$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/570595b1-8680-4be0-ba0e-5d08aa118fab/5add42d1-36f3-3157-8d5b-f7f4011d479d.roa File: 5add42d1-36f3-3157-8d5b-f7f4011d479d.roa (raw, json) Hash identifier: aSsepQrDpqYKXDi5FCrlcAF2PxvQLkVEgKK4W4Xja4Q= Subject key identifier: CC:DA:74:61:64:9F:64:26:76:E9:94:E1:5C:F0:84:0B:46:8A:97:42 Certificate issuer: /CN=570595b1-8680-4be0-ba0e-5d08aa118fab Certificate serial: 010D0C9F4328584EA17AB08C1BFA98B4155BA540 Authority key identifier: FD:09:09:32:99:88:D4:8A:73:6D:0F:7F:1D:C8:55:6C:B1:30:BD:D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/570595b1-8680-4be0-ba0e-5d08aa118fab.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/570595b1-8680-4be0-ba0e-5d08aa118fab/5add42d1-36f3-3157-8d5b-f7f4011d479d.roa Signing time: Sun 26 Jul 2026 21:00:11 +0000 ROA not before: Sun 26 Jul 2026 21:00:11 +0000 ROA not after: Sat 24 Oct 2026 21:00:11 +0000 asID: 8075 IP address blocks: 130.20.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/570595b1-8680-4be0-ba0e-5d08aa118fab/570595b1-8680-4be0-ba0e-5d08aa118fab.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/570595b1-8680-4be0-ba0e-5d08aa118fab/570595b1-8680-4be0-ba0e-5d08aa118fab.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/570595b1-8680-4be0-ba0e-5d08aa118fab.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a1:7a:b0:8c:1b:fa:98:b4:15:5b:a5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=570595b1-8680-4be0-ba0e-5d08aa118fab Validity Not Before: Jul 26 21:00:11 2026 GMT Not After : Oct 24 21:00:11 2026 GMT Subject: CN=e9fa2a46-a599-4a6e-bc39-0cc157be61b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:55:fd:d4:8a:29:d5:cf:d6:9a:0a:e7:a1:85: 5f:a2:97:6a:c2:c7:c6:ae:e7:3c:8b:b8:c9:62:8b: 2f:d6:d9:dc:e7:23:71:ce:0f:c1:00:6e:23:df:8f: d6:8b:0a:f2:70:c1:4e:75:2f:69:d5:7f:93:47:61: c1:f2:40:73:49:22:55:5f:d3:e2:16:32:d8:77:6a: 5e:dc:5e:17:7e:4e:a5:a5:51:1c:ce:e9:f6:7f:51: a6:7f:3e:15:3c:b5:24:d3:5a:5a:89:13:ef:91:23: 14:ea:1b:63:b4:da:bc:23:c8:20:ee:75:63:26:72: 16:49:3c:f6:1a:02:30:f7:46:fc:e9:8e:25:a0:06: 32:c3:db:03:e5:61:b7:22:5b:e2:46:2a:82:72:d7: 38:78:cd:b5:62:ba:d5:1b:50:11:cc:20:38:2d:94: c3:5e:19:e6:b4:a9:4d:6d:95:b6:fa:26:a0:cc:83: 12:9a:c1:6b:68:74:c0:71:4d:1c:c6:77:ad:ee:79: 5b:99:1f:eb:ff:08:9a:c2:ae:dd:cc:a0:9f:7f:7e: ae:fc:c9:57:83:14:6f:d6:75:c5:a1:8b:7b:2a:53: 70:28:0e:cc:e2:ab:c5:c9:e8:17:87:bb:84:7b:ba: 51:df:23:7c:17:6f:b5:c9:df:0f:bd:68:24:a0:47: 9f:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:DA:74:61:64:9F:64:26:76:E9:94:E1:5C:F0:84:0B:46:8A:97:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/570595b1-8680-4be0-ba0e-5d08aa118fab/5add42d1-36f3-3157-8d5b-f7f4011d479d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/570595b1-8680-4be0-ba0e-5d08aa118fab/570595b1-8680-4be0-ba0e-5d08aa118fab.crl X509v3 Authority Key Identifier: keyid:FD:09:09:32:99:88:D4:8A:73:6D:0F:7F:1D:C8:55:6C:B1:30:BD:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/570595b1-8680-4be0-ba0e-5d08aa118fab.cer sbgp-ipAddrBlock: critical IPv4: 130.20.