$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a/ce0befbe-67ad-31e1-a53f-d68c86dda911.roa File: ce0befbe-67ad-31e1-a53f-d68c86dda911.roa (raw, json) Hash identifier: owvSS0MC6/R42V5HwAaMSEa066Ze0jH+fyGNAriMw1U= Subject key identifier: 04:38:BE:74:93:3A:8A:45:75:48:29:0B:4B:D9:8E:37:F7:83:D9:DD Certificate issuer: /CN=e8abcb36-7d75-4654-a098-d032ddf03d8a Certificate serial: 010D0C9F4328584D09125E105296021E6DD23880 Authority key identifier: E5:22:9B:0E:EE:F4:E6:A8:68:D5:13:06:B2:99:9D:E3:8D:58:1C:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a/ce0befbe-67ad-31e1-a53f-d68c86dda911.roa Signing time: Mon 02 Mar 2026 14:00:41 +0000 ROA not before: Mon 02 Mar 2026 14:00:41 +0000 ROA not after: Sun 31 May 2026 13:00:41 +0000 asID: 14618 IP address blocks: 174.34.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a/e8abcb36-7d75-4654-a098-d032ddf03d8a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a/e8abcb36-7d75-4654-a098-d032ddf03d8a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:12:5e:10:52:96:02:1e:6d:d2:38:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8abcb36-7d75-4654-a098-d032ddf03d8a Validity Not Before: Mar 2 14:00:41 2026 GMT Not After : May 31 13:00:41 2026 GMT Subject: CN=035c3b56-f419-4a01-b377-e26907e97402 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:db:86:e8:1e:5c:ad:ae:94:4a:1e:ac:23:3d: 5b:07:ae:59:21:87:0e:77:72:71:d8:c9:77:28:9c: 81:49:70:25:fd:41:1b:dc:71:43:f1:5d:52:44:9c: 84:43:0a:ae:aa:51:8a:a6:6d:72:c4:72:09:58:0d: ce:21:1f:28:94:cb:7a:63:bc:3a:e5:9e:ce:d9:5a: 55:62:2f:1f:93:24:c5:fd:b6:e5:8e:83:89:8e:58: 0b:37:dd:de:30:82:e5:53:b8:14:8a:f2:20:78:f9: a1:74:ef:98:15:ca:66:86:ef:ed:e9:28:07:37:cc: 3c:b4:60:08:33:25:5c:88:8a:7d:b1:54:0d:b0:8b: 7a:59:35:3c:68:bc:2c:cc:9f:c4:ee:86:cc:9d:f5: 78:cd:b8:ac:af:dc:0b:88:99:0f:52:93:d7:65:34: ba:64:05:c2:cb:8a:7c:62:e7:26:3d:3a:39:de:1c: d9:b6:55:73:f0:64:9c:26:73:af:2d:17:2d:23:fe: 8b:83:f5:e0:9b:3a:ca:07:12:ed:bd:0a:1d:e7:79: 45:9b:1b:ad:cc:df:c9:9b:ff:e7:ee:37:f9:d8:21: 20:f6:b3:a5:62:ca:f6:89:f6:c9:b7:8a:6c:25:03: 86:b7:bf:53:62:29:42:ca:d8:af:d5:35:27:f8:9b: 7d:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:38:BE:74:93:3A:8A:45:75:48:29:0B:4B:D9:8E:37:F7:83:D9:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a/ce0befbe-67ad-31e1-a53f-d68c86dda911.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a/e8abcb36-7d75-4654-a098-d032ddf03d8a.crl X509v3 Authority Key Identifier: keyid:E5:22:9B:0E:EE:F4:E6:A8:68:D5:13:06:B2:99:9D:E3:8D:58:1C:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a.cer sbgp-ipAddrBlock: critical IPv4: 174.34.