$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/dad674c5-ebd7-3788-b544-2d295a8ac901.roa File: dad674c5-ebd7-3788-b544-2d295a8ac901.roa (raw, json) Hash identifier: RGPHMP5s6uoSnWwhXMK7SYvnzaVhyTJM3DL7FKwl9zI= Subject key identifier: F3:8E:9B:67:09:93:93:83:78:88:95:12:58:C4:73:64:BE:78:9C:BD Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584D905A9B28337AFF88F115BBA0 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/dad674c5-ebd7-3788-b544-2d295a8ac901.roa Signing time: Mon 20 Apr 2026 01:00:24 +0000 ROA not before: Mon 20 Apr 2026 01:00:24 +0000 ROA not after: Sun 19 Jul 2026 01:00:24 +0000 asID: 31898 IP address blocks: 130.35.136.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:90:5a:9b:28:33:7a:ff:88:f1:15:bb:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Apr 20 01:00:24 2026 GMT Not After : Jul 19 01:00:24 2026 GMT Subject: CN=9830dd5b-a8b8-4efe-b1ce-328fa3f50e11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:f9:14:36:57:d8:c7:02:f5:06:e3:cf:fe:40: bd:fe:eb:69:a3:3d:b8:c3:5d:e9:40:fe:05:be:e8: 7b:66:8b:d0:05:6c:6f:83:f6:63:35:ce:23:34:76: 4e:fc:c3:d4:4c:b5:c3:5f:8c:6a:9d:8a:11:3e:a6: 64:90:ed:ea:6f:1a:f6:d9:ef:b8:f7:a1:d9:a6:3c: 51:9e:77:8e:4a:2e:2d:7c:12:05:cf:0a:c6:00:0b: 5c:e3:6c:36:5d:00:6b:2c:6c:a9:31:ab:ec:a3:82: 4f:6b:83:8e:61:31:40:cd:d8:7e:30:56:02:37:1e: a5:40:57:ba:ed:ef:9e:d5:6b:f2:4c:91:ec:5c:5b: 08:09:a4:9a:3a:1c:71:64:38:3a:47:f6:f7:f7:78: 7d:cf:52:ed:d6:5a:e1:1c:29:01:c9:11:d7:9e:0d: 4b:65:03:72:97:ee:35:68:65:10:9c:d7:9f:9f:53: a0:c4:d0:ae:6c:b6:73:80:33:b6:37:ad:27:48:14: ba:f1:75:5a:9b:a5:5b:62:8f:a7:83:e9:d1:ea:67: 93:b4:bd:76:8f:f7:c1:aa:bf:f3:c1:da:1a:e4:5e: eb:8a:1f:e6:72:a5:00:0b:92:60:b6:59:d0:d0:69: f8:f0:de:08:1e:40:57:93:26:c1:10:cf:0f:1b:d7: 35:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:8E:9B:67:09:93:93:83:78:88:95:12:58:C4:73:64:BE:78:9C:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/dad674c5-ebd7-3788-b544-2d295a8ac901.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 130.35.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:de:c5:04:dd:50:86:de:90:0b:74:99:cd:3b:2c:65:14:d5: 55:d7:b5:4c:b2:39:ca:e8:af:c9:11:b8:81:6e:7b:57:58:d9: cf:bf:e4:e2:62:77:d5:ee:7b:57:e0:f0:eb:97:d8:f5:ef:f6: 53:bb:a9:ba:13:79:c9:a5:04:2b:f0:13:e9:cc:dc:47:cf:e8: 97:05:ba:63:c2:2f:19:49:ea:2a:9c:10:fe:95:70:6a:ce:9d: 77:c3:b3:7a:ae:f7:61:78:78:6c:24:f5:57:87:75:ed:a1:e6: d4:50:15:79:90:70:49:55:4f:af:a0:1d:8c:2e:ed:3d:06:b7: 47:ef:d2:fb:eb:fe:28:e0:ac:f5:3e:03:db:75:87:98:4b:3a: f8:8b:be:83:fe:a0:5b:ba:3e:a0:0b:47:78:73:0d:2c:f9:6d: 5e:4f:ac:a0:99:35:32:73:5e:f1:62:b3:e6:79:45:84:2e:bf: 55:63:91:62:4a:99:f9:73:a9:64:3d:4f:7b:61:da:a7:9c:68: 7e:58:1b:38:d3:a2:31:e8:f5:5a:23:dc:93:c9:4e:16:c2:ba: d0:e0:46:41:b5:ab:f6:e5:30:b0:69:7d:e5:63:5d:6a:52:3d: 29:bb:6e:84:16:17:8c:16:34:af:69:a9:1f:c7:93:13:aa:aa: 44:22:76:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2QWpsoM3r/iPEVu6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDQyMDAxMDAyNFoXDTI2MDcxOTAxMDAyNFowLzEtMCsGA1UEAxMk OTgzMGRkNWItYThiOC00ZWZlLWIxY2UtMzI4ZmEzZjUwZTExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/kUNlfYxwL1BuPP/kC9/utpoz24w13pQP4F vuh7ZovQBWxvg/ZjNc4jNHZO/MPUTLXDX4xqnYoRPqZkkO3qbxr22e+496HZpjxR nneOSi4tfBIFzwrGAAtc42w2XQBrLGypMavso4JPa4OOYTFAzdh+MFYCNx6lQFe6 7e+e1WvyTJHsXFsICaSaOhxxZDg6R/b393h9z1Lt1lrhHCkByRHXng1LZQNyl+41 aGUQnNefn1OgxNCubLZzgDO2N60nSBS68XVam6VbYo+ng+nR6meTtL12j/fBqr/z wdoa5F7rih/mcqUAC5JgtlnQ0Gn48N4IHkBXkybBEM8PG9c14QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPOOm2cJk5ODeIiVEljEc2S+eJy9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvZGFkNjc0YzUtZWJkNy0z Nzg4LWI1NDQtMmQyOTVhOGFjOTAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgiOIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHfexQTdUIbekAt0mc07LGUU1VXXtUyyOcror8kRuIFue1dY2c+/5OJi d9Xue1fg8OuX2PXv9lO7qboTecmlBCvwE+nM3EfP6JcFumPCLxlJ6iqcEP6VcGrO nXfDs3qu92F4eGwk9VeHde2h5tRQFXmQcElVT6+gHYwu7T0Gt0fv0vvr/ijgrPU+ A9t1h5hLOviLvoP+oFu6PqALR3hzDSz5bV5PrKCZNTJzXvFis+Z5RYQuv1VjkWJK mflzqWQ9T3th2qecaH5YGzjTojHo9Voj3JPJThbCutDgRkG1q/blMLBpfeVjXWpS PSm7boQWF4wWNK9pqR/HkxOqqkQidvo= -----END CERTIFICATE-----Generated at Wed May 13 14:00:45 2026 by rpki-client