$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/2796dd83-8ecf-3782-aabc-8431faeba93e.roa File: 2796dd83-8ecf-3782-aabc-8431faeba93e.roa (raw, json) Hash identifier: Y3HrctDsUyKCyauNEz7pPzyjnvsS3z7sA/tmyC8WbxQ= Subject key identifier: 75:DE:FA:22:8A:CA:58:FA:91:4F:7D:12:0B:34:43:B0:1F:88:F4:99 Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584F1B6244E68342FB310E6F7980 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/2796dd83-8ecf-3782-aabc-8431faeba93e.roa Signing time: Tue 08 Sep 2026 13:00:12 +0000 ROA not before: Tue 08 Sep 2026 13:00:12 +0000 ROA not after: Mon 07 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 130.35.156.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1b:62:44:e6:83:42:fb:31:0e:6f:79:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Sep 8 13:00:12 2026 GMT Not After : Dec 7 14:00:12 2026 GMT Subject: CN=042dcf4c-df8e-40e3-b9f4-9d62f35351d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:03:f8:b5:fc:7e:11:cf:ab:07:3f:70:cc:6f: 39:b6:6d:92:b0:27:03:58:3e:a4:c0:db:1b:d8:59: 80:55:dc:79:fe:33:46:e9:00:92:d1:da:0d:d0:fc: b3:89:95:0d:db:32:65:55:27:46:5e:38:6b:41:35: 23:85:fe:17:e6:4e:cf:4b:ad:01:64:79:27:47:14: 7c:da:17:e5:e1:09:c5:90:2a:b3:5b:97:68:29:0d: 56:9c:20:7d:ed:33:ea:b1:22:40:07:ec:ee:4e:44: d0:57:1e:28:5f:01:e4:86:15:ae:b0:3f:99:29:31: 56:39:55:91:f7:38:85:e6:77:99:39:a6:07:1a:93: b0:c3:97:57:1a:8a:e3:0c:d4:9e:31:5b:66:4e:59: f6:34:34:33:27:93:ce:5b:a4:7b:ad:1d:b0:67:0e: e9:e2:1a:f9:95:8e:80:1b:0a:53:55:ce:df:df:ac: e5:08:58:63:67:56:19:7e:53:18:e0:f0:4e:a5:98: de:5a:bd:3b:b1:8d:90:80:1f:74:4d:4e:16:82:e9: c1:0a:56:b4:b2:13:b3:aa:3d:b2:62:1e:dd:d3:2e: 7e:66:b7:c9:6e:1b:82:51:0c:0e:bb:70:ad:55:9d: 55:48:03:a6:a7:99:1a:b2:d8:90:6d:c3:78:0e:eb: ee:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:DE:FA:22:8A:CA:58:FA:91:4F:7D:12:0B:34:43:B0:1F:88:F4:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/2796dd83-8ecf-3782-aabc-8431faeba93e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 130.35.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:86:69:73:e7:55:9f:32:49:9c:be:c3:05:01:68:cc:a4:02: f8:32:c6:86:a5:bd:80:4f:f1:68:2d:37:4d:93:39:38:a8:5d: ab:48:aa:c9:85:fa:ea:63:3a:be:da:fe:19:fc:41:57:f5:8c: 8c:b4:69:3e:73:80:0b:74:ae:72:8f:fd:e0:b5:ba:cc:72:32: 1f:bf:ba:79:4b:ac:40:c5:bc:49:9c:f4:ae:c4:50:f3:1f:28: 12:bb:a1:27:98:d7:62:c0:c2:f0:2c:c2:7c:34:02:e1:e4:0a: 60:8e:99:b0:32:80:a1:b4:60:e8:84:03:75:15:19:84:a6:03: a8:79:ef:01:99:47:26:66:25:47:a4:42:eb:37:fa:de:95:c0: 1d:e8:09:8d:bd:ae:c9:42:11:df:9e:1e:12:ac:8f:3c:06:f8: 8a:c9:0f:e5:29:6f:b7:e0:a3:12:d9:e7:08:e8:95:38:95:50: 61:d3:a9:d1:a5:cc:34:88:b7:ff:01:c0:7a:78:b4:25:98:33: 4d:69:55:8b:d7:d0:07:cf:be:b0:71:27:7f:09:ce:e4:40:d0: de:d6:05:15:aa:7e:8a:60:d6:3e:e3:1d:57:2a:c2:8c:a5:d1: 37:62:67:ae:5f:41:8d:6a:04:03:01:01:81:60:1c:03:11:46: ea:7b:07:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8bYkTmg0L7MQ5veYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDkwODEzMDAxMloXDTI2MTIwNzE0MDAxMlowLzEtMCsGA1UEAxMk MDQyZGNmNGMtZGY4ZS00MGUzLWI5ZjQtOWQ2MmYzNTM1MWQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAP4tfx+Ec+rBz9wzG85tm2SsCcDWD6kwNsb 2FmAVdx5/jNG6QCS0doN0PyziZUN2zJlVSdGXjhrQTUjhf4X5k7PS60BZHknRxR8 2hfl4QnFkCqzW5doKQ1WnCB97TPqsSJAB+zuTkTQVx4oXwHkhhWusD+ZKTFWOVWR 9ziF5neZOaYHGpOww5dXGorjDNSeMVtmTln2NDQzJ5POW6R7rR2wZw7p4hr5lY6A GwpTVc7f36zlCFhjZ1YZflMY4PBOpZjeWr07sY2QgB90TU4WgunBCla0shOzqj2y Yh7d0y5+ZrfJbhuCUQwOu3CtVZ1VSAOmp5kastiQbcN4DuvudwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHXe+iKKylj6kU99Egs0Q7AfiPSZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvMjc5NmRkODMtOGVjZi0z NzgyLWFhYmMtODQzMWZhZWJhOTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgiOcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH+GaXPnVZ8ySZy+wwUBaMykAvgyxoalvYBP8WgtN02TOTioXatIqsmF +upjOr7a/hn8QVf1jIy0aT5zgAt0rnKP/eC1usxyMh+/unlLrEDFvEmc9K7EUPMf KBK7oSeY12LAwvAswnw0AuHkCmCOmbAygKG0YOiEA3UVGYSmA6h57wGZRyZmJUek Qus3+t6VwB3oCY29rslCEd+eHhKsjzwG+IrJD+Upb7fgoxLZ5wjolTiVUGHTqdGl zDSIt/8BwHp4tCWYM01pVYvX0AfPvrBxJ38JzuRA0N7WBRWqfopg1j7jHVcqwoyl 0TdiZ65fQY1qBAMBAYFgHAMRRup7BwU= -----END CERTIFICATE-----Generated at Mon Sep 21 11:08:29 2026 by rpki-client