$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/feb49c17-71be-382f-8b2c-2b1a3a464ac1.roa File: feb49c17-71be-382f-8b2c-2b1a3a464ac1.roa (raw, json) Hash identifier: gPunB1lw04ajnMdK0O2lccbJEfV2KYzLwaqnYaS2j2Q= Subject key identifier: 11:72:8E:7A:B9:D8:4B:38:A3:B5:FF:E0:61:F1:C3:51:22:23:77:CA Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584F1B62462B3075C8E161C23E40 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/feb49c17-71be-382f-8b2c-2b1a3a464ac1.roa Signing time: Tue 08 Sep 2026 13:00:12 +0000 ROA not before: Tue 08 Sep 2026 13:00:12 +0000 ROA not after: Mon 07 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 130.35.64.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1b:62:46:2b:30:75:c8:e1:61:c2:3e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Sep 8 13:00:12 2026 GMT Not After : Dec 7 14:00:12 2026 GMT Subject: CN=b8b3d54d-8638-47b6-9726-2c4377b8d665 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:b6:1c:a7:30:22:02:ed:45:aa:89:fe:1e:99: 99:1d:dd:9d:e3:04:f2:f9:f0:b0:ed:09:d2:74:7c: 62:70:aa:4b:bb:f9:4d:66:dc:6a:d9:ca:05:9a:48: 95:f9:5c:b3:2e:33:d2:3d:f7:53:3b:24:a1:af:10: 72:61:98:81:b7:10:eb:1e:bd:f8:f7:0b:9a:22:4c: 90:21:59:95:b9:81:44:9b:ab:5f:cd:b5:bd:6d:17: 1e:f9:c2:b0:e5:04:70:07:ba:df:bb:6d:a4:be:92: d5:04:ec:2a:bc:48:c3:9e:4d:f6:9a:6f:4c:7a:7a: f3:20:29:11:79:7e:3f:96:64:3c:a1:02:8b:ac:b1: af:d6:3e:b7:7a:63:a4:60:b7:f6:07:58:d9:67:26: 94:96:59:11:08:3e:8c:6f:96:05:f3:10:bf:ea:21: e4:8e:8d:e9:55:87:6b:9a:f9:87:8b:72:a2:6f:5a: 51:c5:a3:ca:c7:40:c8:eb:e8:44:cb:69:15:2b:2f: 84:50:57:35:39:3b:3d:e9:ea:58:9f:f4:20:bb:54: b3:e2:33:07:34:9e:c4:8d:ed:b9:d5:60:73:0b:5c: fb:ab:da:82:34:b2:a9:49:93:a7:e0:62:33:5e:dd: c3:c1:ba:8c:21:5c:62:22:2c:9a:86:84:0a:d2:8e: 27:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:72:8E:7A:B9:D8:4B:38:A3:B5:FF:E0:61:F1:C3:51:22:23:77:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/feb49c17-71be-382f-8b2c-2b1a3a464ac1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 130.35.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:b4:aa:78:19:56:ad:c8:e7:78:96:53:cb:0c:f7:e9:70:20: 00:29:13:08:cb:a3:f8:fe:12:43:08:e4:f5:e5:86:2e:c0:25: 3a:9b:8f:b6:6e:f2:9b:ea:ec:5a:bd:e2:a2:9a:eb:ec:6b:08: 9d:e0:47:8e:de:bd:e3:69:d3:ea:02:0e:69:51:d5:06:93:d6: d5:35:47:0d:d3:64:4d:e3:11:2d:b9:c0:7c:16:82:4e:5e:b4: d6:65:76:4f:ad:08:56:53:ef:fa:36:68:e8:ab:0e:11:28:d6: 02:25:cb:bf:9b:ab:40:6a:9e:f0:5d:9b:9f:c1:c7:39:01:ee: 40:ce:cc:8e:6d:19:fe:7c:46:c0:aa:94:50:81:45:a1:4b:09: 2d:ce:11:5b:88:ff:71:d1:ef:b9:43:b7:15:51:10:46:b5:18: 3b:cf:fb:18:97:c5:8b:43:10:3e:6a:2a:34:5f:a0:0a:1c:bd: 76:d9:46:9c:c2:06:4a:39:78:ce:7b:f6:bc:d3:6f:6c:03:69: 20:8f:84:6e:4c:3a:db:3e:da:41:05:2d:6d:c6:37:f2:e6:2c: 07:5b:1f:e3:bd:cf:b6:d0:d3:f6:54:cd:41:a6:ba:da:b7:c2: 87:a2:96:4a:e0:3c:60:80:be:ed:98:27:a7:19:9c:0f:3f:0a: bc:40:25:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8bYkYrMHXI4WHCPkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDkwODEzMDAxMloXDTI2MTIwNzE0MDAxMlowLzEtMCsGA1UEAxMk YjhiM2Q1NGQtODYzOC00N2I2LTk3MjYtMmM0Mzc3YjhkNjY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibYcpzAiAu1Fqon+HpmZHd2d4wTy+fCw7QnS dHxicKpLu/lNZtxq2coFmkiV+VyzLjPSPfdTOyShrxByYZiBtxDrHr349wuaIkyQ IVmVuYFEm6tfzbW9bRce+cKw5QRwB7rfu22kvpLVBOwqvEjDnk32mm9MenrzICkR eX4/lmQ8oQKLrLGv1j63emOkYLf2B1jZZyaUllkRCD6Mb5YF8xC/6iHkjo3pVYdr mvmHi3Kib1pRxaPKx0DI6+hEy2kVKy+EUFc1OTs96epYn/Qgu1Sz4jMHNJ7Eje25 1WBzC1z7q9qCNLKpSZOn4GIzXt3DwbqMIVxiIiyahoQK0o4nfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBFyjnq52Es4o7X/4GHxw1EiI3fKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvZmViNDljMTctNzFiZS0z ODJmLThiMmMtMmIxYTNhNDY0YWMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEgiNAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFW0qngZVq3I53iWU8sM9+lwIAApEwjLo/j+EkMI5PXlhi7AJTqbj7Zu 8pvq7Fq94qKa6+xrCJ3gR47eveNp0+oCDmlR1QaT1tU1Rw3TZE3jES25wHwWgk5e tNZldk+tCFZT7/o2aOirDhEo1gIly7+bq0BqnvBdm5/BxzkB7kDOzI5tGf58RsCq lFCBRaFLCS3OEVuI/3HR77lDtxVREEa1GDvP+xiXxYtDED5qKjRfoAocvXbZRpzC Bko5eM579rzTb2wDaSCPhG5MOts+2kEFLW3GN/LmLAdbH+O9z7bQ0/ZUzUGmutq3 woeilkrgPGCAvu2YJ6cZnA8/CrxAJdw= -----END CERTIFICATE-----Generated at Mon Sep 28 22:55:40 2026 by rpki-client