$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/7e91154b-79a1-3330-9d0a-9925663cac1b.roa File: 7e91154b-79a1-3330-9d0a-9925663cac1b.roa (raw, json) Hash identifier: dRPQ5o/7YqVLKdXbB23WF/PTm6v+UCu1nW3QsHNsZlg= Subject key identifier: AB:14:B4:51:3D:F7:13:6D:D7:EC:D3:E9:C7:9D:5C:13:38:87:84:71 Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584D98BA9AD828E7C56AD4D6BB80 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/7e91154b-79a1-3330-9d0a-9925663cac1b.roa Signing time: Thu 23 Apr 2026 01:00:24 +0000 ROA not before: Thu 23 Apr 2026 01:00:24 +0000 ROA not after: Wed 22 Jul 2026 01:00:24 +0000 asID: 31898 IP address blocks: 130.35.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:98:ba:9a:d8:28:e7:c5:6a:d4:d6:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Apr 23 01:00:24 2026 GMT Not After : Jul 22 01:00:24 2026 GMT Subject: CN=f2e76218-5996-4fb5-8876-a5fbc330e942 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:e5:ba:1c:34:c3:c4:be:f7:21:28:6f:a0:c2: 29:2c:1c:96:5a:a4:d7:7a:54:80:4c:2c:41:d3:85: 43:2a:2c:a1:c5:3e:80:7f:9f:bc:22:37:39:21:45: 1e:28:25:cb:91:e1:db:eb:96:91:09:9a:e7:94:40: c1:48:f8:a7:de:e5:42:10:2d:0c:c2:55:be:31:8b: 6f:bc:64:76:ad:35:c1:38:94:55:35:4f:61:56:db: ea:3a:19:31:25:da:3d:8e:57:af:44:7d:5e:ac:7d: a7:33:22:90:b2:5b:40:f9:f2:ea:e0:b9:a7:96:ca: 34:b9:ce:14:e6:df:ae:a8:cb:c5:99:2b:67:1c:96: 7d:08:bb:4f:58:5d:ce:75:2b:e4:04:b6:1a:79:10: 35:12:34:e4:3c:6d:2a:35:27:e0:ec:08:67:c7:c8: 5c:c7:c0:03:ee:77:67:1f:cb:e6:61:11:56:22:84: e1:d6:3c:2b:e7:7b:ca:db:b4:b8:fc:85:70:7b:76: a4:8e:44:58:13:cd:e4:6d:13:b1:cd:5a:ff:3f:bf: 6f:47:d5:9b:5d:60:1c:fb:ae:47:16:0a:dd:47:7e: ed:98:5b:5c:d8:ac:ff:af:c7:a7:12:70:af:a9:81: 92:7d:66:4a:0a:a4:2b:30:d2:7a:ec:6e:e2:18:64: 88:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:14:B4:51:3D:F7:13:6D:D7:EC:D3:E9:C7:9D:5C:13:38:87:84:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/7e91154b-79a1-3330-9d0a-9925663cac1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 130.35.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:41:a1:bd:88:0e:76:de:d4:b1:5f:17:04:77:25:f3:fd:92: 21:12:e8:99:94:cc:6f:5d:73:d1:8d:80:67:21:3c:e0:b7:fe: 4c:47:30:e4:3e:10:09:02:3c:07:11:cf:ec:85:d2:2d:af:bf: 76:96:a0:11:3e:61:92:cf:b9:7f:91:a4:4d:eb:a6:f2:26:7f: 55:db:bf:2c:08:46:dc:fc:98:18:c0:cb:a6:74:d0:01:48:4b: 55:6b:18:51:04:7d:3b:ec:4c:12:aa:49:47:c1:27:83:0b:b0: 2b:c8:6a:77:08:0d:1b:6e:5b:04:99:f1:7b:30:03:45:91:20: 1c:6d:6c:c5:55:27:f4:df:b8:59:1e:5f:b5:b2:ec:da:30:67: 1a:c0:78:a3:fc:84:9a:c1:b7:e0:89:3a:0c:d0:ac:ca:5a:e4: f5:4d:9b:b1:1b:6b:11:b9:b6:ad:b2:34:58:35:34:6f:1f:51: 04:aa:24:d0:66:5f:7b:fd:b2:69:d5:4a:16:42:40:7a:fe:3b: fb:bb:e0:27:a0:cc:2b:65:bb:e7:3f:d2:e4:6a:c5:5b:10:35: e9:ff:c6:31:49:ef:c7:7e:4f:27:5f:18:70:45:de:fc:36:97: 2d:72:0e:c1:19:a1:36:10:a7:81:a9:e6:8b:53:83:c1:ef:69: 28:89:8e:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2YuprYKOfFatTWu4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDQyMzAxMDAyNFoXDTI2MDcyMjAxMDAyNFowLzEtMCsGA1UEAxMk ZjJlNzYyMTgtNTk5Ni00ZmI1LTg4NzYtYTVmYmMzMzBlOTQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgeW6HDTDxL73IShvoMIpLByWWqTXelSATCxB 04VDKiyhxT6Af5+8Ijc5IUUeKCXLkeHb65aRCZrnlEDBSPin3uVCEC0MwlW+MYtv vGR2rTXBOJRVNU9hVtvqOhkxJdo9jlevRH1erH2nMyKQsltA+fLq4Lmnlso0uc4U 5t+uqMvFmStnHJZ9CLtPWF3OdSvkBLYaeRA1EjTkPG0qNSfg7Ahnx8hcx8AD7ndn H8vmYRFWIoTh1jwr53vK27S4/IVwe3akjkRYE83kbROxzVr/P79vR9WbXWAc+65H FgrdR37tmFtc2Kz/r8enEnCvqYGSfWZKCqQrMNJ67G7iGGSIxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKsUtFE99xNt1+zT6cedXBM4h4RxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvN2U5MTE1NGItNzlhMS0z MzMwLTlkMGEtOTkyNTY2M2NhYzFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgiOYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKdBob2IDnbe1LFfFwR3JfP9kiES6JmUzG9dc9GNgGchPOC3/kxHMOQ+ EAkCPAcRz+yF0i2vv3aWoBE+YZLPuX+RpE3rpvImf1XbvywIRtz8mBjAy6Z00AFI S1VrGFEEfTvsTBKqSUfBJ4MLsCvIancIDRtuWwSZ8XswA0WRIBxtbMVVJ/TfuFke X7Wy7NowZxrAeKP8hJrBt+CJOgzQrMpa5PVNm7EbaxG5tq2yNFg1NG8fUQSqJNBm X3v9smnVShZCQHr+O/u74CegzCtlu+c/0uRqxVsQNen/xjFJ78d+TydfGHBF3vw2 ly1yDsEZoTYQp4Gp5otTg8HvaSiJjlY= -----END CERTIFICATE-----Generated at Wed May 13 12:23:21 2026 by rpki-client