$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2d88838e-541a-4661-8501-3c7d2eb5849d/35dd38da-ef2c-3aa2-965d-09739043ca44.roa File: 35dd38da-ef2c-3aa2-965d-09739043ca44.roa (raw, json) Hash identifier: +Tk6lpV8VKdGmzDN6eC2hHzGVhSaz4jodDW0bPnzXDw= Subject key identifier: C7:53:3D:31:0E:DE:94:05:22:42:E3:F6:76:E4:EF:06:0E:FA:82:A8 Certificate issuer: /CN=2d88838e-541a-4661-8501-3c7d2eb5849d Certificate serial: 010D0C9F4328584D19B4F0D2170A9A614C52F260 Authority key identifier: 4E:9D:73:3B:F6:0F:5A:F6:9E:37:46:28:53:09:C4:7A:42:49:58:2E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2d88838e-541a-4661-8501-3c7d2eb5849d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2d88838e-541a-4661-8501-3c7d2eb5849d/35dd38da-ef2c-3aa2-965d-09739043ca44.roa Signing time: Sun 08 Mar 2026 13:00:40 +0000 ROA not before: Sun 08 Mar 2026 13:00:40 +0000 ROA not after: Sat 06 Jun 2026 13:00:40 +0000 asID: 395379 IP address blocks: 136.228.64.0/19 maxlen: 19 143.223.112.0/20 maxlen: 20 161.129.192.0/20 maxlen: 20 2604:e340::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2d88838e-541a-4661-8501-3c7d2eb5849d/2d88838e-541a-4661-8501-3c7d2eb5849d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2d88838e-541a-4661-8501-3c7d2eb5849d/2d88838e-541a-4661-8501-3c7d2eb5849d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2d88838e-541a-4661-8501-3c7d2eb5849d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 29 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:19:b4:f0:d2:17:0a:9a:61:4c:52:f2:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d88838e-541a-4661-8501-3c7d2eb5849d Validity Not Before: Mar 8 13:00:40 2026 GMT Not After : Jun 6 13:00:40 2026 GMT Subject: CN=d01cf7af-44ed-4207-bd74-ec04174b45ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:73:04:9c:df:b2:5f:27:45:00:e2:45:3e:e4: e8:3e:b0:85:23:f0:14:8a:80:06:60:47:6c:83:9c: 20:45:4a:b5:96:88:2b:32:48:f4:91:c1:75:75:3c: cb:d0:93:ed:57:60:bb:97:ff:92:58:b4:0e:04:2d: 30:08:30:22:5f:3d:c9:5c:76:41:9d:9e:a5:48:65: 43:03:f9:79:39:1e:a1:6a:a7:3d:41:96:b5:2d:bd: 09:e0:5f:9f:1a:c1:31:ff:1c:eb:c7:05:6f:1f:60: dd:b5:f6:15:cb:72:5e:86:99:d4:33:32:bc:cb:43: aa:b6:ed:ee:c7:f9:2b:ee:e0:de:93:93:c1:d3:4f: b5:1a:80:bc:79:e1:3b:68:6f:d3:dd:e0:9b:96:7c: ee:42:c8:06:8f:22:0a:fc:11:e8:3d:d6:5d:94:ae: 84:1a:f8:e6:6c:b4:cf:4e:eb:1f:7d:6a:82:b1:32: e7:7d:4b:e0:ea:bb:08:36:3f:8e:2b:20:af:5e:89: d7:95:c3:ad:b6:20:83:22:70:8e:ed:2c:87:78:88: 8b:7e:14:59:60:fb:c3:f4:6d:41:59:bd:c1:ca:c9: 93:7f:92:39:cc:fa:6c:75:45:30:b6:95:a7:ab:1f: 6a:cc:6e:f5:19:8f:18:8b:3b:ac:aa:22:6a:6c:70: 54:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:53:3D:31:0E:DE:94:05:22:42:E3:F6:76:E4:EF:06:0E:FA:82:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2d88838e-541a-4661-8501-3c7d2eb5849d/35dd38da-ef2c-3aa2-965d-09739043ca44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2d88838e-541a-4661-8501-3c7d2eb5849d/2d88838e-541a-4661-8501-3c7d2eb5849d.crl