$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/cf9fd58f-ca9a-3d2f-a422-a2924475a7f9.roa File: cf9fd58f-ca9a-3d2f-a422-a2924475a7f9.roa (raw, json) Hash identifier: +y3eSIbWHLbWh6KPYOdxaCufgBI9IHfNNAAjvFy0NjY= Subject key identifier: DE:5C:36:49:D4:FA:87:88:28:81:41:A4:90:68:B3:8F:C4:90:A2:E2 Certificate issuer: /CN=5597247f-2d88-4c51-805a-7ab2a9af9dc5 Certificate serial: 010D0C9F4328584CA5F6FD4BE06185D7DC2711CC Authority key identifier: 3C:73:2A:DD:04:B3:6B:02:2D:46:03:FE:E9:87:D2:83:58:1C:8B:A4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/cf9fd58f-ca9a-3d2f-a422-a2924475a7f9.roa Signing time: Mon 26 Jan 2026 02:00:32 +0000 ROA not before: Mon 26 Jan 2026 02:00:32 +0000 ROA not after: Sun 26 Apr 2026 01:00:32 +0000 asID: 40948 IP address blocks: 130.51.132.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a5:f6:fd:4b:e0:61:85:d7:dc:27:11:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5597247f-2d88-4c51-805a-7ab2a9af9dc5 Validity Not Before: Jan 26 02:00:32 2026 GMT Not After : Apr 26 01:00:32 2026 GMT Subject: CN=1a3657a7-d8dc-4f6b-8b99-ec012cd01534 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:60:50:1e:f5:48:41:10:2e:53:d3:3a:d1:2e: a4:50:d5:3d:a5:5a:e5:33:8e:fe:5e:5e:58:fe:a0: 4d:79:bd:07:6d:a4:4f:3f:db:49:8e:14:6d:49:09: 32:bd:52:7d:20:9b:63:f1:6e:be:3e:cd:fc:e6:f0: 73:61:5b:2a:d9:2d:f2:72:5b:2c:e6:6c:15:9e:72: 26:4e:e5:87:64:0c:6c:9f:be:a1:87:f6:d4:1a:d3: 9c:a2:e7:0a:aa:01:c1:25:da:04:51:06:4c:92:28: 83:c2:df:e1:e8:97:83:6d:49:2f:cf:db:e2:ac:e1: b1:73:64:22:a5:92:a1:1f:87:4a:d2:ed:f3:b8:00: db:17:e3:4a:aa:f1:29:4f:d3:18:93:6c:b2:82:90: f0:d6:91:aa:54:a9:37:24:f2:eb:1e:5d:3a:77:54: d4:b8:3f:fe:b3:34:59:ce:82:27:fa:67:10:8f:5d: ab:76:4d:99:57:11:49:01:79:16:ce:00:e6:17:94: f5:1f:93:53:c5:e2:8f:8d:b2:a1:13:30:8f:bf:47: 58:a8:1c:19:ae:82:54:4d:94:0e:2f:f3:75:5c:08: 7b:8f:07:9c:72:28:14:c5:85:ae:12:64:e8:d2:8c: 7a:58:84:c0:d6:ff:ea:64:88:c7:60:e5:2d:5e:b0: 3e:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:5C:36:49:D4:FA:87:88:28:81:41:A4:90:68:B3:8F:C4:90:A2:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/cf9fd58f-ca9a-3d2f-a422-a2924475a7f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.crl X509v3 Authority Key Identifier: keyid:3C:73:2A:DD:04:B3:6B:02:2D:46:03:FE:E9:87:D2:83:58:1C:8B:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer sbgp-ipAddrBlock: critical IPv4: 130.51.