$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/36d28d8a-6795-3085-bde6-a93fcc335348.roa File: 36d28d8a-6795-3085-bde6-a93fcc335348.roa (raw, json) Hash identifier: XqUxIz1zrvKQFUIFhJ5f2+6KmPXuPw3YoQb7YTP/Goc= Subject key identifier: 98:9D:3A:DE:91:F7:20:C7:39:04:33:FA:7B:00:48:0B:56:64:A3:04 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D8EF5691A7660314BBE91DA00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/36d28d8a-6795-3085-bde6-a93fcc335348.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 31898 IP address blocks: 130.61.98.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f5:69:1a:76:60:31:4b:be:91:da:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=7e8f99ee-22b0-4ef1-819f-e0ad9bdcb7d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:51:2e:ca:52:29:e4:34:79:54:8d:85:49:3f: fa:a4:cc:4d:dd:4d:0f:e7:0a:92:00:bc:1d:e1:b7: dd:3d:5d:fa:5f:0f:43:9b:05:e9:49:d2:1d:08:f2: 47:e4:67:6f:12:b8:26:34:dc:ea:c2:be:98:1d:20: d4:f4:62:de:88:b3:e0:ce:aa:24:44:b8:5e:12:0a: 9d:e0:8d:21:ac:b8:1e:ea:0a:fe:23:4d:bc:bc:63: 3f:16:00:97:e9:e4:07:d8:47:07:86:e2:55:d8:f4: ad:43:7a:a7:51:34:4c:7c:4e:a5:7e:ae:07:ee:be: a3:71:6c:8a:3d:21:10:9f:e6:8d:31:d2:f3:0f:ef: db:a3:82:0f:58:87:da:4b:a4:47:02:92:68:6f:a9: ff:52:a7:e7:0c:6c:db:ed:db:cf:cb:55:aa:22:76: fc:7b:74:4b:d1:55:8d:47:e5:79:98:94:d6:ba:56: 1c:30:c7:98:4d:24:46:6c:1c:bc:b1:20:e2:d5:e6: 51:4f:2a:03:91:9a:98:6b:9c:1b:a4:89:eb:8d:12: d3:4a:49:5d:a9:e2:82:40:71:3e:6e:3f:15:97:27: b3:d4:f3:f1:57:ec:18:b3:51:6d:80:6b:87:1e:64: e4:35:61:2b:df:59:81:90:0c:64:d5:d5:3f:a3:b4: 39:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:9D:3A:DE:91:F7:20:C7:39:04:33:FA:7B:00:48:0B:56:64:A3:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/36d28d8a-6795-3085-bde6-a93fcc335348.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 130.61.98.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:2a:71:2c:cd:23:a8:ea:d0:c6:dc:04:bf:e6:e3:f3:6d:0b: c9:5a:15:c6:85:73:30:1d:f4:2c:c0:42:ad:e1:85:e9:f5:04: 70:02:4a:46:0d:bc:8f:49:b6:b8:dd:98:af:c9:74:9a:91:6c: 7a:20:ed:90:66:50:e1:97:ec:ff:64:4e:68:f0:88:f9:de:14: 82:70:f1:8c:8b:19:6d:30:2f:75:3f:1e:5c:4c:21:59:88:ea: e1:bf:9f:71:89:08:34:68:b2:2b:91:9f:f4:08:93:52:2e:b5: 10:b1:5c:a4:69:41:94:15:4e:4c:53:42:bb:0d:ff:e1:d7:81: e6:de:36:f0:42:d1:04:d2:f3:b8:9b:ca:1c:c1:c2:38:aa:fd: 73:4d:17:cc:10:d7:b1:7e:ee:12:fa:ec:c3:f2:8c:48:2f:f6: fc:09:1f:d8:d0:fe:bf:11:06:1a:32:32:95:a0:7e:ec:ee:e1: 1a:82:ce:7b:42:23:ed:a1:73:65:9d:26:3b:ec:68:5a:e7:d8: 6b:54:ae:d2:5c:e2:60:49:7a:57:89:00:a1:08:01:ec:83:7c: 1a:91:6d:4c:e8:21:53:d0:2e:df:63:79:f2:92:e1:c1:9a:29: 61:fe:5b:da:14:13:02:a4:7b:8a:74:f2:e4:f1:29:1f:bf:9a: 52:40:35:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9WkadmAxS76R2gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk N2U4Zjk5ZWUtMjJiMC00ZWYxLTgxOWYtZTBhZDliZGNiN2Q1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1EuylIp5DR5VI2FST/6pMxN3U0P5wqSALwd 4bfdPV36Xw9DmwXpSdIdCPJH5GdvErgmNNzqwr6YHSDU9GLeiLPgzqokRLheEgqd 4I0hrLge6gr+I028vGM/FgCX6eQH2EcHhuJV2PStQ3qnUTRMfE6lfq4H7r6jcWyK PSEQn+aNMdLzD+/bo4IPWIfaS6RHApJob6n/UqfnDGzb7dvPy1WqInb8e3RL0VWN R+V5mJTWulYcMMeYTSRGbBy8sSDi1eZRTyoDkZqYa5wbpInrjRLTSkldqeKCQHE+ bj8Vlyez1PPxV+wYs1FtgGuHHmTkNWEr31mBkAxk1dU/o7Q5JQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJidOt6R9yDHOQQz+nsASAtWZKMEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMzZkMjhkOGEtNjc5NS0z MDg1LWJkZTYtYTkzZmNjMzM1MzQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgj1iMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKYqcSzNI6jq0MbcBL/m4/NtC8laFcaFczAd9CzAQq3hhen1BHACSkYN vI9JtrjdmK/JdJqRbHog7ZBmUOGX7P9kTmjwiPneFIJw8YyLGW0wL3U/HlxMIVmI 6uG/n3GJCDRosiuRn/QIk1IutRCxXKRpQZQVTkxTQrsN/+HXgebeNvBC0QTS87ib yhzBwjiq/XNNF8wQ17F+7hL67MPyjEgv9vwJH9jQ/r8RBhoyMpWgfuzu4RqCzntC I+2hc2WdJjvsaFrn2GtUrtJc4mBJeleJAKEIAeyDfBqRbUzoIVPQLt9jefKS4cGa KWH+W9oUEwKke4p08uTxKR+/mlJANek= -----END CERTIFICATE-----Generated at Wed May 13 06:53:22 2026 by rpki-client