$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/1a349d40-bdb1-36e4-bea7-10787672b7df.roa File: 1a349d40-bdb1-36e4-bea7-10787672b7df.roa (raw, json) Hash identifier: ExSbhr8U3gGOoq1HFvp84VliBRUDrogxvYqYedJQs8I= Subject key identifier: 56:3D:2B:E8:7F:2F:7A:32:E9:5C:94:AC:02:1B:37:55:B0:28:0D:F3 Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584F1302463CF77B94F871A12800 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/1a349d40-bdb1-36e4-bea7-10787672b7df.roa Signing time: Sat 05 Sep 2026 13:00:12 +0000 ROA not before: Sat 05 Sep 2026 13:00:12 +0000 ROA not after: Fri 04 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 130.35.4.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:13:02:46:3c:f7:7b:94:f8:71:a1:28:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Sep 5 13:00:12 2026 GMT Not After : Dec 4 14:00:12 2026 GMT Subject: CN=d76a9ace-6cc5-458f-8d4d-621512b8903e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ae:87:8d:3e:f3:3e:8c:8e:97:fe:ee:37:7a: fe:73:48:0c:a0:fb:59:b7:92:ac:24:df:72:00:a2: b4:5d:96:9d:b9:04:bc:a6:c6:98:47:e5:7b:5d:68: 8a:40:38:76:6d:74:76:32:76:20:ce:cb:07:99:36: 02:16:77:2e:c2:52:ef:4b:f6:f7:0a:75:dc:c1:2c: 2c:26:b1:5b:ca:49:6c:e6:3d:33:4b:cb:eb:f1:9b: 82:27:49:51:ac:ff:2d:84:a0:65:69:25:ba:36:2b: b3:96:0a:00:e5:22:4f:d1:2a:a1:35:ad:18:d9:e8: 4e:52:4a:ca:a3:80:b7:83:6f:20:22:fc:10:05:fc: 9c:5c:15:30:e2:30:58:e1:67:b1:8b:f6:de:19:af: 8d:b4:a8:92:89:14:ee:37:40:3a:bd:87:61:50:28: 29:06:bf:09:0e:68:33:10:62:dd:32:46:8d:e4:b4: 0f:2b:a8:23:81:95:36:42:9d:b4:cf:31:1c:97:68: c4:7b:00:39:0f:75:97:01:26:b3:3b:1c:7a:e3:c0: cd:3d:2a:83:cf:dc:ad:b5:63:d8:15:37:dd:01:b6: 34:4e:1c:62:c8:8f:5e:3a:d3:80:b0:b9:67:e2:e6: 97:97:41:bc:02:6d:39:e4:64:35:af:09:3c:27:44: 35:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:3D:2B:E8:7F:2F:7A:32:E9:5C:94:AC:02:1B:37:55:B0:28:0D:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/1a349d40-bdb1-36e4-bea7-10787672b7df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 130.35.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:04:3d:9e:01:bc:2e:4f:ee:95:82:7c:38:cc:4e:a6:8a:0f: 15:f7:b3:ac:26:32:b2:8e:26:0c:de:9b:c0:53:96:63:3f:50: f5:0a:d3:5d:96:40:99:07:4a:ec:2c:04:10:01:1a:5d:7b:83: 8b:6e:34:22:6f:62:96:40:e0:80:a9:03:4e:89:c6:7f:07:18: 59:89:11:bc:70:13:47:6d:68:66:ff:91:03:e3:ec:29:70:7b: e1:12:c3:80:1d:65:75:6e:5f:80:d6:48:28:af:8e:6a:7e:0a: fc:a3:4c:ab:2c:af:68:76:f7:aa:8d:ab:8e:94:6f:54:67:b8: 14:c2:9a:fb:7c:1d:33:65:17:8c:c0:f8:71:f3:91:40:85:5f: f3:bb:e0:80:2f:31:57:86:c2:4f:f6:ef:13:59:26:78:95:50: 60:fe:a0:23:2a:3e:77:7d:49:f4:ed:01:5e:8a:cf:3e:86:61: 57:84:e8:3a:b8:45:b4:c9:e8:47:e2:50:ff:b8:dd:77:d3:76: b9:95:e0:cc:d2:86:e7:af:f5:e3:dd:bd:ba:93:8c:1d:2c:16: ca:1b:0c:82:a1:57:fb:b4:71:2b:42:5e:12:02:51:f4:97:98: 34:63:9a:e5:75:40:08:73:17:aa:f9:29:01:dc:b6:f9:d7:16: 70:8f:f0:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8TAkY893uU+HGhKAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDkwNTEzMDAxMloXDTI2MTIwNDE0MDAxMlowLzEtMCsGA1UEAxMk ZDc2YTlhY2UtNmNjNS00NThmLThkNGQtNjIxNTEyYjg5MDNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmq6HjT7zPoyOl/7uN3r+c0gMoPtZt5KsJN9y AKK0XZaduQS8psaYR+V7XWiKQDh2bXR2MnYgzssHmTYCFncuwlLvS/b3CnXcwSws JrFbykls5j0zS8vr8ZuCJ0lRrP8thKBlaSW6NiuzlgoA5SJP0SqhNa0Y2ehOUkrK o4C3g28gIvwQBfycXBUw4jBY4Wexi/beGa+NtKiSiRTuN0A6vYdhUCgpBr8JDmgz EGLdMkaN5LQPK6gjgZU2Qp20zzEcl2jEewA5D3WXASazOxx648DNPSqDz9yttWPY FTfdAbY0ThxiyI9eOtOAsLln4uaXl0G8Am055GQ1rwk8J0Q1EwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFY9K+h/L3oy6VyUrAIbN1WwKA3zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvMWEzNDlkNDAtYmRiMS0z NmU0LWJlYTctMTA3ODc2NzJiN2RmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgiMEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEgEPZ4BvC5P7pWCfDjMTqaKDxX3s6wmMrKOJgzem8BTlmM/UPUK012W QJkHSuwsBBABGl17g4tuNCJvYpZA4ICpA06Jxn8HGFmJEbxwE0dtaGb/kQPj7Clw e+ESw4AdZXVuX4DWSCivjmp+CvyjTKssr2h296qNq46Ub1RnuBTCmvt8HTNlF4zA +HHzkUCFX/O74IAvMVeGwk/27xNZJniVUGD+oCMqPnd9SfTtAV6Kzz6GYVeE6Dq4 RbTJ6EfiUP+43XfTdrmV4MzShuev9ePdvbqTjB0sFsobDIKhV/u0cStCXhICUfSX mDRjmuV1QAhzF6r5KQHctvnXFnCP8Js= -----END CERTIFICATE-----Generated at Mon Sep 21 21:43:20 2026 by rpki-client