$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/c17b1e7e-dbec-3fd6-a3b8-cafa53245c81.roa File: c17b1e7e-dbec-3fd6-a3b8-cafa53245c81.roa (raw, json) Hash identifier: yZWPyZPzPQVSE4OZe0sxqpfvCOu4Xsycx1KCtpMgOnw= Subject key identifier: 55:9A:BB:30:13:A2:A3:E9:A5:0C:0B:68:3D:86:14:0A:5C:31:0C:6E Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584D905A973761DB68B6C0DC3700 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/c17b1e7e-dbec-3fd6-a3b8-cafa53245c81.roa Signing time: Mon 20 Apr 2026 01:00:24 +0000 ROA not before: Mon 20 Apr 2026 01:00:24 +0000 ROA not after: Sun 19 Jul 2026 01:00:24 +0000 asID: 31898 IP address blocks: 130.35.128.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:90:5a:97:37:61:db:68:b6:c0:dc:37:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Apr 20 01:00:24 2026 GMT Not After : Jul 19 01:00:24 2026 GMT Subject: CN=92d3250f-cc46-4d0e-b4a1-7e1ecebdb969 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:1f:74:6d:02:21:5a:fb:60:bf:2b:62:d8:c4: bf:5e:14:80:8d:b9:e1:d9:c0:46:c3:de:77:23:4f: 43:f0:bf:ca:7d:3f:a9:14:60:58:78:bd:2f:df:48: e4:62:2f:3e:1a:eb:93:58:1f:26:3e:d0:3a:3e:98: 20:8b:f5:3f:b4:00:e8:b8:4a:e2:c1:29:15:93:09: e7:a8:71:5c:02:5d:88:19:ac:2e:f7:1b:19:b3:50: 8f:c5:ec:4c:fe:ad:f2:ab:16:06:5c:71:3e:43:ce: 5f:f1:c0:04:44:e6:d3:7c:14:08:a7:ad:25:6e:3f: fa:b8:10:0d:44:71:dd:10:f1:7f:e6:72:5e:49:da: 62:a5:07:3f:b3:10:22:14:a7:cf:96:18:e1:0f:87: 7b:26:13:5a:6f:a9:1b:02:09:69:19:61:47:a1:84: 2a:99:ac:a5:d9:5b:95:d3:c1:97:25:75:6b:34:54: 81:e7:43:ff:ff:41:cc:6a:49:b0:72:96:47:9c:11: db:a6:fa:30:34:17:3e:95:a8:bb:c6:8d:d8:5a:da: d2:4c:10:46:39:68:71:92:1e:59:ee:c0:5e:7f:09: 42:0a:14:f4:f6:a3:1f:80:1e:37:b9:71:9b:72:27: f6:06:91:7d:08:52:25:25:14:85:d2:2e:8f:3e:3a: 14:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:9A:BB:30:13:A2:A3:E9:A5:0C:0B:68:3D:86:14:0A:5C:31:0C:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/c17b1e7e-dbec-3fd6-a3b8-cafa53245c81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 130.35.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:50:ca:53:ec:54:11:bd:70:2a:9a:03:c3:eb:19:64:08:32: 47:78:cb:44:78:60:ad:0a:d5:d4:6b:49:d8:6c:87:98:e3:9a: 92:d7:af:1d:72:13:15:de:0a:6c:f7:e6:7f:15:ed:61:6e:f9: 02:88:3f:67:c9:90:6d:69:95:bf:76:f0:e3:55:43:5d:4b:02: 73:10:ad:22:f6:19:90:5f:25:12:9a:3c:96:4c:86:2a:94:89: b1:3b:af:5a:e0:e9:31:84:d2:0f:fb:8f:1c:d8:6f:d2:c8:06: 0f:11:54:46:a2:1a:51:58:48:0b:8c:cb:8d:2a:3a:e2:84:19: 14:9e:ca:59:b0:d6:ba:06:3b:4d:79:db:83:9b:90:8c:ec:6b: 5f:86:f7:e6:e9:cc:4f:94:df:d3:2a:e9:0b:90:27:14:4e:8f: f2:ed:e9:0f:1f:68:39:7d:4a:30:54:21:62:99:31:ed:d6:91: f6:29:43:c0:39:ac:02:79:78:ff:87:41:44:8b:cf:48:02:7a: 91:f5:db:98:05:c1:73:87:dd:78:93:2b:7a:f9:1c:03:db:66: d9:a2:16:4a:36:86:ae:9b:e4:ba:1e:a0:09:53:d1:81:04:05: 56:d3:ea:47:ae:dd:86:a2:c6:7b:66:76:c2:59:70:23:30:80: d4:21:1b:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2QWpc3YdtotsDcNwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDQyMDAxMDAyNFoXDTI2MDcxOTAxMDAyNFowLzEtMCsGA1UEAxMk OTJkMzI1MGYtY2M0Ni00ZDBlLWI0YTEtN2UxZWNlYmRiOTY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkB90bQIhWvtgvyti2MS/XhSAjbnh2cBGw953 I09D8L/KfT+pFGBYeL0v30jkYi8+GuuTWB8mPtA6Ppggi/U/tADouEriwSkVkwnn qHFcAl2IGawu9xsZs1CPxexM/q3yqxYGXHE+Q85f8cAERObTfBQIp60lbj/6uBAN RHHdEPF/5nJeSdpipQc/sxAiFKfPlhjhD4d7JhNab6kbAglpGWFHoYQqmayl2VuV 08GXJXVrNFSB50P//0HMakmwcpZHnBHbpvowNBc+lai7xo3YWtrSTBBGOWhxkh5Z 7sBefwlCChT09qMfgB43uXGbcif2BpF9CFIlJRSF0i6PPjoUJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFWauzAToqPppQwLaD2GFApcMQxuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvYzE3YjFlN2UtZGJlYy0z ZmQ2LWEzYjgtY2FmYTUzMjQ1YzgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgiOAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIpQylPsVBG9cCqaA8PrGWQIMkd4y0R4YK0K1dRrSdhsh5jjmpLXrx1y ExXeCmz35n8V7WFu+QKIP2fJkG1plb928ONVQ11LAnMQrSL2GZBfJRKaPJZMhiqU ibE7r1rg6TGE0g/7jxzYb9LIBg8RVEaiGlFYSAuMy40qOuKEGRSeylmw1roGO015 24ObkIzsa1+G9+bpzE+U39Mq6QuQJxROj/Lt6Q8faDl9SjBUIWKZMe3WkfYpQ8A5 rAJ5eP+HQUSLz0gCepH125gFwXOH3XiTK3r5HAPbZtmiFko2hq6b5LoeoAlT0YEE BVbT6keu3YaixntmdsJZcCMwgNQhGwQ= -----END CERTIFICATE-----Generated at Wed May 13 09:27:49 2026 by rpki-client