$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/7daab95e-1581-383c-a12b-6b720b97c8d6.roa File: 7daab95e-1581-383c-a12b-6b720b97c8d6.roa (raw, json) Hash identifier: WTyy6+8wUlBwUMApWfTCcgL/kG8rYq4L66RYCWsmFxE= Subject key identifier: 91:A2:68:5A:94:23:74:6C:50:1F:DE:23:F9:2A:BD:89:47:F5:C5:60 Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584CAFBC8601AE59EF5603443B40 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/7daab95e-1581-383c-a12b-6b720b97c8d6.roa Signing time: Thu 29 Jan 2026 14:00:40 +0000 ROA not before: Thu 29 Jan 2026 14:00:40 +0000 ROA not after: Wed 29 Apr 2026 13:00:40 +0000 asID: 31898 IP address blocks: 130.35.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Feb 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:af:bc:86:01:ae:59:ef:56:03:44:3b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Jan 29 14:00:40 2026 GMT Not After : Apr 29 13:00:40 2026 GMT Subject: CN=1b2b460a-da52-45f3-a014-bc4c033fb4f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c8:43:69:a7:ac:7c:2c:6d:d8:7a:e6:cd:2e: 3c:ce:d1:31:80:51:88:53:98:10:1d:2c:4d:0a:4c: e7:82:53:15:81:4d:3c:5e:8f:f9:5a:47:98:bb:66: d7:3f:65:e9:34:57:0a:87:38:10:97:80:25:7d:35: b1:93:ed:f3:3c:be:05:6f:c8:a4:d3:7c:db:d1:1d: 11:90:22:6a:24:af:f8:02:58:e2:54:7a:dc:65:42: 14:a8:59:79:36:a6:af:fe:a0:d4:5d:02:d5:7a:22: f1:c8:f9:1e:a6:78:e7:42:bf:2a:8c:3f:30:e5:47: 40:69:af:43:eb:25:e0:9b:69:de:70:68:b1:05:d7: b7:54:75:86:73:f7:7b:be:35:31:da:1d:dd:27:8b: e6:c4:ab:9f:d7:28:dc:19:e9:13:7c:d1:0e:b9:b0: 7c:1f:68:27:e2:dd:49:e7:5a:8c:60:ad:18:56:36: bc:b9:53:64:bd:f4:5a:d2:f0:3c:6a:01:79:bc:03: 19:a1:23:0f:78:bb:80:7f:1c:3f:b6:25:b6:f0:52: bc:21:82:b7:6d:78:70:ba:38:4a:39:bf:66:0f:b4: 8d:dd:cb:18:02:2d:17:eb:9c:93:d1:6f:5e:65:92: e7:f3:34:99:e0:d4:a9:cd:ec:e3:10:ba:8a:a0:13: 02:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:A2:68:5A:94:23:74:6C:50:1F:DE:23:F9:2A:BD:89:47:F5:C5:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/7daab95e-1581-383c-a12b-6b720b97c8d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 130.35.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:83:55:2b:b0:20:77:5b:36:22:5b:2e:d5:d5:38:e4:9b:b6: 00:73:40:66:91:de:15:03:e8:47:53:c5:df:38:cd:78:b4:59: 55:03:a5:77:6b:5b:88:04:fb:f8:09:93:b8:3a:f8:ca:aa:5d: 78:63:7a:94:5a:21:7d:e1:24:9c:66:e9:12:90:9c:6b:d6:a0: cc:fa:15:30:73:f8:ee:41:9c:e4:3b:4f:bf:54:f6:f4:05:f7: ea:99:c0:c7:90:ca:79:6e:54:2b:18:43:e5:8c:2a:2a:42:e0: 6a:b7:22:07:2e:28:08:c7:0c:7f:0b:16:b6:1a:46:d8:5c:50: 02:84:13:66:bf:bb:76:17:69:88:7f:d8:42:a8:33:84:8d:29: f5:c9:83:cb:fd:34:4b:76:37:a8:b3:ae:b2:44:df:dc:79:26: 7a:1f:c6:0d:48:d5:1f:2a:f4:ef:e3:a7:61:8d:40:02:61:3b: 63:2e:df:d3:4c:5d:24:17:2c:42:bd:04:a9:a8:85:84:d7:8a: d4:e5:94:1e:15:f6:30:ae:e2:2e:c2:4b:50:bc:a2:3a:be:01: bd:6c:37:4a:97:87:9b:8c:e1:86:6b:c3:8d:b9:a2:9e:1a:6f: e8:20:a6:d3:74:39:8f:93:00:23:bc:e7:b8:0a:b3:fe:47:4b: f9:62:55:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyvvIYBrlnvVgNEO0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDEyOTE0MDA0MFoXDTI2MDQyOTEzMDA0MFowLzEtMCsGA1UEAxMk MWIyYjQ2MGEtZGE1Mi00NWYzLWEwMTQtYmM0YzAzM2ZiNGY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8hDaaesfCxt2HrmzS48ztExgFGIU5gQHSxN CkznglMVgU08Xo/5WkeYu2bXP2XpNFcKhzgQl4AlfTWxk+3zPL4Fb8ik03zb0R0R kCJqJK/4AljiVHrcZUIUqFl5Nqav/qDUXQLVeiLxyPkepnjnQr8qjD8w5UdAaa9D 6yXgm2necGixBde3VHWGc/d7vjUx2h3dJ4vmxKuf1yjcGekTfNEOubB8H2gn4t1J 51qMYK0YVja8uVNkvfRa0vA8agF5vAMZoSMPeLuAfxw/tiW28FK8IYK3bXhwujhK Ob9mD7SN3csYAi0X65yT0W9eZZLn8zSZ4NSpzezjELqKoBMCEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJGiaFqUI3RsUB/eI/kqvYlH9cVgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvN2RhYWI5NWUtMTU4MS0z ODNjLWExMmItNmI3MjBiOTdjOGQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEgiPwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAByDVSuwIHdbNiJbLtXVOOSbtgBzQGaR3hUD6EdTxd84zXi0WVUDpXdr W4gE+/gJk7g6+MqqXXhjepRaIX3hJJxm6RKQnGvWoMz6FTBz+O5BnOQ7T79U9vQF 9+qZwMeQynluVCsYQ+WMKipC4Gq3IgcuKAjHDH8LFrYaRthcUAKEE2a/u3YXaYh/ 2EKoM4SNKfXJg8v9NEt2N6izrrJE39x5Jnofxg1I1R8q9O/jp2GNQAJhO2Mu39NM XSQXLEK9BKmohYTXitTllB4V9jCu4i7CS1C8ojq+Ab1sN0qXh5uM4YZrw425op4a b+ggptN0OY+TACO857gKs/5HS/liVe4= -----END CERTIFICATE-----Generated at Thu Feb 26 03:29:34 2026 by rpki-client