$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/9a68d362-d4fb-37ce-b577-e446d82d6d77.roa File: 9a68d362-d4fb-37ce-b577-e446d82d6d77.roa (raw, json) Hash identifier: pVW0PxX5lq4lN5gjBc6NLWzB8B2MoYMh3Rgk8trP8CY= Subject key identifier: CF:DD:92:85:D1:17:0E:8B:B1:CA:53:F9:7C:69:C2:33:E9:88:62:4C Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584CB81C944230D8563E0C0D3A80 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/9a68d362-d4fb-37ce-b577-e446d82d6d77.roa Signing time: Sun 01 Feb 2026 14:00:40 +0000 ROA not before: Sun 01 Feb 2026 14:00:40 +0000 ROA not after: Sat 02 May 2026 13:00:40 +0000 asID: 31898 IP address blocks: 130.35.212.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Feb 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b8:1c:94:42:30:d8:56:3e:0c:0d:3a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Feb 1 14:00:40 2026 GMT Not After : May 2 13:00:40 2026 GMT Subject: CN=6115d0b9-0963-4f21-a3eb-4f1e2f927368 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:89:89:4a:8a:c1:3e:7c:75:99:c6:f9:44:cf: bf:46:ad:4e:ad:aa:a6:02:f3:ed:82:17:d5:8b:e3: 69:c7:7a:5e:4f:4b:c9:06:56:c7:8d:c7:39:ec:f7: 7b:95:fb:54:fa:5c:e2:2f:c7:b7:43:36:f2:c4:f3: 19:14:33:8c:57:e9:1b:3d:93:c2:cd:e2:bc:5c:1c: 22:77:87:06:bd:f8:17:be:39:81:db:78:c1:df:14: 24:c3:1d:0b:bf:ec:99:d7:1b:0c:06:d4:55:05:5f: a7:3b:de:83:f7:17:80:3f:73:a8:98:41:1e:38:36: f2:c4:89:da:a0:61:8e:9c:03:97:22:d5:54:3c:54: a7:01:be:fd:c5:fb:9c:57:1e:49:69:3a:c8:c7:de: 37:ab:5e:82:4a:0d:57:b4:6b:cc:f8:80:9b:20:40: 8a:4d:c2:8b:0c:fa:bb:28:02:87:59:c8:61:08:1b: f8:44:1d:9f:c7:b3:b9:0e:21:a6:37:2f:0f:c5:bb: 8f:43:07:16:2a:f1:79:99:34:76:6d:b4:4a:9d:11: d8:71:3b:01:a6:62:2b:39:88:43:8a:fe:a6:81:42: 0b:ec:9d:ec:29:dc:bc:44:be:3f:0a:5f:f7:06:b4: b3:7c:af:6f:04:85:e5:e3:55:18:c4:8a:54:4f:60: a8:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:DD:92:85:D1:17:0E:8B:B1:CA:53:F9:7C:69:C2:33:E9:88:62:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/9a68d362-d4fb-37ce-b577-e446d82d6d77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 130.35.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:6f:1f:42:71:85:a2:d4:c3:25:9c:51:0d:b4:6c:0b:4a:6e: fe:a5:bb:e3:4a:61:57:40:a2:02:23:8b:3d:e9:5f:19:7b:05: 81:57:21:c6:0a:54:44:2d:23:fe:6b:4a:c7:34:04:56:e7:f4: 0d:3c:b5:aa:dd:70:01:3d:5d:e1:d3:75:9e:ff:b3:32:1b:fb: 93:e3:61:10:b6:ed:a7:a1:6d:a9:40:a4:37:8b:fd:79:12:18: c8:b8:40:70:c5:b5:e7:82:fa:5d:e3:0a:8b:25:bb:ab:47:b9: c9:8d:29:18:fb:5b:75:ee:9f:c3:96:b8:a1:f3:8d:64:d6:e3: 3d:0e:95:9e:83:25:92:e3:71:e8:af:dc:46:de:1a:62:51:10: 84:73:ba:e5:e2:9d:b1:2f:36:3d:ff:ad:83:28:99:8b:b6:9f: 67:d9:3a:55:f0:43:94:47:a4:c9:a4:de:22:a6:c2:b4:05:16: ed:24:ab:df:8a:66:1e:96:00:b1:a1:32:1f:1b:a5:eb:61:31: 7f:64:4f:cf:c3:5d:00:5b:13:b9:55:d4:a9:75:50:97:93:1e: 3a:a4:e1:64:d4:ca:de:df:2c:46:19:77:c7:0b:7a:f5:07:65: 7a:b5:94:b6:df:bf:08:84:57:d6:80:f6:ce:a7:fb:dc:d6:f9: c8:23:12:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy4HJRCMNhWPgwNOoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDIwMTE0MDA0MFoXDTI2MDUwMjEzMDA0MFowLzEtMCsGA1UEAxMk NjExNWQwYjktMDk2My00ZjIxLWEzZWItNGYxZTJmOTI3MzY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYmJSorBPnx1mcb5RM+/Rq1OraqmAvPtghfV i+Npx3peT0vJBlbHjcc57Pd7lftU+lziL8e3QzbyxPMZFDOMV+kbPZPCzeK8XBwi d4cGvfgXvjmB23jB3xQkwx0Lv+yZ1xsMBtRVBV+nO96D9xeAP3OomEEeODbyxIna oGGOnAOXItVUPFSnAb79xfucVx5JaTrIx943q16CSg1XtGvM+ICbIECKTcKLDPq7 KAKHWchhCBv4RB2fx7O5DiGmNy8PxbuPQwcWKvF5mTR2bbRKnRHYcTsBpmIrOYhD iv6mgUIL7J3sKdy8RL4/Cl/3BrSzfK9vBIXl41UYxIpUT2CojQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM/dkoXRFw6LscpT+XxpwjPpiGJMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvOWE2OGQzNjItZDRmYi0z N2NlLWI1NzctZTQ0NmQ4MmQ2ZDc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgiPUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGZvH0JxhaLUwyWcUQ20bAtKbv6lu+NKYVdAogIjiz3pXxl7BYFXIcYK VEQtI/5rSsc0BFbn9A08tardcAE9XeHTdZ7/szIb+5PjYRC27aehbalApDeL/XkS GMi4QHDFteeC+l3jCoslu6tHucmNKRj7W3Xun8OWuKHzjWTW4z0OlZ6DJZLjceiv 3EbeGmJREIRzuuXinbEvNj3/rYMomYu2n2fZOlXwQ5RHpMmk3iKmwrQFFu0kq9+K Zh6WALGhMh8bpethMX9kT8/DXQBbE7lV1Kl1UJeTHjqk4WTUyt7fLEYZd8cLevUH ZXq1lLbfvwiEV9aA9s6n+9zW+cgjEqo= -----END CERTIFICATE-----Generated at Thu Feb 26 03:26:02 2026 by rpki-client