$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/35f5672e-7bb9-344a-a0ac-f8c8023e9a6c.roa File: 35f5672e-7bb9-344a-a0ac-f8c8023e9a6c.roa (raw, json) Hash identifier: sXV86PUKGvyv5eSUlxuc/cVIR7tPT60LqoNSKmZS5aE= Subject key identifier: D7:9F:DC:2A:EC:49:C5:2E:E2:C1:AA:FD:D2:E6:8F:F2:04:E5:5B:77 Certificate issuer: /CN=b386e256-2dc3-4d21-93b9-c253dcd37e4f Certificate serial: 010D0C9F4328584C6E214561D7F1799CF579C860 Authority key identifier: F2:22:5C:07:C2:CC:A7:84:83:BD:D6:14:A6:AB:B3:79:EF:26:DE:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/35f5672e-7bb9-344a-a0ac-f8c8023e9a6c.roa Signing time: Tue 06 Jan 2026 02:00:31 +0000 ROA not before: Tue 06 Jan 2026 02:00:31 +0000 ROA not after: Mon 06 Apr 2026 01:00:31 +0000 asID: 15830 IP address blocks: 64.112.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:6e:21:45:61:d7:f1:79:9c:f5:79:c8:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b386e256-2dc3-4d21-93b9-c253dcd37e4f Validity Not Before: Jan 6 02:00:31 2026 GMT Not After : Apr 6 01:00:31 2026 GMT Subject: CN=20e1e175-7370-4c59-b969-251de8ba92df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:77:bc:c8:10:73:b9:91:6f:f9:c6:ca:e4:36: a7:8b:c3:3a:79:bd:c3:41:39:cb:32:75:58:81:47: 2d:15:14:26:31:04:db:5d:7d:1b:a0:eb:ed:3a:6b: 9c:28:82:16:02:0d:6f:5c:85:ad:36:79:93:fb:d6: b3:30:de:e5:28:0d:bb:e6:78:25:88:9b:06:19:48: 2a:97:5b:0c:eb:30:38:d9:de:09:f0:10:2b:02:f7: ce:7e:0a:9e:2d:92:29:be:60:0e:1e:03:f3:20:7b: 51:e9:d8:14:7b:d5:48:07:eb:c6:04:64:bc:70:36: b9:47:b5:ea:4e:3c:63:6e:44:de:50:a1:b8:cf:99: 5c:0b:1e:b3:95:31:b2:76:db:df:04:a4:6c:92:96: a1:54:d9:48:29:92:07:db:2a:86:09:f9:ce:19:48: da:1a:30:bf:73:6e:85:31:22:cf:18:5b:5e:38:42: 4e:0d:0d:37:f1:47:2d:79:cd:62:3e:91:fa:5c:55: b2:e2:39:46:7f:5b:af:ed:0f:d9:7f:59:a7:27:95: 7c:00:10:a2:51:86:10:0a:71:ba:78:c5:b4:9e:e4: 4d:bf:8b:44:92:68:73:ca:d9:87:a1:cc:ce:26:0f: 8e:c5:f1:14:7d:af:d4:6f:4f:8c:c3:39:82:28:fb: ac:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:9F:DC:2A:EC:49:C5:2E:E2:C1:AA:FD:D2:E6:8F:F2:04:E5:5B:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/35f5672e-7bb9-344a-a0ac-f8c8023e9a6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.crl X509v3 Authority Key Identifier: keyid:F2:22:5C:07:C2:CC:A7:84:83:BD:D6:14:A6:AB:B3:79:EF:26:DE:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer sbgp-ipAddrBlock: critical IPv4: 64.112.