$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/cbd3d565-f240-36cb-a8a1-e8218f9a14a4.roa File: cbd3d565-f240-36cb-a8a1-e8218f9a14a4.roa (raw, json) Hash identifier: QIF+7WMXnHOwGB7YKTFp/XnAdElK9mjxTTJRBUOCHFs= Subject key identifier: A8:47:13:F7:C5:97:23:47:74:8C:4A:91:D9:BF:17:2F:2F:22:66:0A Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584CAFBC844C3B39126460ACAF00 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/cbd3d565-f240-36cb-a8a1-e8218f9a14a4.roa Signing time: Thu 29 Jan 2026 14:00:40 +0000 ROA not before: Thu 29 Jan 2026 14:00:40 +0000 ROA not after: Wed 29 Apr 2026 13:00:40 +0000 asID: 31898 IP address blocks: 130.35.12.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Feb 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:af:bc:84:4c:3b:39:12:64:60:ac:af:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Jan 29 14:00:40 2026 GMT Not After : Apr 29 13:00:40 2026 GMT Subject: CN=cecb7ef6-34e3-4ebc-a425-7d22e1d82efd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:08:6c:97:fe:1f:1f:10:18:47:a5:a3:63:87: 10:b6:95:ec:53:3d:61:15:4e:13:23:88:f1:4d:d1: 3c:7f:7a:eb:df:e9:98:e0:a0:25:23:ff:bb:a3:91: d6:f8:b2:d9:10:0a:bb:62:5e:24:7b:0a:83:7a:f4: 2e:ec:c2:9b:a3:80:9a:76:e8:74:8f:24:16:49:8d: e7:a7:f5:b3:86:51:52:25:7f:8e:43:66:5b:46:c4: 14:45:fa:3c:0f:02:57:b1:a4:06:0b:8a:56:74:96: e2:52:13:71:c3:bd:52:62:e4:5c:97:9e:c1:56:31: f0:83:1c:d1:41:fe:44:c3:eb:d3:38:6c:53:c0:a5: bc:55:1f:09:e9:35:c2:53:25:3c:38:77:a6:45:dd: ae:a0:96:1e:ae:9d:7f:e6:87:f2:7e:7a:0b:7a:27: 08:4b:66:eb:7f:21:81:e9:d3:e6:3b:72:72:0c:66: 71:df:a6:61:73:eb:7e:ce:03:2b:f3:30:29:ed:8c: f0:ea:71:06:f9:1b:a6:48:f8:58:30:7d:48:34:a2: 2d:1e:b3:fc:bc:62:92:de:c1:23:f5:97:42:ac:65: df:e1:96:90:40:2b:c6:ef:c4:b3:7c:29:b5:1a:12: bb:e5:ef:fc:6f:58:ad:0f:1f:a0:92:5a:80:89:89: 5f:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:47:13:F7:C5:97:23:47:74:8C:4A:91:D9:BF:17:2F:2F:22:66:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/cbd3d565-f240-36cb-a8a1-e8218f9a14a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 130.35.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:03:5b:07:71:74:d7:c2:dd:20:df:bc:d8:92:cb:44:b3:88: 56:13:0a:53:00:23:b8:df:f5:40:7e:07:4f:3a:49:c5:42:86: d3:90:63:70:ec:8a:dc:4f:ba:20:4c:bf:fc:c5:33:91:fd:26: 8a:4b:c2:0b:3d:a5:0b:20:c0:97:83:4f:6d:74:b2:21:ee:8b: 8c:a6:61:c5:38:d2:70:ca:90:f1:dc:16:04:8b:29:7f:f6:a5: b6:c2:9f:7b:2b:ff:4f:12:37:19:8d:cb:89:37:72:88:99:2c: 35:7d:42:23:2f:40:96:8a:98:f6:38:0a:f8:32:8f:13:49:7d: 77:0a:6c:bd:0c:5f:8d:1f:07:bd:62:03:c5:28:f2:8b:c8:61: 72:4c:54:13:4b:7b:64:85:60:06:c6:03:8c:f9:94:05:7b:3c: 1e:9a:3b:49:3f:b1:b5:6e:6a:0b:73:7b:8f:10:ac:f6:06:4c: 94:50:94:ec:3d:e0:0c:d6:d4:8b:59:ce:0a:04:5b:c9:59:4b: 14:cc:ca:20:67:06:11:15:8a:96:87:e0:c4:44:6d:0f:1b:e2: 4e:a4:d4:1c:9b:c6:89:53:7d:ae:9c:7b:6a:22:8c:15:18:4a: 84:f7:be:88:37:69:0c:86:c3:b3:e6:5c:06:b3:df:b5:72:e1: eb:18:de:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyvvIRMOzkSZGCsrwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDEyOTE0MDA0MFoXDTI2MDQyOTEzMDA0MFowLzEtMCsGA1UEAxMk Y2VjYjdlZjYtMzRlMy00ZWJjLWE0MjUtN2QyMmUxZDgyZWZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwhsl/4fHxAYR6WjY4cQtpXsUz1hFU4TI4jx TdE8f3rr3+mY4KAlI/+7o5HW+LLZEAq7Yl4kewqDevQu7MKbo4Caduh0jyQWSY3n p/WzhlFSJX+OQ2ZbRsQURfo8DwJXsaQGC4pWdJbiUhNxw71SYuRcl57BVjHwgxzR Qf5Ew+vTOGxTwKW8VR8J6TXCUyU8OHemRd2uoJYerp1/5ofyfnoLeicIS2brfyGB 6dPmO3JyDGZx36Zhc+t+zgMr8zAp7Yzw6nEG+RumSPhYMH1INKItHrP8vGKS3sEj 9ZdCrGXf4ZaQQCvG78SzfCm1GhK75e/8b1itDx+gklqAiYlfQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKhHE/fFlyNHdIxKkdm/Fy8vImYKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvY2JkM2Q1NjUtZjI0MC0z NmNiLWE4YTEtZTgyMThmOWExNGE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgiMMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJgDWwdxdNfC3SDfvNiSy0SziFYTClMAI7jf9UB+B086ScVChtOQY3Ds itxPuiBMv/zFM5H9JopLwgs9pQsgwJeDT210siHui4ymYcU40nDKkPHcFgSLKX/2 pbbCn3sr/08SNxmNy4k3coiZLDV9QiMvQJaKmPY4CvgyjxNJfXcKbL0MX40fB71i A8Uo8ovIYXJMVBNLe2SFYAbGA4z5lAV7PB6aO0k/sbVuagtze48QrPYGTJRQlOw9 4AzW1ItZzgoEW8lZSxTMyiBnBhEVipaH4MREbQ8b4k6k1BybxolTfa6ce2oijBUY SoT3vog3aQyGw7PmXAaz37Vy4esY3rY= -----END CERTIFICATE-----Generated at Thu Feb 26 03:29:34 2026 by rpki-client