$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/7daab95e-1581-383c-a12b-6b720b97c8d6.roa File: 7daab95e-1581-383c-a12b-6b720b97c8d6.roa (raw, json) Hash identifier: nfgvc96HYv61kq+G6UMd7fKL5Ao2BmudqW2gvucHyNM= Subject key identifier: FD:10:65:BF:ED:6B:BC:5C:14:EE:AA:BA:29:4D:B4:82:B8:C7:ED:04 Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584D905A9FDF75A460BFD12C7660 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/7daab95e-1581-383c-a12b-6b720b97c8d6.roa Signing time: Mon 20 Apr 2026 01:00:24 +0000 ROA not before: Mon 20 Apr 2026 01:00:24 +0000 ROA not after: Sun 19 Jul 2026 01:00:24 +0000 asID: 31898 IP address blocks: 130.35.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:90:5a:9f:df:75:a4:60:bf:d1:2c:76:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Apr 20 01:00:24 2026 GMT Not After : Jul 19 01:00:24 2026 GMT Subject: CN=58a426c2-c44e-4b82-b6bd-d841b6b31f19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:79:35:c2:60:b6:fe:4b:f7:0e:3b:af:5f:43: 99:47:c8:40:89:2d:03:e5:4e:d3:2b:9f:be:e6:ed: 85:85:f1:80:96:39:ee:f0:4e:4c:ae:ca:57:91:78: 4d:eb:29:37:2a:d3:7c:f3:ac:2a:7f:20:64:1e:60: 01:8e:ed:5f:87:2e:35:be:10:01:5f:b5:85:f3:63: 26:05:a0:d4:b5:f0:69:46:bb:0d:94:cb:be:6a:b5: 53:73:1e:a9:7b:57:c3:16:3d:e0:ec:a8:09:6d:92: 09:b4:43:d2:d7:5c:33:6e:da:8e:94:88:b0:b3:24: 42:b5:f2:60:d9:c3:b5:9f:62:fa:ce:88:ce:27:24: 8f:3e:b8:d2:f8:f6:a5:88:e1:99:d7:5c:87:e9:c9: 84:42:bc:57:2c:50:bb:6f:1c:7c:f5:57:e2:67:99: aa:0a:33:20:e8:b3:47:b8:4d:4c:46:87:96:21:c7: 8c:ca:ad:23:5a:37:fb:be:d7:49:60:39:d9:f1:0f: 35:76:dc:b9:01:83:29:2d:83:6e:b2:fb:00:29:ef: 31:8c:6b:0e:05:ca:2f:df:b7:43:79:5a:9b:8d:cf: 1b:5e:6b:d4:bf:39:9c:2e:fa:7d:75:55:04:d1:d9: 99:c1:be:93:8b:d1:f0:b4:42:5b:62:a2:f2:3b:b9: 07:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:10:65:BF:ED:6B:BC:5C:14:EE:AA:BA:29:4D:B4:82:B8:C7:ED:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/7daab95e-1581-383c-a12b-6b720b97c8d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 130.35.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:1c:0d:06:48:18:99:1f:a9:0c:e5:81:bd:4c:34:7f:b1:bf: 65:a1:65:c9:36:76:8e:3f:ee:a1:35:db:07:d3:73:ba:6d:4a: 63:c5:94:e8:fd:4c:89:46:fb:eb:da:fa:b0:99:6c:c3:19:a5: 1f:8e:12:7f:6e:6d:4c:cb:46:9e:d3:ac:cf:88:94:fd:74:bb: c1:e2:6e:69:5c:64:b3:7b:d5:23:bf:66:e3:35:e9:63:1c:61: 88:e3:1d:8d:aa:83:a8:77:06:32:f4:3f:67:d7:94:11:73:22: 1f:fc:91:e9:38:b1:47:d1:98:1c:e1:11:93:26:b0:32:03:72: a6:e0:60:c8:4b:ce:f6:3e:ec:d1:74:b5:73:7f:d0:ba:80:c3: bd:d6:ff:db:5c:80:b1:56:1a:54:09:84:86:c6:61:9b:12:e9: e1:f8:16:e3:90:66:2a:57:23:9f:43:0e:0d:4f:52:bb:fe:6b: 36:55:f2:43:e0:59:e6:d3:e8:52:23:9d:1c:1a:db:f0:ea:9b: cc:95:81:3e:75:7c:d1:f1:38:72:bc:e5:a4:89:72:8f:b9:0e: 0c:2d:3f:58:d6:cf:ec:57:c4:ee:60:ee:b1:b5:ae:07:d3:24: fd:23:3e:ef:62:af:d9:be:ec:cd:0d:1a:01:d2:af:1f:8c:5d: d0:12:d4:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2QWp/fdaRgv9EsdmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDQyMDAxMDAyNFoXDTI2MDcxOTAxMDAyNFowLzEtMCsGA1UEAxMk NThhNDI2YzItYzQ0ZS00YjgyLWI2YmQtZDg0MWI2YjMxZjE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3k1wmC2/kv3DjuvX0OZR8hAiS0D5U7TK5++ 5u2FhfGAljnu8E5MrspXkXhN6yk3KtN886wqfyBkHmABju1fhy41vhABX7WF82Mm BaDUtfBpRrsNlMu+arVTcx6pe1fDFj3g7KgJbZIJtEPS11wzbtqOlIiwsyRCtfJg 2cO1n2L6zojOJySPPrjS+PaliOGZ11yH6cmEQrxXLFC7bxx89VfiZ5mqCjMg6LNH uE1MRoeWIceMyq0jWjf7vtdJYDnZ8Q81dty5AYMpLYNusvsAKe8xjGsOBcov37dD eVqbjc8bXmvUvzmcLvp9dVUE0dmZwb6Ti9HwtEJbYqLyO7kHjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP0QZb/ta7xcFO6quilNtIK4x+0EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvN2RhYWI5NWUtMTU4MS0z ODNjLWExMmItNmI3MjBiOTdjOGQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEgiPwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH0cDQZIGJkfqQzlgb1MNH+xv2WhZck2do4/7qE12wfTc7ptSmPFlOj9 TIlG++va+rCZbMMZpR+OEn9ubUzLRp7TrM+IlP10u8HibmlcZLN71SO/ZuM16WMc YYjjHY2qg6h3BjL0P2fXlBFzIh/8kek4sUfRmBzhEZMmsDIDcqbgYMhLzvY+7NF0 tXN/0LqAw73W/9tcgLFWGlQJhIbGYZsS6eH4FuOQZipXI59DDg1PUrv+azZV8kPg WebT6FIjnRwa2/Dqm8yVgT51fNHxOHK85aSJco+5DgwtP1jWz+xXxO5g7rG1rgfT JP0jPu9ir9m+7M0NGgHSrx+MXdAS1AI= -----END CERTIFICATE-----Generated at Wed May 13 09:15:50 2026 by rpki-client