$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bffade4c-9265-36aa-b96c-68825698595c.roa File: bffade4c-9265-36aa-b96c-68825698595c.roa (raw, json) Hash identifier: NQMCzws5NeRWL4rIVizhfJ8auFQ+XCYO8pCAYmhL/8c= Subject key identifier: 7A:C7:71:C7:89:BA:45:2A:78:F7:AB:F1:8B:BA:72:CD:BC:40:0F:D6 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D46B120248688A5BAA0406400 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bffade4c-9265-36aa-b96c-68825698595c.roa Signing time: Tue 24 Mar 2026 15:45:03 +0000 ROA not before: Tue 24 Mar 2026 15:45:03 +0000 ROA not after: Mon 22 Jun 2026 15:45:03 +0000 asID: 396586 IP address blocks: 192.35.51.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:46:b1:20:24:86:88:a5:ba:a0:40:64:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 24 15:45:03 2026 GMT Not After : Jun 22 15:45:03 2026 GMT Subject: CN=c6a65e7f-6915-4b1b-861d-021980af3266 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:73:c0:89:a7:c4:92:b8:83:b3:b7:03:13:7c: b1:bf:3c:eb:14:e1:a0:aa:9a:3e:a6:d1:61:16:c5: 55:c6:75:2c:0b:76:a6:a8:30:bc:c2:64:be:29:8b: 92:84:5d:e3:3c:f9:e4:65:d4:49:91:08:56:2f:07: c9:1b:f0:47:90:4a:4e:95:a2:de:db:9e:18:9f:4d: af:7c:36:5a:12:7a:52:dd:6f:66:98:ea:04:a5:4d: 9a:31:4c:5b:b0:14:23:8c:1b:df:7c:4c:52:71:7f: b8:5f:4c:f0:cf:d5:1d:c9:b3:fe:26:74:77:ec:f6: 47:8b:e7:03:62:7f:05:d7:19:8b:6b:40:2c:45:34: db:ee:7f:aa:49:6a:3e:d9:17:f2:6d:3c:bc:e3:a4: 00:1a:0f:52:de:1e:fc:0b:cb:da:1b:59:21:f0:73: da:1d:ea:78:0c:eb:ee:da:0a:a9:0d:ce:1f:37:f9: c5:19:59:06:3b:60:1e:5f:dc:30:23:93:55:2f:dd: 31:51:1f:79:81:6b:fb:2e:bf:70:21:46:f8:86:f8: 00:74:d5:83:29:51:9c:16:d9:c1:3f:21:1d:59:ae: 43:0b:93:ab:38:27:c7:c8:d2:2d:ed:9c:7d:cc:01: e0:5e:2b:30:c3:13:50:7a:a0:b1:35:e0:4e:ca:03: de:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:C7:71:C7:89:BA:45:2A:78:F7:AB:F1:8B:BA:72:CD:BC:40:0F:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bffade4c-9265-36aa-b96c-68825698595c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.35.51.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:0e:b1:53:36:9f:72:a5:19:a3:d6:d2:39:86:5a:8d:9c:12: 10:ad:21:99:cb:91:25:96:25:29:9d:22:88:15:83:14:c5:4f: 7e:98:3e:26:2a:b3:52:4a:2e:95:2b:8f:06:c7:48:82:86:50: 12:37:88:6c:46:74:f4:3b:06:14:6d:f2:68:b7:00:0d:b1:a8: da:f9:e7:90:e1:c4:e6:49:3b:fd:3b:c5:1c:82:38:17:97:6e: 48:3d:0f:01:cb:b1:ed:4b:d2:89:cf:e3:e5:60:ee:88:29:d4: 44:b0:ca:f0:ad:f0:ef:2c:48:5d:fb:a4:1f:95:4d:d6:c6:05: ae:2c:5e:4f:8b:19:5c:c0:cd:1f:cc:98:b4:c3:65:4a:b6:23: 23:87:6c:a3:59:91:01:67:da:d1:3b:34:06:50:7f:90:73:70: 5e:9f:74:67:05:a2:66:e2:64:fe:d5:75:c1:f4:f5:5d:34:c7: b9:94:b7:73:76:a6:47:b1:19:15:90:46:4c:db:aa:72:65:fd: 5e:07:1b:01:27:e6:d2:d5:12:14:65:e5:8f:45:8d:08:23:47: 91:87:42:d9:cb:81:f0:fe:a3:b1:df:fa:33:6c:f2:b8:3f:d7: 27:95:24:ae:7b:54:6e:e1:7c:0d:f2:08:7a:6c:e5:bf:19:53: aa:b7:e3:a1 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE1GsSAkhoiluqBAZAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMyNDE1NDUwM1oXDTI2MDYyMjE1NDUwM1owLzEtMCsGA1UEAxMk YzZhNjVlN2YtNjkxNS00YjFiLTg2MWQtMDIxOTgwYWYzMjY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXPAiafEkriDs7cDE3yxvzzrFOGgqpo+ptFh FsVVxnUsC3amqDC8wmS+KYuShF3jPPnkZdRJkQhWLwfJG/BHkEpOlaLe254Yn02v fDZaEnpS3W9mmOoEpU2aMUxbsBQjjBvffExScX+4X0zwz9UdybP+JnR37PZHi+cD Yn8F1xmLa0AsRTTb7n+qSWo+2RfybTy846QAGg9S3h78C8vaG1kh8HPaHep4DOvu 2gqpDc4fN/nFGVkGO2AeX9wwI5NVL90xUR95gWv7Lr9wIUb4hvgAdNWDKVGcFtnB PyEdWa5DC5OrOCfHyNIt7Zx9zAHgXiswwxNQeqCxNeBOygPe6wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHrHcceJukUqePer8Yu6cs28QA/WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmZmYWRlNGMtOTI2NS0z NmFhLWI5NmMtNjg4MjU2OTg1OTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCMzHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQADDrFTNp9ypRmj1tI5hlqNnBIQrSGZy5ElliUpnSKIFYMUxU9+mD4m KrNSSi6VK48Gx0iChlASN4hsRnT0OwYUbfJotwANsaja+eeQ4cTmSTv9O8UcgjgX l25IPQ8By7HtS9KJz+PlYO6IKdREsMrwrfDvLEhd+6QflU3WxgWuLF5PixlcwM0f zJi0w2VKtiMjh2yjWZEBZ9rROzQGUH+Qc3Ben3RnBaJm4mT+1XXB9PVdNMe5lLdz dqZHsRkVkEZM26pyZf1eBxsBJ+bS1RIUZeWPRY0II0eRh0LZy4Hw/qOx3/ozbPK4 P9cnlSSue1Ru4XwN8gh6bOW/GVOqt+Oh -----END CERTIFICATE-----Generated at Thu Mar 26 14:54:04 2026 by rpki-client