$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/c1a8ba33-157b-3dce-ab53-ae84d26a21b5.roa File: c1a8ba33-157b-3dce-ab53-ae84d26a21b5.roa (raw, json) Hash identifier: fVu8CAe8D8GWZZg9qk4A8d2bYTH8AkkK3QgCd7epjVQ= Subject key identifier: 2B:B7:DB:7C:7C:2D:C2:30:24:3C:1C:0A:A1:F3:64:0A:3F:03:B5:94 Certificate issuer: /CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8 Certificate serial: 010D0C9F4328584D40CA59FCBD937D396CFD4F00 Authority key identifier: 05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/c1a8ba33-157b-3dce-ab53-ae84d26a21b5.roa Signing time: Sun 22 Mar 2026 13:00:41 +0000 ROA not before: Sun 22 Mar 2026 13:00:41 +0000 ROA not after: Sat 20 Jun 2026 13:00:41 +0000 asID: 2914 IP address blocks: 174.35.64.0/24 maxlen: 24 174.35.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:40:ca:59:fc:bd:93:7d:39:6c:fd:4f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8 Validity Not Before: Mar 22 13:00:41 2026 GMT Not After : Jun 20 13:00:41 2026 GMT Subject: CN=e4d4bea0-01b7-45bf-80c4-9567bffe06f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:23:c6:98:7f:74:0c:1a:e4:7d:65:61:f1:b1: 9e:55:b6:d0:93:68:20:1a:32:37:e9:9e:e6:ee:5e: 17:d0:fc:ed:99:a8:a2:57:53:ad:55:b4:14:4e:15: 27:2a:2b:be:c5:48:b6:cf:ea:1e:89:af:97:ff:62: 0c:f5:be:5e:b2:da:1e:2e:d4:9a:f7:c8:8a:d5:7f: d9:f3:6e:cf:d7:d7:96:d8:32:ab:ad:08:d6:7b:e0: 03:5c:55:42:24:a5:5b:4b:35:07:0a:00:51:7f:fb: d0:85:2f:7a:e6:18:e6:72:d1:7d:83:3f:f3:1a:3f: 1d:af:d0:5a:1a:3d:e8:a5:e8:92:9d:8a:b9:77:91: 71:10:fa:9f:03:2b:26:3c:bd:ea:8a:6b:e9:e9:a8: 83:03:c1:32:1b:da:7c:75:e8:dd:1c:75:35:3b:47: 23:2a:51:c8:cd:2c:ab:59:e4:2c:c5:a4:39:b5:5e: bd:68:89:44:6c:ec:5c:bc:3c:55:c6:64:cb:cc:38: 3d:7c:59:59:3e:72:e1:f3:e8:2c:8a:2d:0f:a6:86: 78:86:e5:c8:9a:2c:32:fd:d3:8c:f1:06:45:89:55: 2f:69:68:8c:09:7a:88:e0:e8:f0:0e:84:35:1f:2f: f0:53:d6:ee:5f:30:96:27:a0:8e:46:53:8c:30:3a: 43:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:B7:DB:7C:7C:2D:C2:30:24:3C:1C:0A:A1:F3:64:0A:3F:03:B5:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/c1a8ba33-157b-3dce-ab53-ae84d26a21b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl X509v3 Authority Key Identifier: keyid:05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer sbgp-ipAddrBlock: critical IPv4: 174.35.64.