$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1347cdae-54c7-4fcb-9019-0bee16977198/cad5ca65-956d-31bd-87ac-8299da4f56ec.roa File: cad5ca65-956d-31bd-87ac-8299da4f56ec.roa (raw, json) Hash identifier: ZRe24NV6+tFFFFz8jNPa8qzeiV1hrr0Wd9VF9CFC2ao= Subject key identifier: 24:1C:81:57:2A:E0:0D:D1:05:3B:93:F3:AD:26:3C:6F:68:90:DA:CA Certificate issuer: /CN=1347cdae-54c7-4fcb-9019-0bee16977198 Certificate serial: 010D0C9F4328584E4AEF377212CCFBCEA54F45E0 Authority key identifier: 29:C9:3E:41:B6:86:FB:0B:EA:53:17:40:CB:91:D0:B1:34:B2:36:F0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1347cdae-54c7-4fcb-9019-0bee16977198.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1347cdae-54c7-4fcb-9019-0bee16977198/cad5ca65-956d-31bd-87ac-8299da4f56ec.roa Signing time: Thu 25 Jun 2026 21:00:12 +0000 ROA not before: Thu 25 Jun 2026 21:00:12 +0000 ROA not after: Wed 23 Sep 2026 21:00:12 +0000 asID: 25656 IP address blocks: 130.74.0.0/16 maxlen: 16 130.74.0.0/17 maxlen: 17 130.74.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1347cdae-54c7-4fcb-9019-0bee16977198/1347cdae-54c7-4fcb-9019-0bee16977198.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1347cdae-54c7-4fcb-9019-0bee16977198/1347cdae-54c7-4fcb-9019-0bee16977198.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1347cdae-54c7-4fcb-9019-0bee16977198.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4a:ef:37:72:12:cc:fb:ce:a5:4f:45:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1347cdae-54c7-4fcb-9019-0bee16977198 Validity Not Before: Jun 25 21:00:12 2026 GMT Not After : Sep 23 21:00:12 2026 GMT Subject: CN=26383dc0-1ec8-4b5c-8ae8-96b98e0da882 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:6f:b9:8e:35:db:86:f1:d9:67:29:0b:e6:71: 6c:bf:9c:5d:a4:a6:2b:67:27:c2:ea:56:3b:5b:be: ea:de:84:c7:25:32:ed:0c:58:8e:3c:f5:86:3e:d6: 33:d9:93:8b:d8:2a:aa:39:1f:72:f7:82:f6:8b:9c: 57:6a:9d:ce:03:f5:5a:63:18:fa:49:97:53:55:26: a5:87:1c:dc:09:b5:99:f1:c5:d2:ec:ea:60:1c:6f: ce:ed:2f:25:85:79:81:ee:f3:5f:cb:26:79:ae:23: 3a:ab:6f:73:04:aa:81:5d:d9:7a:a4:ea:12:85:a8: d5:d3:2e:7c:9e:85:bc:d0:e4:a3:78:fb:3e:b2:94: da:d2:f2:88:de:ef:b2:f7:1b:6d:99:51:d3:e9:68: 2b:3e:3a:07:61:45:45:44:6d:a5:81:6d:8d:c7:c1: 98:c4:4a:9e:7a:37:10:3d:2c:a3:ac:b5:f7:ce:c2: 17:3f:3f:6c:c1:2d:09:94:78:3d:92:21:c0:a7:1b: 47:a0:bf:1b:3f:53:90:9b:18:b4:8e:b4:94:03:bf: a7:8e:42:ae:7e:7f:1d:1a:cf:e3:96:48:07:68:e0: ca:a0:71:25:a1:20:c4:bf:30:2e:5d:0b:10:7a:d1: 7e:97:fc:07:c1:86:cf:0a:1f:81:dc:46:29:cd:6d: b2:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:1C:81:57:2A:E0:0D:D1:05:3B:93:F3:AD:26:3C:6F:68:90:DA:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1347cdae-54c7-4fcb-9019-0bee16977198/cad5ca65-956d-31bd-87ac-8299da4f56ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1347cdae-54c7-4fcb-9019-0bee16977198/1347cdae-54c7-4fcb-9019-0bee16977198.crl X509v3 Authority Key Identifier: keyid:29:C9:3E:41:B6:86:FB:0B:EA:53:17:40:CB:91:D0:B1:34:B2:36:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1347cdae-54c7-4fcb-9019-0bee16977198.cer sbgp-ipAddrBlock: critical IPv4: 130.74.