$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/c9e354c6-120c-3abf-85d8-1e2a6bf0bf86.roa File: c9e354c6-120c-3abf-85d8-1e2a6bf0bf86.roa (raw, json) Hash identifier: jjNU37/Af9hvKW9/lNqfDKKNBAGnivFJ3MJ4oRLzi+U= Subject key identifier: 17:17:C0:03:27:5B:B1:71:46:44:86:08:24:54:BD:46:EF:1A:2E:68 Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584D905A9D090B25BA2A8F6FD0A0 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/c9e354c6-120c-3abf-85d8-1e2a6bf0bf86.roa Signing time: Mon 20 Apr 2026 01:00:24 +0000 ROA not before: Mon 20 Apr 2026 01:00:24 +0000 ROA not after: Sun 19 Jul 2026 01:00:24 +0000 asID: 31898 IP address blocks: 130.35.132.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:90:5a:9d:09:0b:25:ba:2a:8f:6f:d0:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Apr 20 01:00:24 2026 GMT Not After : Jul 19 01:00:24 2026 GMT Subject: CN=1d2f33e7-f430-4388-9cad-08a9a049a2fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:27:83:73:3d:bd:a2:d2:4a:46:16:e5:ce:50: 88:25:8c:68:e1:7d:da:57:f0:54:1f:8a:76:1d:bf: 98:57:65:4e:87:4e:9e:62:6f:da:bc:29:ce:97:85: 83:22:0e:b8:a4:d1:22:0a:6b:24:bf:c4:f6:f7:0d: b9:cd:b0:32:ff:c0:ac:56:f4:c4:c1:d2:3a:95:0a: 86:d1:aa:b1:f4:c5:48:bf:31:17:75:0a:fd:7a:45: 4d:ba:7f:de:ee:5a:e5:7e:6d:d4:ce:60:27:df:44: 38:13:48:c6:b2:d7:b1:32:49:e0:d2:34:f9:24:81: f4:29:9b:f6:0a:14:e1:96:19:4e:1d:dd:be:a6:f7: b6:ad:c0:dd:54:63:90:ae:7a:10:2e:af:a0:72:6e: 2e:81:53:96:d7:60:39:75:7b:21:7b:7a:48:b9:05: e9:8f:16:2f:58:42:94:02:b1:c7:dc:ba:43:26:03: 6c:ca:dc:a8:7a:ec:b9:6b:1e:ac:3f:84:12:18:5e: f0:01:73:4a:e7:22:7b:db:ab:d7:a0:16:85:db:49: 80:82:90:80:22:f0:80:a9:cf:91:57:d0:f1:3b:ac: fe:ee:70:88:4e:ee:28:c9:8b:d6:e1:76:f0:10:87: 84:18:21:e1:ab:c8:3f:5c:6b:0d:3b:f4:4a:21:76: 51:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:17:C0:03:27:5B:B1:71:46:44:86:08:24:54:BD:46:EF:1A:2E:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/c9e354c6-120c-3abf-85d8-1e2a6bf0bf86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 130.35.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:28:a1:82:83:23:6a:1d:57:cd:b9:50:8a:7f:cf:04:ac:2f: e3:f4:cb:63:88:96:41:12:70:47:2e:ea:af:0b:d7:bc:62:93: 26:c8:a3:93:ae:fe:63:f5:49:43:cb:52:1b:10:ae:2f:13:a5: 6f:61:ae:8e:fc:89:32:c1:72:ac:d4:0c:be:14:1b:f9:b7:c1: 95:d9:15:6b:77:a1:1b:8e:49:df:ce:c8:f0:f7:5d:62:d6:c8: 7a:42:a5:a8:ba:4b:05:30:03:4d:fb:f6:48:69:1b:09:fd:3c: 32:ff:e1:49:e8:2a:e4:82:d6:c2:1c:06:05:59:3c:b5:c0:09: d4:7c:05:e5:0b:e1:a8:c5:05:30:55:a7:09:d2:46:83:e6:01: 15:0c:c0:85:43:ed:c7:d1:2d:84:84:41:7c:eb:d6:d0:67:ef: 33:37:47:24:47:c7:67:75:d3:ae:96:a9:a0:06:00:42:b7:b6: ee:64:36:76:71:e5:9c:ae:b9:66:85:22:ba:46:fd:23:3e:b0: 15:2c:5b:7a:de:fe:c5:3e:9c:37:28:20:1d:75:ed:e4:52:c7: e4:90:db:3d:e0:01:69:d9:4c:bf:1b:56:76:f3:9b:d4:00:a8: 95:c7:4e:18:86:40:8c:23:14:38:48:46:1d:71:c6:a6:77:8b: 74:43:6c:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2QWp0JCyW6Ko9v0KAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDQyMDAxMDAyNFoXDTI2MDcxOTAxMDAyNFowLzEtMCsGA1UEAxMk MWQyZjMzZTctZjQzMC00Mzg4LTljYWQtMDhhOWEwNDlhMmZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCeDcz29otJKRhblzlCIJYxo4X3aV/BUH4p2 Hb+YV2VOh06eYm/avCnOl4WDIg64pNEiCmskv8T29w25zbAy/8CsVvTEwdI6lQqG 0aqx9MVIvzEXdQr9ekVNun/e7lrlfm3UzmAn30Q4E0jGstexMkng0jT5JIH0KZv2 ChThlhlOHd2+pve2rcDdVGOQrnoQLq+gcm4ugVOW12A5dXshe3pIuQXpjxYvWEKU ArHH3LpDJgNsytyoeuy5ax6sP4QSGF7wAXNK5yJ726vXoBaF20mAgpCAIvCAqc+R V9DxO6z+7nCITu4oyYvW4XbwEIeEGCHhq8g/XGsNO/RKIXZRXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBcXwAMnW7FxRkSGCCRUvUbvGi5oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvYzllMzU0YzYtMTIwYy0z YWJmLTg1ZDgtMWUyYTZiZjBiZjg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgiOEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAMooYKDI2odV825UIp/zwSsL+P0y2OIlkEScEcu6q8L17xikybIo5Ou /mP1SUPLUhsQri8TpW9hro78iTLBcqzUDL4UG/m3wZXZFWt3oRuOSd/OyPD3XWLW yHpCpai6SwUwA0379khpGwn9PDL/4UnoKuSC1sIcBgVZPLXACdR8BeUL4ajFBTBV pwnSRoPmARUMwIVD7cfRLYSEQXzr1tBn7zM3RyRHx2d1066WqaAGAEK3tu5kNnZx 5ZyuuWaFIrpG/SM+sBUsW3re/sU+nDcoIB117eRSx+SQ2z3gAWnZTL8bVnbzm9QA qJXHThiGQIwjFDhIRh1xxqZ3i3RDbJ8= -----END CERTIFICATE-----Generated at Wed May 13 11:11:45 2026 by rpki-client