$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/35d50be0-7762-3d36-be72-7dbed6e631db.roa File: 35d50be0-7762-3d36-be72-7dbed6e631db.roa (raw, json) Hash identifier: Ckc7/cJiQ9d3cuO/o8wr1eX5CgdopiAVLJBFMNFerv4= Subject key identifier: 75:79:0A:B6:23:C5:55:FE:1B:41:8C:B2:22:03:58:FD:DE:59:57:0B Certificate issuer: /CN=337035f0-d5d1-45d0-b647-7a23f9e3d54c Certificate serial: 010D0C9F4328584D254164831B152AB73792D140 Authority key identifier: 43:1B:4B:E9:91:86:92:60:A1:C0:72:24:C4:97:03:BF:E8:4A:31:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/35d50be0-7762-3d36-be72-7dbed6e631db.roa Signing time: Thu 12 Mar 2026 16:18:15 +0000 ROA not before: Thu 12 Mar 2026 16:18:15 +0000 ROA not after: Wed 10 Jun 2026 16:18:15 +0000 asID: 16509 IP address blocks: 136.184.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/337035f0-d5d1-45d0-b647-7a23f9e3d54c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/337035f0-d5d1-45d0-b647-7a23f9e3d54c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:25:41:64:83:1b:15:2a:b7:37:92:d1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=337035f0-d5d1-45d0-b647-7a23f9e3d54c Validity Not Before: Mar 12 16:18:15 2026 GMT Not After : Jun 10 16:18:15 2026 GMT Subject: CN=004d10ed-8b3c-4208-befd-c52f95b2f889 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:4d:9e:41:33:d7:ca:36:e7:68:56:62:f4:7e: d4:8a:9d:9e:e6:54:8d:1e:87:78:79:d0:3f:4a:69: 18:85:79:4e:d4:25:08:35:11:d1:ba:09:1f:39:52: b5:83:d2:a6:5d:78:48:3a:56:93:92:49:5e:d6:06: bc:d9:c7:be:08:40:60:a8:ba:34:19:20:02:f1:f4: d8:04:42:92:dd:37:d1:86:04:c3:3c:64:ad:56:93: 9b:cf:b1:12:8e:46:d0:70:f5:b1:84:e7:92:bd:32: 29:73:80:58:c1:ed:13:a4:d4:ec:ae:2b:66:fb:15: b5:27:e1:82:cd:a2:21:c8:57:44:64:cd:b9:0b:96: e6:69:7e:ea:77:6a:07:16:3e:6c:38:27:bd:fa:f7: d6:b8:5e:7d:64:77:59:82:80:87:e7:9a:fd:df:2f: fe:96:9c:ed:34:f4:76:47:8f:09:45:2e:2d:d3:ba: 81:58:1a:d6:74:1f:ef:06:15:c1:ea:91:28:87:bd: b2:78:78:30:51:df:98:0b:b4:c5:73:d7:87:85:cd: f1:6c:07:b8:e8:03:73:24:67:12:95:2a:c6:fc:b3: 37:e9:db:ae:fa:07:99:54:4e:e0:5b:58:5e:ac:3e: 45:45:82:2a:bb:0e:70:23:28:f5:69:1e:8b:28:61: 6e:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:79:0A:B6:23:C5:55:FE:1B:41:8C:B2:22:03:58:FD:DE:59:57:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/35d50be0-7762-3d36-be72-7dbed6e631db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/337035f0-d5d1-45d0-b647-7a23f9e3d54c.crl X509v3 Authority Key Identifier: keyid:43:1B:4B:E9:91:86:92:60:A1:C0:72:24:C4:97:03:BF:E8:4A:31:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c.cer sbgp-ipAddrBlock: critical IPv4: 136.184.