$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/e4bb03e6-adb1-38ec-bb7a-e9a3550ceab5.roa File: e4bb03e6-adb1-38ec-bb7a-e9a3550ceab5.roa (raw, json) Hash identifier: +pzBNzBMmvEM2bkwHnfnnMOG5PxCkaarqdO+e2OAsC0= Subject key identifier: 02:8F:1F:A0:98:FB:E1:DA:EC:FF:03:98:7D:E8:42:C4:6A:B0:33:01 Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584E78FF7726F6DED54E8BAD2600 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/e4bb03e6-adb1-38ec-bb7a-e9a3550ceab5.roa Signing time: Sun 12 Jul 2026 09:00:11 +0000 ROA not before: Sun 12 Jul 2026 09:00:11 +0000 ROA not after: Sat 10 Oct 2026 09:00:11 +0000 asID: 31898 IP address blocks: 130.35.144.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:78:ff:77:26:f6:de:d5:4e:8b:ad:26:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Jul 12 09:00:11 2026 GMT Not After : Oct 10 09:00:11 2026 GMT Subject: CN=a270c016-f3b6-49d5-a651-982acbee1220 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:14:8a:2c:39:79:9c:92:8b:87:d0:d7:fe:c4: a0:e0:af:30:09:f8:f9:f2:07:dd:90:85:4d:dc:f2: f4:7c:94:d1:05:72:62:93:8a:4c:16:1e:49:a1:54: 9e:cd:55:60:42:8f:ba:fd:61:b4:36:52:5b:d8:04: 0d:eb:c5:bf:7b:d7:88:b1:d1:9c:55:62:9f:87:ec: 03:3c:f5:71:3c:d5:db:37:13:c6:2e:99:2d:bc:f2: 91:2a:25:42:8b:09:2a:21:01:a6:81:3e:f9:4e:b2: cd:49:39:5d:c0:e2:61:1c:0b:02:a7:ea:b0:3b:67: b7:55:87:7c:76:66:22:51:66:13:52:b0:1d:58:1b: 46:4a:c0:8d:83:b8:cc:58:32:ff:e7:16:60:b9:d9: 3a:e9:1a:e9:d6:89:f9:d5:85:aa:bf:09:9d:41:9c: 90:d0:53:45:e9:9d:8e:1d:1a:c7:68:05:29:35:6e: 0b:ab:29:3f:84:ac:6c:ca:91:1f:9c:ab:c1:60:bc: a6:4d:83:ea:3a:6f:3c:0f:d6:3c:b1:a3:8d:cd:a8: 19:b2:78:89:f6:a5:37:f4:a4:a0:53:e7:37:39:ca: a8:e5:1c:51:77:66:d3:74:2d:20:ea:49:09:d0:c7: bb:af:5a:e6:64:cd:8a:23:5d:10:29:bf:63:d9:b4: 92:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:8F:1F:A0:98:FB:E1:DA:EC:FF:03:98:7D:E8:42:C4:6A:B0:33:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/e4bb03e6-adb1-38ec-bb7a-e9a3550ceab5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 130.35.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:23:4e:75:07:05:ee:d1:6b:ae:6d:de:27:b9:33:51:19:f0: fe:df:b4:b4:f3:70:9f:01:6f:1b:48:53:ee:36:d3:71:8e:e6: 5a:6e:0b:9f:80:d3:8b:bb:91:b7:6a:c5:ae:92:04:a3:f6:d9: b0:44:3c:57:b2:67:58:63:61:81:78:38:0d:c9:db:21:56:45: a8:82:e1:7a:57:54:77:68:98:36:7d:eb:29:58:94:a9:d1:a2: 7d:10:6d:eb:d1:73:47:2f:d1:e1:49:4e:be:8b:7c:fa:07:78: d9:49:1c:3b:44:f5:ed:6a:9e:53:31:04:72:0f:c5:6a:c6:4f: ff:77:cf:07:e2:1a:19:6e:44:03:a2:2a:b0:d0:55:d1:b7:46: f3:c9:bd:1a:ca:3f:75:02:1b:b5:69:c3:0e:35:cb:9a:f7:4a: 32:92:0d:1a:74:a3:12:22:f9:4f:9c:09:45:b3:df:5c:88:1c: 38:92:b1:07:d3:40:7b:10:08:fa:4c:63:52:85:04:89:74:c9: b9:20:88:d0:9a:7a:35:60:3f:6f:39:28:5e:a4:5e:79:9d:3b: ca:e1:0f:19:6b:00:95:a2:e5:5a:ce:76:5d:d8:3a:01:3d:d3: 78:1b:6a:f6:5e:93:01:e8:a4:cf:5a:0c:d2:eb:51:f4:6a:b2: dc:62:ce:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE54/3cm9t7VToutJgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDcxMjA5MDAxMVoXDTI2MTAxMDA5MDAxMVowLzEtMCsGA1UEAxMk YTI3MGMwMTYtZjNiNi00OWQ1LWE2NTEtOTgyYWNiZWUxMjIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4xSKLDl5nJKLh9DX/sSg4K8wCfj58gfdkIVN 3PL0fJTRBXJik4pMFh5JoVSezVVgQo+6/WG0NlJb2AQN68W/e9eIsdGcVWKfh+wD PPVxPNXbNxPGLpktvPKRKiVCiwkqIQGmgT75TrLNSTldwOJhHAsCp+qwO2e3VYd8 dmYiUWYTUrAdWBtGSsCNg7jMWDL/5xZgudk66Rrp1on51YWqvwmdQZyQ0FNF6Z2O HRrHaAUpNW4Lqyk/hKxsypEfnKvBYLymTYPqOm88D9Y8saONzagZsniJ9qU39KSg U+c3Ocqo5RxRd2bTdC0g6kkJ0Me7r1rmZM2KI10QKb9j2bSSywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAKPH6CY++Ha7P8DmH3oQsRqsDMBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvZTRiYjAzZTYtYWRiMS0z OGVjLWJiN2EtZTlhMzU1MGNlYWI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgiOQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGAjTnUHBe7Ra65t3ie5M1EZ8P7ftLTzcJ8BbxtIU+4203GO5lpuC5+A 04u7kbdqxa6SBKP22bBEPFeyZ1hjYYF4OA3J2yFWRaiC4XpXVHdomDZ96ylYlKnR on0QbevRc0cv0eFJTr6LfPoHeNlJHDtE9e1qnlMxBHIPxWrGT/93zwfiGhluRAOi KrDQVdG3RvPJvRrKP3UCG7Vpww41y5r3SjKSDRp0oxIi+U+cCUWz31yIHDiSsQfT QHsQCPpMY1KFBIl0ybkgiNCaejVgP285KF6kXnmdO8rhDxlrAJWi5VrOdl3YOgE9 03gbavZekwHopM9aDNLrUfRqstxizh8= -----END CERTIFICATE-----Generated at Fri Jul 24 03:05:24 2026 by rpki-client