$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/2796dd83-8ecf-3782-aabc-8431faeba93e.roa File: 2796dd83-8ecf-3782-aabc-8431faeba93e.roa (raw, json) Hash identifier: 1w61w5D47maaEho2CZMCE/Or+soMcBWJvUcN0+/4Xkg= Subject key identifier: 94:42:0A:ED:AB:F6:41:63:95:32:7A:9D:04:D4:9E:26:B9:FF:2F:02 Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584D98BAA0FA9542CF5C27631680 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/2796dd83-8ecf-3782-aabc-8431faeba93e.roa Signing time: Thu 23 Apr 2026 01:00:24 +0000 ROA not before: Thu 23 Apr 2026 01:00:24 +0000 ROA not after: Wed 22 Jul 2026 01:00:24 +0000 asID: 31898 IP address blocks: 130.35.156.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:98:ba:a0:fa:95:42:cf:5c:27:63:16:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Apr 23 01:00:24 2026 GMT Not After : Jul 22 01:00:24 2026 GMT Subject: CN=6fe580b5-5eb0-4fde-b602-df73138e0642 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:6a:e0:85:70:c6:23:6e:68:7f:46:d6:98:a9: 2c:08:3c:a2:e7:5c:a1:da:f0:49:d4:73:c7:02:20: 83:07:3e:ff:18:3b:61:42:27:1d:ff:3a:d3:71:df: 53:50:6f:cf:0c:9e:2e:7d:45:15:84:b8:4f:3a:b7: 72:e5:56:95:33:13:0e:e3:64:8d:8b:16:f6:b0:5c: b2:1a:a6:b2:25:23:66:db:a3:1c:2f:5b:99:ae:e9: ff:48:62:4e:81:98:44:6a:66:79:2f:e7:52:f6:78: 5f:b5:6f:f6:ae:fc:ef:b8:15:d3:8d:c8:e4:12:6b: 89:52:09:a8:a2:81:e2:c0:48:6c:51:48:da:90:8c: 3b:c4:22:e8:44:10:5a:c8:b3:a4:6b:e0:85:2c:bf: ad:3d:8a:df:ec:c8:be:65:81:c6:89:b3:74:a7:04: e6:73:c7:3b:75:64:a7:25:76:62:c8:3f:35:ad:6f: 02:d9:9d:50:9e:1c:ed:49:87:99:d8:a2:25:f5:3d: 7a:fe:93:8d:bd:74:3b:1d:01:aa:b1:14:15:7f:6f: 3e:0d:42:fe:9e:53:ff:59:82:ad:51:fd:7e:9e:78: 9b:fd:e9:8e:87:a7:03:58:ed:df:3d:66:cc:c3:40: 8b:c6:79:1f:b0:f2:19:08:58:76:d4:89:ff:d0:d0: d8:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:42:0A:ED:AB:F6:41:63:95:32:7A:9D:04:D4:9E:26:B9:FF:2F:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/2796dd83-8ecf-3782-aabc-8431faeba93e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 130.35.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:55:73:31:df:9b:53:d0:f6:03:65:a2:4a:5b:23:02:6e:64: e5:6d:04:1b:6d:41:cf:72:5c:75:7d:db:9e:ab:d1:78:0c:1b: 79:34:38:00:0e:a9:93:b7:13:5d:28:9f:65:42:04:05:36:dc: d2:39:38:fe:9a:d2:05:c8:f0:d5:f1:1b:40:d8:91:2e:a8:08: 66:0c:22:16:43:bd:8a:a0:bf:4f:32:fa:98:9f:26:53:2c:b6: 6c:7d:a6:55:b6:2f:17:1a:7c:75:6f:0b:f8:83:6a:fe:2d:5c: 22:74:94:02:b4:ce:84:3c:0d:ec:12:72:59:15:ed:a2:81:16: 9e:5d:73:d2:67:bb:f9:df:5d:5a:7f:12:ae:c5:fe:56:8c:63: ab:25:c3:dd:ad:01:c9:02:33:7d:7c:29:57:dc:69:1a:b0:35: ee:8b:ea:97:30:f4:da:7d:a0:0b:d7:4d:ff:1a:b3:df:05:05: 6f:a2:c0:20:1f:de:0b:47:65:48:51:63:3e:98:3f:9c:df:12: 25:08:f8:30:ac:5a:1d:e9:72:51:53:8a:36:0e:fb:5b:43:59: 94:f7:94:ee:4f:f3:cd:06:1b:1d:c3:27:51:de:be:f0:3b:bb: 55:43:a8:dc:e9:23:a3:91:97:1a:c4:97:2f:88:3e:93:76:59: 63:48:e0:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2YuqD6lULPXCdjFoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDQyMzAxMDAyNFoXDTI2MDcyMjAxMDAyNFowLzEtMCsGA1UEAxMk NmZlNTgwYjUtNWViMC00ZmRlLWI2MDItZGY3MzEzOGUwNjQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2rghXDGI25of0bWmKksCDyi51yh2vBJ1HPH AiCDBz7/GDthQicd/zrTcd9TUG/PDJ4ufUUVhLhPOrdy5VaVMxMO42SNixb2sFyy GqayJSNm26McL1uZrun/SGJOgZhEamZ5L+dS9nhftW/2rvzvuBXTjcjkEmuJUgmo ooHiwEhsUUjakIw7xCLoRBBayLOka+CFLL+tPYrf7Mi+ZYHGibN0pwTmc8c7dWSn JXZiyD81rW8C2Z1QnhztSYeZ2KIl9T16/pONvXQ7HQGqsRQVf28+DUL+nlP/WYKt Uf1+nnib/emOh6cDWO3fPWbMw0CLxnkfsPIZCFh21In/0NDYFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJRCCu2r9kFjlTJ6nQTUnia5/y8CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvMjc5NmRkODMtOGVjZi0z NzgyLWFhYmMtODQzMWZhZWJhOTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgiOcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA1VczHfm1PQ9gNlokpbIwJuZOVtBBttQc9yXHV9256r0XgMG3k0OAAO qZO3E10on2VCBAU23NI5OP6a0gXI8NXxG0DYkS6oCGYMIhZDvYqgv08y+pifJlMs tmx9plW2LxcafHVvC/iDav4tXCJ0lAK0zoQ8DewSclkV7aKBFp5dc9Jnu/nfXVp/ Eq7F/laMY6slw92tAckCM318KVfcaRqwNe6L6pcw9Np9oAvXTf8as98FBW+iwCAf 3gtHZUhRYz6YP5zfEiUI+DCsWh3pclFTijYO+1tDWZT3lO5P880GGx3DJ1HevvA7 u1VDqNzpI6ORlxrEly+IPpN2WWNI4D4= -----END CERTIFICATE-----Generated at Wed May 13 08:34:33 2026 by rpki-client