$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/861f2b30-3a64-3c67-8ab1-5ffc8a617d35.roa File: 861f2b30-3a64-3c67-8ab1-5ffc8a617d35.roa (raw, json) Hash identifier: VtiHstInkDhb/3uC9K5NBI2UtkDyzHLXYBrs1mkwHWM= Subject key identifier: A8:B1:05:15:25:B5:B8:CF:6C:B2:2E:FD:35:BE:17:0E:A0:3D:2C:AC Certificate issuer: /CN=35ccbd7e-0844-48b1-88d7-0a8ef46e8168 Certificate serial: 010D0C9F4328584CDC678CC7FDF2F1DF18496E70 Authority key identifier: 31:67:54:B4:BF:16:7E:AD:F1:F4:10:C1:D9:D2:FA:DA:AA:85:3C:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/861f2b30-3a64-3c67-8ab1-5ffc8a617d35.roa Signing time: Sat 14 Feb 2026 14:00:41 +0000 ROA not before: Sat 14 Feb 2026 14:00:41 +0000 ROA not after: Fri 15 May 2026 13:00:41 +0000 asID: 14511 IP address blocks: 216.196.72.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:dc:67:8c:c7:fd:f2:f1:df:18:49:6e:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35ccbd7e-0844-48b1-88d7-0a8ef46e8168 Validity Not Before: Feb 14 14:00:41 2026 GMT Not After : May 15 13:00:41 2026 GMT Subject: CN=e947a612-7e00-4e86-9e67-20c7602b84e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:1b:32:d6:2b:8a:34:c2:55:0d:fd:96:02:7b: aa:df:15:bb:e9:0a:3c:e2:28:ad:19:0c:b4:e1:0f: 07:c6:88:f6:b2:7c:4b:16:b6:5a:f4:ca:de:53:d9: 06:44:4e:52:5f:c4:77:2f:c8:6f:80:8e:dc:e9:07: 75:3f:2f:a7:9e:b6:fd:78:4a:d5:7c:fe:81:ce:46: aa:9a:f3:df:0a:58:48:53:79:e0:89:5d:4c:57:16: 83:23:03:ab:f3:67:a3:0c:58:12:8d:70:0a:55:f3: fa:32:29:dc:9c:75:e6:fc:b4:86:f5:f1:36:a9:6f: b3:8f:19:38:ed:85:c1:8a:db:af:d4:6c:8b:8a:86: 4c:33:84:66:1e:47:9e:81:59:e5:e0:e1:59:f7:30: b6:46:a4:21:af:2e:39:ca:b0:2a:75:2c:d9:e8:bf: cf:0e:64:a3:a5:de:90:1a:c5:b9:b6:b6:6b:c8:56: 68:46:9e:e0:18:35:4f:c9:1b:4a:86:e5:9a:10:81: 70:68:41:b1:a9:af:95:6c:61:c7:21:c6:bb:9f:a2: d9:4e:00:51:58:83:42:69:09:7e:43:a0:bd:1a:79: 9a:95:9d:8c:f6:ff:8f:34:86:d8:49:23:bd:ad:09: 75:a8:cc:c7:c7:04:15:4a:0c:1a:2d:8b:63:9c:d5: f4:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:B1:05:15:25:B5:B8:CF:6C:B2:2E:FD:35:BE:17:0E:A0:3D:2C:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/861f2b30-3a64-3c67-8ab1-5ffc8a617d35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.crl X509v3 Authority Key Identifier: keyid:31:67:54:B4:BF:16:7E:AD:F1:F4:10:C1:D9:D2:FA:DA:AA:85:3C:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.cer sbgp-ipAddrBlock: critical IPv4: 216.196.