$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/c5be28a1-2d7a-39e2-8043-9972f8916840.roa File: c5be28a1-2d7a-39e2-8043-9972f8916840.roa (raw, json) Hash identifier: 2aRHiZToEmxPnxDNp+z8FMGPV51Vc2urRr5GqVtu2v4= Subject key identifier: B1:78:D1:8C:8A:EF:4D:4B:7D:A8:B8:D1:D2:8B:42:D8:5B:DE:F1:C9 Certificate issuer: /CN=35ccbd7e-0844-48b1-88d7-0a8ef46e8168 Certificate serial: 010D0C9F4328584CDC678CB6266EA1B10C6E8D80 Authority key identifier: 31:67:54:B4:BF:16:7E:AD:F1:F4:10:C1:D9:D2:FA:DA:AA:85:3C:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/c5be28a1-2d7a-39e2-8043-9972f8916840.roa Signing time: Sat 14 Feb 2026 14:00:41 +0000 ROA not before: Sat 14 Feb 2026 14:00:41 +0000 ROA not after: Fri 15 May 2026 13:00:41 +0000 asID: 14511 IP address blocks: 66.231.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:dc:67:8c:b6:26:6e:a1:b1:0c:6e:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35ccbd7e-0844-48b1-88d7-0a8ef46e8168 Validity Not Before: Feb 14 14:00:41 2026 GMT Not After : May 15 13:00:41 2026 GMT Subject: CN=9841c3cf-ea4c-4a16-9483-a8e8355ca438 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:78:b0:39:d0:de:4a:79:f4:9c:23:8c:e8:5a: c0:53:34:a3:a6:72:1a:ae:cd:0a:fc:54:d7:07:63: 31:b0:1f:1d:87:fe:5a:ee:b0:bb:be:6b:c0:3d:0a: d1:f9:04:6e:1a:84:c0:fc:01:53:a4:26:4e:f3:99: 68:38:1d:ea:85:ca:dc:d8:35:3c:55:bd:4f:d0:e7: 58:15:8c:60:54:65:24:fd:55:46:07:7d:2d:2a:d4: 77:e6:82:f5:a4:4a:47:21:13:21:91:d8:5a:47:38: fd:f3:1d:b4:f4:37:f5:00:ff:6c:4f:b2:18:9c:fe: 32:3a:d5:66:20:88:26:e6:e6:11:b6:ac:9c:e2:e5: 49:18:9c:54:b1:71:27:0f:f7:3d:ae:26:b3:75:c5: 51:4a:e1:b5:5e:f5:cf:93:f3:f8:be:62:3b:b0:dd: 81:21:d2:04:9d:85:03:8d:27:8c:21:5e:48:14:a6: 3f:1c:c9:27:de:93:b2:2a:86:1e:50:e8:cd:58:bd: b1:c9:68:d8:f7:99:2d:b0:a2:3a:2f:14:71:17:ad: af:a1:b5:95:ef:da:59:34:90:2a:11:b3:c2:4d:73: 74:40:50:03:3f:fe:c4:6f:28:09:10:bc:6d:f1:fd: f3:92:13:b3:4c:0f:81:ce:2d:cc:34:e3:6a:44:5b: 03:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:78:D1:8C:8A:EF:4D:4B:7D:A8:B8:D1:D2:8B:42:D8:5B:DE:F1:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/c5be28a1-2d7a-39e2-8043-9972f8916840.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.crl X509v3 Authority Key Identifier: keyid:31:67:54:B4:BF:16:7E:AD:F1:F4:10:C1:D9:D2:FA:DA:AA:85:3C:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.cer sbgp-ipAddrBlock: critical IPv4: 66.231.