$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/861f2b30-3a64-3c67-8ab1-5ffc8a617d35.roa File: 861f2b30-3a64-3c67-8ab1-5ffc8a617d35.roa (raw, json) Hash identifier: XF7WCT7IHxXzRp/UyZiyjU0LKFm1lH5fi8VLgMeEc8U= Subject key identifier: D6:76:B6:8B:7F:58:BC:BC:1F:AF:EE:12:E0:7A:6D:E7:1A:8A:7B:69 Certificate issuer: /CN=35ccbd7e-0844-48b1-88d7-0a8ef46e8168 Certificate serial: 010D0C9F4328584DBD05A1D6B5D1E1A6F29B7700 Authority key identifier: 31:67:54:B4:BF:16:7E:AD:F1:F4:10:C1:D9:D2:FA:DA:AA:85:3C:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/861f2b30-3a64-3c67-8ab1-5ffc8a617d35.roa Signing time: Wed 06 May 2026 01:00:24 +0000 ROA not before: Wed 06 May 2026 01:00:24 +0000 ROA not after: Tue 04 Aug 2026 01:00:24 +0000 asID: 14511 IP address blocks: 216.196.72.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:bd:05:a1:d6:b5:d1:e1:a6:f2:9b:77:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35ccbd7e-0844-48b1-88d7-0a8ef46e8168 Validity Not Before: May 6 01:00:24 2026 GMT Not After : Aug 4 01:00:24 2026 GMT Subject: CN=3da68849-f54d-453e-9b66-4ab6e63ec8c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d2:ef:a6:51:f7:a4:4e:cc:c6:5b:d2:ee:90: b1:61:a6:94:81:c9:d1:62:99:89:de:90:99:b9:8b: 07:37:69:4b:41:ca:75:44:fe:94:ed:c5:2a:c8:f4: 44:f6:48:95:92:ec:a4:6d:ec:29:ae:d2:eb:df:dd: a2:ac:4a:a8:f0:2a:59:83:e0:48:f0:e3:b3:29:f1: 51:a8:b8:c1:2c:2a:6a:c4:87:1f:43:a0:9f:e0:f3: db:f6:92:0b:94:b4:f8:19:05:c8:db:48:45:f4:e1: 1f:fb:33:86:c3:18:86:95:7d:5a:98:63:d3:af:c1: 3b:af:ab:84:2d:82:21:8c:58:d1:1b:3a:b9:82:e0: a4:2d:66:d0:93:13:92:33:07:e8:f0:a7:b3:49:95: dc:87:ef:ae:45:25:1d:ed:8e:dd:a6:a7:6f:1b:47: f5:74:cb:15:09:19:78:34:b2:04:f1:20:a9:6c:86: 16:b2:49:70:38:f3:98:07:a7:d3:f5:1a:ee:e0:0e: fe:de:0a:77:35:f0:14:5a:00:71:17:de:4a:a7:d7: 98:aa:b7:5f:e1:95:c1:ce:e7:91:98:c6:cd:1c:3c: 4e:6f:28:23:78:15:58:7a:47:35:cf:b4:e4:39:d0: 88:1d:5d:4e:a0:1b:6c:bd:46:bc:c9:57:9c:72:f2: f2:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:76:B6:8B:7F:58:BC:BC:1F:AF:EE:12:E0:7A:6D:E7:1A:8A:7B:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/861f2b30-3a64-3c67-8ab1-5ffc8a617d35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.crl X509v3 Authority Key Identifier: keyid:31:67:54:B4:BF:16:7E:AD:F1:F4:10:C1:D9:D2:FA:DA:AA:85:3C:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.cer sbgp-ipAddrBlock: critical IPv4: 216.196.