$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/1656c190-f3a3-3533-a64a-a5b4f175f7d2.roa File: 1656c190-f3a3-3533-a64a-a5b4f175f7d2.roa (raw, json) Hash identifier: JmYpvgMRJm48ihFAd1sel4yHIgBJP9fcRRO2czw2crY= Subject key identifier: 15:4A:61:FA:43:5F:E2:08:11:4C:FB:B9:47:86:64:97:DA:DA:C4:3F Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584CAFBC7314691DEF1EA1648000 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/1656c190-f3a3-3533-a64a-a5b4f175f7d2.roa Signing time: Thu 29 Jan 2026 14:00:40 +0000 ROA not before: Thu 29 Jan 2026 14:00:40 +0000 ROA not after: Wed 29 Apr 2026 13:00:40 +0000 asID: 31898 IP address blocks: 130.35.0.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Feb 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:af:bc:73:14:69:1d:ef:1e:a1:64:80:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Jan 29 14:00:40 2026 GMT Not After : Apr 29 13:00:40 2026 GMT Subject: CN=4bd47025-ce1f-4cbc-ac3d-4fb24ef0420c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:76:bf:89:b3:c7:d5:ec:05:1f:c1:71:90:89: dd:48:b9:03:06:e1:b9:ea:c7:cc:06:c4:9e:dc:bc: e3:fb:e2:de:2a:f2:b6:e4:ad:45:67:42:da:f3:2d: d2:2a:d8:35:9a:8f:98:c6:be:df:15:02:13:fb:75: 0a:39:0f:65:cc:7d:2e:9c:c4:97:c4:41:2d:3c:fd: 03:a5:04:24:10:a3:30:51:fc:7d:f9:a8:e8:ee:7d: fd:0c:09:21:e4:bb:e4:e6:c9:e0:6c:78:8c:a7:39: 7a:a3:74:af:38:c3:1d:d7:28:04:af:2a:6a:a8:f2: 94:08:29:2b:2e:6c:50:0e:e8:fa:13:2e:03:e9:04: f6:be:33:82:fb:f4:08:e2:b2:96:4d:d0:cb:b2:c7: ee:38:93:61:70:1b:6a:c1:d2:26:93:0d:1e:ea:e4: e9:c1:7b:f8:be:c9:12:8b:3d:9a:30:08:30:5b:1a: 63:40:d7:8a:39:04:ab:44:b7:0e:5e:84:67:c3:9d: 5f:62:80:a7:00:23:81:89:0f:ff:72:c1:8d:d5:83: ca:f3:9e:59:64:30:eb:31:79:8b:a9:c1:0b:a9:e9: 05:26:f2:dd:72:4e:1f:c3:44:44:34:89:d3:f4:4a: 62:ae:e6:f7:01:56:05:11:d2:a1:04:f8:66:f9:cd: 55:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:4A:61:FA:43:5F:E2:08:11:4C:FB:B9:47:86:64:97:DA:DA:C4:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/1656c190-f3a3-3533-a64a-a5b4f175f7d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 130.35.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:a3:59:9e:a3:08:14:a6:e3:c7:18:7d:1d:7e:8f:7e:a1:8c: 31:d3:f1:29:6f:e2:9a:1f:23:8f:06:f4:68:c7:e9:84:91:e7: 21:47:3e:55:c7:df:da:e0:6b:ce:6e:3d:2a:2e:02:c3:fe:97: d0:6d:10:b7:6c:1c:ce:91:19:f7:f6:fe:44:38:d9:85:e8:d1: bf:68:77:57:46:82:7e:e5:71:9f:b3:8e:2e:2b:a7:45:8b:38: cd:16:58:80:7a:a5:a5:b9:28:48:d3:c6:3b:64:78:0e:b7:2c: 75:e4:5f:16:ce:30:a2:c3:a9:3a:1e:d8:1a:c8:bf:be:26:f4: 84:1c:42:5a:63:0a:95:af:0d:cd:f6:a4:60:c3:1c:bf:78:93: 79:34:75:5d:87:3e:f8:d0:72:78:c4:28:8b:46:93:be:c8:c4: 6c:87:f7:94:92:2c:11:dd:9a:c0:95:70:9d:85:0b:8d:fc:06: e3:90:58:74:4c:6a:18:a0:03:f2:01:7c:62:d3:c0:54:b3:6c: 22:5c:b5:15:78:a1:e2:83:cb:ff:bf:28:4c:e4:c8:d5:6e:77: 2f:17:fd:55:c2:a0:69:e0:c1:ca:50:42:03:4b:40:e1:ee:f5: 91:a9:e9:17:26:72:a6:0f:7e:60:28:93:a2:61:b1:40:74:53: b0:85:11:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyvvHMUaR3vHqFkgAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDEyOTE0MDA0MFoXDTI2MDQyOTEzMDA0MFowLzEtMCsGA1UEAxMk NGJkNDcwMjUtY2UxZi00Y2JjLWFjM2QtNGZiMjRlZjA0MjBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgna/ibPH1ewFH8FxkIndSLkDBuG56sfMBsSe 3Lzj++LeKvK25K1FZ0La8y3SKtg1mo+Yxr7fFQIT+3UKOQ9lzH0unMSXxEEtPP0D pQQkEKMwUfx9+ajo7n39DAkh5Lvk5sngbHiMpzl6o3SvOMMd1ygErypqqPKUCCkr LmxQDuj6Ey4D6QT2vjOC+/QI4rKWTdDLssfuOJNhcBtqwdImkw0e6uTpwXv4vskS iz2aMAgwWxpjQNeKOQSrRLcOXoRnw51fYoCnACOBiQ//csGN1YPK855ZZDDrMXmL qcELqekFJvLdck4fw0RENInT9Epirub3AVYFEdKhBPhm+c1VlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBVKYfpDX+IIEUz7uUeGZJfa2sQ/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvMTY1NmMxOTAtZjNhMy0z NTMzLWE2NGEtYTViNGYxNzVmN2QyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgiMAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI6jWZ6jCBSm48cYfR1+j36hjDHT8Slv4pofI48G9GjH6YSR5yFHPlXH 39rga85uPSouAsP+l9BtELdsHM6RGff2/kQ42YXo0b9od1dGgn7lcZ+zji4rp0WL OM0WWIB6paW5KEjTxjtkeA63LHXkXxbOMKLDqToe2BrIv74m9IQcQlpjCpWvDc32 pGDDHL94k3k0dV2HPvjQcnjEKItGk77IxGyH95SSLBHdmsCVcJ2FC438BuOQWHRM ahigA/IBfGLTwFSzbCJctRV4oeKDy/+/KEzkyNVudy8X/VXCoGngwcpQQgNLQOHu 9ZGp6RcmcqYPfmAok6JhsUB0U7CFEVI= -----END CERTIFICATE-----Generated at Thu Feb 26 03:30:59 2026 by rpki-client