$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/499c620f-9409-3f5d-9b60-aa448c224932.roa File: 499c620f-9409-3f5d-9b60-aa448c224932.roa (raw, json) Hash identifier: kMQ0LiIj5EOAKWPOCxEj3IXkRA+DigZCeOdOMeeqIjA= Subject key identifier: 3A:6A:45:D1:27:4D:DC:EA:4D:A5:62:C7:23:93:A9:18:FC:FD:E8:0F Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584CB81C8260B1665D81A105D880 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/499c620f-9409-3f5d-9b60-aa448c224932.roa Signing time: Sun 01 Feb 2026 14:00:40 +0000 ROA not before: Sun 01 Feb 2026 14:00:40 +0000 ROA not after: Sat 02 May 2026 13:00:40 +0000 asID: 31898 IP address blocks: 130.35.16.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Feb 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b8:1c:82:60:b1:66:5d:81:a1:05:d8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Feb 1 14:00:40 2026 GMT Not After : May 2 13:00:40 2026 GMT Subject: CN=d940e28f-51b8-4c17-8968-6d46d69bb13d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:f4:c8:d7:8c:00:04:9f:3f:2a:2c:b9:d8:7d: d0:77:34:01:21:e9:44:62:1a:60:de:9c:35:1b:d2: ed:46:72:62:bd:aa:6f:93:d1:20:a0:d3:47:50:8b: 0b:3f:98:dd:81:23:07:04:ef:d6:3d:d1:27:80:dd: f5:0e:c5:4d:6e:9c:13:50:80:70:62:d8:4c:33:5c: 7d:df:26:2c:ad:21:7f:32:72:af:7d:fe:e3:24:23: 6a:96:fb:42:8e:f5:51:2c:9b:11:bc:44:d0:34:3b: e0:de:33:12:de:a2:a3:5e:f2:e1:2d:d6:f3:42:90: 42:97:9b:a9:ea:88:2a:26:b3:58:72:8a:6e:f7:ec: 6b:31:3b:4e:83:7f:02:2d:17:af:27:8f:7a:ec:d1: 0b:79:fb:f4:2c:ba:74:6f:ab:bd:73:e3:26:0c:fd: 7a:e3:3e:53:0f:12:b6:ce:c8:4e:2a:8b:81:ec:27: 7d:a7:4a:46:32:1c:9c:d7:06:45:d5:1d:aa:83:49: e3:62:5e:ce:ed:8a:f3:15:e4:ca:70:04:92:41:79: 8a:9c:6c:71:ae:6c:f1:0e:bb:1a:d7:13:8c:e4:7b: 5e:42:e8:93:0c:c6:a6:ed:a0:94:6f:f1:5f:63:ee: 3f:ca:7a:cf:dc:5f:76:ea:dd:f3:bf:06:30:ea:5f: d5:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:6A:45:D1:27:4D:DC:EA:4D:A5:62:C7:23:93:A9:18:FC:FD:E8:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/499c620f-9409-3f5d-9b60-aa448c224932.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 130.35.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:94:89:bc:c1:00:d8:d3:1c:2b:72:86:9e:3c:4f:b0:54:dd: 65:49:06:59:8b:cd:7d:4c:a4:de:44:d6:a8:1e:52:45:55:35: 32:c9:23:47:65:aa:87:50:d8:2d:22:4f:b8:db:91:92:c0:73: e0:f0:20:0f:ce:36:f5:1c:db:2a:de:b8:00:f9:e7:d0:1e:60: b5:de:15:c7:e9:f7:fd:6b:ee:d8:dd:90:2d:10:e0:82:4a:4c: 04:31:1c:1f:cd:12:b3:57:7d:cf:11:43:40:46:ed:26:80:21: ae:d9:96:8f:e8:c7:4a:cc:eb:04:0b:df:12:91:3c:69:89:95: 31:e3:a7:cd:67:9d:81:be:3c:6b:21:90:a7:91:e5:57:57:ed: 85:87:5a:5c:1f:f7:c7:8b:d7:69:ad:70:06:bd:d7:18:f0:d0: 53:d2:2b:c3:d9:9c:1a:d9:a9:4d:e9:f8:91:9b:cb:2f:c2:e6: 19:6f:67:25:c6:58:55:6d:94:5c:44:5b:58:1c:61:69:24:0c: 2c:0d:6a:53:77:33:61:03:22:78:c7:40:2a:64:96:a9:2c:89: 48:f4:59:15:88:df:2e:2c:9b:c9:1c:f3:cc:a5:97:6a:04:5f: 66:c8:75:86:06:8b:91:65:34:b5:32:8c:14:4b:22:b5:40:f0: ff:4a:30:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy4HIJgsWZdgaEF2IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDIwMTE0MDA0MFoXDTI2MDUwMjEzMDA0MFowLzEtMCsGA1UEAxMk ZDk0MGUyOGYtNTFiOC00YzE3LTg5NjgtNmQ0NmQ2OWJiMTNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0PTI14wABJ8/Kiy52H3QdzQBIelEYhpg3pw1 G9LtRnJivapvk9EgoNNHUIsLP5jdgSMHBO/WPdEngN31DsVNbpwTUIBwYthMM1x9 3yYsrSF/MnKvff7jJCNqlvtCjvVRLJsRvETQNDvg3jMS3qKjXvLhLdbzQpBCl5up 6ogqJrNYcopu9+xrMTtOg38CLRevJ4967NELefv0LLp0b6u9c+MmDP164z5TDxK2 zshOKouB7Cd9p0pGMhyc1wZF1R2qg0njYl7O7YrzFeTKcASSQXmKnGxxrmzxDrsa 1xOM5HteQuiTDMam7aCUb/FfY+4/ynrP3F926t3zvwYw6l/V3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDpqRdEnTdzqTaVixyOTqRj8/egPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvNDk5YzYyMGYtOTQwOS0z ZjVkLTliNjAtYWE0NDhjMjI0OTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgiMQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAeUibzBANjTHCtyhp48T7BU3WVJBlmLzX1MpN5E1qgeUkVVNTLJI0dl qodQ2C0iT7jbkZLAc+DwIA/ONvUc2yreuAD559AeYLXeFcfp9/1r7tjdkC0Q4IJK TAQxHB/NErNXfc8RQ0BG7SaAIa7Zlo/ox0rM6wQL3xKRPGmJlTHjp81nnYG+PGsh kKeR5VdX7YWHWlwf98eL12mtcAa91xjw0FPSK8PZnBrZqU3p+JGbyy/C5hlvZyXG WFVtlFxEW1gcYWkkDCwNalN3M2EDInjHQCpklqksiUj0WRWI3y4sm8kc88yll2oE X2bIdYYGi5FlNLUyjBRLIrVA8P9KMCo= -----END CERTIFICATE-----Generated at Thu Feb 26 03:29:34 2026 by rpki-client