$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/04dd4315-6a9f-3488-9092-fe5794692979.roa File: 04dd4315-6a9f-3488-9092-fe5794692979.roa (raw, json) Hash identifier: H1HqnNo55flojqzLupSv6jDECPMHEjH0d6I1aTg4Akg= Subject key identifier: A2:A5:F5:F1:CC:B0:9C:25:11:0B:C7:A7:C8:0B:E9:04:D2:AD:AB:33 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584DF4DB89B157E887742F8B3380 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/04dd4315-6a9f-3488-9092-fe5794692979.roa Signing time: Tue 26 May 2026 01:00:24 +0000 ROA not before: Tue 26 May 2026 01:00:24 +0000 ROA not after: Mon 24 Aug 2026 01:00:24 +0000 asID: 6079 IP address blocks: 216.170.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 04 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f4:db:89:b1:57:e8:87:74:2f:8b:33:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: May 26 01:00:24 2026 GMT Not After : Aug 24 01:00:24 2026 GMT Subject: CN=a35eafec-5f7d-4cd8-9cde-9192f32c8a7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:0c:e6:3e:12:95:53:e6:97:30:43:a8:73:1e: 74:47:ec:92:a0:13:b5:57:e3:1c:5a:71:78:b4:93: 59:65:79:99:ca:de:ce:29:e2:ae:4f:42:d1:e4:4a: b2:ac:13:7f:bd:d8:01:67:6b:ea:df:8f:fd:53:1f: 69:bf:54:a3:48:fe:a1:87:d2:57:92:64:8b:f0:37: 6c:9e:03:71:4f:5f:28:b3:32:76:cc:bc:51:cf:97: 0e:c6:26:1c:c4:22:65:38:90:04:24:99:86:79:97: 62:40:84:0f:b6:5d:9c:54:70:6b:94:b9:fc:e5:ca: ae:45:4a:20:23:4f:7a:27:45:d3:f1:9b:33:8f:11: 67:8a:69:0c:c0:41:4a:8c:a9:3c:4c:92:4b:7c:c1: f3:41:82:ae:64:04:f1:f0:dc:08:a0:13:49:5a:e2: db:b7:32:db:74:30:20:4d:37:0e:9f:ee:a3:be:61: b4:76:fa:b5:45:9b:22:90:66:b7:86:a3:74:a5:53: 30:4d:89:8c:12:94:ce:88:f4:20:b2:f1:e0:4a:c8: d6:7a:37:8a:4e:34:67:d7:3d:4b:6b:cb:02:4d:52: 24:ef:b2:3f:25:27:94:31:a7:31:c3:9a:fe:9b:78: a4:b2:08:57:f4:02:7c:2e:78:a1:90:b2:a2:49:f7: a7:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:A5:F5:F1:CC:B0:9C:25:11:0B:C7:A7:C8:0B:E9:04:D2:AD:AB:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/04dd4315-6a9f-3488-9092-fe5794692979.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 216.170.122.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:b6:fc:f6:8f:cd:11:96:81:77:82:5c:4a:18:b1:fd:93:da: 74:47:ea:96:3d:ad:2a:7d:27:f3:ec:c4:a4:ce:a0:f0:a1:0d: bb:5a:3d:9c:91:c1:c4:96:cc:a0:1c:bd:92:5a:17:76:5a:74: f2:01:87:f6:ba:b8:f7:63:2c:05:75:ff:16:9e:07:e1:34:94: 02:ed:65:a1:3a:51:3c:b2:27:42:ad:4d:70:1a:6f:8e:c9:b6: 05:6a:91:f2:53:86:80:6b:a9:8d:ed:bc:0a:fa:e0:66:d5:49: ea:4a:7b:08:4a:6e:bc:98:ca:b5:5d:5d:76:6c:fe:71:e2:3f: c9:fb:30:ed:69:a8:bc:c0:aa:2d:29:1c:60:4f:6c:f7:55:30: 19:9e:42:dd:2a:bd:de:a6:d1:ed:20:01:74:16:9c:d9:e6:70: fc:11:43:4c:86:2f:0f:90:cb:46:b3:d8:91:55:ec:4a:bc:da: 1a:58:50:f2:49:88:55:9c:8c:33:b5:f6:78:a7:b3:c7:cb:70: 42:12:7f:eb:fb:57:aa:d6:5f:bb:66:99:13:30:d5:6d:54:33: 11:41:35:58:75:85:d6:1b:ef:03:74:1a:6e:e8:0d:4a:f5:f8: 00:5d:ac:e5:dd:3a:2a:81:6d:f1:f9:b4:c7:b7:28:35:6c:b2: a0:9b:03:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3024mxV+iHdC+LM4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI2MDUyNjAxMDAyNFoXDTI2MDgyNDAxMDAyNFowLzEtMCsGA1UEAxMk YTM1ZWFmZWMtNWY3ZC00Y2Q4LTljZGUtOTE5MmYzMmM4YTdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAzmPhKVU+aXMEOocx50R+ySoBO1V+McWnF4 tJNZZXmZyt7OKeKuT0LR5EqyrBN/vdgBZ2vq34/9Ux9pv1SjSP6hh9JXkmSL8Dds ngNxT18oszJ2zLxRz5cOxiYcxCJlOJAEJJmGeZdiQIQPtl2cVHBrlLn85cquRUog I096J0XT8ZszjxFnimkMwEFKjKk8TJJLfMHzQYKuZATx8NwIoBNJWuLbtzLbdDAg TTcOn+6jvmG0dvq1RZsikGa3hqN0pVMwTYmMEpTOiPQgsvHgSsjWejeKTjRn1z1L a8sCTVIk77I/JSeUMacxw5r+m3iksghX9AJ8LnihkLKiSfenhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKKl9fHMsJwlEQvHp8gL6QTSraszMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvMDRkZDQzMTUtNmE5Zi0z NDg4LTkwOTItZmU1Nzk0NjkyOTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2Kp6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABm2/PaPzRGWgXeCXEoYsf2T2nRH6pY9rSp9J/PsxKTOoPChDbtaPZyR wcSWzKAcvZJaF3ZadPIBh/a6uPdjLAV1/xaeB+E0lALtZaE6UTyyJ0KtTXAab47J tgVqkfJThoBrqY3tvAr64GbVSepKewhKbryYyrVdXXZs/nHiP8n7MO1pqLzAqi0p HGBPbPdVMBmeQt0qvd6m0e0gAXQWnNnmcPwRQ0yGLw+Qy0az2JFV7Eq82hpYUPJJ iFWcjDO19nins8fLcEISf+v7V6rWX7tmmRMw1W1UMxFBNVh1hdYb7wN0Gm7oDUr1 +ABdrOXdOiqBbfH5tMe3KDVssqCbA5w= -----END CERTIFICATE-----Generated at Tue Jun 2 21:41:46 2026 by rpki-client