$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/a482b3bb-c93a-30ef-abc9-55e310ba9b57.roa File: a482b3bb-c93a-30ef-abc9-55e310ba9b57.roa (raw, json) Hash identifier: q1NYqjWeMzONwbPQSL8gYvUHdrjAf4dhY7wX2PG0bos= Subject key identifier: D2:45:D6:F1:FB:91:45:25:8C:3B:96:65:A4:D9:4E:CA:4E:27:62:C6 Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584F11A14A6F1A5B8F36BA93D280 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/a482b3bb-c93a-30ef-abc9-55e310ba9b57.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 31898 IP address blocks: 130.35.112.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:a1:4a:6f:1a:5b:8f:36:ba:93:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=ed5260ad-bc96-4f9c-b4a5-421853908741 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:a4:7b:34:72:c5:28:39:2c:5b:23:f3:93:88: 76:4d:88:7b:16:23:b7:15:45:f1:35:79:5e:ff:d4: b7:7f:61:d6:87:f4:43:19:4b:41:c0:ce:80:03:6e: 67:27:21:ae:d9:b7:df:65:2b:3c:bf:3b:ca:2c:e3: 8c:01:5b:8f:96:8e:98:6d:dd:8f:22:ba:e6:fa:7a: fb:63:a4:af:6d:ee:de:e9:40:f5:c1:9a:25:83:85: c7:87:c9:58:4e:1f:fb:f3:52:0a:57:6a:9f:f4:b7: bc:15:e1:74:5f:71:85:96:90:72:31:40:fc:dd:58: 9b:7a:12:e1:f0:a1:4c:7e:1f:82:d1:07:fb:6b:29: 66:49:8b:ea:6f:6c:54:ee:26:2e:b6:06:8e:36:75: 9b:dc:b0:db:b2:f1:ae:3e:65:37:26:10:85:fb:ae: a3:c0:38:40:69:70:af:37:e3:d7:6d:ae:1f:ae:00: a7:3f:3a:9a:6e:95:ea:6f:5d:5f:b0:c5:b6:16:b3: 95:1b:c8:e3:3f:8c:52:2c:09:72:fe:b9:97:fa:eb: e4:3d:36:54:7f:cb:42:2c:28:5c:0f:1b:56:16:cd: 2e:f2:c7:a2:18:88:2b:b2:c3:11:5f:a5:98:f9:5c: 47:94:20:b8:45:ab:6e:f5:09:f5:7c:31:0f:83:e1: 48:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:45:D6:F1:FB:91:45:25:8C:3B:96:65:A4:D9:4E:CA:4E:27:62:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/a482b3bb-c93a-30ef-abc9-55e310ba9b57.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 130.35.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:a4:15:72:17:8e:9f:36:58:e6:91:4b:58:f0:6b:3f:c7:5c: 57:28:8a:91:bb:ed:8f:d6:f0:32:90:8f:2b:dc:66:2c:06:21: 6b:d6:ee:d8:6c:9a:aa:45:5b:d1:a7:a8:dc:4a:a9:af:f7:83: 23:0f:26:b3:04:5f:87:15:91:42:cb:87:ef:c2:f0:cd:0b:ad: 62:8b:7c:5b:e2:c5:a8:2b:2a:6a:08:25:57:52:22:2a:12:67: 93:b6:be:17:3c:b4:64:dd:e5:af:84:77:0c:42:70:a5:79:78: 98:e3:2f:94:a7:11:3f:fc:f6:84:10:1f:de:4c:ce:d5:3e:82: d7:79:e6:6f:04:b4:c4:66:66:8c:34:7a:12:7f:9e:d6:31:5e: c3:be:23:4e:34:fa:e5:6a:27:b0:c7:60:6b:c9:d5:12:f8:c6: c0:23:40:af:93:e4:3c:8b:70:b9:35:ce:da:2f:a6:c7:07:a4: 74:19:cf:a0:c3:38:68:93:7e:de:e6:6b:73:09:45:d1:66:c6: 95:98:99:78:52:56:e7:60:99:35:d1:76:9c:e8:5b:49:6d:6a: 70:63:45:93:fe:eb:c6:a2:98:d7:d0:29:46:06:81:ce:0e:80: a1:ff:db:01:2a:9c:c6:08:73:b6:e8:70:a4:35:b8:4c:7c:46: 84:7f:cc:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RoUpvGluPNrqT0oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk ZWQ1MjYwYWQtYmM5Ni00ZjljLWI0YTUtNDIxODUzOTA4NzQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhaR7NHLFKDksWyPzk4h2TYh7FiO3FUXxNXle /9S3f2HWh/RDGUtBwM6AA25nJyGu2bffZSs8vzvKLOOMAVuPlo6Ybd2PIrrm+nr7 Y6Svbe7e6UD1wZolg4XHh8lYTh/781IKV2qf9Le8FeF0X3GFlpByMUD83VibehLh 8KFMfh+C0Qf7aylmSYvqb2xU7iYutgaONnWb3LDbsvGuPmU3JhCF+66jwDhAaXCv N+PXba4frgCnPzqabpXqb11fsMW2FrOVG8jjP4xSLAly/rmX+uvkPTZUf8tCLChc DxtWFs0u8seiGIgrssMRX6WY+VxHlCC4Ratu9Qn1fDEPg+FI0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNJF1vH7kUUljDuWZaTZTspOJ2LGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvYTQ4MmIzYmItYzkzYS0z MGVmLWFiYzktNTVlMzEwYmE5YjU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDgiNwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG+kFXIXjp82WOaRS1jwaz/HXFcoipG77Y/W8DKQjyvcZiwGIWvW7ths mqpFW9GnqNxKqa/3gyMPJrMEX4cVkULLh+/C8M0LrWKLfFvixagrKmoIJVdSIioS Z5O2vhc8tGTd5a+EdwxCcKV5eJjjL5SnET/89oQQH95MztU+gtd55m8EtMRmZow0 ehJ/ntYxXsO+I040+uVqJ7DHYGvJ1RL4xsAjQK+T5DyLcLk1ztovpscHpHQZz6DD OGiTft7ma3MJRdFmxpWYmXhSVudgmTXRdpzoW0ltanBjRZP+68aimNfQKUYGgc4O gKH/2wEqnMYIc7bocKQ1uEx8RoR/zEk= -----END CERTIFICATE-----Generated at Tue Sep 22 17:39:31 2026 by rpki-client