$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/dad674c5-ebd7-3788-b544-2d295a8ac901.roa File: dad674c5-ebd7-3788-b544-2d295a8ac901.roa (raw, json) Hash identifier: pyXQUhA/9iIJFA4ASaIuSlWmOzTN74+0eK54AZOy41Y= Subject key identifier: BA:EB:AD:D3:16:C6:24:C9:3F:3E:5F:26:52:66:70:86:3D:8D:F4:AA Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584CAFBC8012321E28D73ECE1E80 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/dad674c5-ebd7-3788-b544-2d295a8ac901.roa Signing time: Thu 29 Jan 2026 14:00:40 +0000 ROA not before: Thu 29 Jan 2026 14:00:40 +0000 ROA not after: Wed 29 Apr 2026 13:00:40 +0000 asID: 31898 IP address blocks: 130.35.136.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Feb 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:af:bc:80:12:32:1e:28:d7:3e:ce:1e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Jan 29 14:00:40 2026 GMT Not After : Apr 29 13:00:40 2026 GMT Subject: CN=b540b404-3238-43ea-b474-6157d1a990d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:45:9a:19:81:1a:14:86:f2:20:16:ce:b4:f9: 41:26:a7:a9:03:df:05:8c:62:da:c5:e9:6e:11:33: 48:8e:dd:a5:dc:89:4b:05:0e:bb:4b:6f:5a:01:17: 45:0f:47:c6:38:95:a1:02:82:f2:e3:8a:d1:23:9c: da:cf:b3:9a:d9:e6:40:39:61:d7:86:32:0f:52:60: fc:7d:b7:a9:24:a5:8c:4b:6c:a3:b7:a1:f6:4b:c1: a0:b0:1b:53:48:1f:b6:81:2c:15:7a:20:dd:d8:14: e4:c1:c3:a8:0e:c0:de:ef:be:10:16:fa:0d:f8:81: ca:79:7e:71:cc:db:d6:0a:cb:58:c1:34:ac:99:90: 87:c6:89:c3:fc:90:2e:57:12:bd:18:1e:88:f6:03: c5:a6:3e:1d:7f:18:b3:72:d9:81:35:03:e3:91:1b: a2:f4:74:ae:f9:24:d8:33:19:7d:27:30:98:2c:18: 05:e0:b5:7b:ee:61:9e:18:ba:c4:cf:0f:79:ce:63: b2:52:98:c0:34:d0:ed:59:5d:eb:d7:43:52:f7:ab: 23:ae:b3:77:0f:c8:93:97:67:b7:9f:15:d2:72:b9: bd:88:d6:7a:15:8b:2b:57:28:21:3b:25:d3:d0:38: ac:1c:88:5b:bb:a3:de:66:6e:db:c6:60:ad:01:7b: f2:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:EB:AD:D3:16:C6:24:C9:3F:3E:5F:26:52:66:70:86:3D:8D:F4:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/dad674c5-ebd7-3788-b544-2d295a8ac901.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 130.35.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:72:1a:44:2b:41:60:5c:e2:e2:4a:30:59:8f:72:3b:bf:07: 23:1d:27:0d:d6:df:d5:e4:b6:4c:a1:ef:84:b4:29:30:73:3e: 7a:f0:f6:60:a6:43:6b:52:10:59:9e:74:5d:da:13:60:5c:56: ab:f9:0d:ad:52:d1:df:64:40:fb:29:34:6a:79:df:e9:2f:82: 35:e8:b8:bf:2c:e0:d7:2b:cc:43:7f:3c:68:84:3d:01:8c:61: 20:3c:97:4c:c7:f5:92:ae:8b:ef:9d:c0:55:8f:e9:88:03:64: 0b:bc:de:15:27:ce:3d:3f:a2:ad:fd:3f:d5:46:ea:ce:1f:fe: 60:5a:64:40:1b:7a:72:39:16:3a:ee:42:27:04:b8:d6:c3:ec: 81:bf:8e:75:2b:ab:0c:a9:8d:b4:35:62:4e:db:d0:7a:3e:0b: 85:da:1e:02:3b:cc:5c:22:9c:54:36:dd:6c:09:05:e2:8c:36: 68:4a:18:65:93:f9:6d:7f:d3:55:74:91:f8:c1:2c:68:dc:2e: 7e:a1:8a:8c:aa:09:9b:9a:15:a7:e7:a5:35:c4:c8:f2:ec:cd: 93:ba:a5:f2:91:be:4c:77:5c:ca:dc:ea:43:9a:c6:a1:6a:f6: 41:a5:e6:33:42:54:a5:b8:9c:b7:91:24:2e:df:e5:ca:86:cc: 9b:6f:e0:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyvvIASMh4o1z7OHoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDEyOTE0MDA0MFoXDTI2MDQyOTEzMDA0MFowLzEtMCsGA1UEAxMk YjU0MGI0MDQtMzIzOC00M2VhLWI0NzQtNjE1N2QxYTk5MGQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUWaGYEaFIbyIBbOtPlBJqepA98FjGLaxelu ETNIjt2l3IlLBQ67S29aARdFD0fGOJWhAoLy44rRI5zaz7Oa2eZAOWHXhjIPUmD8 fbepJKWMS2yjt6H2S8GgsBtTSB+2gSwVeiDd2BTkwcOoDsDe774QFvoN+IHKeX5x zNvWCstYwTSsmZCHxonD/JAuVxK9GB6I9gPFpj4dfxizctmBNQPjkRui9HSu+STY Mxl9JzCYLBgF4LV77mGeGLrEzw95zmOyUpjANNDtWV3r10NS96sjrrN3D8iTl2e3 nxXScrm9iNZ6FYsrVyghOyXT0DisHIhbu6PeZm7bxmCtAXvyqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLrrrdMWxiTJPz5fJlJmcIY9jfSqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvZGFkNjc0YzUtZWJkNy0z Nzg4LWI1NDQtMmQyOTVhOGFjOTAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgiOIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGtyGkQrQWBc4uJKMFmPcju/ByMdJw3W39Xktkyh74S0KTBzPnrw9mCm Q2tSEFmedF3aE2BcVqv5Da1S0d9kQPspNGp53+kvgjXouL8s4NcrzEN/PGiEPQGM YSA8l0zH9ZKui++dwFWP6YgDZAu83hUnzj0/oq39P9VG6s4f/mBaZEAbenI5Fjru QicEuNbD7IG/jnUrqwypjbQ1Yk7b0Ho+C4XaHgI7zFwinFQ23WwJBeKMNmhKGGWT +W1/01V0kfjBLGjcLn6hioyqCZuaFafnpTXEyPLszZO6pfKRvkx3XMrc6kOaxqFq 9kGl5jNCVKW4nLeRJC7f5cqGzJtv4JE= -----END CERTIFICATE-----Generated at Thu Feb 26 03:31:55 2026 by rpki-client