$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/df8934b8-de3a-483c-acaa-671093370c24/52fb9179-136b-3467-9092-35063be60467.roa File: 52fb9179-136b-3467-9092-35063be60467.roa (raw, json) Hash identifier: wFUGr45dyBWOFCtQcXnYI4F8mWtbBqXotdJR90BdDNc= Subject key identifier: 16:1F:BD:33:AC:06:1B:E6:06:9B:98:23:C4:F1:C9:92:A6:2E:DF:6F Certificate issuer: /CN=df8934b8-de3a-483c-acaa-671093370c24 Certificate serial: 010D0C9F4328584F5EC4EC2F7933DBEC5D8290C0 Authority key identifier: 70:27:13:AB:F4:0C:50:4A:94:2E:A3:BE:B7:B7:98:8D:E3:65:48:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/df8934b8-de3a-483c-acaa-671093370c24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/df8934b8-de3a-483c-acaa-671093370c24/52fb9179-136b-3467-9092-35063be60467.roa Signing time: Fri 02 Oct 2026 16:18:13 +0000 ROA not before: Fri 02 Oct 2026 16:18:13 +0000 ROA not after: Thu 31 Dec 2026 17:18:13 +0000 asID: 26527 IP address blocks: 70.35.159.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/df8934b8-de3a-483c-acaa-671093370c24/df8934b8-de3a-483c-acaa-671093370c24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/df8934b8-de3a-483c-acaa-671093370c24/df8934b8-de3a-483c-acaa-671093370c24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/df8934b8-de3a-483c-acaa-671093370c24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:c4:ec:2f:79:33:db:ec:5d:82:90:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df8934b8-de3a-483c-acaa-671093370c24 Validity Not Before: Oct 2 16:18:13 2026 GMT Not After : Dec 31 17:18:13 2026 GMT Subject: CN=2c2c53a8-8f7a-4694-a8be-368e81198753 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:12:dd:cf:73:84:28:bf:4e:3f:70:09:90:9d: 4b:45:b1:56:c0:5e:6f:c3:2d:c9:bb:e1:60:0c:8f: 35:e4:ac:05:ae:dc:6d:86:f3:69:98:7e:4f:03:b6: cc:0c:2c:ad:dd:a9:0e:55:54:cb:14:a2:99:b5:c0: a1:82:ce:11:cb:06:b8:a2:bb:e7:6c:60:fa:60:82: b2:cd:99:ca:9a:01:bd:75:ba:54:59:b5:64:6e:30: 53:72:83:e2:cc:fa:e7:f2:4a:bd:57:13:97:76:06: 02:5b:37:2b:30:b7:fc:9a:ca:d0:e1:c7:e8:4e:95: 2c:9d:bc:b8:49:db:1a:d0:99:ed:45:4e:ae:6b:d2: 12:0e:80:aa:29:d2:eb:37:c8:30:43:12:82:40:e4: 9b:e1:8c:c8:44:0a:3d:52:28:01:19:74:a7:27:57: 29:07:0a:9c:54:f9:c5:a4:ff:48:d4:30:ec:8d:65: f6:bb:9e:e9:3f:d0:01:a3:2d:06:a0:90:84:74:84: f5:da:83:16:56:61:af:5a:c8:0a:8f:da:3a:1a:1c: e2:3b:49:9f:a6:1a:1a:30:69:47:67:05:53:f3:42: e6:57:32:56:61:5c:c0:aa:22:20:de:b0:2b:47:00: fd:15:7d:ab:1c:de:d6:a3:c8:31:9c:42:46:ef:4d: 6c:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:1F:BD:33:AC:06:1B:E6:06:9B:98:23:C4:F1:C9:92:A6:2E:DF:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/df8934b8-de3a-483c-acaa-671093370c24/52fb9179-136b-3467-9092-35063be60467.