$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/94cfb244-34f1-4c74-919b-4784f0348dd1/d7cb13e3-9945-36a7-8374-0c032d033932.roa File: d7cb13e3-9945-36a7-8374-0c032d033932.roa (raw, json) Hash identifier: 9gtf+dnS4Un5/6qr0jNNEjfVlTTxyVSCKUpcM2tS9dc= Subject key identifier: E6:D0:ED:98:4C:32:5B:B8:77:F7:B0:36:CF:4D:FB:6B:7A:8B:98:EF Certificate issuer: /CN=94cfb244-34f1-4c74-919b-4784f0348dd1 Certificate serial: 010D0C9F4328584D186CFBF4F9870DE96255EA00 Authority key identifier: BA:81:2A:A8:CA:E1:A0:4F:3D:80:1A:27:F3:CB:05:6A:4F:23:4A:D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/94cfb244-34f1-4c74-919b-4784f0348dd1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/94cfb244-34f1-4c74-919b-4784f0348dd1/d7cb13e3-9945-36a7-8374-0c032d033932.roa Signing time: Sun 08 Mar 2026 02:00:31 +0000 ROA not before: Sun 08 Mar 2026 02:00:31 +0000 ROA not after: Sat 06 Jun 2026 01:00:31 +0000 asID: 401908 IP address blocks: 70.35.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/94cfb244-34f1-4c74-919b-4784f0348dd1/94cfb244-34f1-4c74-919b-4784f0348dd1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/94cfb244-34f1-4c74-919b-4784f0348dd1/94cfb244-34f1-4c74-919b-4784f0348dd1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/94cfb244-34f1-4c74-919b-4784f0348dd1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:18:6c:fb:f4:f9:87:0d:e9:62:55:ea:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94cfb244-34f1-4c74-919b-4784f0348dd1 Validity Not Before: Mar 8 02:00:31 2026 GMT Not After : Jun 6 01:00:31 2026 GMT Subject: CN=0b3eeebf-ce61-4169-904a-d8600903830f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:7d:20:e4:fb:ac:c1:52:73:24:fc:cd:3d:1d: 08:ad:a4:11:17:09:23:b4:c5:1b:d2:32:bd:26:05: 97:c4:49:31:39:a1:dc:9a:37:a1:b2:da:da:c2:f7: 5d:80:85:f4:23:90:0c:45:26:b1:f7:37:52:08:4f: 7d:c6:1a:f7:04:97:12:9a:aa:84:ea:51:06:f7:d8: c3:a1:4c:70:2e:7d:96:82:09:91:af:75:ad:76:e0: d4:77:e8:18:39:bf:43:30:02:5a:2f:ac:a9:01:b1: 46:f0:05:ad:d6:06:7e:5b:21:08:50:2c:90:2b:de: e3:a8:65:ad:e0:b2:de:32:a4:07:01:c7:9e:f3:4d: f7:61:f1:a8:f4:45:30:09:fb:b8:1e:fd:42:f4:24: 0e:1c:c8:f5:f9:20:37:48:de:ef:ce:16:b6:a1:ab: ab:c4:4b:87:26:d3:90:f9:b5:7e:b9:30:f2:ae:0e: d1:34:1f:5a:2b:e4:cc:2e:93:14:16:9e:c5:4f:7f: 34:71:58:6a:dd:c0:20:1e:d5:9f:38:44:9d:4b:53: 44:d1:30:56:8f:79:40:97:84:0c:f0:0f:b0:f8:00: 63:82:55:4c:90:7a:5b:c7:5b:cf:15:6d:d3:a8:03: c4:ad:20:3a:d1:af:f5:c3:68:34:32:96:9f:b1:13: 3f:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:D0:ED:98:4C:32:5B:B8:77:F7:B0:36:CF:4D:FB:6B:7A:8B:98:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/94cfb244-34f1-4c74-919b-4784f0348dd1/d7cb13e3-9945-36a7-8374-0c032d033932.