$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/10270827-b8b9-3b3a-8eb5-c7de01a53f1d.roa File: 10270827-b8b9-3b3a-8eb5-c7de01a53f1d.roa (raw, json) Hash identifier: lTh2iWJwYZtMFSzO1jU5fYuYbwUNma9RnHReJed3/Fw= Subject key identifier: C1:F9:3D:3B:DA:96:F1:A6:82:AA:91:1E:44:08:D6:24:E1:0E:7C:FC Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584E3FC4780E98DF0DF01F1AAA00 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/10270827-b8b9-3b3a-8eb5-c7de01a53f1d.roa Signing time: Sun 21 Jun 2026 21:00:12 +0000 ROA not before: Sun 21 Jun 2026 21:00:12 +0000 ROA not after: Sat 19 Sep 2026 21:00:12 +0000 asID: 46558 IP address blocks: 130.35.32.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:3f:c4:78:0e:98:df:0d:f0:1f:1a:aa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Jun 21 21:00:12 2026 GMT Not After : Sep 19 21:00:12 2026 GMT Subject: CN=dc817036-41b6-41aa-ba7a-3815c8d2c178 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:a0:10:70:e1:a9:fc:2b:0f:ec:aa:27:d2:71: b2:90:ff:05:d3:59:a6:1e:73:3b:a8:ca:07:a9:79: 8c:da:1e:ec:3f:fa:ce:b4:05:e4:93:86:65:ce:ef: b2:1d:02:45:06:ff:88:c7:e4:5d:04:bf:40:aa:ac: 2f:8d:68:31:03:8e:8c:e3:a8:95:39:ad:bd:85:10: 39:fe:4e:b9:b3:a9:a0:96:27:f6:f4:d6:66:12:ae: d7:bc:60:9b:78:c9:f9:e9:dd:d0:2e:5d:4b:cb:aa: 0a:3c:bd:9d:bc:8f:dc:8d:44:7f:18:1a:e1:1a:25: 31:55:44:a8:db:23:c1:83:35:36:95:54:b4:cb:38: ed:86:0a:51:70:1c:de:0a:1b:79:71:0d:51:3b:f6: 5d:13:4d:b6:e1:f2:85:ae:4b:2b:f1:7e:44:69:50: b3:bd:01:5c:f1:c6:30:08:40:70:5c:2d:88:ba:8f: e0:b7:81:55:3d:b2:d5:1a:ee:37:54:5e:0d:ec:66: c8:2a:2e:af:ca:8c:50:0f:22:ac:d8:03:4c:34:22: 81:42:97:70:74:d6:4f:49:2a:b7:13:05:a5:cc:af: 80:26:9d:76:84:6a:01:fd:67:af:6c:b2:5f:ab:d6: 9f:75:72:3c:fe:55:1e:e6:c1:f3:35:ee:96:7b:e5: 5c:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:F9:3D:3B:DA:96:F1:A6:82:AA:91:1E:44:08:D6:24:E1:0E:7C:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/10270827-b8b9-3b3a-8eb5-c7de01a53f1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 130.35.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:fd:06:6d:07:df:eb:9c:21:04:0d:e7:9b:e0:c7:41:f3:3f: 4a:b1:5f:f2:90:00:e6:89:5f:ad:b5:1b:05:bb:0c:20:82:20: af:3e:77:08:42:35:e9:7a:07:1c:6b:c3:5d:9f:c4:1a:04:9a: 21:3a:87:59:00:7b:0d:09:7c:f3:00:8b:cc:b9:44:e0:b9:cc: 4d:61:92:ef:d8:1a:95:91:62:ec:7c:e7:a1:f7:9d:e5:db:02: 93:08:37:39:54:bd:88:4a:b7:d9:76:95:fe:4f:54:0d:4d:ec: 73:10:09:28:3c:2b:79:26:b1:bd:e4:b9:71:34:37:9a:2b:2b: 3a:fb:c2:be:cb:68:66:1e:ed:da:a3:5c:1b:d2:6f:9c:f0:c8: 9c:3a:29:0f:ea:0f:60:54:70:32:7b:fc:9f:0e:5d:62:8f:be: dc:6f:04:53:e7:2b:00:9b:bd:c1:a5:62:0a:76:5b:95:12:86: 21:a7:5d:10:61:89:e7:29:7f:3a:41:a1:13:41:b2:27:15:12: 01:56:23:a2:8e:b0:d5:6e:18:20:db:48:58:12:49:f4:7a:9f: 39:a1:f3:5d:85:66:0b:8f:af:c3:9f:b4:7a:b1:a2:e5:b9:61: c7:9d:ba:6e:44:1f:1c:da:fe:92:60:69:89:dd:20:e6:dd:a7: 1d:bd:95:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4/xHgOmN8N8B8aqgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDYyMTIxMDAxMloXDTI2MDkxOTIxMDAxMlowLzEtMCsGA1UEAxMk ZGM4MTcwMzYtNDFiNi00MWFhLWJhN2EtMzgxNWM4ZDJjMTc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjaAQcOGp/CsP7Kon0nGykP8F01mmHnM7qMoH qXmM2h7sP/rOtAXkk4Zlzu+yHQJFBv+Ix+RdBL9AqqwvjWgxA46M46iVOa29hRA5 /k65s6mglif29NZmEq7XvGCbeMn56d3QLl1Ly6oKPL2dvI/cjUR/GBrhGiUxVUSo 2yPBgzU2lVS0yzjthgpRcBzeCht5cQ1RO/ZdE0224fKFrksr8X5EaVCzvQFc8cYw CEBwXC2Iuo/gt4FVPbLVGu43VF4N7GbIKi6vyoxQDyKs2ANMNCKBQpdwdNZPSSq3 EwWlzK+AJp12hGoB/WevbLJfq9afdXI8/lUe5sHzNe6We+Vc/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMH5PTvalvGmgqqRHkQI1iThDnz8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvMTAyNzA4MjctYjhiOS0z YjNhLThlYjUtYzdkZTAxYTUzZjFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgiMgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAf9Bm0H3+ucIQQN55vgx0HzP0qxX/KQAOaJX621GwW7DCCCIK8+dwhC Nel6Bxxrw12fxBoEmiE6h1kAew0JfPMAi8y5ROC5zE1hku/YGpWRYux856H3neXb ApMINzlUvYhKt9l2lf5PVA1N7HMQCSg8K3kmsb3kuXE0N5orKzr7wr7LaGYe7dqj XBvSb5zwyJw6KQ/qD2BUcDJ7/J8OXWKPvtxvBFPnKwCbvcGlYgp2W5UShiGnXRBh iecpfzpBoRNBsicVEgFWI6KOsNVuGCDbSFgSSfR6nzmh812FZguPr8OftHqxouW5 Ycedum5EHxza/pJgaYndIObdpx29lUE= -----END CERTIFICATE-----Generated at Mon Jul 6 20:12:54 2026 by rpki-client