$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fd1a7421-5d1f-37d6-be35-e785fb6fa8f8.roa File: fd1a7421-5d1f-37d6-be35-e785fb6fa8f8.roa (raw, json) Hash identifier: yX8mR8LGs5qdQOrA9yk4Qw4yirtZTgQMZ+ZUjQiUwnU= Subject key identifier: 8D:83:EE:96:3F:BF:AC:B4:A1:A2:6A:1B:6B:5A:8E:C1:C2:88:83:9D Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D46B11F48F2F9B7B445C2BEC0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fd1a7421-5d1f-37d6-be35-e785fb6fa8f8.roa Signing time: Tue 24 Mar 2026 15:45:02 +0000 ROA not before: Tue 24 Mar 2026 15:45:02 +0000 ROA not after: Mon 22 Jun 2026 15:45:02 +0000 asID: 396542 IP address blocks: 192.35.51.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:46:b1:1f:48:f2:f9:b7:b4:45:c2:be:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 24 15:45:02 2026 GMT Not After : Jun 22 15:45:02 2026 GMT Subject: CN=8b24ae81-b6ed-4c28-a0f4-f41ebc0b0838 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:25:8f:7e:5c:51:fd:e1:35:24:76:11:e3:34: 72:34:e6:17:f3:da:0d:ca:df:44:a1:eb:6c:7f:c2: 85:10:ba:88:30:e2:94:f2:7c:5d:3e:d9:ed:e0:63: bf:ff:c5:fb:6b:49:52:8a:2a:8d:a5:3e:b0:56:ca: 74:72:27:1f:46:80:7a:5a:76:ab:c0:4f:83:9c:16: 00:00:15:83:4c:69:a7:18:15:2d:33:31:f2:29:4d: c2:69:a1:cb:c9:c1:14:8d:88:fd:ae:2b:e3:e6:c7: 1d:4d:38:47:ad:c1:2f:c8:e8:1e:e7:a2:54:18:2b: c9:c1:22:77:46:8f:9b:a8:c1:88:01:93:31:b1:bd: fd:d0:9b:6f:93:a6:c8:ac:02:1b:f7:6c:e1:c3:d0: 00:e3:8c:fe:84:1f:16:2c:e5:a7:36:aa:b6:5f:55: 7a:9d:76:97:e4:f5:14:1b:ba:dd:31:c5:1d:6a:76: 99:06:2c:4a:f7:c6:ea:ed:7a:33:72:94:ae:5a:05: 41:94:89:3f:51:04:3c:17:78:9d:7f:eb:36:9a:34: 71:84:65:a0:92:a0:1a:cb:e2:00:17:61:a6:b6:0e: b4:09:c5:5a:43:9e:fc:5f:03:dc:4d:6e:00:75:bb: ba:a6:5e:7f:26:44:76:17:b4:52:1a:8d:b4:0c:71: 19:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:83:EE:96:3F:BF:AC:B4:A1:A2:6A:1B:6B:5A:8E:C1:C2:88:83:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fd1a7421-5d1f-37d6-be35-e785fb6fa8f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.35.51.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:75:5f:a6:fd:3f:d6:9f:08:1b:f4:af:d4:1c:b2:8f:ee:3b: be:68:66:b0:c6:2a:9b:88:93:49:70:ff:3a:9b:35:a6:6d:b6: 91:c5:ed:67:26:c6:eb:e4:7f:d0:40:34:bd:06:90:6d:9c:9a: 93:a9:e6:35:4f:e8:b3:52:db:6d:b6:ab:d3:87:e2:b5:2d:e8: ce:e2:57:c1:7f:a3:bc:75:70:19:e3:3a:44:35:fb:ac:85:e7: 44:b5:e1:5a:0b:ed:e0:5b:ef:6a:17:7a:8e:d5:3b:8e:81:8c: 37:66:46:3a:7d:ba:4a:3d:32:86:05:05:dd:d5:31:dd:09:2d: 1f:86:8a:cf:d1:29:0d:81:cd:23:87:10:05:a3:34:87:f2:6f: df:55:d4:cf:0f:89:f8:5e:36:71:1c:4a:2c:40:8c:0b:cd:cd: 8f:b7:fc:04:54:5e:fd:db:03:d7:57:d2:2c:e0:fa:d2:a4:0a: 07:be:46:9b:8a:44:01:d9:d8:bf:fe:ed:86:f6:23:4c:05:d0: 27:16:16:84:72:b7:74:cc:c9:00:2a:a7:9b:27:5e:fc:11:c7: fb:67:49:1d:fb:c0:6b:be:b5:4d:c5:26:d1:f0:ff:f2:9d:c3: 56:89:18:c2:c0:05:af:24:16:5c:c0:97:04:ad:13:91:4f:d7: b0:c9:57:d9 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE1GsR9I8vm3tEXCvsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMyNDE1NDUwMloXDTI2MDYyMjE1NDUwMlowLzEtMCsGA1UEAxMk OGIyNGFlODEtYjZlZC00YzI4LWEwZjQtZjQxZWJjMGIwODM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSWPflxR/eE1JHYR4zRyNOYX89oNyt9Eoets f8KFELqIMOKU8nxdPtnt4GO//8X7a0lSiiqNpT6wVsp0cicfRoB6WnarwE+DnBYA ABWDTGmnGBUtMzHyKU3CaaHLycEUjYj9rivj5scdTThHrcEvyOge56JUGCvJwSJ3 Ro+bqMGIAZMxsb390Jtvk6bIrAIb92zhw9AA44z+hB8WLOWnNqq2X1V6nXaX5PUU G7rdMcUdanaZBixK98bq7XozcpSuWgVBlIk/UQQ8F3idf+s2mjRxhGWgkqAay+IA F2Gmtg60CcVaQ578XwPcTW4Adbu6pl5/JkR2F7RSGo20DHEZAQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFI2D7pY/v6y0oaJqG2tajsHCiIOdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZmQxYTc0MjEtNWQxZi0z N2Q2LWJlMzUtZTc4NWZiNmZhOGY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCMzHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCzdV+m/T/Wnwgb9K/UHLKP7ju+aGawxiqbiJNJcP86mzWmbbaRxe1n Jsbr5H/QQDS9BpBtnJqTqeY1T+izUttttqvTh+K1LejO4lfBf6O8dXAZ4zpENfus hedEteFaC+3gW+9qF3qO1TuOgYw3ZkY6fbpKPTKGBQXd1THdCS0fhorP0SkNgc0j hxAFozSH8m/fVdTPD4n4XjZxHEosQIwLzc2Pt/wEVF792wPXV9Is4PrSpAoHvkab ikQB2di//u2G9iNMBdAnFhaEcrd0zMkAKqebJ178Ecf7Z0kd+8BrvrVNxSbR8P/y ncNWiRjCwAWvJBZcwJcErRORT9ewyVfZ -----END CERTIFICATE-----Generated at Thu Mar 26 08:36:41 2026 by rpki-client