$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/40627f49-e1a3-3fbd-a773-aabf40cb447d.roa File: 40627f49-e1a3-3fbd-a773-aabf40cb447d.roa (raw, json) Hash identifier: yzuKWhiB50Yx56sTWd1NPe09XECf+o7m0ud0Z0zlls8= Subject key identifier: E7:E5:DD:B6:C0:FF:06:6B:12:80:48:FE:E1:97:2E:8A:FD:B1:B1:76 Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584D98BAB1365FD9F233F0AF7500 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/40627f49-e1a3-3fbd-a773-aabf40cb447d.roa Signing time: Thu 23 Apr 2026 01:00:24 +0000 ROA not before: Thu 23 Apr 2026 01:00:24 +0000 ROA not after: Wed 22 Jul 2026 01:00:24 +0000 asID: 31898 IP address blocks: 130.35.120.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:98:ba:b1:36:5f:d9:f2:33:f0:af:75:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Apr 23 01:00:24 2026 GMT Not After : Jul 22 01:00:24 2026 GMT Subject: CN=db946d4f-fa82-4947-b3a1-dde75d1509ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a2:bc:76:49:89:ac:53:30:f9:dc:6d:a4:9a: 1c:b6:6d:2c:48:00:68:ed:6c:8f:d0:12:fe:15:43: d1:6e:77:1b:ec:0f:db:58:dd:77:d0:57:39:40:12: 12:34:9a:5a:4f:20:5b:84:65:ec:74:67:4c:73:09: 45:22:f4:70:9a:c5:dd:65:36:76:78:4b:ff:ac:09: 45:21:20:37:7d:23:de:43:2c:46:d0:4e:c0:00:94: 77:4a:c6:c2:a6:67:6d:b2:06:a9:a7:b9:a9:4c:45: 55:f9:3c:ba:46:71:01:ba:2d:af:13:9f:c4:6e:fc: f4:9a:5c:79:42:e8:cd:e0:e0:9d:8f:f6:ad:e0:92: fe:b7:cf:87:83:6c:de:2b:58:32:91:ef:d7:19:19: d0:48:5e:4d:f1:7c:45:36:cf:31:7b:c6:ca:c5:0c: 27:f3:e4:a1:84:9b:1a:9f:57:e7:a5:14:68:e5:90: 79:14:55:ae:06:2d:b0:8c:6b:e2:42:12:ed:81:5f: 65:0f:53:01:3c:64:b8:ca:2d:4e:2b:ad:ce:18:25: 57:5f:d8:e9:85:85:60:e1:1f:f1:b9:b3:76:31:a8: 48:fd:61:d1:38:60:a3:f4:8d:73:16:d5:91:3c:b2: b6:f2:dd:17:0a:cf:f3:df:bc:89:22:ad:e7:2a:81: ad:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:E5:DD:B6:C0:FF:06:6B:12:80:48:FE:E1:97:2E:8A:FD:B1:B1:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/40627f49-e1a3-3fbd-a773-aabf40cb447d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 130.35.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:47:2a:df:1b:8f:a8:25:7b:ac:02:0d:bc:8b:1b:b6:41:f9: 7c:8c:59:bc:18:ff:ff:9f:09:46:af:77:32:0d:ae:da:a0:dc: d9:f3:8c:72:9d:a0:85:5d:63:f4:05:02:4c:11:7d:d9:0a:36: 3d:bf:cc:89:aa:ed:4a:df:d9:e7:22:35:80:ae:e6:c2:52:2c: 7f:35:a2:d2:f7:d5:0a:85:b9:5f:63:70:4e:46:97:e2:5b:2a: fe:9a:8b:a6:a0:4a:4e:ec:d6:99:52:a2:ba:95:19:99:3f:db: 26:3e:f6:a2:99:e2:1d:97:e2:ee:c6:35:33:88:1e:b7:67:e7: e4:ac:1f:03:a0:b8:a7:30:78:04:dc:90:01:5c:78:09:a7:e9: c7:3d:99:6b:3c:3b:5a:35:c4:a9:d9:b4:b9:d6:9d:48:f8:7e: 7b:99:55:01:0b:3a:fc:3e:0a:48:b9:2f:41:76:3e:d6:f1:c7: 5e:a2:61:06:ae:b8:ab:07:d4:7a:a0:7d:3c:03:d7:bf:9a:83: 16:0e:5c:49:52:7d:46:e6:6b:cb:a8:ca:ef:5f:97:fd:9d:dc: 9a:59:1a:df:06:66:a4:7e:57:c4:d9:0c:13:7b:f1:3e:45:49: ce:45:2e:ae:b1:4e:d0:90:74:a2:3f:0d:01:37:36:1f:70:e3: 03:91:3b:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2YurE2X9nyM/CvdQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDQyMzAxMDAyNFoXDTI2MDcyMjAxMDAyNFowLzEtMCsGA1UEAxMk ZGI5NDZkNGYtZmE4Mi00OTQ3LWIzYTEtZGRlNzVkMTUwOWFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqK8dkmJrFMw+dxtpJoctm0sSABo7WyP0BL+ FUPRbncb7A/bWN130Fc5QBISNJpaTyBbhGXsdGdMcwlFIvRwmsXdZTZ2eEv/rAlF ISA3fSPeQyxG0E7AAJR3SsbCpmdtsgapp7mpTEVV+Ty6RnEBui2vE5/Ebvz0mlx5 QujN4OCdj/at4JL+t8+Hg2zeK1gyke/XGRnQSF5N8XxFNs8xe8bKxQwn8+ShhJsa n1fnpRRo5ZB5FFWuBi2wjGviQhLtgV9lD1MBPGS4yi1OK63OGCVXX9jphYVg4R/x ubN2MahI/WHROGCj9I1zFtWRPLK28t0XCs/z37yJIq3nKoGtIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOfl3bbA/wZrEoBI/uGXLor9sbF2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvNDA2MjdmNDktZTFhMy0z ZmJkLWE3NzMtYWFiZjQwY2I0NDdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDgiN4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJZHKt8bj6gle6wCDbyLG7ZB+XyMWbwY//+fCUavdzINrtqg3NnzjHKd oIVdY/QFAkwRfdkKNj2/zImq7Urf2eciNYCu5sJSLH81otL31QqFuV9jcE5Gl+Jb Kv6ai6agSk7s1plSorqVGZk/2yY+9qKZ4h2X4u7GNTOIHrdn5+SsHwOguKcweATc kAFceAmn6cc9mWs8O1o1xKnZtLnWnUj4fnuZVQELOvw+Cki5L0F2Ptbxx16iYQau uKsH1HqgfTwD17+agxYOXElSfUbma8uoyu9fl/2d3JpZGt8GZqR+V8TZDBN78T5F Sc5FLq6xTtCQdKI/DQE3Nh9w4wORO9g= -----END CERTIFICATE-----Generated at Wed May 13 05:30:03 2026 by rpki-client