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:96:0d:f8:ea:14:eb:c2:ba:cf:e3:f2:c6:39:d9:5a:70:f1: 04:24:ef:2f:e7:15:8f:d9:59:23:4b:eb:37:d3:42:ab:3d:55: 6c:50:ab:d5:37:08:4a:2d:3f:fd:63:08:ac:d0:fc:04:0a:60: fd:6f:86:46:77:45:3e:47:2c:a4:36:a4:5c:2f:39:10:84:70: 9a:1a:54:91:63:c1:e5:8b:f9:0a:18:08:f8:d4:a7:c9:cf:25: b6:8a:de:39:ca:1c:9b:ea:9e:ed:e9:99:f3:8f:b3:25:83:ca: f1:9f:bf:44:56:36:a3:0b:bf:b6:86:25:dd:b8:56:53:1c:c5: e7:d5:fc:f3:4e:75:3c:4c:57:c0:d2:a4:21:f1:c1:7d:6e:6b: a6:a4:f1:03:0c:d0:d1:d7:32:f7:79:9d:fa:0e:93:ea:b8:0f: ad:14:ea:a7:c6:04:e8:c9:f1:28:a7:95:af:30:01:39:b0:3b: 11:1f:ee:64:77:d7:8f:31:46:8b:38:4d:42:90:0c:5a:ff:eb: 1f:b6:e3:9b:80:1e:06:85:a3:59:b3:49:2b:a8:2f:e5:15:bc: 9a:b8:39:da:be:5c:46:84:6c:17:d2:06:e3:a7:4d:9f:96:65: bb:d2:04:06:1b:91:99:90:cf:b7:48:02:15:a0:fb:d8:1e:80: 0b:f7:ef:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0lQWSDGxUqtzeS0UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzM3MDM1ZjAtZDVkMS00NWQwLWI2NDctN2EyM2Y5ZTNk NTRjMB4XDTI2MDMxMjE2MTgxNVoXDTI2MDYxMDE2MTgxNVowLzEtMCsGA1UEAxMk MDA0ZDEwZWQtOGIzYy00MjA4LWJlZmQtYzUyZjk1YjJmODg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuk2eQTPXyjbnaFZi9H7Uip2e5lSNHod4edA/ SmkYhXlO1CUINRHRugkfOVK1g9KmXXhIOlaTkkle1ga82ce+CEBgqLo0GSAC8fTY BEKS3TfRhgTDPGStVpObz7ESjkbQcPWxhOeSvTIpc4BYwe0TpNTsritm+xW1J+GC zaIhyFdEZM25C5bmaX7qd2oHFj5sOCe9+vfWuF59ZHdZgoCH55r93y/+lpztNPR2 R48JRS4t07qBWBrWdB/vBhXB6pEoh72yeHgwUd+YC7TFc9eHhc3xbAe46ANzJGcS lSrG/LM36duu+geZVE7gW1herD5FRYIquw5wIyj1aR6LKGFuZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHV5CrYjxVX+G0GMsiIDWP3eWVcLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zMzcw MzVmMC1kNWQxLTQ1ZDAtYjY0Ny03YTIzZjllM2Q1NGMvMzVkNTBiZTAtNzc2Mi0z ZDM2LWJlNzItN2RiZWQ2ZTYzMWRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzM3MDM1ZjAtZDVkMS00NWQwLWI2 NDctN2EyM2Y5ZTNkNTRjLzMzNzAzNWYwLWQ1ZDEtNDVkMC1iNjQ3LTdhMjNmOWUz ZDU0Yy5jcmwwHwYDVR0jBBgwFoAUQxtL6ZGGkmChwHIkxJcDv+hKMW8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zMzcwMzVmMC1kNWQxLTQ1ZDAtYjY0Ny03YTIz ZjllM2Q1NGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiLjuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAASWDfjqFOvCus/j8sY52Vpw8QQk7y/nFY/ZWSNL6zfTQqs9VWxQq9U3 CEotP/1jCKzQ/AQKYP1vhkZ3RT5HLKQ2pFwvORCEcJoaVJFjweWL+QoYCPjUp8nP JbaK3jnKHJvqnu3pmfOPsyWDyvGfv0RWNqMLv7aGJd24VlMcxefV/PNOdTxMV8DS pCHxwX1ua6ak8QMM0NHXMvd5nfoOk+q4D60U6qfGBOjJ8Sinla8wATmwOxEf7mR3 148xRos4TUKQDFr/6x+245uAHgaFo1mzSSuoL+UVvJq4Odq+XEaEbBfSBuOnTZ+W ZbvSBAYbkZmQz7dIAhWg+9gegAv372Y= -----END CERTIFICATE-----Generated at Thu Mar 19 12:31:09 2026 by rpki-client