$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/c17b1e7e-dbec-3fd6-a3b8-cafa53245c81.roa File: c17b1e7e-dbec-3fd6-a3b8-cafa53245c81.roa (raw, json) Hash identifier: xZoImJkxFgC3uVytDV8Rk8KOwGOEvIA4yW95PXhT+Zk= Subject key identifier: 86:00:0B:6A:C0:F7:F2:98:12:5B:2F:1E:DF:54:26:BC:A3:43:F9:88 Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584CAFBC7A9D332C4BDBB8BA8F00 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/c17b1e7e-dbec-3fd6-a3b8-cafa53245c81.roa Signing time: Thu 29 Jan 2026 14:00:40 +0000 ROA not before: Thu 29 Jan 2026 14:00:40 +0000 ROA not after: Wed 29 Apr 2026 13:00:40 +0000 asID: 31898 IP address blocks: 130.35.128.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Feb 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:af:bc:7a:9d:33:2c:4b:db:b8:ba:8f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Jan 29 14:00:40 2026 GMT Not After : Apr 29 13:00:40 2026 GMT Subject: CN=276feead-97b3-47a3-9be2-a5d27fe1a578 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:27:72:72:75:bb:13:a6:44:ff:f2:1a:5e:28: 34:11:11:14:dd:d6:b7:56:f7:b4:10:b1:5d:e6:d1: b3:d3:5c:1b:c2:af:70:18:62:88:b9:38:dd:c5:39: 7b:a2:bd:07:f5:0c:21:01:fb:0b:98:cb:14:6f:f9: 35:89:34:2c:fd:36:aa:e1:16:de:7a:59:7f:40:5c: 6a:ef:12:44:a9:1b:2e:93:75:c8:db:d1:a2:6f:d6: 1a:30:7a:3e:b0:a3:c6:47:d0:ba:4e:2a:e0:44:2c: 23:f1:77:e2:71:6f:64:d9:f4:9b:b9:7d:99:1c:c4: 6c:3c:6d:ae:df:ef:51:dc:d1:13:06:3d:a4:72:77: e0:41:4e:da:a7:29:74:31:e7:56:78:de:7a:30:83: 06:11:1f:fd:dc:cf:dc:a7:d9:7f:73:cb:61:38:b8: 2e:53:fb:22:d3:c1:c1:56:86:e1:1d:32:08:bd:36: 73:3f:5e:b4:a1:ee:4b:7f:42:e6:d9:3b:bd:bb:0f: 4e:1a:e3:aa:49:6e:4e:bc:4e:4b:33:2c:72:cd:c3: 7d:0d:33:1c:bc:fe:f2:0d:d8:8e:b0:e5:0d:4f:e8: b0:c3:ed:bb:89:53:ff:e9:9f:d9:8a:74:b2:90:90: 79:b0:bb:01:c2:71:7c:1f:d7:04:26:23:29:db:52: 2f:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:00:0B:6A:C0:F7:F2:98:12:5B:2F:1E:DF:54:26:BC:A3:43:F9:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/c17b1e7e-dbec-3fd6-a3b8-cafa53245c81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 130.35.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:11:31:0c:d9:c2:33:dd:f4:9c:f1:8f:8e:35:e4:71:d8:8b: 42:ea:10:d6:26:9c:ab:0f:e1:4b:fc:db:ea:36:12:9f:80:c2: 0e:62:42:c8:5f:0e:0c:86:d3:32:07:52:e9:c2:c3:bd:ea:71: 41:bb:2b:34:de:99:06:2b:2c:c6:de:a0:41:c9:5d:b2:77:62: 9a:41:a2:d7:53:e9:23:f2:37:6f:ae:29:88:47:22:a7:e0:af: 97:8f:16:ab:2a:88:ed:ab:e5:04:c7:57:e3:70:22:6f:bf:56: 09:ff:63:26:18:e1:d2:96:62:ff:dd:29:8c:7b:43:98:5e:ae: 84:24:76:1f:eb:04:7e:a3:73:57:64:2f:84:ce:d0:be:84:4a: fb:64:26:d5:64:98:ae:dc:b5:bf:6e:50:9b:b2:af:20:a0:9b: 05:c9:c4:9c:6a:8d:c4:18:6c:ac:b6:eb:7a:4b:da:6a:44:f6: 4b:52:25:d2:9f:92:a4:10:e7:c5:71:39:a3:7d:02:e7:05:18: da:f4:ef:92:5f:46:e0:27:86:b1:f9:08:66:ab:96:5e:ad:12: 1e:2b:ee:43:37:30:0f:20:f2:5d:6f:2a:fd:ac:6b:51:42:72: ff:2c:ab:d1:e3:ce:11:bf:bd:2b:ec:73:bc:37:5d:0b:5e:83: ee:4d:57:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyvvHqdMyxL27i6jwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDEyOTE0MDA0MFoXDTI2MDQyOTEzMDA0MFowLzEtMCsGA1UEAxMk Mjc2ZmVlYWQtOTdiMy00N2EzLTliZTItYTVkMjdmZTFhNTc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlydycnW7E6ZE//IaXig0EREU3da3Vve0ELFd 5tGz01wbwq9wGGKIuTjdxTl7or0H9QwhAfsLmMsUb/k1iTQs/Taq4Rbeell/QFxq 7xJEqRsuk3XI29Gib9YaMHo+sKPGR9C6TirgRCwj8XficW9k2fSbuX2ZHMRsPG2u 3+9R3NETBj2kcnfgQU7apyl0MedWeN56MIMGER/93M/cp9l/c8thOLguU/si08HB VobhHTIIvTZzP160oe5Lf0Lm2Tu9uw9OGuOqSW5OvE5LMyxyzcN9DTMcvP7yDdiO sOUNT+iww+27iVP/6Z/ZinSykJB5sLsBwnF8H9cEJiMp21IvzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIYAC2rA9/KYElsvHt9UJryjQ/mIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvYzE3YjFlN2UtZGJlYy0z ZmQ2LWEzYjgtY2FmYTUzMjQ1YzgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgiOAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAURMQzZwjPd9Jzxj4415HHYi0LqENYmnKsP4Uv82+o2Ep+Awg5iQshf DgyG0zIHUunCw73qcUG7KzTemQYrLMbeoEHJXbJ3YppBotdT6SPyN2+uKYhHIqfg r5ePFqsqiO2r5QTHV+NwIm+/Vgn/YyYY4dKWYv/dKYx7Q5heroQkdh/rBH6jc1dk L4TO0L6ESvtkJtVkmK7ctb9uUJuyryCgmwXJxJxqjcQYbKy263pL2mpE9ktSJdKf kqQQ58VxOaN9AucFGNr075JfRuAnhrH5CGarll6tEh4r7kM3MA8g8l1vKv2sa1FC cv8sq9HjzhG/vSvsc7w3XQteg+5NV8s= -----END CERTIFICATE-----Generated at Thu Feb 26 03:29:37 2026 by rpki-client