$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/9a68d362-d4fb-37ce-b577-e446d82d6d77.roa File: 9a68d362-d4fb-37ce-b577-e446d82d6d77.roa (raw, json) Hash identifier: fIKr/p8ZIyhtWtg/owFNVWNO7NEP2dmDghr3TiCXKw4= Subject key identifier: CA:63:6C:40:37:0B:FF:F7:64:74:41:60:70:AB:FA:67:1D:5D:28:BB Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584D98BAB184652C198F3FB0FDC0 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/9a68d362-d4fb-37ce-b577-e446d82d6d77.roa Signing time: Thu 23 Apr 2026 01:00:24 +0000 ROA not before: Thu 23 Apr 2026 01:00:24 +0000 ROA not after: Wed 22 Jul 2026 01:00:24 +0000 asID: 31898 IP address blocks: 130.35.212.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:98:ba:b1:84:65:2c:19:8f:3f:b0:fd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Apr 23 01:00:24 2026 GMT Not After : Jul 22 01:00:24 2026 GMT Subject: CN=1a1003e4-42ee-40f2-9f42-6ff38fd775bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:d7:c3:71:fc:54:3d:a8:18:9d:6c:63:4e:b8: 6f:40:37:6b:b7:20:d0:80:42:6b:38:c1:a0:3b:e5: d9:c2:6b:2a:93:93:ce:f8:11:32:0e:e6:54:63:a3: c2:f5:8d:17:77:fe:93:67:ac:93:90:b0:a8:8e:08: fa:bc:83:83:62:4e:e1:4c:af:b4:ac:2a:a3:47:a2: c5:92:46:6f:fd:9e:8f:1a:af:77:b4:0c:af:35:09: ca:10:9e:cf:1f:d0:84:3f:6b:cd:87:e9:97:c8:be: 3b:4d:cf:45:86:12:f9:5b:fe:06:10:75:dd:b7:9a: 41:7b:85:4f:61:27:2c:2b:af:52:16:c4:cf:33:04: 19:97:54:98:97:4f:da:2d:5a:aa:da:56:0c:4f:e6: b4:4b:df:09:b6:9a:9f:e7:6f:b7:4e:a4:8e:99:e0: ca:72:4e:a6:90:4a:b6:9b:7b:03:79:a7:ee:71:5c: 26:97:67:a2:e0:a6:22:ec:d7:f1:15:40:80:ae:7e: f6:41:d2:fa:77:4f:a0:53:fc:d2:a2:f2:b4:8b:96: 84:f0:30:cc:50:00:2a:b7:8c:de:f4:b2:5e:25:92: 53:bc:5a:e2:81:7e:b3:a1:de:6f:d1:ba:48:28:9a: 09:16:d1:32:aa:b7:82:54:ae:af:ed:36:98:7f:fc: 94:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:63:6C:40:37:0B:FF:F7:64:74:41:60:70:AB:FA:67:1D:5D:28:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/9a68d362-d4fb-37ce-b577-e446d82d6d77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 130.35.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:82:e8:00:25:23:3c:92:a8:b0:57:f8:ce:58:83:54:1f:12: 7f:e2:73:17:05:8b:0a:8d:8c:64:96:a0:21:fe:57:61:8c:a2: e8:0d:e2:f3:97:81:5e:46:dc:f8:3f:38:38:e7:a8:67:32:79: 94:6f:9f:74:d4:0a:18:ab:e3:ac:f6:12:7f:41:60:7d:5b:60: 1c:b4:06:ee:6c:c0:a5:08:da:86:06:65:b4:f2:65:91:d9:3b: 07:9c:46:58:14:bf:09:c8:62:dc:21:bd:f9:71:55:cc:a2:2f: 69:35:de:e3:3f:45:db:26:f4:ca:23:6b:ea:0d:71:a6:ca:69: 0a:5c:de:1d:9c:e0:fa:06:b6:8a:ac:ce:cb:4c:d9:e6:40:45: 6b:66:36:04:01:8d:10:5d:f1:39:74:4b:aa:7b:52:87:0c:c3: 82:5b:5d:f7:32:86:7e:21:7d:3e:9f:84:e0:0b:a2:80:88:2e: 3d:4f:73:93:d1:9d:64:05:31:11:d8:fd:89:27:c0:59:25:74: b9:58:58:72:f5:c2:0b:71:65:3c:60:5f:da:93:4c:5c:f0:87: c1:85:d2:7d:03:0d:38:37:1e:06:d0:be:7b:65:b8:86:88:a9: 78:24:f0:ca:af:4c:a6:f7:ae:67:6e:05:aa:14:d5:01:22:51: a4:eb:4c:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2YurGEZSwZjz+w/cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDQyMzAxMDAyNFoXDTI2MDcyMjAxMDAyNFowLzEtMCsGA1UEAxMk MWExMDAzZTQtNDJlZS00MGYyLTlmNDItNmZmMzhmZDc3NWJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhdfDcfxUPagYnWxjTrhvQDdrtyDQgEJrOMGg O+XZwmsqk5PO+BEyDuZUY6PC9Y0Xd/6TZ6yTkLCojgj6vIODYk7hTK+0rCqjR6LF kkZv/Z6PGq93tAyvNQnKEJ7PH9CEP2vNh+mXyL47Tc9FhhL5W/4GEHXdt5pBe4VP YScsK69SFsTPMwQZl1SYl0/aLVqq2lYMT+a0S98Jtpqf52+3TqSOmeDKck6mkEq2 m3sDeafucVwml2ei4KYi7NfxFUCArn72QdL6d0+gU/zSovK0i5aE8DDMUAAqt4ze 9LJeJZJTvFrigX6zod5v0bpIKJoJFtEyqreCVK6v7TaYf/yUWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMpjbEA3C//3ZHRBYHCr+mcdXSi7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvOWE2OGQzNjItZDRmYi0z N2NlLWI1NzctZTQ0NmQ4MmQ2ZDc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgiPUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFGC6AAlIzySqLBX+M5Yg1QfEn/icxcFiwqNjGSWoCH+V2GMougN4vOX gV5G3Pg/ODjnqGcyeZRvn3TUChir46z2En9BYH1bYBy0Bu5swKUI2oYGZbTyZZHZ OwecRlgUvwnIYtwhvflxVcyiL2k13uM/Rdsm9Moja+oNcabKaQpc3h2c4PoGtoqs zstM2eZARWtmNgQBjRBd8Tl0S6p7UocMw4JbXfcyhn4hfT6fhOALooCILj1Pc5PR nWQFMRHY/YknwFkldLlYWHL1wgtxZTxgX9qTTFzwh8GF0n0DDTg3HgbQvntluIaI qXgk8MqvTKb3rmduBaoU1QEiUaTrTA0= -----END CERTIFICATE-----Generated at Wed May 13 04:33:25 2026 by rpki-client