$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/04dd4315-6a9f-3488-9092-fe5794692979.roa File: 04dd4315-6a9f-3488-9092-fe5794692979.roa (raw, json) Hash identifier: rMpSbyayvZtMRyUtJ1bYNC0wsQ29fXkN+6Q0sDnfqys= Subject key identifier: 79:3A:26:A6:90:1E:E6:69:10:26:9F:06:1A:12:7C:E0:BE:9B:B6:12 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584D143D5DBC66B801BE8E259300 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/04dd4315-6a9f-3488-9092-fe5794692979.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 6079 IP address blocks: 216.170.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:5d:bc:66:b8:01:be:8e:25:93:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=b8dceca9-c1e6-4e15-83db-ac85ff1f3f8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:45:6c:f1:89:75:5e:f8:dc:1d:0c:38:0f:dc: ab:24:9f:67:ac:78:1c:9d:e4:80:fe:d7:fc:e1:15: bc:03:b6:b0:44:45:8a:65:04:06:10:99:c5:e3:9c: c9:8d:77:9c:55:01:fd:a2:f2:6b:9f:0b:7b:a2:13: 05:8b:4b:de:89:b6:73:15:8e:da:a4:24:83:e4:64: 2d:4c:40:e9:d2:04:1c:b2:ed:c9:85:dd:e4:c8:43: 78:fb:e2:34:d8:40:80:67:8f:3e:58:7a:36:96:2c: d5:c1:15:92:a1:01:0f:05:6d:46:6d:9a:6f:2b:f0: 6a:a4:a9:d8:a6:bb:06:4c:e9:66:f6:d5:39:8c:04: 37:92:40:c3:14:83:d9:b4:15:fe:01:ad:5c:b2:1c: f1:60:41:47:5e:01:83:8d:69:b7:ea:ca:d7:0c:89: 7b:ea:8f:d2:0e:c3:22:e0:a0:e6:99:ba:40:2c:21: 14:97:5d:7c:81:4d:af:ae:39:30:84:d6:81:17:2e: 01:71:e3:51:29:0c:d5:21:77:0c:a9:6e:0a:ab:5e: a2:d3:58:2b:d0:25:a7:3b:9a:54:d7:59:3b:93:8c: cf:62:ac:c8:4f:b8:fd:89:c0:25:7d:b2:90:15:53: cf:0a:71:8a:35:d2:22:38:06:99:c1:31:9a:31:57: 6f:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:3A:26:A6:90:1E:E6:69:10:26:9F:06:1A:12:7C:E0:BE:9B:B6:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/04dd4315-6a9f-3488-9092-fe5794692979.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 216.170.122.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:e5:4b:23:4f:42:bf:f6:85:5b:bd:de:65:34:85:0a:01:67: dc:60:61:04:6a:05:82:6b:7c:e7:dd:c8:43:8e:53:44:bc:24: bc:45:c4:eb:f3:18:3f:4e:2d:1f:23:f4:8e:d2:89:89:ae:ea: a7:3b:bf:f0:92:66:4c:0a:95:7a:41:76:c1:91:b3:f6:67:13: c9:af:c1:c0:4d:c8:fc:dc:db:b0:30:e4:2e:b7:2e:e5:bf:23: 87:99:ea:03:aa:42:5d:ca:4e:d7:f6:a9:54:4a:2e:20:d8:a8: 8d:f9:f1:17:d0:0d:b0:42:35:91:4c:6c:22:4b:d6:70:95:2d: 80:4f:3f:f4:f4:a0:17:4a:a4:9e:f9:a9:cf:7d:2d:93:a8:b3: eb:0f:07:bb:59:9b:ba:a2:42:4f:30:31:a9:ec:f9:15:82:7d: 77:a2:ce:49:af:93:59:3f:98:97:17:71:1f:12:a5:37:98:25: 31:ad:24:44:82:f9:f8:91:1d:fe:7b:f8:a7:aa:93:88:10:ed: 7f:f7:f8:14:65:ef:be:b5:ff:f6:cf:92:f6:f0:94:c6:42:d9: e2:53:69:dd:db:4e:3c:8b:62:cf:d8:e3:15:f6:9b:59:f1:64: f6:4d:38:10:e5:5d:94:28:ac:10:b0:c2:75:ff:9c:47:5b:4e: 4d:7d:a1:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPV28ZrgBvo4lkwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk YjhkY2VjYTktYzFlNi00ZTE1LTgzZGItYWM4NWZmMWYzZjhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0EVs8Yl1XvjcHQw4D9yrJJ9nrHgcneSA/tf8 4RW8A7awREWKZQQGEJnF45zJjXecVQH9ovJrnwt7ohMFi0veibZzFY7apCSD5GQt TEDp0gQcsu3Jhd3kyEN4++I02ECAZ48+WHo2lizVwRWSoQEPBW1GbZpvK/BqpKnY prsGTOlm9tU5jAQ3kkDDFIPZtBX+Aa1cshzxYEFHXgGDjWm36srXDIl76o/SDsMi 4KDmmbpALCEUl118gU2vrjkwhNaBFy4BceNRKQzVIXcMqW4Kq16i01gr0CWnO5pU 11k7k4zPYqzIT7j9icAlfbKQFVPPCnGKNdIiOAaZwTGaMVdvzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHk6JqaQHuZpECafBhoSfOC+m7YSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvMDRkZDQzMTUtNmE5Zi0z NDg4LTkwOTItZmU1Nzk0NjkyOTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2Kp6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABrlSyNPQr/2hVu93mU0hQoBZ9xgYQRqBYJrfOfdyEOOU0S8JLxFxOvz GD9OLR8j9I7SiYmu6qc7v/CSZkwKlXpBdsGRs/ZnE8mvwcBNyPzc27Aw5C63LuW/ I4eZ6gOqQl3KTtf2qVRKLiDYqI358RfQDbBCNZFMbCJL1nCVLYBPP/T0oBdKpJ75 qc99LZOos+sPB7tZm7qiQk8wMans+RWCfXeizkmvk1k/mJcXcR8SpTeYJTGtJESC +fiRHf57+Keqk4gQ7X/3+BRl7761//bPkvbwlMZC2eJTad3bTjyLYs/Y4xX2m1nx ZPZNOBDlXZQorBCwwnX/nEdbTk19oSc= -----END CERTIFICATE-----Generated at Thu Mar 26 02:46:04 2026 by rpki-client