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:05:d3:6b:f9:24:12:9c:01:75:b2:88:52:76:d5:ca:96:d8: e7:df:14:57:4a:35:80:8b:22:4b:fc:44:49:ca:85:fa:6b:5a: 6c:ac:af:d8:7d:05:ec:c4:2e:53:3d:72:40:68:c6:34:bd:1b: 72:1d:d8:97:04:cc:62:17:b5:db:14:27:b7:8a:87:3a:fd:3b: 61:c5:e2:38:47:2c:a9:33:eb:42:1f:88:ff:23:36:91:e4:5a: d6:5c:74:55:cb:67:4f:b3:ff:36:28:cb:b0:52:9b:f8:89:5b: e8:11:5c:77:ec:34:e6:f8:9e:dc:70:06:ba:2a:59:dd:2e:96: 13:ab:cb:47:93:24:94:8e:5f:39:08:c2:f4:5d:56:29:f6:34: 38:f8:97:6c:8e:e1:39:94:5e:c0:12:d1:a8:1f:63:d6:1b:ca: 4e:84:79:81:02:fb:f1:a1:0f:a5:3c:28:7c:9b:79:68:82:b7: 15:7e:26:1c:5b:3b:20:b7:43:fb:ba:a5:e1:e7:9d:d0:10:14: 8b:50:86:dc:72:ff:03:6f:b1:f3:7c:06:c7:a0:50:9b:e3:2d: 2e:b2:28:7e:dd:e8:70:4f:9c:23:66:76:76:b5:8d:6e:bc:87: 93:2d:98:cc:5d:17:f1:14:95:95:4b:e6:47:7d:ea:5d:e2:3e: e2:b6:e9:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExuIUVh1/F5nPV5yGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjM4NmUyNTYtMmRjMy00ZDIxLTkzYjktYzI1M2RjZDM3 ZTRmMB4XDTI2MDEwNjAyMDAzMVoXDTI2MDQwNjAxMDAzMVowLzEtMCsGA1UEAxMk MjBlMWUxNzUtNzM3MC00YzU5LWI5NjktMjUxZGU4YmE5MmRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3e8yBBzuZFv+cbK5Dani8M6eb3DQTnLMnVY gUctFRQmMQTbXX0boOvtOmucKIIWAg1vXIWtNnmT+9azMN7lKA275ngliJsGGUgq l1sM6zA42d4J8BArAvfOfgqeLZIpvmAOHgPzIHtR6dgUe9VIB+vGBGS8cDa5R7Xq TjxjbkTeUKG4z5lcCx6zlTGydtvfBKRskpahVNlIKZIH2yqGCfnOGUjaGjC/c26F MSLPGFteOEJODQ038Uctec1iPpH6XFWy4jlGf1uv7Q/Zf1mnJ5V8ABCiUYYQCnG6 eMW0nuRNv4tEkmhzytmHoczOJg+OxfEUfa/Ub0+MwzmCKPuswwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNef3CrsScUu4sGq/dLmj/IE5Vt3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iMzg2 ZTI1Ni0yZGMzLTRkMjEtOTNiOS1jMjUzZGNkMzdlNGYvMzVmNTY3MmUtN2JiOS0z NDRhLWEwYWMtZjhjODAyM2U5YTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjM4NmUyNTYtMmRjMy00ZDIxLTkz YjktYzI1M2RjZDM3ZTRmL2IzODZlMjU2LTJkYzMtNGQyMS05M2I5LWMyNTNkY2Qz N2U0Zi5jcmwwHwYDVR0jBBgwFoAU8iJcB8LMp4SDvdYUpquzee8m3jwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iMzg2ZTI1Ni0yZGMzLTRkMjEtOTNiOS1jMjUz ZGNkMzdlNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQHBjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHAF02v5JBKcAXWyiFJ21cqW2OffFFdKNYCLIkv8REnKhfprWmysr9h9 BezELlM9ckBoxjS9G3Id2JcEzGIXtdsUJ7eKhzr9O2HF4jhHLKkz60IfiP8jNpHk WtZcdFXLZ0+z/zYoy7BSm/iJW+gRXHfsNOb4ntxwBroqWd0ulhOry0eTJJSOXzkI wvRdVin2NDj4l2yO4TmUXsAS0agfY9Ybyk6EeYEC+/GhD6U8KHybeWiCtxV+Jhxb OyC3Q/u6peHnndAQFItQhtxy/wNvsfN8BsegUJvjLS6yKH7d6HBPnCNmdna1jW68 h5MtmMxdF/EUlZVL5kd96l3iPuK26Xg= -----END CERTIFICATE-----Generated at Mon Mar 2 11:39:52 2026 by rpki-client