$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/cec05261-0f78-3265-830a-98a87b1c4a62.roa File: cec05261-0f78-3265-830a-98a87b1c4a62.roa (raw, json) Hash identifier: RvRCB5xjXRWrvU0V2L1k+Sp4OBdwZGp/ajNVbifrkcg= Subject key identifier: E0:72:56:1B:3C:68:9E:27:20:AF:0D:49:8C:33:C7:04:77:24:0F:6F Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584DCDC5A986407C9F87963408C4 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/cec05261-0f78-3265-830a-98a87b1c4a62.roa Signing time: Tue 12 May 2026 01:00:24 +0000 ROA not before: Tue 12 May 2026 01:00:24 +0000 ROA not after: Mon 10 Aug 2026 01:00:24 +0000 asID: 27602 IP address blocks: 204.48.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cd:c5:a9:86:40:7c:9f:87:96:34:08:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: May 12 01:00:24 2026 GMT Not After : Aug 10 01:00:24 2026 GMT Subject: CN=09af4b3e-b21f-4ba5-8a65-3b4b703c78ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:7a:eb:57:da:00:34:da:8c:bb:0f:41:47:57: 3f:71:d2:3e:cc:41:3a:be:fb:24:12:0f:70:5c:84: 15:d1:e2:cd:ce:2f:23:c6:5e:8e:f7:5d:30:e5:df: a6:db:78:41:8e:75:14:7c:5d:55:cb:93:de:a3:a2: 33:28:57:74:b5:22:54:e4:ab:c5:e0:4c:0d:82:d2: d3:7b:1f:a8:fc:cb:83:da:07:12:a7:e9:39:77:01: bc:6e:58:b8:72:11:59:5c:42:11:a8:78:17:da:a3: 38:35:e1:32:b5:8c:35:28:06:0d:f5:92:73:f7:11: 34:b5:31:d8:d7:78:ba:80:35:fc:4e:10:34:2b:af: 1d:ca:29:9d:8e:ab:0b:f9:70:c7:5a:51:c0:3c:8d: 22:88:04:0f:6d:46:f7:1e:b6:d4:16:cc:b7:00:6c: bf:00:72:33:16:32:65:0a:e2:80:c3:8d:56:4f:43: fb:73:0b:8c:b8:2d:d0:4c:52:28:a5:40:eb:d2:41: d1:78:78:ed:dd:ea:5d:15:2e:2e:d8:62:f5:f5:49: a6:b8:6f:68:5d:ed:cb:24:c2:de:4d:31:c3:4e:1e: 69:83:c9:85:3e:11:28:41:9a:12:0b:7b:84:9f:03: 1f:35:06:02:6c:13:d1:fb:d9:70:ce:5f:9c:2c:5e: fe:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:72:56:1B:3C:68:9E:27:20:AF:0D:49:8C:33:C7:04:77:24:0F:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/cec05261-0f78-3265-830a-98a87b1c4a62.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 204.48.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:a6:12:64:5a:03:1a:15:75:80:fe:d6:fa:dc:5a:a7:e0:8a: 32:f6:31:10:7a:c2:a5:ee:a3:90:6c:1c:46:9b:fd:c1:63:b0: 03:c1:77:91:10:39:1f:8d:98:ec:14:bd:52:05:0f:a5:0a:d5: 5f:07:3d:49:74:a2:d5:2b:31:34:99:d7:7c:45:49:39:95:26: 10:d4:42:04:34:3d:80:4c:c3:60:4c:fc:dd:c7:01:67:d0:34: 8e:df:15:b9:80:ba:41:dd:25:d9:a4:ab:c0:ee:24:2e:52:1b: 49:be:b3:54:93:c6:48:09:c6:85:0b:37:83:8b:df:85:5b:48: 7a:ba:0b:8f:28:82:1e:1d:94:61:5d:49:a3:9b:eb:b8:2a:40: db:e0:81:d3:2d:a8:29:02:b6:e7:02:8c:03:2a:2c:fc:11:10: 65:4f:62:2b:c4:81:a8:54:55:e2:60:95:be:2a:d1:e3:a8:31: c2:20:b2:5a:d0:db:4f:06:db:10:20:37:69:31:f1:2e:e7:e4: 71:e5:9b:5c:21:6a:b2:3b:15:df:14:34:80:c6:7c:25:28:b3: d8:6d:cc:1c:b7:75:5c:13:c6:5c:df:6e:d8:34:cf:c7:22:2c: 4d:32:05:6d:29:44:7b:46:39:3e:60:11:b4:2e:83:72:82:63: f3:8c:61:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3NxamGQHyfh5Y0CMQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI2MDUxMjAxMDAyNFoXDTI2MDgxMDAxMDAyNFowLzEtMCsGA1UEAxMk MDlhZjRiM2UtYjIxZi00YmE1LThhNjUtM2I0YjcwM2M3OGVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0XrrV9oANNqMuw9BR1c/cdI+zEE6vvskEg9w XIQV0eLNzi8jxl6O910w5d+m23hBjnUUfF1Vy5Peo6IzKFd0tSJU5KvF4EwNgtLT ex+o/MuD2gcSp+k5dwG8bli4chFZXEIRqHgX2qM4NeEytYw1KAYN9ZJz9xE0tTHY 13i6gDX8ThA0K68dyimdjqsL+XDHWlHAPI0iiAQPbUb3HrbUFsy3AGy/AHIzFjJl CuKAw41WT0P7cwuMuC3QTFIopUDr0kHReHjt3epdFS4u2GL19UmmuG9oXe3LJMLe TTHDTh5pg8mFPhEoQZoSC3uEnwMfNQYCbBPR+9lwzl+cLF7+aQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOByVhs8aJ4nIK8NSYwzxwR3JA9vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvY2VjMDUyNjEtMGY3OC0z MjY1LTgzMGEtOThhODdiMWM0YTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzDAjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE+mEmRaAxoVdYD+1vrcWqfgijL2MRB6wqXuo5BsHEab/cFjsAPBd5EQ OR+NmOwUvVIFD6UK1V8HPUl0otUrMTSZ13xFSTmVJhDUQgQ0PYBMw2BM/N3HAWfQ NI7fFbmAukHdJdmkq8DuJC5SG0m+s1STxkgJxoULN4OL34VbSHq6C48ogh4dlGFd SaOb67gqQNvggdMtqCkCtucCjAMqLPwREGVPYivEgahUVeJglb4q0eOoMcIgslrQ 208G2xAgN2kx8S7n5HHlm1wharI7Fd8UNIDGfCUos9htzBy3dVwTxlzfbtg0z8ci LE0yBW0pRHtGOT5gEbQug3KCY/OMYUM= -----END CERTIFICATE-----Generated at Wed May 13 11:17:30 2026 by rpki-client