$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/c9e354c6-120c-3abf-85d8-1e2a6bf0bf86.roa File: c9e354c6-120c-3abf-85d8-1e2a6bf0bf86.roa (raw, json) Hash identifier: iaKsj6T9m03pPYXPa2aFqcKqTXvKUsdLxAklSnXOBx4= Subject key identifier: BA:82:DA:7C:53:01:77:34:2E:8B:3E:46:C9:86:54:89:F9:76:1D:81 Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584CAFBC828F2B3423273BBF9A00 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/c9e354c6-120c-3abf-85d8-1e2a6bf0bf86.roa Signing time: Thu 29 Jan 2026 14:00:40 +0000 ROA not before: Thu 29 Jan 2026 14:00:40 +0000 ROA not after: Wed 29 Apr 2026 13:00:40 +0000 asID: 31898 IP address blocks: 130.35.132.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Feb 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:af:bc:82:8f:2b:34:23:27:3b:bf:9a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Jan 29 14:00:40 2026 GMT Not After : Apr 29 13:00:40 2026 GMT Subject: CN=7d52b716-a3b0-49a9-8600-1c6866ccbe1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:bc:51:02:b8:3a:d8:4b:f4:28:7c:aa:19:16: 56:e2:32:6e:da:95:b5:ff:72:d1:03:48:a3:cf:6c: 4f:23:26:1d:6c:2d:b7:59:a4:b7:bf:5e:73:da:b9: c7:49:8d:83:5f:96:ce:aa:1d:5d:41:50:2c:21:d8: 7c:0d:1c:4a:90:91:40:4b:0d:15:6f:31:6b:cc:77: 53:3d:7c:ba:26:b3:a7:58:a4:ed:09:01:65:4a:48: 02:37:0e:72:c3:e2:fd:9a:c5:d8:ba:bd:f5:7d:e2: 84:f0:51:42:fe:81:0e:b2:af:3a:a5:b9:1a:21:39: 3e:ea:1f:d0:99:ae:51:5d:16:66:d9:44:5b:b8:d9: 7c:d8:c1:f8:ac:b8:34:7d:3a:6a:fb:c8:8e:c2:dc: ac:a1:8a:04:89:9a:04:17:6c:98:2f:90:ca:7b:36: 72:4a:7e:a7:1a:f2:61:48:f7:ac:b1:51:a3:46:56: 18:3a:2d:5a:ea:72:df:f9:10:8d:26:b1:27:c3:08: f3:27:fc:0d:b6:26:72:e7:fc:f3:05:e7:c0:e3:fc: d9:88:fd:b0:f7:2a:5c:74:a7:bf:1a:3d:92:f6:6b: 8a:4b:ba:91:f3:14:bc:d7:ec:d9:f6:b3:ec:40:b7: 52:97:22:6a:6b:0b:8f:6a:c3:03:fc:75:52:cd:49: b7:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:82:DA:7C:53:01:77:34:2E:8B:3E:46:C9:86:54:89:F9:76:1D:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/c9e354c6-120c-3abf-85d8-1e2a6bf0bf86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 130.35.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:c5:08:6c:1e:1b:6e:9a:53:8a:62:86:27:82:60:18:a2:ad: be:2d:49:bc:0d:8c:53:75:4f:4f:9c:98:c4:02:68:2f:e7:9d: 31:cf:0f:40:84:48:6e:e8:a4:13:78:11:2f:6b:66:9b:23:78: da:26:d3:14:9c:1d:47:0f:c9:e3:b4:1a:f2:c1:9e:44:3f:8c: 81:44:61:91:60:fd:f9:51:ec:b9:b7:c0:7f:a8:d8:4a:3c:5f: 91:f3:5a:9e:8d:35:c6:8a:b2:e3:4e:55:7e:17:a0:ae:cb:4d: d2:1d:91:95:b9:b8:34:f1:a1:77:db:b5:83:58:36:6b:81:b4: 8b:6c:06:c2:ba:00:75:b5:9b:42:95:0b:5d:c3:f9:46:8e:af: b3:44:dd:22:52:b0:8b:a4:4b:85:80:03:5a:89:e4:80:5e:f5: 14:3f:85:30:18:18:18:02:a0:6d:92:8d:d0:5d:b3:e7:f9:0c: f4:c0:f3:f6:f5:1a:6a:c6:ab:4a:c7:5e:12:32:59:8b:58:1f: d9:d8:c6:1e:1e:cd:ee:c0:5b:10:e7:86:9f:b6:97:80:83:b7: 9b:2c:9d:de:d1:9f:65:0c:79:2f:3e:10:d3:5c:8f:ec:b8:bc: f3:17:74:e2:61:24:7d:0a:ea:16:f5:2e:e8:c0:a5:79:15:77: 6a:cd:5a:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyvvIKPKzQjJzu/mgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDEyOTE0MDA0MFoXDTI2MDQyOTEzMDA0MFowLzEtMCsGA1UEAxMk N2Q1MmI3MTYtYTNiMC00OWE5LTg2MDAtMWM2ODY2Y2NiZTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7xRArg62Ev0KHyqGRZW4jJu2pW1/3LRA0ij z2xPIyYdbC23WaS3v15z2rnHSY2DX5bOqh1dQVAsIdh8DRxKkJFASw0VbzFrzHdT PXy6JrOnWKTtCQFlSkgCNw5yw+L9msXYur31feKE8FFC/oEOsq86pbkaITk+6h/Q ma5RXRZm2URbuNl82MH4rLg0fTpq+8iOwtysoYoEiZoEF2yYL5DKezZySn6nGvJh SPessVGjRlYYOi1a6nLf+RCNJrEnwwjzJ/wNtiZy5/zzBefA4/zZiP2w9ypcdKe/ Gj2S9muKS7qR8xS81+zZ9rPsQLdSlyJqawuPasMD/HVSzUm3oQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLqC2nxTAXc0Los+RsmGVIn5dh2BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvYzllMzU0YzYtMTIwYy0z YWJmLTg1ZDgtMWUyYTZiZjBiZjg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgiOEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB/FCGweG26aU4pihieCYBiirb4tSbwNjFN1T0+cmMQCaC/nnTHPD0CE SG7opBN4ES9rZpsjeNom0xScHUcPyeO0GvLBnkQ/jIFEYZFg/flR7Lm3wH+o2Eo8 X5HzWp6NNcaKsuNOVX4XoK7LTdIdkZW5uDTxoXfbtYNYNmuBtItsBsK6AHW1m0KV C13D+UaOr7NE3SJSsIukS4WAA1qJ5IBe9RQ/hTAYGBgCoG2SjdBds+f5DPTA8/b1 GmrGq0rHXhIyWYtYH9nYxh4eze7AWxDnhp+2l4CDt5ssnd7Rn2UMeS8+ENNcj+y4 vPMXdOJhJH0K6hb1LujApXkVd2rNWis= -----END CERTIFICATE-----Generated at Thu Feb 26 03:30:47 2026 by rpki-client