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/df8934b8-de3a-483c-acaa-671093370c24/df8934b8-de3a-483c-acaa-671093370c24.crl X509v3 Authority Key Identifier: keyid:70:27:13:AB:F4:0C:50:4A:94:2E:A3:BE:B7:B7:98:8D:E3:65:48:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/df8934b8-de3a-483c-acaa-671093370c24.cer sbgp-ipAddrBlock: critical IPv4: 70.35.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:3e:dc:5c:7e:7a:b2:81:90:9b:9f:11:ad:c3:1b:58:ad:e5: e9:1e:57:12:6e:0d:42:84:df:24:3a:66:04:9c:66:c8:52:6c: 33:35:a7:9b:8d:d3:51:c3:c3:8d:44:c4:b8:5b:2d:fe:d9:eb: 28:8d:eb:d5:9d:29:3e:49:a3:99:f8:03:a7:66:3f:76:d3:4e: 80:d0:dd:48:73:12:4c:4a:e4:c7:72:3e:78:66:6d:8f:79:5f: 5d:61:28:8a:fa:09:38:06:22:ca:2e:14:4d:78:dd:ff:05:2d: 3c:da:7d:f1:b7:c8:13:58:98:b9:f9:5d:7b:24:7a:6b:12:fb: fb:8f:87:64:d4:0a:c2:fb:a1:e5:ef:f5:a4:93:55:0a:53:c6: 34:ed:fe:3d:31:3d:73:08:a7:6e:7d:66:ee:0a:1a:a2:65:4b: 5b:f3:df:26:14:8c:23:57:f6:f0:3c:e0:2b:7e:62:11:72:81: c8:9d:f1:a7:62:1c:13:2e:c6:1a:d8:b6:1d:2d:6f:9f:d3:d9: d9:d5:91:73:34:c5:f5:00:cc:e9:21:a0:d1:e6:77:4b:55:e0: 32:fa:68:67:4d:d6:4c:25:31:8b:27:45:bd:e9:50:ab:a7:63: 77:75:f0:fe:5d:88:3b:81:e9:68:e1:08:bb:4d:d5:f5:c4:6f: e9:d5:31:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9exOwveTPb7F2CkMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGY4OTM0YjgtZGUzYS00ODNjLWFjYWEtNjcxMDkzMzcw YzI0MB4XDTI2MTAwMjE2MTgxM1oXDTI2MTIzMTE3MTgxM1owLzEtMCsGA1UEAxMk MmMyYzUzYTgtOGY3YS00Njk0LWE4YmUtMzY4ZTgxMTk4NzUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0xLdz3OEKL9OP3AJkJ1LRbFWwF5vwy3Ju+Fg DI815KwFrtxthvNpmH5PA7bMDCyt3akOVVTLFKKZtcChgs4Rywa4orvnbGD6YIKy zZnKmgG9dbpUWbVkbjBTcoPizPrn8kq9VxOXdgYCWzcrMLf8msrQ4cfoTpUsnby4 Sdsa0JntRU6ua9ISDoCqKdLrN8gwQxKCQOSb4YzIRAo9UigBGXSnJ1cpBwqcVPnF pP9I1DDsjWX2u57pP9ABoy0GoJCEdIT12oMWVmGvWsgKj9o6GhziO0mfphoaMGlH ZwVT80LmVzJWYVzAqiIg3rArRwD9FX2rHN7Wo8gxnEJG701sfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBYfvTOsBhvmBpuYI8TxyZKmLt9vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS9kZjg5 MzRiOC1kZTNhLTQ4M2MtYWNhYS02NzEwOTMzNzBjMjQvNTJmYjkxNzktMTM2Yi0z NDY3LTkwOTItMzUwNjNiZTYwNDY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvZGY4OTM0YjgtZGUzYS00ODNjLWFj YWEtNjcxMDkzMzcwYzI0L2RmODkzNGI4LWRlM2EtNDgzYy1hY2FhLTY3MTA5MzM3 MGMyNC5jcmwwHwYDVR0jBBgwFoAUcCcTq/QMUEqULqO+t7eYjeNlSH0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS9kZjg5MzRiOC1kZTNhLTQ4M2MtYWNhYS02NzEw OTMzNzBjMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiOfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC4+3Fx+erKBkJufEa3DG1it5ekeVxJuDUKE3yQ6ZgScZshSbDM1p5uN 01HDw41ExLhbLf7Z6yiN69WdKT5Jo5n4A6dmP3bTToDQ3UhzEkxK5MdyPnhmbY95 X11hKIr6CTgGIsouFE143f8FLTzaffG3yBNYmLn5XXskemsS+/uPh2TUCsL7oeXv 9aSTVQpTxjTt/j0xPXMIp259Zu4KGqJlS1vz3yYUjCNX9vA84Ct+YhFygcid8adi HBMuxhrYth0tb5/T2dnVkXM0xfUAzOkhoNHmd0tV4DL6aGdN1kwlMYsnRb3pUKun Y3d18P5diDuB6WjhCLtN1fXEb+nVMSM= -----END CERTIFICATE-----Generated at Sun Oct 11 10:12:23 2026 by rpki-client