$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/9e34ec51-e0ea-37a3-a13e-58c3020191b5.roa File: 9e34ec51-e0ea-37a3-a13e-58c3020191b5.roa (raw, json) Hash identifier: 4Wh1j1hs/DbiNyUndj5yfW3qYG4BULps6d3i0lu1KU4= Subject key identifier: 21:25:0A:61:62:A2:A2:1C:75:43:45:2B:3F:24:96:C7:E0:44:01:8E Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584F130246110A1811CA83D518C0 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/9e34ec51-e0ea-37a3-a13e-58c3020191b5.roa Signing time: Sat 05 Sep 2026 13:00:12 +0000 ROA not before: Sat 05 Sep 2026 13:00:12 +0000 ROA not after: Fri 04 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 130.35.8.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:13:02:46:11:0a:18:11:ca:83:d5:18:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Sep 5 13:00:12 2026 GMT Not After : Dec 4 14:00:12 2026 GMT Subject: CN=9d9a77ef-72ab-44d4-a7d8-f0c72f6e0a7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:af:3d:a2:72:94:a1:27:87:1a:11:5a:db:ba: fd:98:77:97:f0:8d:1b:46:ac:56:7f:8d:f3:bd:b3: bb:a6:29:c5:2e:f0:6f:14:50:4a:ac:6f:af:7a:da: ed:81:2f:cf:1f:4b:c6:a1:f5:e0:e6:ad:fd:ac:6c: f6:4a:81:a1:f2:50:5e:d4:1f:8b:8a:58:b6:67:95: 17:85:1b:13:98:4b:1b:15:6c:a1:66:27:d6:56:e0: e3:b1:61:d8:03:19:06:58:24:42:e7:d9:27:65:06: 11:42:24:44:de:38:df:4f:90:50:10:70:95:07:c7: 93:27:2e:c0:19:a4:e5:27:47:7a:19:18:de:c5:50: 99:46:6e:d8:4b:f7:4f:eb:46:90:c9:de:91:15:05: 5d:93:2b:78:f0:1a:77:de:62:25:60:b7:3e:4c:8c: d7:6d:d4:c5:ae:bc:fa:c1:56:1d:3a:94:1d:4c:c2: b8:46:07:f6:27:ce:0b:e4:08:f4:45:05:c4:c1:d6: 28:cb:7d:0f:13:71:ff:17:16:c8:a5:c4:4a:0c:72: 4b:cf:37:6b:ae:6d:76:c5:58:38:52:ae:3e:e1:2b: 77:80:11:52:ca:be:40:c7:67:15:12:16:cb:ed:82: 8b:3e:90:51:ad:cf:94:c9:c3:d3:ac:7e:c4:b5:2d: 84:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:25:0A:61:62:A2:A2:1C:75:43:45:2B:3F:24:96:C7:E0:44:01:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/9e34ec51-e0ea-37a3-a13e-58c3020191b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 130.35.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:21:1d:50:ab:df:76:a7:13:04:a1:a3:0f:6f:3d:99:20:91: 3b:4b:7a:e3:d2:11:f3:3a:ba:30:06:fd:87:5d:ca:cf:12:de: b5:bc:20:ad:d3:33:f9:2b:f0:2f:84:91:72:57:aa:1b:cd:dc: 12:a4:04:7d:5c:e1:bd:ab:20:72:12:2e:5a:84:eb:1e:10:b5: fc:59:60:97:e4:46:51:38:98:47:c7:17:61:a6:bb:e4:fa:55: 1a:23:8c:d2:a1:8a:c6:74:bf:26:00:81:5f:a1:eb:73:f2:09: 74:0a:02:7a:d1:2e:41:7d:89:05:96:b3:06:7f:ac:19:16:52: a0:e4:09:e0:c0:c2:fd:65:42:b6:27:2d:0d:48:3c:88:7d:18: 7c:cd:29:f8:41:f3:c7:0b:8f:51:30:94:fc:ba:bf:9e:7b:ba: 49:54:c4:29:72:aa:5b:53:8f:17:cd:97:0b:72:d9:65:f1:34: a9:87:85:e7:6b:fc:c3:b4:b2:ec:7c:fb:45:87:83:d0:00:74: 07:e4:ce:cc:d4:8f:aa:da:cf:5e:29:3e:77:07:f4:81:80:de: 21:03:63:71:a2:40:f1:8c:42:da:cf:6d:40:74:07:c9:0a:37: 7e:27:40:47:8d:c4:c1:de:9d:55:ee:f6:0a:6f:9a:29:34:fb: 9d:01:38:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8TAkYRChgRyoPVGMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDkwNTEzMDAxMloXDTI2MTIwNDE0MDAxMlowLzEtMCsGA1UEAxMk OWQ5YTc3ZWYtNzJhYi00NGQ0LWE3ZDgtZjBjNzJmNmUwYTdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAma89onKUoSeHGhFa27r9mHeX8I0bRqxWf43z vbO7pinFLvBvFFBKrG+vetrtgS/PH0vGofXg5q39rGz2SoGh8lBe1B+Lili2Z5UX hRsTmEsbFWyhZifWVuDjsWHYAxkGWCRC59knZQYRQiRE3jjfT5BQEHCVB8eTJy7A GaTlJ0d6GRjexVCZRm7YS/dP60aQyd6RFQVdkyt48Bp33mIlYLc+TIzXbdTFrrz6 wVYdOpQdTMK4Rgf2J84L5Aj0RQXEwdYoy30PE3H/FxbIpcRKDHJLzzdrrm12xVg4 Uq4+4St3gBFSyr5Ax2cVEhbL7YKLPpBRrc+UycPTrH7EtS2E3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCElCmFioqIcdUNFKz8klsfgRAGOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvOWUzNGVjNTEtZTBlYS0z N2EzLWExM2UtNThjMzAyMDE5MWI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgiMIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIchHVCr33anEwShow9vPZkgkTtLeuPSEfM6ujAG/Yddys8S3rW8IK3T M/kr8C+EkXJXqhvN3BKkBH1c4b2rIHISLlqE6x4QtfxZYJfkRlE4mEfHF2Gmu+T6 VRojjNKhisZ0vyYAgV+h63PyCXQKAnrRLkF9iQWWswZ/rBkWUqDkCeDAwv1lQrYn LQ1IPIh9GHzNKfhB88cLj1EwlPy6v557uklUxClyqltTjxfNlwty2WXxNKmHhedr /MO0sux8+0WHg9AAdAfkzszUj6raz14pPncH9IGA3iEDY3GiQPGMQtrPbUB0B8kK N34nQEeNxMHenVXu9gpvmik0+50BOMM= -----END CERTIFICATE-----Generated at Sat Sep 26 16:59:40 2026 by rpki-client