$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/cf9fd58f-ca9a-3d2f-a422-a2924475a7f9.roa File: cf9fd58f-ca9a-3d2f-a422-a2924475a7f9.roa (raw, json) Hash identifier: eYUIC56bQjO8UwaLuxRTO8XpOSmkzr/mhtKIYo+i/b8= Subject key identifier: 36:3B:5D:A2:E8:27:06:9F:DA:2E:ED:73:91:F5:92:56:17:12:1E:02 Certificate issuer: /CN=5597247f-2d88-4c51-805a-7ab2a9af9dc5 Certificate serial: 010D0C9F4328584D869549B1D655683095190E40 Authority key identifier: 3C:73:2A:DD:04:B3:6B:02:2D:46:03:FE:E9:87:D2:83:58:1C:8B:A4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/cf9fd58f-ca9a-3d2f-a422-a2924475a7f9.roa Signing time: Thu 16 Apr 2026 13:00:31 +0000 ROA not before: Thu 16 Apr 2026 13:00:31 +0000 ROA not after: Wed 15 Jul 2026 13:00:31 +0000 asID: 40948 IP address blocks: 130.51.132.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:86:95:49:b1:d6:55:68:30:95:19:0e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5597247f-2d88-4c51-805a-7ab2a9af9dc5 Validity Not Before: Apr 16 13:00:31 2026 GMT Not After : Jul 15 13:00:31 2026 GMT Subject: CN=d910a57c-3a3d-47c4-a875-aa7d4d1be1d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d7:61:94:67:75:0d:37:88:1b:28:24:e6:31: 1f:22:59:22:a4:f2:20:b6:48:2c:16:23:eb:f7:de: 86:f3:25:09:1b:6c:95:e8:cc:5e:0b:40:93:de:38: ea:53:1a:00:38:59:cf:fd:81:97:a8:3c:f0:16:a3: 23:73:fc:00:64:57:7d:0d:54:d8:62:0c:e8:15:c0: 36:a2:2a:e0:9e:26:c0:63:f6:22:ae:c0:db:25:54: dd:51:88:8e:54:04:31:48:e1:e0:48:b2:99:d9:c2: d1:dd:ff:f5:84:7a:2a:d2:7b:2b:e1:29:68:29:1a: b3:f6:e5:64:97:26:3c:2d:b8:7a:a6:09:68:98:c2: fe:25:f5:95:dd:97:dc:9c:99:77:1f:90:f7:b2:d2: ac:ad:b8:c5:3b:a6:e8:b3:9f:22:03:5d:e0:aa:4d: 86:2e:15:72:02:c7:51:06:4d:fe:ae:2a:72:73:9e: 47:28:b5:1b:70:55:f0:e2:3f:41:ff:97:25:3b:5c: 3c:9c:82:35:79:c9:b7:f6:b2:90:04:a1:b9:da:f8: 6b:de:e5:c7:77:df:e4:46:67:d2:2c:be:d9:e1:9d: 03:e4:52:cc:61:9b:09:b6:2e:1c:98:57:a9:86:83: 6a:9e:9d:16:cc:d8:fd:a3:a7:0f:55:16:10:83:db: b4:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:3B:5D:A2:E8:27:06:9F:DA:2E:ED:73:91:F5:92:56:17:12:1E:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/cf9fd58f-ca9a-3d2f-a422-a2924475a7f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.crl X509v3 Authority Key Identifier: keyid:3C:73:2A:DD:04:B3:6B:02:2D:46:03:FE:E9:87:D2:83:58:1C:8B:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer sbgp-ipAddrBlock: critical IPv4: 130.51.