$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35a72605-99bc-4c4b-995e-c01a3684dcbf/097c095d-ece4-3ab9-b654-21a67c8b50d9.roa File: 097c095d-ece4-3ab9-b654-21a67c8b50d9.roa (raw, json) Hash identifier: U4Om5bpWNeLCtGSoUo81/TB55J0UUll1btdkdY1dQto= Subject key identifier: 32:4E:1F:81:75:EB:3E:43:AA:B6:0C:59:93:DE:38:BD:C3:21:14:69 Certificate issuer: /CN=35a72605-99bc-4c4b-995e-c01a3684dcbf Certificate serial: 010D0C9F4328584CCBA752246876163ECBB98280 Authority key identifier: 9D:27:9D:66:57:C4:C6:28:D7:0E:13:BE:95:CD:3A:7F:D7:2B:84:50 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35a72605-99bc-4c4b-995e-c01a3684dcbf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35a72605-99bc-4c4b-995e-c01a3684dcbf/097c095d-ece4-3ab9-b654-21a67c8b50d9.roa Signing time: Sun 08 Feb 2026 14:00:41 +0000 ROA not before: Sun 08 Feb 2026 14:00:41 +0000 ROA not after: Sat 09 May 2026 13:00:41 +0000 asID: 965 IP address blocks: 23.129.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35a72605-99bc-4c4b-995e-c01a3684dcbf/35a72605-99bc-4c4b-995e-c01a3684dcbf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35a72605-99bc-4c4b-995e-c01a3684dcbf/35a72605-99bc-4c4b-995e-c01a3684dcbf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35a72605-99bc-4c4b-995e-c01a3684dcbf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:cb:a7:52:24:68:76:16:3e:cb:b9:82:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35a72605-99bc-4c4b-995e-c01a3684dcbf Validity Not Before: Feb 8 14:00:41 2026 GMT Not After : May 9 13:00:41 2026 GMT Subject: CN=de858bd8-adf3-44b3-a154-4934e03746f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:a3:4b:db:a7:2f:44:87:b3:04:15:28:af:02: da:67:c9:fd:e9:60:e5:0f:d0:d4:46:bd:bc:2d:53: 89:80:02:43:b2:7a:64:b5:4c:a0:0c:3c:18:c3:cd: 5e:c7:b9:2f:9e:36:24:3f:04:f8:02:af:b3:89:c2: b2:75:8b:e0:f2:22:7d:eb:62:18:4f:7d:8e:99:da: 2f:f0:8a:12:74:87:34:74:68:6e:5e:e1:e0:12:35: de:bd:72:0e:94:02:63:76:57:75:5e:ce:aa:8e:47: 2a:b1:bd:20:9e:1c:8e:ba:b6:c8:c3:f3:3b:c6:8e: b2:79:f7:9f:55:cd:33:88:46:15:1b:ad:92:b9:bf: b3:d4:f8:9e:31:32:19:11:83:4f:ac:fa:f5:7c:8a: 4c:19:99:da:3c:bc:a3:f5:8e:cc:18:71:74:a7:58: db:28:9e:52:de:64:c3:0b:46:a7:7c:bf:d2:5c:81: 4c:a3:7a:45:8b:a0:73:54:a7:fb:e8:fd:c3:e9:36: 80:b1:72:38:8f:32:5c:39:b9:a2:28:34:c8:c5:69: bd:8e:d4:4e:89:a4:55:2f:c5:90:f1:8a:45:d8:cd: 98:ca:42:93:97:20:e8:34:76:e8:f1:84:e6:a4:88: e2:19:68:00:7e:9a:75:7f:4a:91:4b:10:d0:8e:fb: 2b:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:4E:1F:81:75:EB:3E:43:AA:B6:0C:59:93:DE:38:BD:C3:21:14:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35a72605-99bc-4c4b-995e-c01a3684dcbf/097c095d-ece4-3ab9-b654-21a67c8b50d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35a72605-99bc-4c4b-995e-c01a3684dcbf/35a72605-99bc-4c4b-995e-c01a3684dcbf.crl X509v3 Authority Key Identifier: keyid:9D:27:9D:66:57:C4:C6:28:D7:0E:13:BE:95:CD:3A:7F:D7:2B:84:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35a72605-99bc-4c4b-995e-c01a3684dcbf.cer sbgp-ipAddrBlock: critical IPv4: 23.129.