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:40:06:0a:31:7b:8c:d3:c5:82:f3:c2:cf:62:b7:ee:08:e2: 01:5e:eb:db:a9:56:1e:84:2f:7f:62:0c:88:c5:65:35:97:a1: 22:93:a4:82:6a:ba:42:4f:8d:fb:13:10:18:3c:9c:a2:19:2b: a2:09:f9:21:90:cd:c0:82:0c:c5:95:9d:0e:1f:22:5e:79:ef: 82:09:62:8f:19:ab:68:f0:2f:a6:53:8b:c1:0a:45:13:ea:69: 87:d8:5d:96:9b:a1:2b:d1:c5:05:21:7e:18:b0:24:68:6b:a7: ab:4c:55:6a:06:29:be:f0:11:68:6f:7c:b5:fa:a1:27:f5:de: dd:25:a3:b5:fc:26:9e:b1:c1:41:d8:c9:0d:56:01:8a:e9:64: d9:4e:85:60:6e:55:f7:74:d0:c4:62:dc:4f:c6:b7:ea:e2:31: b6:59:fe:81:98:10:c1:77:65:34:e5:ae:e6:2a:65:c3:f7:4c: ae:cd:b1:c8:28:38:ae:c6:df:cb:cc:7b:18:86:5e:a4:d8:cc: 15:dd:11:f9:da:8a:48:c2:2c:09:b9:df:b6:7c:2c:f3:68:5e: 4e:b9:5e:32:a2:a4:42:71:e9:ac:f4:83:90:cb:e9:11:42:af: a7:15:4e:db:28:eb:48:4a:7f:98:c1:20:cb:a9:f5:bf:be:54: 08:85:15:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyl9v1L4GGF19wnEcwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTU5NzI0N2YtMmQ4OC00YzUxLTgwNWEtN2FiMmE5YWY5 ZGM1MB4XDTI2MDEyNjAyMDAzMloXDTI2MDQyNjAxMDAzMlowLzEtMCsGA1UEAxMk MWEzNjU3YTctZDhkYy00ZjZiLThiOTktZWMwMTJjZDAxNTM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2BQHvVIQRAuU9M60S6kUNU9pVrlM47+Xl5Y /qBNeb0HbaRPP9tJjhRtSQkyvVJ9IJtj8W6+Ps385vBzYVsq2S3yclss5mwVnnIm TuWHZAxsn76hh/bUGtOcoucKqgHBJdoEUQZMkiiDwt/h6JeDbUkvz9virOGxc2Qi pZKhH4dK0u3zuADbF+NKqvEpT9MYk2yygpDw1pGqVKk3JPLrHl06d1TUuD/+szRZ zoIn+mcQj12rdk2ZVxFJAXkWzgDmF5T1H5NTxeKPjbKhEzCPv0dYqBwZroJUTZQO L/N1XAh7jweccigUxYWuEmTo0ox6WITA1v/qZIjHYOUtXrA+MwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN5cNknU+oeIKIFBpJBos4/EkKLiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81NTk3 MjQ3Zi0yZDg4LTRjNTEtODA1YS03YWIyYTlhZjlkYzUvY2Y5ZmQ1OGYtY2E5YS0z ZDJmLWE0MjItYTI5MjQ0NzVhN2Y5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTU5NzI0N2YtMmQ4OC00YzUxLTgw NWEtN2FiMmE5YWY5ZGM1LzU1OTcyNDdmLTJkODgtNGM1MS04MDVhLTdhYjJhOWFm OWRjNS5jcmwwHwYDVR0jBBgwFoAUPHMq3QSzawItRgP+6YfSg1gci6QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81NTk3MjQ3Zi0yZDg4LTRjNTEtODA1YS03YWIy YTlhZjlkYzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgjOEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAERABgoxe4zTxYLzws9it+4I4gFe69upVh6EL39iDIjFZTWXoSKTpIJq ukJPjfsTEBg8nKIZK6IJ+SGQzcCCDMWVnQ4fIl5574IJYo8Zq2jwL6ZTi8EKRRPq aYfYXZaboSvRxQUhfhiwJGhrp6tMVWoGKb7wEWhvfLX6oSf13t0lo7X8Jp6xwUHY yQ1WAYrpZNlOhWBuVfd00MRi3E/Gt+riMbZZ/oGYEMF3ZTTlruYqZcP3TK7Nscgo OK7G38vMexiGXqTYzBXdEfnaikjCLAm537Z8LPNoXk65XjKipEJx6az0g5DL6RFC r6cVTtso60hKf5jBIMup9b++VAiFFe8= -----END CERTIFICATE-----Generated at Mon Mar 2 09:46:02 2026 by rpki-client