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:5b:da:59:51:28:b7:30:2c:bc:ea:d1:2d:0f:28:1c:bc:e3: 60:17:24:b8:8e:ba:87:8f:e7:66:16:5d:2e:64:2e:90:6f:ba: 04:79:2c:71:6c:36:29:6b:68:f3:e5:0c:19:3b:a9:fa:14:60: 95:04:fd:a9:93:91:da:90:17:ca:39:d0:cf:f7:02:72:21:61: 72:82:47:0c:0a:21:29:b0:27:44:dd:18:66:64:44:f9:67:70: 73:7c:49:96:64:43:3d:1a:54:c8:9f:05:1a:5b:6a:57:ae:1b: f2:5f:ae:68:f3:92:cb:7c:79:f7:2c:bc:34:b8:bd:2f:6a:c3: b4:29:35:c4:71:3b:d0:36:77:a3:24:64:67:48:30:d0:1c:15: 30:30:e6:91:f5:71:ff:b5:d3:ca:1e:99:f2:3b:5f:00:c5:0d: bf:90:99:e4:ce:6d:3c:48:4e:17:19:e1:99:84:8a:03:45:ef: 9e:55:2c:b0:0a:43:0a:85:d5:ba:fd:b3:77:2c:6d:35:5d:97: 90:d9:04:22:72:30:90:5a:b6:a7:c3:a7:e1:35:32:84:58:28: 6f:2b:e1:59:6e:b4:ca:58:40:0c:3e:7f:c1:02:25:42:25:63: d6:f9:d8:d9:48:e7:e5:62:48:34:94:bc:ac:f6:08:84:b8:5d: d8:a1:25:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzcZ4zH/fLx3xhJbnAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVjY2JkN2UtMDg0NC00OGIxLTg4ZDctMGE4ZWY0NmU4 MTY4MB4XDTI2MDIxNDE0MDA0MVoXDTI2MDUxNTEzMDA0MVowLzEtMCsGA1UEAxMk ZTk0N2E2MTItN2UwMC00ZTg2LTllNjctMjBjNzYwMmI4NGUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxsy1iuKNMJVDf2WAnuq3xW76Qo84iitGQy0 4Q8Hxoj2snxLFrZa9MreU9kGRE5SX8R3L8hvgI7c6Qd1Py+nnrb9eErVfP6Bzkaq mvPfClhIU3ngiV1MVxaDIwOr82ejDFgSjXAKVfP6MincnHXm/LSG9fE2qW+zjxk4 7YXBituv1GyLioZMM4RmHkeegVnl4OFZ9zC2RqQhry45yrAqdSzZ6L/PDmSjpd6Q GsW5trZryFZoRp7gGDVPyRtKhuWaEIFwaEGxqa+VbGHHIca7n6LZTgBRWINCaQl+ Q6C9GnmalZ2M9v+PNIbYSSO9rQl1qMzHxwQVSgwaLYtjnNX07wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKixBRUltbjPbLIu/TW+Fw6gPSysMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zNWNj YmQ3ZS0wODQ0LTQ4YjEtODhkNy0wYThlZjQ2ZTgxNjgvODYxZjJiMzAtM2E2NC0z YzY3LThhYjEtNWZmYzhhNjE3ZDM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMzVjY2JkN2UtMDg0NC00OGIxLTg4 ZDctMGE4ZWY0NmU4MTY4LzM1Y2NiZDdlLTA4NDQtNDhiMS04OGQ3LTBhOGVmNDZl ODE2OC5jcmwwHwYDVR0jBBgwFoAUMWdUtL8Wfq3x9BDB2dL62qqFPBcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zNWNjYmQ3ZS0wODQ0LTQ4YjEtODhkNy0wYThl ZjQ2ZTgxNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD2MRIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACFb2llRKLcwLLzq0S0PKBy842AXJLiOuoeP52YWXS5kLpBvugR5LHFs NilraPPlDBk7qfoUYJUE/amTkdqQF8o50M/3AnIhYXKCRwwKISmwJ0TdGGZkRPln cHN8SZZkQz0aVMifBRpbaleuG/Jfrmjzkst8efcsvDS4vS9qw7QpNcRxO9A2d6Mk ZGdIMNAcFTAw5pH1cf+108oemfI7XwDFDb+QmeTObTxIThcZ4ZmEigNF755VLLAK QwqF1br9s3csbTVdl5DZBCJyMJBatqfDp+E1MoRYKG8r4VlutMpYQAw+f8ECJUIl Y9b52NlI5+ViSDSUvKz2CIS4XdihJc4= -----END CERTIFICATE-----Generated at Mon Mar 2 12:16:45 2026 by rpki-client