$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/34d3497e-f5b7-366d-a095-53a322d49a0c.roa File: 34d3497e-f5b7-366d-a095-53a322d49a0c.roa (raw, json) Hash identifier: NtU55mZnPnHzzI5IWqsfSqmxuLbcieARsdNi2sSLQhQ= Subject key identifier: 33:C2:FE:6E:36:FE:DE:9C:C4:24:0D:C4:72:92:5B:9E:9E:97:79:DE Certificate issuer: /CN=70057aa1-544d-4237-b549-304fd45324ba Certificate serial: 010D0C9F4328584D00B27DD66A62C626A6E05B80 Authority key identifier: DE:4A:A5:D1:33:5C:FD:87:EF:30:91:0B:66:AF:F0:CE:61:36:64:D1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/34d3497e-f5b7-366d-a095-53a322d49a0c.roa Signing time: Fri 27 Feb 2026 14:00:40 +0000 ROA not before: Fri 27 Feb 2026 14:00:40 +0000 ROA not after: Thu 28 May 2026 13:00:40 +0000 asID: 30039 IP address blocks: 216.222.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/70057aa1-544d-4237-b549-304fd45324ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/70057aa1-544d-4237-b549-304fd45324ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:00:b2:7d:d6:6a:62:c6:26:a6:e0:5b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70057aa1-544d-4237-b549-304fd45324ba Validity Not Before: Feb 27 14:00:40 2026 GMT Not After : May 28 13:00:40 2026 GMT Subject: CN=60ebc184-eecf-4910-b0a4-b08598c9642e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:d7:03:cb:67:25:92:de:4d:f4:0c:ba:6b:85: 99:21:1f:f1:54:b2:2e:1a:ed:c4:bc:86:34:89:40: 82:ce:54:35:c8:2a:3a:d8:60:e9:80:62:6b:ce:bd: 85:97:bc:95:14:2c:fe:8d:3f:b7:01:bb:b2:bf:db: 57:74:33:15:dd:4e:11:3b:48:d9:4a:28:65:1e:01: b4:32:82:16:0a:5f:0d:b3:5c:70:c7:08:eb:0c:a6: af:da:cc:5d:bf:b3:7f:42:b1:27:dd:97:f3:c1:50: 49:4c:08:61:50:e1:f9:3e:c4:7a:17:45:12:ee:a6: df:bc:5a:9f:83:52:61:a4:f1:65:ee:a4:21:ce:90: 61:ae:d8:d8:ce:01:29:b3:cb:2d:77:95:60:79:28: 06:5b:05:50:97:f6:e5:3d:d8:03:bc:2b:0c:1a:d7: a6:20:7a:fb:19:7f:28:ce:76:32:bd:06:64:e1:f2: f1:e7:bd:fb:28:21:0f:96:e9:3a:17:65:55:73:b9: 67:a9:e8:09:ba:4d:9a:16:a5:1c:38:6d:c3:05:75: 76:d0:7d:10:8c:ea:ea:3f:c0:17:e0:a2:78:9b:1f: 2e:d0:b0:f2:05:d9:43:dc:a4:dd:ab:20:62:77:40: cc:7f:34:54:71:25:ab:04:1a:5f:c6:b3:34:da:8f: 4a:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:C2:FE:6E:36:FE:DE:9C:C4:24:0D:C4:72:92:5B:9E:9E:97:79:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/34d3497e-f5b7-366d-a095-53a322d49a0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/70057aa1-544d-4237-b549-304fd45324ba.crl X509v3 Authority Key Identifier: keyid:DE:4A:A5:D1:33:5C:FD:87:EF:30:91:0B:66:AF:F0:CE:61:36:64:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba.cer sbgp-ipAddrBlock: critical IPv4: 216.222.