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:de:ad:cc:af:51:8e:6e:b3:13:b2:fd:38:0b:af:85:60:e9: 01:da:99:16:f5:35:e6:5b:a7:ed:53:d1:4b:95:47:80:3d:5f: 53:69:88:10:ae:9f:0b:16:36:28:22:d6:9c:b6:b8:2c:1a:83: b5:8c:41:3b:40:27:e5:74:2d:94:db:f5:32:99:82:0f:7b:8f: 6f:68:84:fb:55:f5:ce:fb:21:19:1a:b7:98:4b:d6:7e:b1:49: 38:16:a9:15:5e:36:73:65:63:13:9d:13:a2:d7:d8:97:70:6b: d4:44:ca:a4:41:6d:33:d2:e4:f9:48:10:02:5c:1c:99:66:20: fe:56:23:57:d6:6a:d4:36:39:73:40:4e:8e:9d:14:4e:aa:f8: 76:87:85:1a:73:92:c2:24:aa:74:cb:67:51:ed:ca:86:e7:27: eb:68:62:d0:22:71:68:c8:ca:cf:89:1a:0d:4b:08:ed:ca:1a: d7:f4:d9:83:a2:e5:b2:d9:96:3e:1f:26:0c:2f:c5:55:2e:90: ed:bc:f7:cb:ad:00:50:5e:57:c6:d4:6d:b1:e5:ec:73:86:ae: d1:a9:86:bf:27:3a:c8:39:53:85:c6:04:a9:4a:0f:2a:ed:e2: b9:48:a5:08:5f:5e:de:22:ad:f1:2f:ba:d3:f3:af:28:d0:2f: ba:da:d2:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2GlUmx1lVoMJUZDkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTU5NzI0N2YtMmQ4OC00YzUxLTgwNWEtN2FiMmE5YWY5 ZGM1MB4XDTI2MDQxNjEzMDAzMVoXDTI2MDcxNTEzMDAzMVowLzEtMCsGA1UEAxMk ZDkxMGE1N2MtM2EzZC00N2M0LWE4NzUtYWE3ZDRkMWJlMWQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNdhlGd1DTeIGygk5jEfIlkipPIgtkgsFiPr 996G8yUJG2yV6MxeC0CT3jjqUxoAOFnP/YGXqDzwFqMjc/wAZFd9DVTYYgzoFcA2 oirgnibAY/YirsDbJVTdUYiOVAQxSOHgSLKZ2cLR3f/1hHoq0nsr4SloKRqz9uVk lyY8Lbh6pglomML+JfWV3ZfcnJl3H5D3stKsrbjFO6bos58iA13gqk2GLhVyAsdR Bk3+ripyc55HKLUbcFXw4j9B/5clO1w8nII1ecm39rKQBKG52vhr3uXHd9/kRmfS LL7Z4Z0D5FLMYZsJti4cmFephoNqnp0WzNj9o6cPVRYQg9u0SwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDY7XaLoJwaf2i7tc5H1klYXEh4CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81NTk3 MjQ3Zi0yZDg4LTRjNTEtODA1YS03YWIyYTlhZjlkYzUvY2Y5ZmQ1OGYtY2E5YS0z ZDJmLWE0MjItYTI5MjQ0NzVhN2Y5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTU5NzI0N2YtMmQ4OC00YzUxLTgw NWEtN2FiMmE5YWY5ZGM1LzU1OTcyNDdmLTJkODgtNGM1MS04MDVhLTdhYjJhOWFm OWRjNS5jcmwwHwYDVR0jBBgwFoAUPHMq3QSzawItRgP+6YfSg1gci6QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81NTk3MjQ3Zi0yZDg4LTRjNTEtODA1YS03YWIy YTlhZjlkYzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgjOEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA7ercyvUY5usxOy/TgLr4Vg6QHamRb1NeZbp+1T0UuVR4A9X1NpiBCu nwsWNigi1py2uCwag7WMQTtAJ+V0LZTb9TKZgg97j29ohPtV9c77IRkat5hL1n6x STgWqRVeNnNlYxOdE6LX2Jdwa9REyqRBbTPS5PlIEAJcHJlmIP5WI1fWatQ2OXNA To6dFE6q+HaHhRpzksIkqnTLZ1HtyobnJ+toYtAicWjIys+JGg1LCO3KGtf02YOi 5bLZlj4fJgwvxVUukO2898utAFBeV8bUbbHl7HOGrtGphr8nOsg5U4XGBKlKDyrt 4rlIpQhfXt4irfEvutPzryjQL7ra0rM= -----END CERTIFICATE-----Generated at Sat Apr 18 08:54:16 2026 by rpki-client