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:1f:30:0e:1d:87:17:df:4e:de:b1:37:8f:26:cf:26:a9:0c: 3a:43:49:91:93:eb:31:e4:da:d0:ca:66:3d:80:7c:e6:58:50: 21:54:22:ab:68:ef:b5:c6:85:8f:f9:7a:89:9a:76:c9:16:f5: 79:03:e3:97:52:c3:c9:b9:3b:e4:ee:b7:5d:ff:4c:14:44:ff: 5e:71:9c:f0:74:c9:ac:31:14:c8:82:bf:83:7a:4f:75:68:7c: 31:fc:02:8d:84:83:75:3f:d2:7b:28:f3:ca:49:6e:75:fd:6d: 4c:65:66:67:b7:ad:a7:52:73:c5:fa:98:39:26:34:6f:1a:64: b0:15:76:d9:1d:9a:b8:d2:b1:2a:74:bb:bc:a8:65:2e:3b:07: 73:d0:b6:08:d1:70:41:a5:20:94:c4:0b:b7:c4:9c:c2:d5:e7: 88:d8:96:c7:cf:f6:72:5e:bc:10:76:af:c1:d2:b2:92:b4:a0: 41:62:bc:9a:92:a5:01:07:fb:84:b3:17:1d:79:27:0d:fb:3d: 2c:61:29:33:da:61:ce:98:ad:01:60:02:22:4a:72:43:6c:54: 86:16:bd:26:0f:62:37:75:6a:13:37:3f:4d:42:cc:10:d0:bf: 87:3d:08:90:e6:35:5e:3f:69:a2:5a:80:6c:f4:9e:59:da:04: a1:48:ba:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0JEl4QUpYCHm3SOIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZThhYmNiMzYtN2Q3NS00NjU0LWEwOTgtZDAzMmRkZjAz ZDhhMB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk MDM1YzNiNTYtZjQxOS00YTAxLWIzNzctZTI2OTA3ZTk3NDAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhtuG6B5cra6USh6sIz1bB65ZIYcOd3Jx2Ml3 KJyBSXAl/UEb3HFD8V1SRJyEQwquqlGKpm1yxHIJWA3OIR8olMt6Y7w65Z7O2VpV Yi8fkyTF/bbljoOJjlgLN93eMILlU7gUivIgePmhdO+YFcpmhu/t6SgHN8w8tGAI MyVciIp9sVQNsIt6WTU8aLwszJ/E7obMnfV4zbisr9wLiJkPUpPXZTS6ZAXCy4p8 YucmPTo53hzZtlVz8GScJnOvLRctI/6Lg/XgmzrKBxLtvQod53lFmxutzN/Jm//n 7jf52CEg9rOlYsr2ifbJt4psJQOGt79TYilCytiv1TUn+Jt9FQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAQ4vnSTOopFdUgpC0vZjjf3g9ndMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lOGFi Y2IzNi03ZDc1LTQ2NTQtYTA5OC1kMDMyZGRmMDNkOGEvY2UwYmVmYmUtNjdhZC0z MWUxLWE1M2YtZDY4Yzg2ZGRhOTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZThhYmNiMzYtN2Q3NS00NjU0LWEw OTgtZDAzMmRkZjAzZDhhL2U4YWJjYjM2LTdkNzUtNDY1NC1hMDk4LWQwMzJkZGYw M2Q4YS5jcmwwHwYDVR0jBBgwFoAU5SKbDu705qho1RMGspmd441YHB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9lOGFiY2IzNi03ZDc1LTQ2NTQtYTA5OC1kMDMy ZGRmMDNkOGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAriLhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHQfMA4dhxffTt6xN48mzyapDDpDSZGT6zHk2tDKZj2AfOZYUCFUIqto 77XGhY/5eomadskW9XkD45dSw8m5O+Tut13/TBRE/15xnPB0yawxFMiCv4N6T3Vo fDH8Ao2Eg3U/0nso88pJbnX9bUxlZme3radSc8X6mDkmNG8aZLAVdtkdmrjSsSp0 u7yoZS47B3PQtgjRcEGlIJTEC7fEnMLV54jYlsfP9nJevBB2r8HSspK0oEFivJqS pQEH+4SzFx15Jw37PSxhKTPaYc6YrQFgAiJKckNsVIYWvSYPYjd1ahM3P01CzBDQ v4c9CJDmNV4/aaJagGz0nlnaBKFIuro= -----END CERTIFICATE-----Generated at Thu Mar 26 03:44:33 2026 by rpki-client