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:65:1c:04:ec:ac:d2:30:78:37:87:8f:de:be:c6:f2:52:26: 68:a0:96:92:b1:80:87:25:62:a5:fe:22:b6:76:e1:c3:d5:98: 7c:9c:40:5b:76:c3:e7:18:6f:c4:f0:94:fb:39:78:4a:8a:ee: 32:8c:a6:fe:e8:8d:a7:ed:03:84:e3:e0:6b:c8:c5:cd:eb:74: 84:e1:81:c6:51:6d:0b:ed:cd:08:76:4b:03:4c:0b:82:92:e5: b1:29:0e:0f:bf:ef:a3:66:85:35:a5:ba:ad:01:36:80:49:4e: 52:3a:80:3b:52:93:32:56:57:15:bb:94:71:48:24:2d:54:8d: 7c:ec:ec:66:bd:70:b9:b4:75:a9:ff:55:e8:de:27:f9:fa:00: 66:44:33:e3:72:80:52:61:da:bf:95:fa:f4:a1:c2:2a:8a:42: ce:c9:ae:85:e2:47:e7:07:15:91:18:72:e3:98:2a:25:65:fd: eb:2b:86:1b:1d:e9:91:fb:3d:60:df:a0:7b:73:53:64:c8:3c: 7c:23:b4:1f:d1:95:ac:85:17:ec:f4:0d:56:15:99:10:c1:07: 41:a7:30:28:a1:41:5b:33:83:3f:9d:a9:4e:ba:bc:62:e2:a5: 64:29:22:75:c5:78:93:62:e9:86:bc:09:cc:88:ca:bd:91:81: a3:4b:47:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE29BaHWtdHhpvKbdwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVjY2JkN2UtMDg0NC00OGIxLTg4ZDctMGE4ZWY0NmU4 MTY4MB4XDTI2MDUwNjAxMDAyNFoXDTI2MDgwNDAxMDAyNFowLzEtMCsGA1UEAxMk M2RhNjg4NDktZjU0ZC00NTNlLTliNjYtNGFiNmU2M2VjOGM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdLvplH3pE7MxlvS7pCxYaaUgcnRYpmJ3pCZ uYsHN2lLQcp1RP6U7cUqyPRE9kiVkuykbewprtLr392irEqo8CpZg+BI8OOzKfFR qLjBLCpqxIcfQ6Cf4PPb9pILlLT4GQXI20hF9OEf+zOGwxiGlX1amGPTr8E7r6uE LYIhjFjRGzq5guCkLWbQkxOSMwfo8KezSZXch++uRSUd7Y7dpqdvG0f1dMsVCRl4 NLIE8SCpbIYWsklwOPOYB6fT9Rru4A7+3gp3NfAUWgBxF95Kp9eYqrdf4ZXBzueR mMbNHDxObygjeBVYekc1z7TkOdCIHV1OoBtsvUa8yVeccvLyhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNZ2tot/WLy8H6/uEuB6becaintpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zNWNj YmQ3ZS0wODQ0LTQ4YjEtODhkNy0wYThlZjQ2ZTgxNjgvODYxZjJiMzAtM2E2NC0z YzY3LThhYjEtNWZmYzhhNjE3ZDM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMzVjY2JkN2UtMDg0NC00OGIxLTg4 ZDctMGE4ZWY0NmU4MTY4LzM1Y2NiZDdlLTA4NDQtNDhiMS04OGQ3LTBhOGVmNDZl ODE2OC5jcmwwHwYDVR0jBBgwFoAUMWdUtL8Wfq3x9BDB2dL62qqFPBcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zNWNjYmQ3ZS0wODQ0LTQ4YjEtODhkNy0wYThl ZjQ2ZTgxNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD2MRIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACVlHATsrNIweDeHj96+xvJSJmiglpKxgIclYqX+IrZ24cPVmHycQFt2 w+cYb8TwlPs5eEqK7jKMpv7ojaftA4Tj4GvIxc3rdIThgcZRbQvtzQh2SwNMC4KS 5bEpDg+/76NmhTWluq0BNoBJTlI6gDtSkzJWVxW7lHFIJC1UjXzs7Ga9cLm0dan/ VejeJ/n6AGZEM+NygFJh2r+V+vShwiqKQs7JroXiR+cHFZEYcuOYKiVl/esrhhsd 6ZH7PWDfoHtzU2TIPHwjtB/RlayFF+z0DVYVmRDBB0GnMCihQVszgz+dqU66vGLi pWQpInXFeJNi6Ya8CcyIyr2RgaNLRwE= -----END CERTIFICATE-----Generated at Wed May 13 14:22:24 2026 by rpki-client