$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/78e45031-f34c-3abf-b588-f12af8ea15d0.roa File: 78e45031-f34c-3abf-b588-f12af8ea15d0.roa (raw, json) Hash identifier: dyt3cW6OHfJBVnpvLMSde2J//EYv0s+yvpooMw+ykDM= Subject key identifier: EE:16:FB:A4:18:D2:E0:B8:E7:76:85:A2:98:DF:D3:3A:5B:29:BB:45 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584D6AAA5DF32D2CD94C341ADEB8 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/78e45031-f34c-3abf-b588-f12af8ea15d0.roa Signing time: Mon 06 Apr 2026 13:00:30 +0000 ROA not before: Mon 06 Apr 2026 13:00:30 +0000 ROA not after: Sun 05 Jul 2026 13:00:30 +0000 asID: 46450 IP address blocks: 64.52.24.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6a:aa:5d:f3:2d:2c:d9:4c:34:1a:de:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Apr 6 13:00:30 2026 GMT Not After : Jul 5 13:00:30 2026 GMT Subject: CN=e0248b8c-9300-4305-a55c-3901882557a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:b6:63:a3:3c:87:e6:06:54:f4:b7:f4:36:c6: 9b:7c:28:37:d4:3e:c2:7f:87:7d:0e:95:60:1f:61: 5f:8e:eb:cb:8b:c3:f9:de:27:68:2c:69:2c:70:e5: cd:2e:7e:8a:1f:0b:78:a4:49:40:9a:c4:e1:74:be: 75:59:83:c5:f0:0e:c2:c3:a1:91:f1:50:cf:7b:9d: 88:48:ad:98:cd:85:06:1b:dd:41:9a:28:73:a4:f7: e4:37:77:2e:49:9b:1f:fc:75:31:e0:63:44:ef:81: 30:60:cb:59:95:42:0a:4a:c2:ce:45:7f:79:d4:3e: d8:55:75:e9:fb:73:eb:b6:a8:23:27:1c:65:be:d5: 41:f7:3e:db:75:93:27:eb:8b:ac:c5:37:b3:8a:60: b0:c9:17:00:09:42:ad:fb:05:ed:ad:a1:f3:b9:a7: 1b:c5:dc:b5:82:34:57:3a:2b:85:82:da:4a:2a:ae: 4c:ec:14:8a:45:47:eb:f6:89:f0:51:d1:eb:de:28: 8f:86:3a:22:16:ec:1c:20:9a:aa:ea:4e:36:b6:2f: cc:7a:29:d3:96:4d:b6:33:a7:79:3b:61:fe:c4:c2: a5:03:f8:3b:b5:9f:ce:cc:94:16:0a:2d:ca:f4:e3: 6f:65:cd:8d:38:02:ef:16:c9:f1:18:e3:71:a9:61: a4:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:16:FB:A4:18:D2:E0:B8:E7:76:85:A2:98:DF:D3:3A:5B:29:BB:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/78e45031-f34c-3abf-b588-f12af8ea15d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 64.52.24.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:81:93:70:3e:b9:b7:86:c8:20:14:80:94:18:00:b0:bb:8e: a2:a3:27:b8:b6:0e:e3:88:57:2c:7e:86:16:86:a9:b4:89:34: 10:56:fd:81:9e:69:64:06:01:35:92:57:f3:e1:8c:98:c3:0b: eb:f7:ba:c4:84:3f:b3:7f:f3:31:81:b7:28:04:5f:d0:94:f1: 49:2d:ef:67:ce:cc:20:7e:fa:d6:ef:ab:f2:14:14:a6:e9:7d: 73:85:d6:ce:c0:69:5f:e2:f3:6f:c9:e8:98:60:f7:56:1b:6c: a2:8d:7c:b8:d4:39:75:19:01:49:a1:f9:9e:ff:c2:f0:13:2d: b4:ee:f1:74:55:af:17:52:d9:32:55:ec:7a:43:25:6a:bd:3d: 10:b9:16:d4:7f:50:18:7b:57:4e:53:5e:4e:1c:48:d2:50:c6: 3a:52:0a:3d:23:41:92:f3:4e:be:51:aa:80:43:6c:ea:ea:cf: ea:05:57:ab:70:2c:ec:6f:90:f2:06:90:9c:14:34:f5:59:33: 49:d6:47:ac:9d:b7:42:0d:20:0e:32:12:9c:51:6d:5e:2c:e1: f3:6e:90:0f:8e:5d:88:99:98:7a:e1:e6:f2:f8:63:da:7b:30: 26:fa:de:31:d1:b8:7b:e4:a7:9a:8c:ad:ad:9b:9f:62:9b:e8: 91:cf:04:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1qql3zLSzZTDQa3rgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI2MDQwNjEzMDAzMFoXDTI2MDcwNTEzMDAzMFowLzEtMCsGA1UEAxMk ZTAyNDhiOGMtOTMwMC00MzA1LWE1NWMtMzkwMTg4MjU1N2E5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhrZjozyH5gZU9Lf0NsabfCg31D7Cf4d9DpVg H2FfjuvLi8P53idoLGkscOXNLn6KHwt4pElAmsThdL51WYPF8A7Cw6GR8VDPe52I SK2YzYUGG91BmihzpPfkN3cuSZsf/HUx4GNE74EwYMtZlUIKSsLORX951D7YVXXp +3PrtqgjJxxlvtVB9z7bdZMn64usxTezimCwyRcACUKt+wXtraHzuacbxdy1gjRX OiuFgtpKKq5M7BSKRUfr9onwUdHr3iiPhjoiFuwcIJqq6k42ti/MeinTlk22M6d5 O2H+xMKlA/g7tZ/OzJQWCi3K9ONvZc2NOALvFsnxGONxqWGkAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO4W+6QY0uC453aFopjf0zpbKbtFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvNzhlNDUwMzEtZjM0Yy0z YWJmLWI1ODgtZjEyYWY4ZWExNWQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQDQYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH2Bk3A+ubeGyCAUgJQYALC7jqKjJ7i2DuOIVyx+hhaGqbSJNBBW/YGe aWQGATWSV/PhjJjDC+v3usSEP7N/8zGBtygEX9CU8Ukt72fOzCB++tbvq/IUFKbp fXOF1s7AaV/i82/J6Jhg91YbbKKNfLjUOXUZAUmh+Z7/wvATLbTu8XRVrxdS2TJV 7HpDJWq9PRC5FtR/UBh7V05TXk4cSNJQxjpSCj0jQZLzTr5RqoBDbOrqz+oFV6tw LOxvkPIGkJwUNPVZM0nWR6ydt0INIA4yEpxRbV4s4fNukA+OXYiZmHrh5vL4Y9p7 MCb63jHRuHvkp5qMra2bn2Kb6JHPBBE= -----END CERTIFICATE-----Generated at Fri Apr 17 19:49:56 2026 by rpki-client