$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81/130a8551-3b63-37ac-8acf-ec6a6153a01a.roa File: 130a8551-3b63-37ac-8acf-ec6a6153a01a.roa (raw, json) Hash identifier: bhgRpJ0tRYEVwmpwMbNLV0dZj8lWN/DhD4f/jzKMwn0= Subject key identifier: B3:78:8F:0C:34:F1:9A:05:CD:81:97:D7:0F:8B:3F:EB:14:A1:B9:88 Certificate issuer: /CN=faabd4d2-d007-47ce-aeb1-098f9db2cc81 Certificate serial: 010D0C9F4328584D3F64E124834C584369AE1740 Authority key identifier: C5:47:D5:4C:44:B0:70:3E:68:55:8F:06:AE:EB:D2:FC:2D:D0:69:AC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81/130a8551-3b63-37ac-8acf-ec6a6153a01a.roa Signing time: Sun 22 Mar 2026 01:00:32 +0000 ROA not before: Sun 22 Mar 2026 01:00:32 +0000 ROA not after: Sat 20 Jun 2026 01:00:32 +0000 asID: 62695 IP address blocks: 104.255.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81/faabd4d2-d007-47ce-aeb1-098f9db2cc81.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81/faabd4d2-d007-47ce-aeb1-098f9db2cc81.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:64:e1:24:83:4c:58:43:69:ae:17:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=faabd4d2-d007-47ce-aeb1-098f9db2cc81 Validity Not Before: Mar 22 01:00:32 2026 GMT Not After : Jun 20 01:00:32 2026 GMT Subject: CN=38de07e7-d0e6-4a95-a980-bbd43cede728 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:fa:13:88:84:ba:99:a4:99:3a:15:b2:b9:fb: e0:10:a0:c9:ff:8b:dd:3a:c6:53:f4:f7:f4:8b:38: bd:aa:b2:9e:c4:49:76:49:0a:03:ae:ec:31:8b:ba: f9:ee:44:ab:d8:49:72:49:6e:7f:28:b5:96:b1:59: c2:db:64:d6:ee:a2:8c:6f:a8:86:5f:5d:d3:ed:58: f1:ee:78:15:fd:59:86:42:44:0c:d4:9a:25:7d:4f: e6:d2:ab:84:73:97:c5:b2:3b:c6:97:cf:6c:b4:fb: 72:78:5f:ac:3d:b1:ca:0a:de:5e:c9:b3:75:07:26: c9:06:c1:34:87:0f:53:56:ef:c9:4e:48:22:b6:53: 97:6f:6b:2a:13:c5:df:1a:17:52:f2:a5:88:46:98: f5:20:a9:d3:24:e7:95:26:c6:a4:cd:4e:53:bf:4b: fe:75:e2:a1:b7:82:ee:f8:65:de:32:65:9d:ac:22: 9f:4c:60:7d:84:9c:b4:fa:0b:bf:e5:6c:59:87:c5: 95:d5:54:38:45:0e:5d:fb:99:92:cb:9c:9e:9a:7b: 84:ab:5c:51:50:18:da:e7:4f:c2:11:74:cf:83:c6: da:28:cc:17:5e:64:c4:e2:eb:87:fb:1c:28:bf:7c: 54:92:9a:5e:7e:7a:15:8b:1c:31:54:18:5d:a6:04: fe:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:78:8F:0C:34:F1:9A:05:CD:81:97:D7:0F:8B:3F:EB:14:A1:B9:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81/130a8551-3b63-37ac-8acf-ec6a6153a01a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81/faabd4d2-d007-47ce-aeb1-098f9db2cc81.crl X509v3 Authority Key Identifier: keyid:C5:47:D5:4C:44:B0:70:3E:68:55:8F:06:AE:EB:D2:FC:2D:D0:69:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81.cer sbgp-ipAddrBlock: critical IPv4: 104.255.