
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/da02e80d-3e08-3837-b4af-121134b5bc14.roa
File: da02e80d-3e08-3837-b4af-121134b5bc14.roa (raw, json)
Hash identifier: ERGMPMHgf+SsGxbHZEdOGKfbYc11QV56BiYI8i95VKY=
Subject key identifier: 7C:8B:A9:1B:E7:22:D2:DE:5F:01:C4:EC:3D:3B:7A:5C:82:F7:54:4F
Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
Certificate serial: 010D0C9F4328584CB81C8330D5365271185253C0
Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/da02e80d-3e08-3837-b4af-121134b5bc14.roa
Signing time: Sun 01 Feb 2026 14:00:40 +0000
ROA not before: Sun 01 Feb 2026 14:00:40 +0000
ROA not after: Sat 02 May 2026 13:00:40 +0000
asID: 31898
IP address blocks: 130.35.148.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Feb 2026 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:b8:1c:83:30:d5:36:52:71:18:52:53:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
Validity
Not Before: Feb 1 14:00:40 2026 GMT
Not After : May 2 13:00:40 2026 GMT
Subject: CN=d655e1a8-a0f9-4f05-b59e-a17a138fa1fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:65:77:eb:be:2a:88:35:92:7e:0f:8b:d1:55:
a1:0a:1d:dc:a3:5a:34:6b:81:ee:0d:df:74:b9:1b:
ed:19:d6:26:bc:6c:c9:ae:d3:34:b0:71:97:30:6e:
ac:20:f2:93:69:73:e6:69:32:c0:55:eb:bd:81:d5:
98:e0:76:29:0a:de:a3:33:d8:cc:83:80:06:e9:a8:
a1:29:15:5b:3a:d2:4d:02:96:38:70:ff:01:e7:b9:
ae:f2:21:63:9c:24:1c:c9:72:c9:99:7a:03:29:65:
36:a3:86:6c:0c:55:86:7e:7a:87:a2:fb:5f:f2:03:
f3:29:b1:42:6d:c2:d5:93:08:2d:2d:27:ba:fc:00:
02:67:81:e5:14:d5:86:ef:00:a9:09:49:02:63:66:
f8:88:a1:fc:8d:8a:cc:f7:b8:6f:11:5d:e4:4c:5e:
26:a4:ec:c7:e6:39:f9:93:2f:9d:f7:33:ba:85:4a:
9f:e1:01:63:1e:9f:02:2e:c8:45:ba:2c:1f:2b:e4:
d3:b3:6c:18:f6:97:0d:54:09:f9:62:52:b9:1e:cf:
1d:c8:98:8b:0c:3a:95:44:c5:46:08:fe:1e:ee:1b:
da:b4:26:46:7f:6c:92:c1:3c:44:22:02:00:15:0b:
33:1f:31:be:54:1a:91:a8:14:31:89:99:d2:de:82:
70:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:8B:A9:1B:E7:22:D2:DE:5F:01:C4:EC:3D:3B:7A:5C:82:F7:54:4F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/da02e80d-3e08-3837-b4af-121134b5bc14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl
X509v3 Authority Key Identifier:
keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
sbgp-ipAddrBlock: critical
IPv4:
130.35.148.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a5:17:29:af:92:81:0e:86:86:5e:2f:c1:80:9a:61:bc:62:70:
32:b8:4d:77:db:91:a5:7c:b6:ed:2f:d5:88:9c:c0:fb:8e:5e:
3f:43:d5:fa:68:5f:cb:87:b9:bf:7c:31:f1:27:9f:c6:f8:15:
b1:8a:7f:42:7d:2e:e5:05:d5:a2:08:80:d1:14:91:7a:0e:13:
56:65:18:ba:50:c6:bb:b0:ef:5e:a2:f2:bf:aa:c8:95:09:cc:
a6:cd:f9:bf:0a:c6:2c:b3:88:80:cc:df:5d:dc:a1:41:5a:a3:
b1:0d:42:42:17:25:d0:c6:a9:29:60:a5:51:81:29:f7:6c:f8:
05:c6:39:c1:3e:60:c7:84:cc:b4:a4:b3:19:2b:25:4b:69:e9:
0a:fd:65:fb:df:f8:5e:dc:c1:de:1b:3e:89:87:fb:60:4a:fe:
3a:da:0b:fa:c9:42:b8:6f:3a:db:a7:6f:8b:89:85:e6:02:08:
2a:45:57:98:a0:63:00:d4:2a:1a:7e:25:b1:68:aa:3f:5d:c8:
01:f5:65:a6:66:d2:39:d7:d1:44:59:5c:65:e9:2d:ef:43:16:
6f:f3:79:19:08:31:d3:16:3d:8c:38:90:19:f5:50:07:36:c1:
34:39:ed:51:33:06:24:1c:e0:77:2f:ff:aa:45:ec:e7:7d:83:
5d:b0:44:bc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy4HIMw1TZScRhSU8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy
ZTQ0MB4XDTI2MDIwMTE0MDA0MFoXDTI2MDUwMjEzMDA0MFowLzEtMCsGA1UEAxMk
ZDY1NWUxYTgtYTBmOS00ZjA1LWI1OWUtYTE3YTEzOGZhMWZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWV3674qiDWSfg+L0VWhCh3co1o0a4HuDd90
uRvtGdYmvGzJrtM0sHGXMG6sIPKTaXPmaTLAVeu9gdWY4HYpCt6jM9jMg4AG6aih
KRVbOtJNApY4cP8B57mu8iFjnCQcyXLJmXoDKWU2o4ZsDFWGfnqHovtf8gPzKbFC
bcLVkwgtLSe6/AACZ4HlFNWG7wCpCUkCY2b4iKH8jYrM97hvEV3kTF4mpOzH5jn5
ky+d9zO6hUqf4QFjHp8CLshFuiwfK+TTs2wY9pcNVAn5YlK5Hs8dyJiLDDqVRMVG
CP4e7hvatCZGf2ySwTxEIgIAFQszHzG+VBqRqBQxiZnS3oJwIQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHyLqRvnItLeXwHE7D07elyC91RPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0
MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvZGEwMmU4MGQtM2UwOC0z
ODM3LWI0YWYtMTIxMTM0YjViYzE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx
MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj
MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1
MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgiOUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKUXKa+SgQ6Ghl4vwYCaYbxicDK4TXfbkaV8tu0v1YicwPuOXj9D1fpo
X8uHub98MfEnn8b4FbGKf0J9LuUF1aIIgNEUkXoOE1ZlGLpQxruw716i8r+qyJUJ
zKbN+b8KxiyziIDM313coUFao7ENQkIXJdDGqSlgpVGBKfds+AXGOcE+YMeEzLSk
sxkrJUtp6Qr9Zfvf+F7cwd4bPomH+2BK/jraC/rJQrhvOtunb4uJheYCCCpFV5ig
YwDUKhp+JbFoqj9dyAH1ZaZm0jnX0URZXGXpLe9DFm/zeRkIMdMWPYw4kBn1UAc2
wTQ57VEzBiQc4Hcv/6pF7Od9g12wRLw=
-----END CERTIFICATE-----
Generated at Thu Feb 26 03:30:40 2026 by rpki-client