$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/4404fbee-4c6e-334b-84ec-f2864b80d137.roa File: 4404fbee-4c6e-334b-84ec-f2864b80d137.roa (raw, json) Hash identifier: oiz5c8Rz9fZOvNN+CdE74LPIoSt1pgPPWOdBbGAkNGc= Subject key identifier: 3C:86:D9:F5:76:E1:69:2E:D1:EE:31:9F:21:DB:60:FF:77:62:57:15 Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584F1B62529959AB9275E17BB380 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/4404fbee-4c6e-334b-84ec-f2864b80d137.roa Signing time: Tue 08 Sep 2026 13:00:12 +0000 ROA not before: Tue 08 Sep 2026 13:00:12 +0000 ROA not after: Mon 07 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 130.35.192.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1b:62:52:99:59:ab:92:75:e1:7b:b3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Sep 8 13:00:12 2026 GMT Not After : Dec 7 14:00:12 2026 GMT Subject: CN=c6fe2d71-0ed7-4fb3-b1dc-b76cbc6046e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:36:b7:4a:6c:aa:db:5b:12:dd:ec:43:75:fd: a4:03:ff:50:21:81:db:95:81:b5:89:57:ad:71:78: ad:10:2e:7d:6b:14:f8:62:04:93:9a:b9:db:4e:cf: 8a:b2:29:db:15:70:62:6b:f5:25:60:d1:68:c1:54: d7:f4:5a:e5:73:16:b5:7c:85:c8:67:a9:11:da:7c: 9e:92:79:12:14:ca:f4:11:93:60:90:13:15:0b:b2: 11:76:d0:fc:31:6f:78:73:40:d2:e4:c2:70:ef:9c: dd:a7:97:51:8d:47:26:5b:5a:b7:ac:6d:f0:4a:3b: c0:ff:07:8a:ca:3a:4d:39:60:b1:f7:94:9d:bc:bc: 14:80:fd:31:82:7a:af:29:e5:0f:8d:1a:73:36:77: 96:36:01:dc:76:24:a7:93:57:c0:6b:b8:86:ef:67: 2d:4b:a9:95:fe:14:e2:37:2e:d6:f6:97:b7:9a:18: a2:47:a1:e1:ef:ff:53:88:81:61:2a:9a:2f:64:61: 59:32:2a:31:e0:f9:a1:00:5d:b7:df:a2:50:32:d8: 55:00:bc:e8:1b:d3:77:b2:68:98:af:15:3f:98:90: 75:92:ec:f1:24:53:59:b8:a6:56:48:ad:92:3b:fa: d8:18:5f:41:27:ff:b2:12:15:f9:56:f9:6c:07:26: 9b:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:86:D9:F5:76:E1:69:2E:D1:EE:31:9F:21:DB:60:FF:77:62:57:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/4404fbee-4c6e-334b-84ec-f2864b80d137.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 130.35.192.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:9c:97:58:8d:8e:c0:d1:a2:cd:6f:80:11:84:0a:25:db:d1: c1:20:52:87:d1:59:31:b4:a8:69:84:ee:2f:56:17:55:3c:43: 0e:5e:c9:41:07:37:f6:be:51:9c:06:e8:69:83:1f:c6:fc:c4: fe:34:da:b3:a8:03:0f:ff:9d:1e:21:2e:52:3f:e8:60:1f:8a: 1f:32:88:6b:51:b5:47:15:e8:59:b9:c7:a8:47:8d:27:c2:1c: 61:57:62:92:2a:dd:be:95:ca:79:78:3e:4e:6a:f1:67:44:34: 14:0c:9f:97:a1:26:5b:41:a0:72:70:92:70:fa:c8:41:17:de: 47:fa:3b:2f:08:a6:94:55:3f:0c:7c:77:dd:58:d3:c9:58:8c: 7b:d4:7d:7a:bb:f8:0e:78:67:30:6c:a5:87:d9:44:f8:79:80: 53:cd:0e:ce:5e:10:ed:5b:10:df:e6:33:bc:64:32:03:9e:49: c0:5e:ad:1d:34:04:d0:b6:d4:17:70:69:db:1c:dd:df:1c:16: f4:2b:ad:09:cf:f3:83:e2:11:5f:8a:fa:96:ac:26:7e:52:47: a9:c7:8b:be:ee:10:89:13:10:7a:0f:31:67:ed:0a:fb:19:fe: 77:1b:ed:7c:e5:52:b6:d0:99:e5:0f:7e:97:cd:83:ee:6c:2f: 50:12:7b:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8bYlKZWauSdeF7s4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDkwODEzMDAxMloXDTI2MTIwNzE0MDAxMlowLzEtMCsGA1UEAxMk YzZmZTJkNzEtMGVkNy00ZmIzLWIxZGMtYjc2Y2JjNjA0NmUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkja3Smyq21sS3exDdf2kA/9QIYHblYG1iVet cXitEC59axT4YgSTmrnbTs+KsinbFXBia/UlYNFowVTX9Frlcxa1fIXIZ6kR2nye knkSFMr0EZNgkBMVC7IRdtD8MW94c0DS5MJw75zdp5dRjUcmW1q3rG3wSjvA/weK yjpNOWCx95SdvLwUgP0xgnqvKeUPjRpzNneWNgHcdiSnk1fAa7iG72ctS6mV/hTi Ny7W9pe3mhiiR6Hh7/9TiIFhKpovZGFZMiox4PmhAF2336JQMthVALzoG9N3smiY rxU/mJB1kuzxJFNZuKZWSK2SO/rYGF9BJ/+yEhX5VvlsByabPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDyG2fV24Wku0e4xnyHbYP93YlcVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvNDQwNGZiZWUtNGM2ZS0z MzRiLTg0ZWMtZjI4NjRiODBkMTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgiPAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHecl1iNjsDRos1vgBGECiXb0cEgUofRWTG0qGmE7i9WF1U8Qw5eyUEH N/a+UZwG6GmDH8b8xP402rOoAw//nR4hLlI/6GAfih8yiGtRtUcV6Fm5x6hHjSfC HGFXYpIq3b6Vynl4Pk5q8WdENBQMn5ehJltBoHJwknD6yEEX3kf6Oy8IppRVPwx8 d91Y08lYjHvUfXq7+A54ZzBspYfZRPh5gFPNDs5eEO1bEN/mM7xkMgOeScBerR00 BNC21Bdwadsc3d8cFvQrrQnP84PiEV+K+pasJn5SR6nHi77uEIkTEHoPMWftCvsZ /ncb7XzlUrbQmeUPfpfNg+5sL1ASe/U= -----END CERTIFICATE-----Generated at Sat Oct 10 19:33:57 2026 by rpki-client