X509v3 Authority Key Identifier: keyid:4E:9D:73:3B:F6:0F:5A:F6:9E:37:46:28:53:09:C4:7A:42:49:58:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2d88838e-541a-4661-8501-3c7d2eb5849d.cer sbgp-ipAddrBlock: critical IPv4: 136.228.64.0/19 143.223.112.0/20 161.129.192.0/20 IPv6: 2604:e340::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:ab:9a:0e:09:4f:a9:fb:e4:62:d5:82:66:17:f7:cb:9e:06: 96:d9:a6:10:fa:39:5b:45:82:73:af:75:d7:d5:e6:65:28:e3: ed:dc:4c:b0:6b:76:7e:a1:8c:2a:1b:b5:1c:29:a8:6c:79:5b: 28:fe:21:26:b5:6d:1f:84:1e:47:65:15:03:c9:c3:83:0c:d5: 2f:dd:44:00:70:22:92:3f:f1:ee:60:03:3a:77:b5:0a:ed:18: 66:d3:f7:9e:04:11:4f:20:75:88:db:b4:1f:fa:f3:05:9b:de: f9:33:4b:43:28:ee:f9:f4:d4:15:6c:07:46:54:5c:ab:d1:a2: 1d:8b:87:22:6e:f4:ff:e7:2b:23:cb:83:a9:d0:cc:53:bf:40: 72:8e:6d:40:eb:c1:ee:ff:d4:ab:3f:e0:f6:3b:d4:8e:2e:25: 7a:22:0d:67:26:c6:a7:d8:f2:2d:2f:a9:32:6d:04:a4:f8:dc: 6c:84:ec:88:c7:83:d5:15:90:4e:84:44:8a:92:dc:97:6d:c2: 03:54:86:c3:01:b1:31:45:49:c7:4c:e8:33:00:61:78:10:12: 3c:48:63:ec:a4:1e:86:80:19:ac:51:26:38:79:c7:51:58:3e: 8d:b0:ce:42:8b:02:67:5b:d1:d3:f2:aa:ff:3e:3c:5c:c4:d2: 11:01:e1:43 -----BEGIN CERTIFICATE----- MIIGXjCCBUagAwIBAgIUAQ0Mn0MoWE0ZtPDSFwqaYUxS8mAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmQ4ODgzOGUtNTQxYS00NjYxLTg1MDEtM2M3ZDJlYjU4 NDlkMB4XDTI2MDMwODEzMDA0MFoXDTI2MDYwNjEzMDA0MFowLzEtMCsGA1UEAxMk ZDAxY2Y3YWYtNDRlZC00MjA3LWJkNzQtZWMwNDE3NGI0NWNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXMEnN+yXydFAOJFPuToPrCFI/AUioAGYEds g5wgRUq1logrMkj0kcF1dTzL0JPtV2C7l/+SWLQOBC0wCDAiXz3JXHZBnZ6lSGVD A/l5OR6haqc9QZa1Lb0J4F+fGsEx/xzrxwVvH2DdtfYVy3JehpnUMzK8y0Oqtu3u x/kr7uDek5PB00+1GoC8eeE7aG/T3eCblnzuQsgGjyIK/BHoPdZdlK6EGvjmbLTP TusffWqCsTLnfUvg6rsINj+OKyCvXonXlcOttiCDInCO7SyHeIiLfhRZYPvD9G1B Wb3BysmTf5I5zPpsdUUwtpWnqx9qzG71GY8YizusqiJqbHBUJQIDAQABo4IDcDCC A2wwHQYDVR0OBBYEFMdTPTEO3pQFIkLj9nbk7wYO+oKoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yZDg4 ODM4ZS01NDFhLTQ2NjEtODUwMS0zYzdkMmViNTg0OWQvMzVkZDM4ZGEtZWYyYy0z YWEyLTk2NWQtMDk3MzkwNDNjYTQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMmQ4ODgzOGUtNTQxYS00NjYxLTg1 MDEtM2M3ZDJlYjU4NDlkLzJkODg4MzhlLTU0MWEtNDY2MS04NTAxLTNjN2QyZWI1 ODQ5ZC5jcmwwHwYDVR0jBBgwFoAUTp1zO/YPWvaeN0YoUwnEekJJWC4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yZDg4ODM4ZS01NDFhLTQ2NjEtODUwMS0zYzdk MmViNTg0OWQuY2VyMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQFiORAAwQE j99wAwQEoYHAMA0EAgACMAcDBQAmBONAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADermg4JT6n75GLVgmYX 98ueBpbZphD6OVtFgnOvddfV5mUo4+3cTLBrdn6hjCobtRwpqGx5Wyj+ISa1bR+E HkdlFQPJw4MM1S/dRABwIpI/8e5gAzp3tQrtGGbT954EEU8gdYjbtB/68wWb3vkz S0Mo7vn01BVsB0ZUXKvRoh2LhyJu9P/nKyPLg6nQzFO/QHKObUDrwe7/1Ks/4PY7 1I4uJXoiDWcmxqfY8i0vqTJtBKT43GyE7IjHg9UVkE6ERIqS3JdtwgNUhsMBsTFF ScdM6DMAYXgQEjxIY+ykHoaAGaxRJjh5x1FYPo2wzkKLAmdb0dPyqv8+PFzE0hEB 4UM= -----END CERTIFICATE-----Generated at Sat Mar 28 12:13:06 2026 by rpki-client