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:b3:58:a4:23:93:18:7a:0c:18:f3:9a:a9:ff:2c:29:6c:24: 89:c4:45:19:2b:91:f0:57:16:31:18:03:53:0c:e8:0a:55:a3: c4:23:c6:24:a1:4c:55:05:10:21:e6:a8:4e:8a:bf:60:96:b7: d1:1d:76:91:c7:ac:62:00:6a:77:bf:90:79:cd:95:8a:8b:4b: 4c:11:db:1f:6d:6a:ff:9e:12:94:b2:c3:fe:65:cb:65:67:cc: e3:81:73:5a:f4:7e:3d:a7:39:d5:8e:aa:68:9a:7c:d9:bd:3c: da:85:5a:44:7b:a5:57:cd:f1:8c:cf:66:fa:b8:12:f6:68:1c: 0f:09:19:b4:01:fa:e1:35:5e:33:ee:c2:fc:15:cf:fd:9c:f6: f2:fe:e0:5b:dd:1d:bc:ca:d4:55:2b:55:de:54:af:f2:27:d3: cf:87:2b:b1:38:16:9e:03:21:6e:73:84:65:9d:00:9a:7f:9a: fc:b5:b1:76:2c:70:70:0e:90:19:6e:4c:92:a4:a0:78:d3:6e: c2:ed:0e:4b:18:55:62:4c:28:d8:39:71:f2:ec:a2:33:26:37: 57:7f:bb:52:a8:65:41:78:60:cc:fd:0a:56:c2:7f:d0:aa:2f: f1:c2:1d:ca:98:86:2a:d9:ab:a9:b2:f1:1a:e7:dd:7d:5a:12: 11:08:27:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzLp1IkaHYWPsu5goAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVhNzI2MDUtOTliYy00YzRiLTk5NWUtYzAxYTM2ODRk Y2JmMB4XDTI2MDIwODE0MDA0MVoXDTI2MDUwOTEzMDA0MVowLzEtMCsGA1UEAxMk ZGU4NThiZDgtYWRmMy00NGIzLWExNTQtNDkzNGUwMzc0NmYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA76NL26cvRIezBBUorwLaZ8n96WDlD9DURr28 LVOJgAJDsnpktUygDDwYw81ex7kvnjYkPwT4Aq+zicKydYvg8iJ962IYT32Omdov 8IoSdIc0dGhuXuHgEjXevXIOlAJjdld1Xs6qjkcqsb0gnhyOurbIw/M7xo6yefef Vc0ziEYVG62Sub+z1PieMTIZEYNPrPr1fIpMGZnaPLyj9Y7MGHF0p1jbKJ5S3mTD C0anfL/SXIFMo3pFi6BzVKf76P3D6TaAsXI4jzJcObmiKDTIxWm9jtROiaRVL8WQ 8YpF2M2YykKTlyDoNHbo8YTmpIjiGWgAfpp1f0qRSxDQjvsrYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDJOH4F16z5DqrYMWZPeOL3DIRRpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWE3 MjYwNS05OWJjLTRjNGItOTk1ZS1jMDFhMzY4NGRjYmYvMDk3YzA5NWQtZWNlNC0z YWI5LWI2NTQtMjFhNjdjOGI1MGQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVhNzI2MDUtOTliYy00YzRiLTk5 NWUtYzAxYTM2ODRkY2JmLzM1YTcyNjA1LTk5YmMtNGM0Yi05OTVlLWMwMWEzNjg0 ZGNiZi5jcmwwHwYDVR0jBBgwFoAUnSedZlfExijXDhO+lc06f9crhFAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWE3MjYwNS05OWJjLTRjNGItOTk1ZS1jMDFh MzY4NGRjYmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF4H8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGazWKQjkxh6DBjzmqn/LClsJInERRkrkfBXFjEYA1MM6ApVo8QjxiSh TFUFECHmqE6Kv2CWt9EddpHHrGIAane/kHnNlYqLS0wR2x9tav+eEpSyw/5ly2Vn zOOBc1r0fj2nOdWOqmiafNm9PNqFWkR7pVfN8YzPZvq4EvZoHA8JGbQB+uE1XjPu wvwVz/2c9vL+4FvdHbzK1FUrVd5Ur/In08+HK7E4Fp4DIW5zhGWdAJp/mvy1sXYs cHAOkBluTJKkoHjTbsLtDksYVWJMKNg5cfLsojMmN1d/u1KoZUF4YMz9ClbCf9Cq L/HCHcqYhirZq6my8Rrn3X1aEhEIJ0k= -----END CERTIFICATE-----Generated at Mon Mar 2 04:33:09 2026 by rpki-client