$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/c2db622b-7545-33c4-9e85-825e60dfab74.roa File: c2db622b-7545-33c4-9e85-825e60dfab74.roa (raw, json) Hash identifier: 7Ny+tngfCwpb4B9YkQlu3+zZAOvvPib8dephva4i/3c= Subject key identifier: 1A:95:97:E2:0A:04:D6:6F:E8:80:5D:BC:68:84:19:8F:BC:F1:09:E4 Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584D98BAA02731AA1949E32B3480 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/c2db622b-7545-33c4-9e85-825e60dfab74.roa Signing time: Thu 23 Apr 2026 01:00:24 +0000 ROA not before: Thu 23 Apr 2026 01:00:24 +0000 ROA not after: Wed 22 Jul 2026 01:00:24 +0000 asID: 31898 IP address blocks: 130.35.208.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:98:ba:a0:27:31:aa:19:49:e3:2b:34:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Apr 23 01:00:24 2026 GMT Not After : Jul 22 01:00:24 2026 GMT Subject: CN=8828a3d8-4aea-46da-93a5-25fdcaf33141 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:8d:8e:a6:bc:22:a9:37:8b:9b:a4:c3:ea:39: 91:21:a3:7f:b4:ef:47:ee:36:eb:b6:fc:6c:a4:21: 0e:61:6b:a4:85:aa:44:48:b6:fd:41:a0:32:d5:eb: fc:aa:d9:04:0e:45:bb:ab:a6:f6:f0:4f:84:97:e4: 4b:47:e2:ad:e6:b2:71:a2:9a:f5:49:22:b0:49:9d: d9:dc:62:e2:73:ac:71:b8:cd:16:e4:75:84:87:cb: 4a:61:7f:cf:3b:13:97:48:69:f3:51:a4:ba:14:2a: 1a:4d:de:ab:c2:e5:ce:f5:55:c3:46:3e:77:33:33: 3c:cf:67:e5:2b:23:9e:e9:58:66:48:b4:07:0b:9f: e6:d2:60:d0:b2:e0:93:38:28:d3:c2:00:48:ac:0f: 2e:31:19:22:e2:1b:94:15:1b:88:00:50:38:9e:d1: 7d:29:09:0b:b3:8d:35:3a:8a:19:e0:72:16:8e:10: 92:58:39:4f:12:5c:1a:29:69:bb:bd:75:ed:27:ab: ef:35:54:95:bc:95:6f:a3:48:f4:db:73:e0:3c:54: 6d:03:be:d7:a5:ea:61:14:e9:98:94:d4:1d:92:71: 16:fc:c2:81:87:5f:91:f2:8b:40:ca:75:3a:60:7e: 08:63:95:09:22:91:fa:71:7b:e5:19:1d:5b:9f:d5: 9a:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:95:97:E2:0A:04:D6:6F:E8:80:5D:BC:68:84:19:8F:BC:F1:09:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/c2db622b-7545-33c4-9e85-825e60dfab74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 130.35.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:9d:24:b5:fb:9f:af:5b:84:c1:b2:19:19:16:26:96:9a:13: 3a:b5:0b:18:59:da:48:01:5b:b8:1e:5b:af:b7:7f:04:48:ee: a4:c8:45:c5:1c:c0:58:e3:5d:a7:35:cb:18:6a:e9:06:c7:3e: 83:96:83:5a:19:fb:cd:4a:69:28:2e:a6:60:91:88:b7:5c:d5: be:c1:75:58:2b:f6:77:b5:d2:a2:c1:91:98:a4:01:8a:66:27: 8c:ec:2d:e4:95:13:b7:dc:e0:9b:99:77:7f:a8:2f:04:36:7d: af:7b:be:91:ab:06:01:98:d4:cf:f1:78:46:ec:0e:5d:cf:d5: d7:06:66:61:54:81:27:2f:39:2f:5e:c0:aa:9e:9d:f6:d1:1e: e8:5d:52:fe:97:28:91:22:53:78:36:d2:49:f9:cb:07:aa:6c: a1:93:ae:09:e0:8d:c8:ef:3c:68:80:1f:68:bd:a0:37:f5:86: ee:1e:99:9d:53:16:fe:68:3f:71:a9:08:a4:ca:e0:33:75:19: 14:aa:9e:34:1c:de:18:4d:eb:45:5b:94:5c:27:82:70:13:8d: 94:10:be:16:5a:2d:13:1c:f8:29:f1:31:97:98:4b:07:63:25: eb:ef:a9:4f:1a:c3:3f:1d:48:8f:a4:18:40:21:d0:00:fa:53: 69:c1:50:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2YuqAnMaoZSeMrNIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDQyMzAxMDAyNFoXDTI2MDcyMjAxMDAyNFowLzEtMCsGA1UEAxMk ODgyOGEzZDgtNGFlYS00NmRhLTkzYTUtMjVmZGNhZjMzMTQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuI2OprwiqTeLm6TD6jmRIaN/tO9H7jbrtvxs pCEOYWukhapESLb9QaAy1ev8qtkEDkW7q6b28E+El+RLR+Kt5rJxopr1SSKwSZ3Z 3GLic6xxuM0W5HWEh8tKYX/POxOXSGnzUaS6FCoaTd6rwuXO9VXDRj53MzM8z2fl KyOe6VhmSLQHC5/m0mDQsuCTOCjTwgBIrA8uMRki4huUFRuIAFA4ntF9KQkLs401 OooZ4HIWjhCSWDlPElwaKWm7vXXtJ6vvNVSVvJVvo0j023PgPFRtA77XpephFOmY lNQdknEW/MKBh1+R8otAynU6YH4IY5UJIpH6cXvlGR1bn9WaXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBqVl+IKBNZv6IBdvGiEGY+88QnkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvYzJkYjYyMmItNzU0NS0z M2M0LTllODUtODI1ZTYwZGZhYjc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgiPQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABydJLX7n69bhMGyGRkWJpaaEzq1CxhZ2kgBW7geW6+3fwRI7qTIRcUc wFjjXac1yxhq6QbHPoOWg1oZ+81KaSgupmCRiLdc1b7BdVgr9ne10qLBkZikAYpm J4zsLeSVE7fc4JuZd3+oLwQ2fa97vpGrBgGY1M/xeEbsDl3P1dcGZmFUgScvOS9e wKqenfbRHuhdUv6XKJEiU3g20kn5yweqbKGTrgngjcjvPGiAH2i9oDf1hu4emZ1T Fv5oP3GpCKTK4DN1GRSqnjQc3hhN60VblFwngnATjZQQvhZaLRMc+CnxMZeYSwdj JevvqU8awz8dSI+kGEAh0AD6U2nBUKA= -----END CERTIFICATE-----Generated at Wed May 13 09:02:09 2026 by rpki-client