$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/35bb33db-048a-37a5-92e6-cef34db9e25e.roa File: 35bb33db-048a-37a5-92e6-cef34db9e25e.roa (raw, json) Hash identifier: Xqa3fUhhb286iVGavqYalzB8zTw1jKStIjq4nAZWdKE= Subject key identifier: EE:2E:C6:75:2E:DA:F1:A2:2C:0F:E4:23:5F:20:80:26:EC:07:0D:B1 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584D4C4F856FFA1620A995CC3CC0 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/35bb33db-048a-37a5-92e6-cef34db9e25e.roa Signing time: Thu 26 Mar 2026 16:03:14 +0000 ROA not before: Thu 26 Mar 2026 16:03:14 +0000 ROA not after: Wed 24 Jun 2026 16:03:14 +0000 asID: 202897 IP address blocks: 144.225.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4c:4f:85:6f:fa:16:20:a9:95:cc:3c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Mar 26 16:03:14 2026 GMT Not After : Jun 24 16:03:14 2026 GMT Subject: CN=b4214ec0-657e-4f37-8d9e-4e3914e8de69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:3e:b8:23:23:15:40:d2:9f:90:32:b4:c3:00: ca:ed:c6:01:cf:fa:7b:6d:09:b0:c5:eb:d7:7b:d4: 4e:a5:03:c0:34:25:74:47:db:e3:3f:00:3b:78:d8: f2:8d:36:b2:7f:7a:5b:ba:27:c8:a9:9c:87:00:17: 65:cd:11:ed:26:76:f8:2b:53:68:2b:de:13:c6:a9: 62:38:b7:b8:62:73:40:f2:45:60:94:c1:39:d7:58: 02:fd:9d:7f:42:46:db:9d:7e:c5:97:7e:00:3b:70: 8e:79:bc:14:94:f8:d4:e7:c7:24:ae:dc:f0:ac:09: b6:4f:e1:a4:33:87:07:79:c3:e1:e9:8e:5c:1b:86: c0:82:07:7b:e9:ea:81:6c:97:b9:e0:45:db:4b:80: 11:67:0b:97:68:20:74:35:37:bc:4e:50:a0:0b:92: 86:9e:f6:00:2b:1c:6a:d6:4c:82:f5:2e:c0:ce:5a: 5d:28:c5:11:fb:fc:18:7d:2b:e8:59:08:60:67:a4: c9:e4:a7:77:09:99:f1:41:48:38:30:ad:d8:f8:a0: 9a:22:4b:15:99:41:cf:0b:2b:a8:a7:fe:cc:c2:b6: 95:fe:a4:86:f0:c9:52:a8:5d:b5:78:e3:58:3b:09: ff:92:4b:62:69:ec:e8:2d:94:7f:96:83:ec:72:9a: 92:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:2E:C6:75:2E:DA:F1:A2:2C:0F:E4:23:5F:20:80:26:EC:07:0D:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/35bb33db-048a-37a5-92e6-cef34db9e25e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 144.225.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:87:b1:19:39:15:37:51:0a:d1:f0:f2:21:ff:02:00:bf:d3: da:38:42:03:8d:a8:e6:1e:29:c1:7f:e7:1b:59:6e:c4:41:be: 94:26:71:6a:b1:35:6a:76:ba:c7:82:fb:32:e0:06:87:fd:e9: 09:80:69:43:8a:87:2a:9c:df:73:72:47:1c:22:4e:f8:09:48: ec:a3:3b:43:4b:8c:d4:53:0e:68:83:3b:db:7e:60:b1:05:ad: 82:68:92:dc:e3:82:f0:59:82:cd:fc:27:59:3c:39:5e:a7:96: ad:a5:1b:11:75:a8:03:fa:19:96:e7:bf:1b:59:f0:d1:96:2c: 6f:61:d0:17:0e:8e:08:f8:28:85:20:43:66:33:16:4a:03:46: c4:cb:6f:32:5a:b8:1b:5d:f4:51:b3:c6:b7:a8:f6:16:76:3f: ef:f1:87:a8:91:fb:f2:be:c4:c0:97:d7:ab:f2:50:c3:5f:e1: a9:67:90:71:30:b2:60:26:20:ba:52:89:e3:ec:54:97:54:00: 1e:b7:c5:c3:e7:79:70:1e:ff:c7:8c:db:54:d0:e5:9e:64:13: fc:c4:fe:9d:b7:5f:78:f2:de:3e:0f:f1:cf:b9:00:6a:28:fb: 5e:4d:df:6d:19:46:3d:8b:cd:ab:9e:77:c9:21:72:7e:6f:ba: e2:d8:d5:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1MT4Vv+hYgqZXMPMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDMyNjE2MDMxNFoXDTI2MDYyNDE2MDMxNFowLzEtMCsGA1UEAxMk YjQyMTRlYzAtNjU3ZS00ZjM3LThkOWUtNGUzOTE0ZThkZTY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkj64IyMVQNKfkDK0wwDK7cYBz/p7bQmwxevX e9ROpQPANCV0R9vjPwA7eNjyjTayf3pbuifIqZyHABdlzRHtJnb4K1NoK94Txqli OLe4YnNA8kVglME511gC/Z1/QkbbnX7Fl34AO3COebwUlPjU58ckrtzwrAm2T+Gk M4cHecPh6Y5cG4bAggd76eqBbJe54EXbS4ARZwuXaCB0NTe8TlCgC5KGnvYAKxxq 1kyC9S7AzlpdKMUR+/wYfSvoWQhgZ6TJ5Kd3CZnxQUg4MK3Y+KCaIksVmUHPCyuo p/7MwraV/qSG8MlSqF21eONYOwn/kktiaezoLZR/loPscpqSPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO4uxnUu2vGiLA/kI18ggCbsBw2xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMzViYjMzZGItMDQ4YS0z N2E1LTkyZTYtY2VmMzRkYjllMjVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkOFZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJOHsRk5FTdRCtHw8iH/AgC/09o4QgONqOYeKcF/5xtZbsRBvpQmcWqx NWp2useC+zLgBof96QmAaUOKhyqc33NyRxwiTvgJSOyjO0NLjNRTDmiDO9t+YLEF rYJoktzjgvBZgs38J1k8OV6nlq2lGxF1qAP6GZbnvxtZ8NGWLG9h0BcOjgj4KIUg Q2YzFkoDRsTLbzJauBtd9FGzxreo9hZ2P+/xh6iR+/K+xMCX16vyUMNf4alnkHEw smAmILpSiePsVJdUAB63xcPneXAe/8eM21TQ5Z5kE/zE/p23X3jy3j4P8c+5AGoo +15N320ZRj2Lzaued8khcn5vuuLY1T8= -----END CERTIFICATE-----Generated at Mon Apr 13 09:28:24 2026 by rpki-client