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:68:e1:74:b4:46:04:bc:4d:10:41:0a:b4:73:34:f2:ac:2a: c3:e7:49:4d:dc:51:f9:e3:20:af:c0:6b:7e:97:74:8c:e3:24: 9c:16:48:f5:89:82:d4:72:07:64:67:40:5e:4e:90:c3:cc:82: f9:33:4a:c6:78:ba:6c:45:ec:3b:0d:b1:65:f5:cf:e3:fa:dd: e1:48:47:62:09:9e:93:96:f7:03:14:c9:88:24:5a:36:6f:54: 0e:56:87:4c:9b:dd:ae:e7:eb:3a:e1:ca:8b:80:3f:5e:55:6a: ec:27:4a:f2:f3:fc:87:c3:9d:b5:b2:e9:ad:c6:e8:84:34:ab: 24:26:b8:4c:4a:58:ab:e3:67:32:35:2f:0e:c9:39:d6:d3:13: 89:84:0e:38:50:5f:a2:5d:94:10:6f:45:61:a8:69:92:0d:7d: 4d:f4:12:26:35:79:8a:f1:9c:fe:4e:96:a4:86:b8:42:37:65: 98:b5:0c:8b:9c:aa:5f:87:bc:6d:c4:c0:a1:c7:f7:1a:53:83: 74:7e:35:7b:79:02:10:7a:3f:78:3d:b8:30:55:db:95:d6:e1: 0b:92:e4:9b:6c:7b:b5:3b:6a:f5:ea:e7:3b:eb:c4:7d:be:35: 30:73:35:fd:25:04:4b:4d:f4:29:47:00:9b:ba:45:d5:56:d5: 32:f6:63:e1 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE5K7zdyEsz7zqVPReAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTM0N2NkYWUtNTRjNy00ZmNiLTkwMTktMGJlZTE2OTc3 MTk4MB4XDTI2MDYyNTIxMDAxMloXDTI2MDkyMzIxMDAxMlowLzEtMCsGA1UEAxMk MjYzODNkYzAtMWVjOC00YjVjLThhZTgtOTZiOThlMGRhODgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0W+5jjXbhvHZZykL5nFsv5xdpKYrZyfC6lY7 W77q3oTHJTLtDFiOPPWGPtYz2ZOL2CqqOR9y94L2i5xXap3OA/VaYxj6SZdTVSal hxzcCbWZ8cXS7OpgHG/O7S8lhXmB7vNfyyZ5riM6q29zBKqBXdl6pOoShajV0y58 noW80OSjePs+spTa0vKI3u+y9xttmVHT6WgrPjoHYUVFRG2lgW2Nx8GYxEqeejcQ PSyjrLX3zsIXPz9swS0JlHg9kiHApxtHoL8bP1OQmxi0jrSUA7+njkKufn8dGs/j lkgHaODKoHEloSDEvzAuXQsQetF+l/wHwYbPCh+B3EYpzW2ymwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFCQcgVcq4A3RBTuT860mPG9okNrKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xMzQ3 Y2RhZS01NGM3LTRmY2ItOTAxOS0wYmVlMTY5NzcxOTgvY2FkNWNhNjUtOTU2ZC0z MWJkLTg3YWMtODI5OWRhNGY1NmVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMTM0N2NkYWUtNTRjNy00ZmNiLTkw MTktMGJlZTE2OTc3MTk4LzEzNDdjZGFlLTU0YzctNGZjYi05MDE5LTBiZWUxNjk3 NzE5OC5jcmwwHwYDVR0jBBgwFoAUKck+QbaG+wvqUxdAy5HQsTSyNvAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xMzQ3Y2RhZS01NGM3LTRmY2ItOTAxOS0wYmVl MTY5NzcxOTguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgkowVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAEWjhdLRGBLxNEEEKtHM08qwqw+dJTdxR+eMgr8Brfpd0jOMknBZI9YmC 1HIHZGdAXk6Qw8yC+TNKxni6bEXsOw2xZfXP4/rd4UhHYgmek5b3AxTJiCRaNm9U DlaHTJvdrufrOuHKi4A/XlVq7CdK8vP8h8OdtbLprcbohDSrJCa4TEpYq+NnMjUv Dsk51tMTiYQOOFBfol2UEG9FYahpkg19TfQSJjV5ivGc/k6WpIa4QjdlmLUMi5yq X4e8bcTAocf3GlODdH41e3kCEHo/eD24MFXbldbhC5Lkm2x7tTtq9ernO+vEfb41 MHM1/SUES030KUcAm7pF1VbVMvZj4Q== -----END CERTIFICATE-----Generated at Wed Jul 8 17:07:29 2026 by rpki-client