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:e3:3a:ff:a6:66:d8:81:8c:f1:8e:2f:92:6a:86:54:c6:0a: 46:fd:85:01:5c:d6:e6:82:70:4b:47:76:55:3d:3b:cc:f0:da: 76:02:21:85:66:23:87:94:11:00:23:48:55:6a:c2:df:17:97: 1f:c9:69:9f:1d:d7:da:ac:16:61:d2:75:2a:0e:e2:f9:5d:5f: 68:f8:df:f4:c8:30:2f:f9:a0:67:ec:2c:2e:ef:d6:4b:21:e1: 6a:7e:6f:f6:67:07:50:7c:f3:2a:40:2a:35:c8:cf:c5:49:3a: 41:9c:23:66:de:8a:94:fc:8b:52:84:55:8c:b2:78:77:2c:ec: 61:43:e6:bc:b7:cf:f4:39:ad:35:32:8d:51:33:7b:42:06:d4: a4:84:fc:af:78:18:36:0c:66:e6:e5:12:41:e4:6d:0a:4b:67: 43:d8:31:f7:a7:41:e1:a9:0b:84:c5:ff:ac:d8:59:e8:9b:c6: 9f:f2:f8:37:fa:2d:17:18:b5:b0:b9:bc:80:42:e9:39:20:5a: 6c:4c:84:67:37:a2:88:9e:2c:80:85:95:a7:c5:42:f5:10:07: 0a:26:0c:e9:69:e5:26:87:a1:8c:91:33:73:9b:8a:f2:da:9f: d3:d1:39:26:40:56:63:64:ca:a1:53:7a:4b:95:43:4f:e8:59: 70:8e:a3:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Ayln8vZN9OWz9TwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGEyZGE3YjMtZDIwOC00MmM3LThiYmItYzA2M2EzOTQ3 MGE4MB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk ZTRkNGJlYTAtMDFiNy00NWJmLTgwYzQtOTU2N2JmZmUwNmY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3iPGmH90DBrkfWVh8bGeVbbQk2ggGjI36Z7m 7l4X0PztmaiiV1OtVbQUThUnKiu+xUi2z+oeia+X/2IM9b5estoeLtSa98iK1X/Z 827P19eW2DKrrQjWe+ADXFVCJKVbSzUHCgBRf/vQhS965hjmctF9gz/zGj8dr9Ba Gj3opeiSnYq5d5FxEPqfAysmPL3qimvp6aiDA8EyG9p8dejdHHU1O0cjKlHIzSyr WeQsxaQ5tV69aIlEbOxcvDxVxmTLzDg9fFlZPnLh8+gsii0PpoZ4huXImiwy/dOM 8QZFiVUvaWiMCXqI4OjwDoQ1Hy/wU9buXzCWJ6CORlOMMDpDzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCu323x8LcIwJDwcCqHzZAo/A7WUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84YTJk YTdiMy1kMjA4LTQyYzctOGJiYi1jMDYzYTM5NDcwYTgvYzFhOGJhMzMtMTU3Yi0z ZGNlLWFiNTMtYWU4NGQyNmEyMWI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOGEyZGE3YjMtZDIwOC00MmM3LThi YmItYzA2M2EzOTQ3MGE4LzhhMmRhN2IzLWQyMDgtNDJjNy04YmJiLWMwNjNhMzk0 NzBhOC5jcmwwHwYDVR0jBBgwFoAUBTUtzsWmL8l6PmdKARlp/0Mx6RYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84YTJkYTdiMy1kMjA4LTQyYzctOGJiYi1jMDYz YTM5NDcwYTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBriNAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD3jOv+mZtiBjPGOL5JqhlTGCkb9hQFc1uaCcEtHdlU9O8zw2nYCIYVm I4eUEQAjSFVqwt8Xlx/JaZ8d19qsFmHSdSoO4vldX2j43/TIMC/5oGfsLC7v1ksh 4Wp+b/ZnB1B88ypAKjXIz8VJOkGcI2beipT8i1KEVYyyeHcs7GFD5ry3z/Q5rTUy jVEze0IG1KSE/K94GDYMZublEkHkbQpLZ0PYMfenQeGpC4TF/6zYWeibxp/y+Df6 LRcYtbC5vIBC6TkgWmxMhGc3ooieLICFlafFQvUQBwomDOlp5SaHoYyRM3ObivLa n9PROSZAVmNkyqFTekuVQ0/oWXCOo/g= -----END CERTIFICATE-----Generated at Thu Mar 26 15:04:34 2026 by rpki-client