$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/40627f49-e1a3-3fbd-a773-aabf40cb447d.roa File: 40627f49-e1a3-3fbd-a773-aabf40cb447d.roa (raw, json) Hash identifier: X5uPLGL7aPsUPXSm45tpurZcryxZ9BTzz9XYuy3258k= Subject key identifier: E5:C6:35:EA:1F:F4:28:91:B5:4F:EC:1A:A0:0E:E4:81:0C:77:20:5B Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584CB81C94023B349DF528C12800 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/40627f49-e1a3-3fbd-a773-aabf40cb447d.roa Signing time: Sun 01 Feb 2026 14:00:40 +0000 ROA not before: Sun 01 Feb 2026 14:00:40 +0000 ROA not after: Sat 02 May 2026 13:00:40 +0000 asID: 31898 IP address blocks: 130.35.120.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Feb 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b8:1c:94:02:3b:34:9d:f5:28:c1:28:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Feb 1 14:00:40 2026 GMT Not After : May 2 13:00:40 2026 GMT Subject: CN=78f9b157-3bb0-4430-a790-481c03c25e3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:2e:12:8a:33:82:2c:23:a0:08:b0:d1:fb:e2: 64:ec:2e:af:17:9e:69:d9:c5:ca:18:36:f4:42:39: de:15:12:1d:f8:66:c1:3b:93:53:13:da:36:94:8f: 13:21:b5:21:74:96:d6:14:54:ab:95:f8:9a:14:a3: 83:72:67:f0:66:d9:58:5f:30:8b:e2:de:41:35:40: 28:05:19:1b:d5:fb:fa:61:d6:6f:94:e1:8f:b8:90: c5:ff:45:fd:4e:c2:e6:d1:32:3c:8f:0c:7d:99:12: 39:28:77:63:6f:49:21:4d:3b:02:73:28:9f:12:46: 17:61:82:d7:48:c1:23:2f:9d:62:f6:c8:7a:60:2b: e1:c6:d9:17:ad:a9:80:0a:a9:c6:f7:33:81:d2:15: 08:3b:0b:63:7b:be:df:e8:c3:3f:37:5e:1f:53:07: 83:bf:02:9a:26:a2:a8:c6:ad:e0:88:1b:64:19:d1: 84:f8:03:0b:c7:77:33:77:46:3b:2c:f0:1b:8d:4b: 7b:df:37:45:9b:b1:6b:ba:bb:55:2e:5e:f3:6e:b2: 31:50:0f:9e:e7:e7:d2:fa:92:84:48:47:b3:db:b8: 1f:cf:98:d7:69:8a:40:7f:cc:98:64:1c:34:87:aa: b9:ea:7f:fa:f2:30:cb:70:15:40:be:71:c6:c9:a2: b4:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:C6:35:EA:1F:F4:28:91:B5:4F:EC:1A:A0:0E:E4:81:0C:77:20:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/40627f49-e1a3-3fbd-a773-aabf40cb447d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 130.35.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:b0:5e:43:28:0d:a4:41:24:1f:75:e4:04:9f:95:39:66:75: 28:16:85:56:ab:41:9e:a1:43:cc:2e:57:c4:32:14:6b:49:4d: 16:15:dc:c2:36:68:c2:e3:11:12:9c:20:b9:19:e8:f1:8d:9a: 4a:8b:13:12:98:8b:9d:9e:a4:5b:34:5c:1a:c9:ff:63:fd:f7: 44:4c:52:5e:08:32:b5:3f:1c:b2:bd:e5:41:1b:27:d3:f4:7d: dd:60:2b:1c:5d:a4:7c:3e:04:f2:57:46:39:6b:06:b9:d9:86: 7a:62:d0:62:00:fc:e1:78:15:1a:4a:72:89:71:e3:3b:03:9f: 13:58:68:1a:39:7b:56:0e:34:d1:c8:3a:cc:f2:68:00:d4:81: d1:7a:3b:dd:92:4b:e3:8b:40:35:97:78:46:bb:d0:e4:5a:79: f7:4a:c2:fc:47:3d:e6:1b:e8:25:98:f5:01:15:b4:07:77:7b: 61:b0:0a:1b:96:72:d3:e1:a3:14:d9:3e:90:30:ee:e0:af:f1: e4:ab:27:f1:38:0a:c7:96:78:2d:93:94:68:7f:c7:b1:f2:c6: e0:c8:7c:9b:a3:7b:4c:64:af:c7:80:ee:44:76:a8:39:b5:49: e2:2e:71:3c:10:b0:d4:7d:f1:11:f0:f3:ed:2f:16:b3:58:3a: f3:5f:78:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy4HJQCOzSd9SjBKAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDIwMTE0MDA0MFoXDTI2MDUwMjEzMDA0MFowLzEtMCsGA1UEAxMk NzhmOWIxNTctM2JiMC00NDMwLWE3OTAtNDgxYzAzYzI1ZTNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4S4SijOCLCOgCLDR++Jk7C6vF55p2cXKGDb0 QjneFRId+GbBO5NTE9o2lI8TIbUhdJbWFFSrlfiaFKODcmfwZtlYXzCL4t5BNUAo BRkb1fv6YdZvlOGPuJDF/0X9TsLm0TI8jwx9mRI5KHdjb0khTTsCcyifEkYXYYLX SMEjL51i9sh6YCvhxtkXramACqnG9zOB0hUIOwtje77f6MM/N14fUweDvwKaJqKo xq3giBtkGdGE+AMLx3czd0Y7LPAbjUt73zdFm7FrurtVLl7zbrIxUA+e5+fS+pKE SEez27gfz5jXaYpAf8yYZBw0h6q56n/68jDLcBVAvnHGyaK0PwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOXGNeof9CiRtU/sGqAO5IEMdyBbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvNDA2MjdmNDktZTFhMy0z ZmJkLWE3NzMtYWFiZjQwY2I0NDdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDgiN4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF+wXkMoDaRBJB915ASflTlmdSgWhVarQZ6hQ8wuV8QyFGtJTRYV3MI2 aMLjERKcILkZ6PGNmkqLExKYi52epFs0XBrJ/2P990RMUl4IMrU/HLK95UEbJ9P0 fd1gKxxdpHw+BPJXRjlrBrnZhnpi0GIA/OF4FRpKcolx4zsDnxNYaBo5e1YONNHI OszyaADUgdF6O92SS+OLQDWXeEa70ORaefdKwvxHPeYb6CWY9QEVtAd3e2GwChuW ctPhoxTZPpAw7uCv8eSrJ/E4CseWeC2TlGh/x7HyxuDIfJuje0xkr8eA7kR2qDm1 SeIucTwQsNR98RHw8+0vFrNYOvNfeNA= -----END CERTIFICATE-----Generated at Thu Feb 26 03:27:26 2026 by rpki-client