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/94cfb244-34f1-4c74-919b-4784f0348dd1/94cfb244-34f1-4c74-919b-4784f0348dd1.crl X509v3 Authority Key Identifier: keyid:BA:81:2A:A8:CA:E1:A0:4F:3D:80:1A:27:F3:CB:05:6A:4F:23:4A:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/94cfb244-34f1-4c74-919b-4784f0348dd1.cer sbgp-ipAddrBlock: critical IPv4: 70.35.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:ad:86:2a:d9:29:0a:71:30:a0:4c:87:6e:1d:b5:76:72:2f: c7:04:ba:9e:77:d0:e6:4d:26:8b:cd:38:19:4d:06:04:a7:86: ce:9e:71:ac:08:57:0d:0a:61:c8:fb:87:46:fe:a8:7d:67:79: a0:64:c3:47:2c:d0:97:17:81:08:24:a4:4b:a2:89:f7:d7:c1: 0a:a8:7b:a0:ad:ce:0e:3c:08:17:fa:6c:8c:f9:da:41:07:05: 6f:97:7e:32:01:0f:00:d1:33:97:45:93:d6:e3:d6:c5:9f:75: d8:da:d4:4a:35:78:fc:3e:fe:b3:3d:99:e0:88:ef:d5:58:d8: 8e:c0:db:2b:96:66:e0:96:a7:f6:f0:d4:6f:fc:fa:35:3f:a3: f8:5a:11:45:3e:82:0e:c3:65:1d:97:45:be:c1:75:32:25:b3: 7d:8f:7c:1c:83:fc:78:c0:9b:ff:6e:11:19:7e:de:d7:d1:27: 38:3d:d6:94:e1:c0:a5:d9:77:49:cd:e7:31:d1:3c:c8:ee:bd: c8:57:66:fc:1f:07:8d:b8:0f:4e:69:df:20:90:9d:ef:ff:82: 6b:65:19:9c:ca:4e:11:3c:62:22:53:a9:16:ad:26:cd:56:6c: 42:ca:e7:23:40:5f:fc:30:ef:99:09:6f:cc:ec:0c:cd:82:bb: c2:2c:2c:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0YbPv0+YcN6WJV6gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTRjZmIyNDQtMzRmMS00Yzc0LTkxOWItNDc4NGYwMzQ4 ZGQxMB4XDTI2MDMwODAyMDAzMVoXDTI2MDYwNjAxMDAzMVowLzEtMCsGA1UEAxMk MGIzZWVlYmYtY2U2MS00MTY5LTkwNGEtZDg2MDA5MDM4MzBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkX0g5PuswVJzJPzNPR0IraQRFwkjtMUb0jK9 JgWXxEkxOaHcmjehstrawvddgIX0I5AMRSax9zdSCE99xhr3BJcSmqqE6lEG99jD oUxwLn2WggmRr3WtduDUd+gYOb9DMAJaL6ypAbFG8AWt1gZ+WyEIUCyQK97jqGWt 4LLeMqQHAcee8033YfGo9EUwCfu4Hv1C9CQOHMj1+SA3SN7vzha2oaurxEuHJtOQ +bV+uTDyrg7RNB9aK+TMLpMUFp7FT380cVhq3cAgHtWfOESdS1NE0TBWj3lAl4QM 8A+w+ABjglVMkHpbx1vPFW3TqAPErSA60a/1w2g0MpafsRM/TwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFObQ7ZhMMlu4d/ewNs9N+2t6i5jvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi85NGNm YjI0NC0zNGYxLTRjNzQtOTE5Yi00Nzg0ZjAzNDhkZDEvZDdjYjEzZTMtOTk0NS0z NmE3LTgzNzQtMGMwMzJkMDMzOTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvOTRjZmIyNDQtMzRmMS00Yzc0LTkx OWItNDc4NGYwMzQ4ZGQxLzk0Y2ZiMjQ0LTM0ZjEtNGM3NC05MTliLTQ3ODRmMDM0 OGRkMS5jcmwwHwYDVR0jBBgwFoAUuoEqqMrhoE89gBon88sFak8jStAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi85NGNmYjI0NC0zNGYxLTRjNzQtOTE5Yi00Nzg0 ZjAzNDhkZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiOdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA2thirZKQpxMKBMh24dtXZyL8cEup530OZNJovNOBlNBgSnhs6ecawI Vw0KYcj7h0b+qH1neaBkw0cs0JcXgQgkpEuiiffXwQqoe6Ctzg48CBf6bIz52kEH BW+XfjIBDwDRM5dFk9bj1sWfddja1Eo1ePw+/rM9meCI79VY2I7A2yuWZuCWp/bw 1G/8+jU/o/haEUU+gg7DZR2XRb7BdTIls32PfByD/HjAm/9uERl+3tfRJzg91pTh wKXZd0nN5zHRPMjuvchXZvwfB424D05p3yCQne//gmtlGZzKThE8YiJTqRatJs1W bELK5yNAX/ww75kJb8zsDM2Cu8IsLIk= -----END CERTIFICATE-----Generated at Thu Mar 26 10:51:57 2026 by rpki-client