:29:f1:12:6d:ca:4c:b5:2c:e9:17:89:b3: 97:10:ad:5f:64:69:e8:86:a0:ab:93:8b:ca:ba:8c: 6a:6c:f6:33:f3:1f:25:7a:6c:9b:2f:56:a2:56:df: 3f:db:c2:ee:75:05:82:68:f1:0f:89:b0:ab:98:13: 2c:a0:d8:cc:fe:15:3d:a3:7a:13:47:90:88:1d:f4: 3a:92:8c:ee:94:28:7d:ee:6b:2d:55:4b:1e:5b:c6: 15:0d:ea:cb:c1:8e:f9:77:23:10:1a:54:87:2e:ab: 37:33:28:4a:94:88:15:ea:30:d1:df:43:b4:7f:4c: e8:07:c8:4c:9e:a9:46:6f:4a:4f:b9:5d:d0:ef:02: b9:fc:87:a3:bf:11:de:85:47:47:42:ba:75:02:ab: a9:2d:32:e8:9e:9d:6d:67:ef:86:ab:4a:f3:bf:3b: 51:56:76:ac:b2:08:b2:a4:21:4f:f5:c2:ea:f2:4f: 29:09:a0:f9:7e:11:e6:93:5a:5a:74:de:43:53:58: b2:84:63:17:48:da:1e:0e:0d:50:81:50:07:61:49: 38:54:77:65:59:a5:50:ca:bc:dd:73:b3:05:2b:42: 78:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:6E:67:16:E7:72:49:0B:A3:72:51:9A:85:56:92:0D:88:D3:D0:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/dad674c5-ebd7-3788-b544-2d295a8ac901.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 130.35.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:6b:7a:50:22:b4:13:d5:76:94:df:c6:d4:b8:20:f6:d3:29: b3:63:d2:d9:ad:3b:41:11:3c:4b:b0:62:a1:da:89:2e:09:84: 04:62:f6:13:81:e1:f8:69:c1:32:a6:cc:09:00:d7:13:d8:db: 12:d9:8f:bc:7a:af:34:1e:fb:ab:cd:19:77:1a:b0:f6:1f:3f: 59:8a:e6:1a:8c:94:3c:a1:19:9c:3e:a3:d1:45:f2:86:3a:76: 54:cf:50:2c:12:3b:5e:1c:b6:08:87:ac:e1:dc:0f:e0:3f:06: 17:f0:7b:73:d6:93:1d:da:cf:36:f9:d4:70:84:8f:44:b9:ee: 71:98:c7:ec:a9:e7:b5:ac:3e:8c:a9:6c:4d:a2:c4:76:2c:3b: 64:2f:84:cc:73:09:4d:7d:0b:2c:33:66:83:33:a3:5f:2a:e0: f5:f7:ad:3e:40:4b:6a:39:8e:ab:71:85:f1:fd:ed:6f:e8:8e: f8:b4:3a:78:69:85:fe:d9:9b:92:c6:55:c7:86:48:1f:55:83: 5a:6c:f0:ca:5f:51:5e:8a:f0:01:c1:89:7f:12:d9:da:1b:f3: 00:1e:8f:b2:f5:62:d2:45:22:50:9e:46:05:2f:09:b9:9d:22: 99:ba:73:e7:59:59:b5:fb:f0:86:09:b7:cf:b9:08:a0:94:de: 7e:d2:91:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5wn3dNzJ1uk8ls9nAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDcwOTA5MDAxM1oXDTI2MTAwNzA5MDAxM1owLzEtMCsGA1UEAxMk NmIwNjkxNmQtOTBhMi00OTAyLWFlZmEtYmNkOWE5ZGViYzdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAly/5KktoOXgSkQgehNbEMnIsiZL6YgTIZC0O bkHwMfYp8RJtyky1LOkXibOXEK1fZGnohqCrk4vKuoxqbPYz8x8lemybL1aiVt8/ 28LudQWCaPEPibCrmBMsoNjM/hU9o3oTR5CIHfQ6kozulCh97mstVUseW8YVDerL wY75dyMQGlSHLqs3MyhKlIgV6jDR30O0f0zoB8hMnqlGb0pPuV3Q7wK5/IejvxHe hUdHQrp1AqupLTLonp1tZ++Gq0rzvztRVnassgiypCFP9cLq8k8pCaD5fhHmk1pa dN5DU1iyhGMXSNoeDg1QgVAHYUk4VHdlWaVQyrzdc7MFK0J4ewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG1uZxbnckkLo3JRmoVWkg2I09AFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvZGFkNjc0YzUtZWJkNy0z Nzg4LWI1NDQtMmQyOTVhOGFjOTAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgiOIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA1relAitBPVdpTfxtS4IPbTKbNj0tmtO0ERPEuwYqHaiS4JhARi9hOB 4fhpwTKmzAkA1xPY2xLZj7x6rzQe+6vNGXcasPYfP1mK5hqMlDyhGZw+o9FF8oY6 dlTPUCwSO14ctgiHrOHcD+A/Bhfwe3PWkx3azzb51HCEj0S57nGYx+yp57WsPoyp bE2ixHYsO2QvhMxzCU19CywzZoMzo18q4PX3rT5AS2o5jqtxhfH97W/ojvi0Onhp hf7Zm5LGVceGSB9Vg1ps8MpfUV6K8AHBiX8S2dob8wAej7L1YtJFIlCeRgUvCbmd Ipm6c+dZWbX78IYJt8+5CKCU3n7SkaQ= -----END CERTIFICATE-----Generated at Fri Jul 24 00:56:54 2026 by rpki-client