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:9a:2b:67:b7:be:6e:bc:be:e8:6e:a3:f6:ab:f9:e9:23:14: 65:dd:43:1e:58:29:95:6d:fc:93:44:67:d9:dc:ee:6f:b3:66: 0a:e7:51:ec:80:70:69:93:e7:f8:62:ad:9a:41:db:c0:7a:1f: 1d:e6:cc:bd:19:28:44:31:1b:c9:67:84:99:c8:ee:e2:a1:89: 34:5c:60:54:51:09:41:a5:78:2d:0c:1f:b0:c1:10:28:8a:60: 09:d0:f5:27:4b:ec:89:13:2d:26:42:7e:a1:f7:70:fa:d9:3c: 69:71:17:52:00:5e:f8:47:0a:1c:94:fb:2b:86:32:a5:2b:a7: 89:b9:cb:a2:21:ce:af:c6:14:be:e6:2f:ca:dc:5d:bd:18:a0: b9:72:13:1b:98:7c:d0:0b:18:e6:3e:78:5d:58:30:5f:9e:66: b8:71:4a:7d:65:57:9e:69:15:c0:31:f5:66:80:d1:87:f5:e1: e2:5b:e8:16:5e:42:6c:e1:a7:08:61:c9:a0:11:0f:4d:21:29: 58:c9:1c:4d:96:f4:0c:ea:6f:42:84:78:fc:87:bb:b1:ca:d2: 82:75:c1:ed:38:0a:e2:93:67:ef:57:08:87:ce:01:e2:08:42: 5c:90:44:f4:1d:37:1b:d4:27:3a:41:2f:07:54:20:e4:3f:8e: 21:e2:42:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Asn3WamLGJqbgW4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzAwNTdhYTEtNTQ0ZC00MjM3LWI1NDktMzA0ZmQ0NTMy NGJhMB4XDTI2MDIyNzE0MDA0MFoXDTI2MDUyODEzMDA0MFowLzEtMCsGA1UEAxMk NjBlYmMxODQtZWVjZi00OTEwLWIwYTQtYjA4NTk4Yzk2NDJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2dcDy2clkt5N9Ay6a4WZIR/xVLIuGu3EvIY0 iUCCzlQ1yCo62GDpgGJrzr2Fl7yVFCz+jT+3Abuyv9tXdDMV3U4RO0jZSihlHgG0 MoIWCl8Ns1xwxwjrDKav2sxdv7N/QrEn3ZfzwVBJTAhhUOH5PsR6F0US7qbfvFqf g1JhpPFl7qQhzpBhrtjYzgEps8std5VgeSgGWwVQl/blPdgDvCsMGtemIHr7GX8o znYyvQZk4fLx5737KCEPluk6F2VVc7lnqegJuk2aFqUcOG3DBXV20H0QjOrqP8AX 4KJ4mx8u0LDyBdlD3KTdqyBid0DMfzRUcSWrBBpfxrM02o9K/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDPC/m42/t6cxCQNxHKSW56el3neMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS83MDA1 N2FhMS01NDRkLTQyMzctYjU0OS0zMDRmZDQ1MzI0YmEvMzRkMzQ5N2UtZjViNy0z NjZkLWEwOTUtNTNhMzIyZDQ5YTBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNzAwNTdhYTEtNTQ0ZC00MjM3LWI1 NDktMzA0ZmQ0NTMyNGJhLzcwMDU3YWExLTU0NGQtNDIzNy1iNTQ5LTMwNGZkNDUz MjRiYS5jcmwwHwYDVR0jBBgwFoAU3kql0TNc/YfvMJELZq/wzmE2ZNEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS83MDA1N2FhMS01NDRkLTQyMzctYjU0OS0zMDRm ZDQ1MzI0YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2N7QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH2aK2e3vm68vuhuo/ar+ekjFGXdQx5YKZVt/JNEZ9nc7m+zZgrnUeyA cGmT5/hirZpB28B6Hx3mzL0ZKEQxG8lnhJnI7uKhiTRcYFRRCUGleC0MH7DBECiK YAnQ9SdL7IkTLSZCfqH3cPrZPGlxF1IAXvhHChyU+yuGMqUrp4m5y6Ihzq/GFL7m L8rcXb0YoLlyExuYfNALGOY+eF1YMF+eZrhxSn1lV55pFcAx9WaA0Yf14eJb6BZe QmzhpwhhyaARD00hKVjJHE2W9Azqb0KEePyHu7HK0oJ1we04CuKTZ+9XCIfOAeII QlyQRPQdNxvUJzpBLwdUIOQ/jiHiQig= -----END CERTIFICATE-----Generated at Mon Mar 2 14:42:06 2026 by rpki-client