$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/3ba3a460-26d5-359a-b6a1-22dd8a952355.roa File: 3ba3a460-26d5-359a-b6a1-22dd8a952355.roa (raw, json) Hash identifier: dohXoQfhVTLcVSYolX24L5PVd5TbWo6wUed6ULRvR7E= Subject key identifier: 78:A6:D9:25:74:32:4D:32:C5:26:41:BF:E9:0F:0D:0D:C2:61:70:7F Certificate issuer: /CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8 Certificate serial: 010D0C9F4328584D237A0F10AFB8C72156FD6B80 Authority key identifier: 05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/3ba3a460-26d5-359a-b6a1-22dd8a952355.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 54994 IP address blocks: 174.35.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:0f:10:af:b8:c7:21:56:fd:6b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8 Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=54019444-f1d8-4fb1-be9b-5eb50a1cbaa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:39:9f:7a:64:a1:d6:0a:0b:41:7a:6a:2a:79: 3e:d2:ed:77:ec:6f:97:3c:e6:21:70:93:60:4f:a9: 41:0b:5d:68:f5:97:f9:39:96:bd:23:ab:3b:e8:23: a6:12:8d:c3:0d:bf:d2:d9:5a:71:1f:40:ed:8e:94: a6:27:ec:25:9c:36:83:88:af:63:cf:31:28:00:de: f2:a9:84:2a:b3:72:86:82:18:45:b3:82:bc:c9:1f: c7:3b:8e:8a:7a:d0:43:7c:a4:65:66:39:ff:37:dc: 91:7a:dc:c5:ba:c7:c8:23:05:a8:5c:ff:c6:d5:65: 78:23:25:17:55:b6:12:09:07:2e:64:9f:2b:da:15: e8:29:24:83:90:2f:92:83:68:5d:3d:d5:96:f1:b8: 17:01:a3:1e:71:50:36:4c:46:bb:0d:71:76:b1:21: 3a:78:a7:14:b3:50:7f:95:d8:b4:1e:6f:4e:72:9a: 04:19:05:1c:68:9e:19:3c:c1:57:08:28:a1:36:0b: 40:a0:f5:6c:9b:cc:66:fc:2c:0e:34:2c:95:38:45: 57:9a:d4:b0:6d:c4:08:e1:85:6e:ce:f7:af:d3:f8: ee:df:96:a7:58:3d:7f:e9:e9:d0:da:44:f0:79:c9: 8d:0d:88:4c:1c:dd:3f:9e:8e:80:6d:96:d7:17:2f: 35:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:A6:D9:25:74:32:4D:32:C5:26:41:BF:E9:0F:0D:0D:C2:61:70:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/3ba3a460-26d5-359a-b6a1-22dd8a952355.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl X509v3 Authority Key Identifier: keyid:05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer sbgp-ipAddrBlock: critical IPv4: 174.35.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:7a:4f:8e:91:1f:e4:d7:1d:66:3f:0b:52:83:2c:a9:9b:30: 46:b3:30:9d:f4:75:30:fa:47:5e:0e:8d:62:ab:27:ab:9a:2a: 7f:c0:f1:72:2e:0b:19:21:32:ad:c8:01:b8:cd:34:6a:85:74: 1a:f4:ac:52:39:85:c9:36:5c:92:f6:af:49:ff:36:0e:ff:1d: 45:bf:4d:a6:d4:5d:2a:26:fc:dd:0a:15:38:75:a9:82:ae:05: 06:2b:da:09:55:6f:4a:71:8d:0e:f4:da:0c:7f:b7:67:c1:2a: 13:29:5c:ea:89:58:88:52:47:a7:e3:eb:57:0c:5b:9d:79:2a: 13:32:69:52:fe:96:bc:52:9d:10:eb:f6:79:01:9c:68:f9:66: 48:8e:7f:ad:b4:8b:1e:77:ca:85:b7:67:b4:56:6e:95:e8:37: 8e:45:4e:8b:40:2d:ed:3c:72:c1:01:05:6a:39:bf:4d:42:f3: 03:be:27:92:41:de:d0:dc:c3:01:04:25:39:a4:9f:42:8b:a5: 4b:b4:1c:8e:59:2b:a7:6a:50:bc:11:85:4c:2c:22:33:ce:d7: a6:ca:9a:a9:45:68:d0:96:75:90:3f:dd:2f:1a:04:22:f2:e2: e6:b9:a1:7c:0f:6a:93:ce:27:70:9a:2b:e8:43:5b:99:47:6c: 84:dd:64:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jeg8Qr7jHIVb9a4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGEyZGE3YjMtZDIwOC00MmM3LThiYmItYzA2M2EzOTQ3 MGE4MB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk NTQwMTk0NDQtZjFkOC00ZmIxLWJlOWItNWViNTBhMWNiYWE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDmfemSh1goLQXpqKnk+0u137G+XPOYhcJNg T6lBC11o9Zf5OZa9I6s76COmEo3DDb/S2VpxH0DtjpSmJ+wlnDaDiK9jzzEoAN7y qYQqs3KGghhFs4K8yR/HO46KetBDfKRlZjn/N9yRetzFusfIIwWoXP/G1WV4IyUX VbYSCQcuZJ8r2hXoKSSDkC+Sg2hdPdWW8bgXAaMecVA2TEa7DXF2sSE6eKcUs1B/ ldi0Hm9OcpoEGQUcaJ4ZPMFXCCihNgtAoPVsm8xm/CwONCyVOEVXmtSwbcQI4YVu zvev0/ju35anWD1/6enQ2kTwecmNDYhMHN0/no6AbZbXFy81WQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHim2SV0Mk0yxSZBv+kPDQ3CYXB/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84YTJk YTdiMy1kMjA4LTQyYzctOGJiYi1jMDYzYTM5NDcwYTgvM2JhM2E0NjAtMjZkNS0z NTlhLWI2YTEtMjJkZDhhOTUyMzU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOGEyZGE3YjMtZDIwOC00MmM3LThi YmItYzA2M2EzOTQ3MGE4LzhhMmRhN2IzLWQyMDgtNDJjNy04YmJiLWMwNjNhMzk0 NzBhOC5jcmwwHwYDVR0jBBgwFoAUBTUtzsWmL8l6PmdKARlp/0Mx6RYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84YTJkYTdiMy1kMjA4LTQyYzctOGJiYi1jMDYz YTM5NDcwYTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAriNvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAl6T46RH+TXHWY/C1KDLKmbMEazMJ30dTD6R14OjWKrJ6uaKn/A8XIu CxkhMq3IAbjNNGqFdBr0rFI5hck2XJL2r0n/Ng7/HUW/TabUXSom/N0KFTh1qYKu BQYr2glVb0pxjQ702gx/t2fBKhMpXOqJWIhSR6fj61cMW515KhMyaVL+lrxSnRDr 9nkBnGj5ZkiOf620ix53yoW3Z7RWbpXoN45FTotALe08csEBBWo5v01C8wO+J5JB 3tDcwwEEJTmkn0KLpUu0HI5ZK6dqULwRhUwsIjPO16bKmqlFaNCWdZA/3S8aBCLy 4ua5oXwPapPOJ3CaK+hDW5lHbITdZEM= -----END CERTIFICATE-----Generated at Thu Mar 26 17:26:16 2026 by rpki-client