$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/7e91154b-79a1-3330-9d0a-9925663cac1b.roa File: 7e91154b-79a1-3330-9d0a-9925663cac1b.roa (raw, json) Hash identifier: jP1pAQUJ3kwe5jKzQPels4L244+grGs1lowhL0PAx4E= Subject key identifier: 56:60:05:0D:F7:36:68:2C:E1:04:1C:4B:CC:3A:69:FB:F5:40:03:01 Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584CB81C7CF11D39C8F780F4F000 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/7e91154b-79a1-3330-9d0a-9925663cac1b.roa Signing time: Sun 01 Feb 2026 14:00:40 +0000 ROA not before: Sun 01 Feb 2026 14:00:40 +0000 ROA not after: Sat 02 May 2026 13:00:40 +0000 asID: 31898 IP address blocks: 130.35.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Feb 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b8:1c:7c:f1:1d:39:c8:f7:80:f4:f0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Feb 1 14:00:40 2026 GMT Not After : May 2 13:00:40 2026 GMT Subject: CN=33358b13-a9c3-4eb1-a18f-bf56cf0d0c62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:79:9a:6b:d3:e1:20:58:79:bc:c7:06:ba:f8: 97:29:38:0c:50:f7:4a:46:21:11:34:50:ab:0d:14: b9:e1:a9:0b:f4:df:1a:de:91:f9:90:36:7e:3a:fc: 2e:2d:e4:ff:38:be:0d:8e:a6:c8:ef:60:12:bb:9a: 5c:c9:17:29:ca:d1:a6:50:8d:87:d4:09:41:fe:16: 15:13:30:da:b4:ef:66:0f:84:d8:18:ca:0e:28:98: d4:c5:06:24:f1:71:07:1d:d0:aa:42:4b:5b:a4:eb: cd:66:0f:9a:cc:91:d9:9e:55:74:f1:70:a6:87:09: 20:10:58:33:3c:84:29:5d:9d:d5:60:60:4d:f7:d0: 1f:bb:fe:e0:95:e5:9c:b4:9d:f4:34:51:e2:c0:83: 00:36:df:bb:be:a9:6f:19:89:4a:39:d2:11:0e:31: 6e:2a:78:66:06:8d:59:b8:fb:1c:69:97:4e:92:d9: fc:ac:16:d0:48:2e:26:2c:64:b3:fb:a3:5c:fd:b0: cd:38:d5:d4:5e:9f:a4:79:fd:69:72:97:08:5c:16: 71:fc:0d:dd:56:b2:8a:bc:54:6f:b6:25:c5:84:fe: b2:cd:84:07:26:e6:93:09:48:8b:c1:c7:f4:d0:0d: b2:4a:d6:db:78:ab:83:ce:01:2c:50:d8:78:a7:88: 38:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:60:05:0D:F7:36:68:2C:E1:04:1C:4B:CC:3A:69:FB:F5:40:03:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/7e91154b-79a1-3330-9d0a-9925663cac1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 130.35.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:e0:71:b7:e6:c2:aa:d8:09:9f:f6:3f:eb:67:19:81:fb:33: 8e:22:25:94:7a:44:5b:22:31:10:32:8d:7a:89:4a:57:84:e3: 1a:4c:eb:50:34:18:f8:3f:2a:49:ea:2c:e9:43:22:bf:bc:9a: 76:5b:0a:29:4b:ad:a3:ff:84:6b:0e:d8:d0:f1:5e:eb:aa:c8: f0:b8:b7:77:dd:39:54:ae:5b:1b:98:cd:1d:7a:d0:6c:7c:8a: 5a:16:ce:c2:61:1d:24:60:94:38:91:88:96:e4:a1:57:54:4a: 23:87:bd:ed:b3:4d:9c:70:b7:7a:19:ec:f9:ca:e5:43:5f:3c: 82:2f:ad:3e:8b:1b:9a:e8:e9:eb:68:f4:bd:1e:01:8a:54:7a: 24:4c:1a:01:00:f6:5e:f3:bb:d1:c3:9d:70:4a:e3:0d:aa:22: 26:36:b4:69:97:14:63:5c:7e:c6:bb:33:cb:81:ba:df:11:e1: 24:40:bb:52:42:a7:4e:ac:49:c6:bd:51:c8:7d:97:e6:ef:b6: b7:98:55:b1:b5:d8:3b:07:82:5e:6c:14:b5:ca:fa:f7:93:88: 0e:f2:4d:48:25:59:73:49:68:58:5b:e9:aa:19:85:96:d1:9e: 89:72:31:7d:f4:9a:1d:70:eb:4e:6c:49:3b:bd:c6:7a:a2:61: af:61:e3:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy4HHzxHTnI94D08AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDIwMTE0MDA0MFoXDTI2MDUwMjEzMDA0MFowLzEtMCsGA1UEAxMk MzMzNThiMTMtYTljMy00ZWIxLWExOGYtYmY1NmNmMGQwYzYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHmaa9PhIFh5vMcGuviXKTgMUPdKRiERNFCr DRS54akL9N8a3pH5kDZ+OvwuLeT/OL4NjqbI72ASu5pcyRcpytGmUI2H1AlB/hYV EzDatO9mD4TYGMoOKJjUxQYk8XEHHdCqQktbpOvNZg+azJHZnlV08XCmhwkgEFgz PIQpXZ3VYGBN99Afu/7gleWctJ30NFHiwIMANt+7vqlvGYlKOdIRDjFuKnhmBo1Z uPscaZdOktn8rBbQSC4mLGSz+6Nc/bDNONXUXp+kef1pcpcIXBZx/A3dVrKKvFRv tiXFhP6yzYQHJuaTCUiLwcf00A2yStbbeKuDzgEsUNh4p4g4zQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFZgBQ33Nmgs4QQcS8w6afv1QAMBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvN2U5MTE1NGItNzlhMS0z MzMwLTlkMGEtOTkyNTY2M2NhYzFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgiOYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFHgcbfmwqrYCZ/2P+tnGYH7M44iJZR6RFsiMRAyjXqJSleE4xpM61A0 GPg/KknqLOlDIr+8mnZbCilLraP/hGsO2NDxXuuqyPC4t3fdOVSuWxuYzR160Gx8 iloWzsJhHSRglDiRiJbkoVdUSiOHve2zTZxwt3oZ7PnK5UNfPIIvrT6LG5ro6eto 9L0eAYpUeiRMGgEA9l7zu9HDnXBK4w2qIiY2tGmXFGNcfsa7M8uBut8R4SRAu1JC p06sSca9Uch9l+bvtreYVbG12DsHgl5sFLXK+veTiA7yTUglWXNJaFhb6aoZhZbR nolyMX30mh1w605sSTu9xnqiYa9h4ww= -----END CERTIFICATE-----Generated at Thu Feb 26 03:31:57 2026 by rpki-client