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cb:d7:f3:04:03:31:67:a8:2b:5b:a8:a4:eb:ac:6d:63:e9:99: 71:77:8d:5b:e3:6e:3c:a6:d1:66:a4:02:5d:0c:34:23:d6:4c: 67:62:b3:43:75:fa:3b:29:72:48:9b:95:94:be:f6:3d:cb:8d: ba:ed:a7:95:73:7a:94:12:33:7f:be:40:eb:b9:4d:31:39:ca: 6d:5a:9b:58:74:1f:2b:91:06:84:62:d8:93:10:9b:1f:91:2e: 67:41:a3:ba:45:45:09:8a:b4:63:56:46:10:76:bc:6a:9b:0f: 6f:88:ea:e3:a8:c5:73:1b:92:d8:0f:f4:ff:1c:58:2f:06:4e: 71:f1:4c:78:62:00:34:41:fb:67:22:18:15:51:6d:08:23:ce: 1f:8f:0a:af:6d:8a:8e:61:e0:7e:9d:7f:a4:b2:9c:76:34:98: d6:8f:1e:0f:3f:47:6d:c5:a2:47:41:22:35:77:b0:55:1e:c6: 3b:8a:09:7c:91:52:6a:14:9a:98:59:f6:2d:52:76:4b:a5:4b: 15:c4:62:46:f0:5a:69:7d:65:00:73:be:ee:70:9c:86:28:cb: 36:36:e8:31:6e:18:5b:52:5b:85:b8:cd:d4:31:4c:30:35:4f: 62:f1:65:ec:bf:09:55:a4:f0:24:95:09:ec:d8:30:7d:fc:75: 11:34:30:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0/ZOEkg0xYQ2muF0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmFhYmQ0ZDItZDAwNy00N2NlLWFlYjEtMDk4ZjlkYjJj YzgxMB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk MzhkZTA3ZTctZDBlNi00YTk1LWE5ODAtYmJkNDNjZWRlNzI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvoTiIS6maSZOhWyufvgEKDJ/4vdOsZT9Pf0 izi9qrKexEl2SQoDruwxi7r57kSr2ElySW5/KLWWsVnC22TW7qKMb6iGX13T7Vjx 7ngV/VmGQkQM1JolfU/m0quEc5fFsjvGl89stPtyeF+sPbHKCt5eybN1BybJBsE0 hw9TVu/JTkgitlOXb2sqE8XfGhdS8qWIRpj1IKnTJOeVJsakzU5Tv0v+deKht4Lu +GXeMmWdrCKfTGB9hJy0+gu/5WxZh8WV1VQ4RQ5d+5mSy5yemnuEq1xRUBja50/C EXTPg8baKMwXXmTE4uuH+xwov3xUkppefnoVixwxVBhdpgT+MQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLN4jww08ZoFzYGX1w+LP+sUobmIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mYWFi ZDRkMi1kMDA3LTQ3Y2UtYWViMS0wOThmOWRiMmNjODEvMTMwYTg1NTEtM2I2My0z N2FjLThhY2YtZWM2YTYxNTNhMDFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZmFhYmQ0ZDItZDAwNy00N2NlLWFl YjEtMDk4ZjlkYjJjYzgxL2ZhYWJkNGQyLWQwMDctNDdjZS1hZWIxLTA5OGY5ZGIy Y2M4MS5jcmwwHwYDVR0jBBgwFoAUxUfVTESwcD5oVY8GruvS/C3QaawwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9mYWFiZDRkMi1kMDA3LTQ3Y2UtYWViMS0wOThm OWRiMmNjODEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaP8jMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMvX8wQDMWeoK1uopOusbWPpmXF3jVvjbjym0WakAl0MNCPWTGdis0N1 +jspckiblZS+9j3Ljbrtp5VzepQSM3++QOu5TTE5ym1am1h0HyuRBoRi2JMQmx+R LmdBo7pFRQmKtGNWRhB2vGqbD2+I6uOoxXMbktgP9P8cWC8GTnHxTHhiADRB+2ci GBVRbQgjzh+PCq9tio5h4H6df6SynHY0mNaPHg8/R23FokdBIjV3sFUexjuKCXyR UmoUmphZ9i1SdkulSxXEYkbwWml9ZQBzvu5wnIYoyzY26DFuGFtSW4W4zdQxTDA1 T2LxZey/CVWk8CSVCezYMH38dRE0MDo= -----END CERTIFICATE-----Generated at Thu Mar 26 19:26:46 2026 by rpki-client