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:67:60:3d:6c:94:f7:39:2a:6f:6c:c6:5a:2a:34:49:d9:34: 38:f6:9d:72:be:69:b9:f7:38:cf:4b:c1:ba:51:45:20:0b:17: 4c:f9:da:23:88:fb:96:b5:8b:bf:fe:9d:46:9c:1e:d6:d0:ed: 0d:89:03:38:10:75:53:f2:12:32:8d:a3:da:51:f0:60:fa:aa: 97:74:0b:92:97:cb:a1:1e:58:36:51:b5:d1:d4:4e:f8:59:cc: d4:85:ca:35:e1:07:78:c8:44:74:ae:da:af:82:0e:94:82:60: 5f:af:73:17:4a:8e:d0:e3:5c:dd:a6:4d:0e:ca:4c:2d:ef:26: df:59:1f:ea:48:50:e7:6b:17:70:d5:dd:51:20:a9:83:ce:02: dc:ff:a4:b0:5b:64:54:3f:63:bf:bf:a2:81:f5:bd:db:96:49: 73:5b:ed:40:d3:ff:56:2c:24:f4:1f:ac:6e:16:ad:64:8e:fd: a1:ae:ff:40:01:77:2b:72:34:a0:0f:1d:1c:46:67:6c:e1:dc: 58:83:4d:d6:47:c9:96:8d:d7:61:fc:2f:48:9e:aa:1a:53:58: 78:0e:33:12:03:67:6d:73:ea:0e:4f:44:8e:9f:10:a2:58:46: 10:11:13:29:60:b1:53:14:ed:fa:6e:66:6f:cc:fe:49:63:86: 28:ee:b3:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6herCMG/qYtBVbpUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTcwNTk1YjEtODY4MC00YmUwLWJhMGUtNWQwOGFhMTE4 ZmFiMB4XDTI2MDcyNjIxMDAxMVoXDTI2MTAyNDIxMDAxMVowLzEtMCsGA1UEAxMk ZTlmYTJhNDYtYTU5OS00YTZlLWJjMzktMGNjMTU3YmU2MWIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkFX91Iop1c/WmgrnoYVfopdqwsfGruc8i7jJ Yosv1tnc5yNxzg/BAG4j34/WiwrycMFOdS9p1X+TR2HB8kBzSSJVX9PiFjLYd2pe 3F4Xfk6lpVEczun2f1Gmfz4VPLUk01paiRPvkSMU6htjtNq8I8gg7nVjJnIWSTz2 GgIw90b86Y4loAYyw9sD5WG3IlviRiqCctc4eM21YrrVG1ARzCA4LZTDXhnmtKlN bZW2+iagzIMSmsFraHTAcU0cxnet7nlbmR/r/wiawq7dzKCff36u/MlXgxRv1nXF oYt7KlNwKA7M4qvFyegXh7uEe7pR3yN8F2+1yd8PvWgkoEefYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMzadGFkn2QmdumU4VzwhAtGipdCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi81NzA1 OTViMS04NjgwLTRiZTAtYmEwZS01ZDA4YWExMThmYWIvNWFkZDQyZDEtMzZmMy0z MTU3LThkNWItZjdmNDAxMWQ0NzlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNTcwNTk1YjEtODY4MC00YmUwLWJh MGUtNWQwOGFhMTE4ZmFiLzU3MDU5NWIxLTg2ODAtNGJlMC1iYTBlLTVkMDhhYTEx OGZhYi5jcmwwHwYDVR0jBBgwFoAU/QkJMpmI1IpzbQ9/HchVbLEwvdAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi81NzA1OTViMS04NjgwLTRiZTAtYmEwZS01ZDA4 YWExMThmYWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAghQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJtnYD1slPc5Km9sxloqNEnZNDj2nXK+abn3OM9LwbpRRSALF0z52iOI +5a1i7/+nUacHtbQ7Q2JAzgQdVPyEjKNo9pR8GD6qpd0C5KXy6EeWDZRtdHUTvhZ zNSFyjXhB3jIRHSu2q+CDpSCYF+vcxdKjtDjXN2mTQ7KTC3vJt9ZH+pIUOdrF3DV 3VEgqYPOAtz/pLBbZFQ/Y7+/ooH1vduWSXNb7UDT/1YsJPQfrG4WrWSO/aGu/0AB dytyNKAPHRxGZ2zh3FiDTdZHyZaN12H8L0ieqhpTWHgOMxIDZ21z6g5PRI6fEKJY RhAREylgsVMU7fpuZm/M/kljhijus7U= -----END CERTIFICATE-----Generated at Fri Sep 4 22:42:11 2026 by rpki-client