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:be:a1:86:e8:a3:89:ca:30:7e:21:70:3e:50:b7:a6:91:00: e3:ef:6a:3a:a0:d3:32:28:fc:35:21:2d:20:c8:c8:fb:c2:6e: 74:34:a9:3d:35:88:19:be:a1:ee:e6:92:64:90:b5:3b:de:7c: b5:54:33:b5:76:d9:d1:3a:45:d2:e3:83:e2:bc:1f:3d:9d:b8: 14:05:e9:cf:39:ed:05:d9:83:18:58:ad:3d:20:ee:05:59:a1: 92:9b:6f:03:a8:1c:ea:d9:e7:2d:e6:0e:ea:3d:c7:17:78:76: 94:b0:8d:70:91:ba:cf:a5:c9:f1:8b:ff:4e:bc:3e:8e:da:b9: 3a:36:64:d8:f2:51:5d:bd:93:d6:c5:95:5b:58:e6:7e:19:00: 29:66:11:00:9a:3f:13:3d:40:89:9b:48:63:bb:c3:92:58:a3: c9:75:1f:43:0c:71:88:0a:18:ae:7c:b1:65:f3:f5:55:2d:1b: c7:57:76:ab:0f:07:bd:2e:90:b5:d0:09:a8:9a:ab:13:27:d3: e5:f0:d2:0d:dc:de:e3:17:a9:27:61:9c:ba:1e:6d:68:4f:f6: 46:7b:9d:5c:c9:68:49:cc:6d:9d:d6:71:07:a5:0d:72:d2:e1: 0e:86:37:b6:4a:1b:3a:9f:76:19:4d:da:87:61:0e:7d:89:49: 12:d1:81:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzcZ4y2Jm6hsQxujYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVjY2JkN2UtMDg0NC00OGIxLTg4ZDctMGE4ZWY0NmU4 MTY4MB4XDTI2MDIxNDE0MDA0MVoXDTI2MDUxNTEzMDA0MVowLzEtMCsGA1UEAxMk OTg0MWMzY2YtZWE0Yy00YTE2LTk0ODMtYThlODM1NWNhNDM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsniwOdDeSnn0nCOM6FrAUzSjpnIars0K/FTX B2MxsB8dh/5a7rC7vmvAPQrR+QRuGoTA/AFTpCZO85loOB3qhcrc2DU8Vb1P0OdY FYxgVGUk/VVGB30tKtR35oL1pEpHIRMhkdhaRzj98x209Df1AP9sT7IYnP4yOtVm IIgm5uYRtqyc4uVJGJxUsXEnD/c9riazdcVRSuG1XvXPk/P4vmI7sN2BIdIEnYUD jSeMIV5IFKY/HMkn3pOyKoYeUOjNWL2xyWjY95ktsKI6LxRxF62vobWV79pZNJAq EbPCTXN0QFADP/7EbygJELxt8f3zkhOzTA+Bzi3MNONqRFsDBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLF40YyK701Lfai40dKLQthb3vHJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zNWNj YmQ3ZS0wODQ0LTQ4YjEtODhkNy0wYThlZjQ2ZTgxNjgvYzViZTI4YTEtMmQ3YS0z OWUyLTgwNDMtOTk3MmY4OTE2ODQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMzVjY2JkN2UtMDg0NC00OGIxLTg4 ZDctMGE4ZWY0NmU4MTY4LzM1Y2NiZDdlLTA4NDQtNDhiMS04OGQ3LTBhOGVmNDZl ODE2OC5jcmwwHwYDVR0jBBgwFoAUMWdUtL8Wfq3x9BDB2dL62qqFPBcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zNWNjYmQ3ZS0wODQ0LTQ4YjEtODhkNy0wYThl ZjQ2ZTgxNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQudwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH++oYboo4nKMH4hcD5Qt6aRAOPvajqg0zIo/DUhLSDIyPvCbnQ0qT01 iBm+oe7mkmSQtTvefLVUM7V22dE6RdLjg+K8Hz2duBQF6c857QXZgxhYrT0g7gVZ oZKbbwOoHOrZ5y3mDuo9xxd4dpSwjXCRus+lyfGL/068Po7auTo2ZNjyUV29k9bF lVtY5n4ZAClmEQCaPxM9QImbSGO7w5JYo8l1H0MMcYgKGK58sWXz9VUtG8dXdqsP B70ukLXQCaiaqxMn0+Xw0g3c3uMXqSdhnLoebWhP9kZ7nVzJaEnMbZ3WcQelDXLS 4Q6GN7ZKGzqfdhlN2odhDn2JSRLRgU0= -----END CERTIFICATE-----Generated at Mon Mar 2 17:45:02 2026 by rpki-client