$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/661fbe9f-e9fc-361c-bc88-1a82252c4398.roa File: 661fbe9f-e9fc-361c-bc88-1a82252c4398.roa (raw, json) Hash identifier: 7mhuRfIJex6uLbTKeXG3o28+/cSlUQbNdIIGWHb02GI= Subject key identifier: 70:21:6B:FB:D8:73:CA:63:42:19:7B:F2:61:EC:0C:4B:9C:6B:BA:7F Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584F1B6244D756072448E558FA00 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/661fbe9f-e9fc-361c-bc88-1a82252c4398.roa Signing time: Tue 08 Sep 2026 13:00:12 +0000 ROA not before: Tue 08 Sep 2026 13:00:12 +0000 ROA not after: Mon 07 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 130.35.216.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1b:62:44:d7:56:07:24:48:e5:58:fa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Sep 8 13:00:12 2026 GMT Not After : Dec 7 14:00:12 2026 GMT Subject: CN=3e661188-f7f6-4b1e-a2f6-679a81095981 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:1d:ee:4b:a8:7c:35:ff:0c:c0:1f:94:c4:26: d9:e2:22:cb:1e:50:e2:ca:d0:f7:13:64:de:07:ab: 1c:72:06:d5:6e:da:83:58:fe:41:05:4d:59:2a:c8: 50:37:86:6a:69:3a:7f:7c:a1:84:9e:fd:ab:77:17: 9f:cc:a2:fd:ac:b8:6f:27:c7:05:d0:4d:ce:72:15: 6c:d6:e2:13:7f:24:2a:a5:c3:c7:c0:0b:76:d5:e4: c6:09:0c:c8:28:98:c9:92:fe:a5:a8:6f:b4:9f:e3: 76:bb:c2:7e:f1:24:e0:db:46:0d:85:50:e9:a5:66: 2d:dc:a7:35:0e:fe:c0:a8:c5:bd:6f:30:70:92:b9: e2:01:8c:79:26:e7:b4:b7:6b:7b:d6:37:bc:38:95: 73:f9:62:f1:af:0d:21:5b:1d:1b:d3:0c:69:b1:e5: a2:db:9f:84:d2:d9:72:f0:31:ee:30:1a:cf:9e:6f: 3c:ae:ef:d1:14:f9:04:b5:8d:eb:01:ff:ee:d3:57: 67:cf:7f:17:9e:00:04:76:a3:be:15:97:e1:03:4c: 97:a4:1e:17:18:a9:53:a6:24:11:a6:b5:02:d4:54: cf:8a:8e:8b:12:ea:ee:64:52:ac:79:2a:73:08:ca: bc:1f:09:f0:1d:38:b6:d9:28:f3:a5:1c:d4:ac:4e: b5:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:21:6B:FB:D8:73:CA:63:42:19:7B:F2:61:EC:0C:4B:9C:6B:BA:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/661fbe9f-e9fc-361c-bc88-1a82252c4398.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 130.35.216.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:a8:e3:99:23:97:ca:c5:ae:0c:21:be:74:16:c4:68:e0:b1: 18:e6:80:a4:da:dc:64:07:0c:f0:64:b8:11:af:c4:ce:63:07: 19:de:b1:9e:17:f8:54:a2:ef:c7:7e:9d:34:1b:13:85:df:c8: 31:22:f3:ec:02:5c:eb:e4:80:02:5b:cb:8a:0d:f9:59:7c:7f: 85:c4:f1:7f:7e:2b:25:76:0f:43:81:2f:38:5e:3b:28:51:17: da:16:35:d2:87:72:b9:4d:44:f9:63:3b:25:e7:aa:c5:1a:84: ca:d5:0c:c0:9d:33:cc:1e:14:69:c2:53:7c:c4:7f:1c:dc:40: 87:cb:3e:c9:6f:92:f3:35:f3:e8:31:64:02:bd:35:f6:6c:02: 00:d1:e7:e5:52:c9:ec:24:c6:32:2b:ef:42:a8:18:1d:e0:02: 74:db:86:ce:8d:bc:45:df:c5:86:d9:32:8b:51:c4:b4:8a:4a: 81:34:6d:91:e3:38:e5:16:5c:a6:9a:f1:88:07:bc:62:b9:d9: 21:9d:6e:aa:e6:3f:e3:15:99:01:d7:48:80:07:cd:53:d8:dd: 0a:13:22:f7:ab:d5:6b:80:a7:0f:2d:c8:b3:20:9f:6f:68:77: 12:38:cf:d2:d7:f1:75:0e:71:ac:c0:3a:81:cc:de:89:c7:d0: db:4c:4f:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8bYkTXVgckSOVY+gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDkwODEzMDAxMloXDTI2MTIwNzE0MDAxMlowLzEtMCsGA1UEAxMk M2U2NjExODgtZjdmNi00YjFlLWEyZjYtNjc5YTgxMDk1OTgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgh3uS6h8Nf8MwB+UxCbZ4iLLHlDiytD3E2Te B6sccgbVbtqDWP5BBU1ZKshQN4ZqaTp/fKGEnv2rdxefzKL9rLhvJ8cF0E3OchVs 1uITfyQqpcPHwAt21eTGCQzIKJjJkv6lqG+0n+N2u8J+8STg20YNhVDppWYt3Kc1 Dv7AqMW9bzBwkrniAYx5Jue0t2t71je8OJVz+WLxrw0hWx0b0wxpseWi25+E0tly 8DHuMBrPnm88ru/RFPkEtY3rAf/u01dnz38XngAEdqO+FZfhA0yXpB4XGKlTpiQR prUC1FTPio6LEuruZFKseSpzCMq8HwnwHTi22SjzpRzUrE61KQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHAha/vYc8pjQhl78mHsDEuca7p/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvNjYxZmJlOWYtZTlmYy0z NjFjLWJjODgtMWE4MjI1MmM0Mzk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgiPYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAWo45kjl8rFrgwhvnQWxGjgsRjmgKTa3GQHDPBkuBGvxM5jBxnesZ4X +FSi78d+nTQbE4XfyDEi8+wCXOvkgAJby4oN+Vl8f4XE8X9+KyV2D0OBLzheOyhR F9oWNdKHcrlNRPljOyXnqsUahMrVDMCdM8weFGnCU3zEfxzcQIfLPslvkvM18+gx ZAK9NfZsAgDR5+VSyewkxjIr70KoGB3gAnTbhs6NvEXfxYbZMotRxLSKSoE0bZHj OOUWXKaa8YgHvGK52SGdbqrmP+MVmQHXSIAHzVPY3QoTIver1WuApw8tyLMgn29o dxI4z9LX8XUOcazAOoHM3onH0NtMTyk= -----END CERTIFICATE-----Generated at Tue Sep 22 12:40:04 2026 by rpki-client