$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/da02e80d-3e08-3837-b4af-121134b5bc14.roa File: da02e80d-3e08-3837-b4af-121134b5bc14.roa (raw, json) Hash identifier: rEeHlEbiGL5bpjfUcXdnPfE4ha3jN3zgXwRjrEnLNvU= Subject key identifier: F4:F0:31:22:EC:30:78:1A:09:10:A4:F3:93:86:9D:FE:09:26:1D:4C Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584D98BAA2A762DA5EE0838FE710 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/da02e80d-3e08-3837-b4af-121134b5bc14.roa Signing time: Thu 23 Apr 2026 01:00:24 +0000 ROA not before: Thu 23 Apr 2026 01:00:24 +0000 ROA not after: Wed 22 Jul 2026 01:00:24 +0000 asID: 31898 IP address blocks: 130.35.148.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:98:ba:a2:a7:62:da:5e:e0:83:8f:e7:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Apr 23 01:00:24 2026 GMT Not After : Jul 22 01:00:24 2026 GMT Subject: CN=00af2b4a-8b75-42b4-a421-e5e56508e4a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:b3:51:da:02:9f:eb:e5:94:0c:bf:84:9c:86: 57:c2:aa:d1:2a:bd:8c:4d:93:ed:8d:0e:4a:38:60: fc:44:d2:98:fa:35:30:e3:02:3e:69:da:36:5e:70: 61:15:ff:70:11:ac:eb:e2:1f:43:ab:d0:99:c9:b2: b9:d4:cb:2b:db:49:8f:a4:de:ff:8e:12:1e:df:f3: e3:62:6f:9d:9a:55:fe:95:c1:b0:38:40:79:54:94: 7d:8a:09:94:8d:6b:7d:f8:c7:24:56:c7:3a:e9:60: 85:d8:b9:40:17:48:e2:aa:c7:04:74:db:6e:84:f9: 9a:b0:32:5c:3d:dc:c8:1f:ac:cc:b8:48:54:2c:72: af:c5:3d:07:35:a1:95:ed:15:ac:9c:c4:1f:88:7b: ee:f0:36:53:c8:05:95:23:8a:93:42:f4:fd:4a:24: b1:59:1a:50:f7:4b:bc:5c:11:ba:6d:a6:39:e7:34: 79:14:88:11:de:ed:3e:0e:d4:51:8d:0a:c6:a4:cd: 64:a3:c8:5a:6b:d5:cb:a6:21:2b:bf:c8:eb:dc:9c: 0f:ce:79:ac:de:60:6a:ad:d9:7e:6d:12:0e:e4:42: 7c:cb:d7:97:2e:fe:8c:06:c9:17:29:9a:ab:bf:89: 22:10:e5:24:0f:22:a2:92:1f:94:94:e3:26:a2:bc: 75:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:F0:31:22:EC:30:78:1A:09:10:A4:F3:93:86:9D:FE:09:26:1D:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/da02e80d-3e08-3837-b4af-121134b5bc14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 130.35.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:a0:29:23:46:e5:03:17:28:2a:ae:59:a8:11:2f:f4:3c:c3: 72:b0:b1:a8:3e:3c:8e:ee:ee:2b:32:4f:f0:a3:bb:05:03:36: 9c:5d:b9:7e:c8:4e:6e:c4:dc:b0:cf:97:56:39:87:f8:02:87: 16:ba:ae:fd:a1:db:0a:c3:c4:64:bf:50:ca:4d:ac:0a:94:be: 27:b9:29:2d:0b:d2:f7:6d:9c:1e:54:3d:92:be:e0:c6:1c:b0: ee:a2:fe:a6:84:7b:1f:09:dd:f5:24:7f:37:a2:68:8d:ef:1a: 70:fb:18:7f:dc:cd:72:db:23:7c:d0:30:50:96:8f:b3:d8:17: b1:28:8e:38:28:75:f9:78:38:8b:1c:13:d7:80:86:28:90:62: 38:a8:7c:68:69:cd:3f:3a:03:85:44:e3:d8:36:20:29:9f:9f: 7b:d5:95:8c:a4:f5:87:3f:6c:67:99:df:55:e0:a2:06:14:23: c5:fb:ab:0c:b8:7d:f0:69:fa:ee:bf:c9:44:de:c7:90:77:45: c2:d3:13:05:ff:46:81:2a:da:df:16:d4:0c:42:ea:08:89:b2: 28:e4:93:22:16:9c:ce:6e:bc:72:99:ca:8c:dd:b1:71:44:cc: 98:5c:fb:7c:81:1c:0e:63:90:c4:f2:43:35:b1:f1:07:3c:1c: 59:ec:ea:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2YuqKnYtpe4IOP5xAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDQyMzAxMDAyNFoXDTI2MDcyMjAxMDAyNFowLzEtMCsGA1UEAxMk MDBhZjJiNGEtOGI3NS00MmI0LWE0MjEtZTVlNTY1MDhlNGE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7NR2gKf6+WUDL+EnIZXwqrRKr2MTZPtjQ5K OGD8RNKY+jUw4wI+ado2XnBhFf9wEazr4h9Dq9CZybK51Msr20mPpN7/jhIe3/Pj Ym+dmlX+lcGwOEB5VJR9igmUjWt9+MckVsc66WCF2LlAF0jiqscEdNtuhPmasDJc PdzIH6zMuEhULHKvxT0HNaGV7RWsnMQfiHvu8DZTyAWVI4qTQvT9SiSxWRpQ90u8 XBG6baY55zR5FIgR3u0+DtRRjQrGpM1ko8haa9XLpiErv8jr3JwPznms3mBqrdl+ bRIO5EJ8y9eXLv6MBskXKZqrv4kiEOUkDyKikh+UlOMmorx1VQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPTwMSLsMHgaCRCk85OGnf4JJh1MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvZGEwMmU4MGQtM2UwOC0z ODM3LWI0YWYtMTIxMTM0YjViYzE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgiOUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJGgKSNG5QMXKCquWagRL/Q8w3Kwsag+PI7u7isyT/CjuwUDNpxduX7I Tm7E3LDPl1Y5h/gChxa6rv2h2wrDxGS/UMpNrAqUvie5KS0L0vdtnB5UPZK+4MYc sO6i/qaEex8J3fUkfzeiaI3vGnD7GH/czXLbI3zQMFCWj7PYF7Eojjgodfl4OIsc E9eAhiiQYjiofGhpzT86A4VE49g2ICmfn3vVlYyk9Yc/bGeZ31XgogYUI8X7qwy4 ffBp+u6/yUTex5B3RcLTEwX/RoEq2t8W1AxC6giJsijkkyIWnM5uvHKZyozdsXFE zJhc+3yBHA5jkMTyQzWx8Qc8HFns6rA= -----END CERTIFICATE-----Generated at Wed May 13 09:58:22 2026 by rpki-client