$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/11a8d685-5401-340f-a257-d9727d529de7.roa File: 11a8d685-5401-340f-a257-d9727d529de7.roa (raw, json) Hash identifier: 3AKMoiWPB/6i1PDU7B0YXry0m3aA4v8qMm2cF+rYqKs= Subject key identifier: 10:E5:81:CB:E4:41:E1:A4:B5:17:C3:99:A9:0F:0F:D0:36:75:3E:6B Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584F1B624449D7BE6EC429AD0700 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/11a8d685-5401-340f-a257-d9727d529de7.roa Signing time: Tue 08 Sep 2026 13:00:12 +0000 ROA not before: Tue 08 Sep 2026 13:00:12 +0000 ROA not after: Mon 07 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 130.35.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1b:62:44:49:d7:be:6e:c4:29:ad:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Sep 8 13:00:12 2026 GMT Not After : Dec 7 14:00:12 2026 GMT Subject: CN=d8023d40-0b50-4e10-bb72-e6249f997e80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:22:6b:d4:3d:a8:13:55:54:9d:ba:54:0b:42: 82:7d:3e:73:42:ad:b0:ef:2e:ef:93:3f:31:62:aa: b9:fa:71:f3:88:2e:20:34:63:d1:f3:a6:0e:50:d8: 85:f1:73:e3:cb:08:b3:fc:af:14:22:99:68:3c:3f: be:23:57:2a:87:19:e4:9c:ab:ea:b7:16:07:82:82: 08:ed:65:ab:6c:83:c4:47:fe:a4:82:3d:a1:49:a5: 2c:58:56:c4:e4:00:fd:14:5c:46:6d:0a:11:13:ba: c3:83:e3:5e:d0:db:e2:36:3a:a6:74:0d:08:ab:84: 90:f4:9c:d2:86:5c:e9:1a:22:65:f0:d2:bd:cc:b8: 9c:ca:f2:7d:2b:13:62:be:cc:2a:49:8e:59:9e:85: fa:7c:03:ee:14:2e:44:38:ec:4b:a7:27:c5:ab:8b: 69:34:70:6b:8d:7e:eb:ac:10:a0:95:d8:90:56:1a: e3:9d:b3:02:2f:b6:7f:b1:f3:e7:54:a0:d0:b6:c6: 80:5c:02:19:b0:af:3a:4f:bf:35:b9:d5:0f:49:bb: 1b:92:fa:d4:d8:b4:85:94:da:fb:4e:90:b5:5b:ce: c6:9b:5c:5f:9a:44:88:d6:ac:8c:93:e8:43:1c:6e: 6d:44:e1:3a:10:0f:1c:02:6b:7f:aa:e2:da:e7:53: b6:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:E5:81:CB:E4:41:E1:A4:B5:17:C3:99:A9:0F:0F:D0:36:75:3E:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/11a8d685-5401-340f-a257-d9727d529de7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 130.35.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:53:a3:0c:b6:2a:03:c7:9e:ca:19:8c:dd:ff:79:94:aa:d7: e5:8b:4c:af:91:30:48:66:fe:6e:e7:31:1c:e5:75:aa:09:d7: e6:f0:15:46:06:a2:24:8f:54:99:a1:d1:97:68:25:68:a1:33: 13:fe:f1:d4:cf:3b:e6:0d:53:bc:22:a7:0b:c5:6f:8f:e6:ca: 54:65:c6:10:0c:a0:d8:83:00:81:38:f1:aa:9e:9f:60:97:fd: 8f:f1:8e:2c:d5:f9:25:84:4f:15:da:bc:a3:e4:f9:22:53:2c: 2d:c8:c2:20:8c:10:8c:b1:5b:14:3c:9d:6a:1f:8e:5e:b3:70: 85:11:51:6a:fe:33:47:29:c2:eb:bc:69:c2:6c:be:bf:eb:aa: b4:0c:53:e9:e2:ea:be:3d:1b:39:20:6a:71:fe:5f:de:79:d5: b0:89:c3:3d:ce:88:95:1c:d9:70:0d:fc:ff:05:85:9f:b4:42: 76:64:9a:e4:01:0c:52:70:be:fb:5f:6a:57:c4:15:70:3e:e8: a6:b1:3a:a5:84:82:25:cd:02:9f:e9:1f:71:6b:e2:8e:d6:fc: fa:32:dd:3a:94:1d:39:b9:c3:d2:73:31:09:e5:8e:69:76:c6: d9:8e:19:f6:ea:cf:6e:96:48:06:9a:7d:91:17:22:36:82:71: 8e:89:96:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8bYkRJ175uxCmtBwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDkwODEzMDAxMloXDTI2MTIwNzE0MDAxMlowLzEtMCsGA1UEAxMk ZDgwMjNkNDAtMGI1MC00ZTEwLWJiNzItZTYyNDlmOTk3ZTgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnyJr1D2oE1VUnbpUC0KCfT5zQq2w7y7vkz8x Yqq5+nHziC4gNGPR86YOUNiF8XPjywiz/K8UIploPD++I1cqhxnknKvqtxYHgoII 7WWrbIPER/6kgj2hSaUsWFbE5AD9FFxGbQoRE7rDg+Ne0NviNjqmdA0Iq4SQ9JzS hlzpGiJl8NK9zLicyvJ9KxNivswqSY5ZnoX6fAPuFC5EOOxLpyfFq4tpNHBrjX7r rBCgldiQVhrjnbMCL7Z/sfPnVKDQtsaAXAIZsK86T781udUPSbsbkvrU2LSFlNr7 TpC1W87Gm1xfmkSI1qyMk+hDHG5tROE6EA8cAmt/quLa51O2qQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBDlgcvkQeGktRfDmakPD9A2dT5rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvMTFhOGQ2ODUtNTQwMS0z NDBmLWEyNTctZDk3MjdkNTI5ZGU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEgiPgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAtTowy2KgPHnsoZjN3/eZSq1+WLTK+RMEhm/m7nMRzldaoJ1+bwFUYG oiSPVJmh0ZdoJWihMxP+8dTPO+YNU7wipwvFb4/mylRlxhAMoNiDAIE48aqen2CX /Y/xjizV+SWETxXavKPk+SJTLC3IwiCMEIyxWxQ8nWofjl6zcIURUWr+M0cpwuu8 acJsvr/rqrQMU+ni6r49GzkganH+X9551bCJwz3OiJUc2XAN/P8FhZ+0QnZkmuQB DFJwvvtfalfEFXA+6KaxOqWEgiXNAp/pH3Fr4o7W/Poy3TqUHTm5w9JzMQnljml2 xtmOGfbqz26WSAaafZEXIjaCcY6JlsU= -----END CERTIFICATE-----Generated at Tue Sep 22 12:30:29 2026 by rpki-client