$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/04dd4315-6a9f-3488-9092-fe5794692979.roa File: 04dd4315-6a9f-3488-9092-fe5794692979.roa (raw, json) Hash identifier: C8uYOsh62VjvaFTw0AVoAhckWkf8XcWzF4tQdKVipf4= Subject key identifier: 0D:89:46:7A:C5:9A:C3:C8:8A:B5:5E:29:AA:34:83:95:9F:92:B5:5A Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584EA796D8761442C9CBE940A340 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/04dd4315-6a9f-3488-9092-fe5794692979.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 6079 IP address blocks: 216.170.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:96:d8:76:14:42:c9:cb:e9:40:a3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=44a7b815-b991-44e4-af83-2fc0fdb6b531 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:17:f9:e4:91:b2:8c:63:46:c8:15:4c:50:f0: d6:0f:fd:62:0d:e7:f3:f4:a1:f4:82:44:94:e2:42: a9:fd:ac:85:22:6b:a9:d1:15:e5:b9:67:36:48:1e: e5:0a:f5:a0:2c:83:2c:77:e4:ff:d0:33:83:0d:ec: 22:f6:fe:27:96:8e:47:15:f7:22:1c:27:7d:41:88: 64:cd:25:4a:33:b3:6a:1d:af:8d:14:ce:a0:68:60: fb:9e:97:74:c5:25:f6:63:9e:bb:8f:83:18:65:7c: fb:2b:aa:7a:a2:67:cf:df:14:8b:f3:32:4e:91:97: 27:9e:b4:ee:01:28:8c:a8:e0:66:ef:ce:7a:41:97: 20:3e:b5:ac:40:33:7c:84:a4:e7:e6:a6:52:3a:39: 64:4a:b8:78:d5:f5:1d:a9:83:d5:16:8b:18:38:24: 50:6f:b6:f2:0e:e3:91:2b:6a:b5:45:ec:eb:cb:61: 47:78:74:fb:ed:96:db:51:b0:58:28:24:3d:ed:b0: d6:06:4f:c2:bf:41:d9:24:37:e4:ab:9b:31:49:86: 85:68:83:62:89:a9:c7:bd:72:69:3d:73:8c:bd:9d: 48:b7:9e:bc:e2:0b:48:39:5c:8e:2f:24:47:23:94: 1f:59:7e:a4:7a:a8:24:f3:66:4a:e3:7a:b3:90:ac: a0:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:89:46:7A:C5:9A:C3:C8:8A:B5:5E:29:AA:34:83:95:9F:92:B5:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/04dd4315-6a9f-3488-9092-fe5794692979.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 216.170.122.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:4c:d0:60:95:92:21:2d:7a:56:ec:7b:b0:9e:94:0e:7d:69: 34:1b:18:ee:68:26:74:1c:7a:6b:b6:ea:16:1d:e3:8a:37:3e: b7:ab:9a:88:dd:7e:a5:c2:42:29:a9:e9:f1:79:fd:5a:20:63: 6d:ac:53:55:5b:da:9c:7c:cd:96:85:71:c9:8f:a5:74:19:d8: 61:83:3d:77:b8:09:f5:ee:8a:f7:e2:a9:ba:77:63:66:df:8f: ec:0d:41:19:17:2b:23:3e:9a:6f:7f:dd:5c:5a:a6:35:c0:ee: 0a:51:45:9a:d8:fb:e4:63:f4:67:b9:c9:e1:e4:01:8f:5a:6a: a4:d0:fd:ac:33:7d:fe:98:26:9f:1f:2e:94:6b:cf:eb:9d:45: 39:e2:5e:e1:5f:43:3a:9b:cb:47:26:44:7b:ea:19:0e:25:e2: 66:87:34:6a:1f:ae:b1:b3:a1:10:ef:8a:2e:00:f1:6b:37:fd: fc:86:db:3b:3a:e6:d1:f3:8d:08:a0:0f:23:75:67:e3:04:5d: 6f:49:67:5c:da:e8:96:17:41:39:b6:f6:c3:14:fa:d3:bf:ea: af:85:80:a0:17:70:2e:dd:04:4a:78:ff:d2:06:7e:0d:40:05: b0:8e:da:03:c2:f3:c4:fb:b3:70:4e:8b:c9:8d:aa:ff:09:2a: 02:8b:a7:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlth2FELJy+lAo0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NDRhN2I4MTUtYjk5MS00NGU0LWFmODMtMmZjMGZkYjZiNTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5xf55JGyjGNGyBVMUPDWD/1iDefz9KH0gkSU 4kKp/ayFImup0RXluWc2SB7lCvWgLIMsd+T/0DODDewi9v4nlo5HFfciHCd9QYhk zSVKM7NqHa+NFM6gaGD7npd0xSX2Y567j4MYZXz7K6p6omfP3xSL8zJOkZcnnrTu ASiMqOBm7856QZcgPrWsQDN8hKTn5qZSOjlkSrh41fUdqYPVFosYOCRQb7byDuOR K2q1Rezry2FHeHT77ZbbUbBYKCQ97bDWBk/Cv0HZJDfkq5sxSYaFaINiianHvXJp PXOMvZ1It5684gtIOVyOLyRHI5QfWX6keqgk82ZK43qzkKygQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA2JRnrFmsPIirVeKao0g5WfkrVaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvMDRkZDQzMTUtNmE5Zi0z NDg4LTkwOTItZmU1Nzk0NjkyOTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2Kp6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGBM0GCVkiEtelbse7CelA59aTQbGO5oJnQcemu26hYd44o3Prermojd fqXCQimp6fF5/VogY22sU1Vb2px8zZaFccmPpXQZ2GGDPXe4CfXuivfiqbp3Y2bf j+wNQRkXKyM+mm9/3VxapjXA7gpRRZrY++Rj9Ge5yeHkAY9aaqTQ/awzff6YJp8f LpRrz+udRTniXuFfQzqby0cmRHvqGQ4l4maHNGofrrGzoRDvii4A8Ws3/fyG2zs6 5tHzjQigDyN1Z+MEXW9JZ1za6JYXQTm29sMU+tO/6q+FgKAXcC7dBEp4/9IGfg1A BbCO2gPC88T7s3BOi8mNqv8JKgKLp8k= -----END CERTIFICATE-----Generated at Tue Sep 1 04:47:19 2026 by rpki-client