$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/23bbfb9d-aa3f-3326-8064-8a682a791830.roa File: 23bbfb9d-aa3f-3326-8064-8a682a791830.roa (raw, json) Hash identifier: iZ6XepfbOuynmG6lpTxLqjLrFfm1JhzE1LzvLqzjl8s= Subject key identifier: 01:17:94:2C:33:31:4C:92:61:83:CA:E7:5D:01:D4:A8:FD:90:E8:F4 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584D1BCD886B22874D4E8299B220 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/23bbfb9d-aa3f-3326-8064-8a682a791830.roa Signing time: Mon 09 Mar 2026 07:02:31 +0000 ROA not before: Mon 09 Mar 2026 07:02:31 +0000 ROA not after: Sun 07 Jun 2026 07:02:31 +0000 asID: 215305 IP address blocks: 69.91.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1b:cd:88:6b:22:87:4d:4e:82:99:b2:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Mar 9 07:02:31 2026 GMT Not After : Jun 7 07:02:31 2026 GMT Subject: CN=a43e56ff-6cb9-42a2-92f9-96f4aa82714d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:84:96:99:3e:fb:ba:c6:28:a6:26:b6:34:b6: 50:ac:7e:20:6a:f2:05:2d:5b:2b:d9:05:6c:9c:be: ac:13:d0:e3:33:c9:a8:16:02:95:4e:98:9a:75:99: e0:d8:f9:f6:66:02:8c:45:6d:b4:30:c5:e0:9a:14: 82:39:b7:fe:ef:94:ae:b1:99:9c:99:1f:67:b2:63: 04:5c:c2:7f:2d:d3:c8:fe:bb:be:03:17:87:17:0d: 62:73:ee:a9:ac:39:04:a8:71:9b:aa:02:7b:67:bf: ce:f8:cf:bd:de:b1:cd:df:52:c3:e8:cd:18:d0:5a: 03:d7:a5:9b:a0:e6:6e:05:be:4f:66:fd:87:40:5a: 1f:18:26:45:e3:4f:30:ff:aa:d7:0c:89:07:44:8a: 3e:73:5f:18:44:46:21:97:81:cd:be:e0:3c:05:9a: fb:fd:d4:e5:3d:b3:66:75:65:45:11:bf:5b:f4:44: 0a:d4:a8:e4:a5:64:45:0a:39:5a:02:50:dc:86:1b: 56:99:8e:ec:4d:77:9a:15:17:81:3b:72:2b:ad:b8: eb:69:25:fa:cd:33:35:3b:2e:94:f5:0a:78:f9:90: 47:c7:cb:87:46:de:2e:fe:03:9e:18:d9:f1:c7:c1: ce:96:37:4b:12:58:33:31:fc:9e:fd:95:a2:56:45: 9c:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:17:94:2C:33:31:4C:92:61:83:CA:E7:5D:01:D4:A8:FD:90:E8:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/23bbfb9d-aa3f-3326-8064-8a682a791830.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 69.91.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:af:7e:b1:5a:7e:73:c7:80:f9:e0:b1:66:63:0f:c7:b7:c2: 0b:26:7d:79:30:64:d5:31:bb:76:a5:23:e5:0c:ab:d6:f5:9d: 81:7f:80:af:46:f1:1d:43:3d:70:63:79:5c:ae:10:10:3c:b1: 95:9e:e8:5d:1e:6f:0e:f7:2a:b7:d8:9b:ff:48:9f:7e:8a:ce: 3f:2e:71:c7:2c:67:2f:43:9d:6e:0b:1a:a4:95:a9:24:91:c0: 53:85:ee:b1:cd:25:b9:19:36:94:cb:f7:e4:c8:fd:29:ad:5b: e4:22:d1:09:d4:5d:40:8a:83:3a:da:38:a3:7c:53:be:ca:7e: 7b:fc:ca:30:8e:1e:98:83:32:6a:d0:72:ba:1e:52:3f:11:8a: 08:63:bf:e4:3d:f4:86:fe:40:e3:ad:ca:82:80:dd:77:50:fe: d9:3e:cc:ce:2f:e5:d4:ee:f3:16:d5:85:78:ef:6b:c4:5c:e9: 15:84:7d:8d:99:9f:dd:eb:73:ed:c9:c0:2c:ac:3f:16:12:71: 69:52:b3:29:79:e1:64:87:4e:c7:8c:51:b9:fb:71:e2:53:c2: ea:84:8b:87:94:88:75:4d:b7:ec:14:d0:1b:85:23:79:05:9c: 32:5c:d8:4d:90:52:df:db:ee:a0:e7:19:96:3d:3c:f8:77:f4: cc:00:ca:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0bzYhrIodNToKZsiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI2MDMwOTA3MDIzMVoXDTI2MDYwNzA3MDIzMVowLzEtMCsGA1UEAxMk YTQzZTU2ZmYtNmNiOS00MmEyLTkyZjktOTZmNGFhODI3MTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA04SWmT77usYopia2NLZQrH4gavIFLVsr2QVs nL6sE9DjM8moFgKVTpiadZng2Pn2ZgKMRW20MMXgmhSCObf+75SusZmcmR9nsmME XMJ/LdPI/ru+AxeHFw1ic+6prDkEqHGbqgJ7Z7/O+M+93rHN31LD6M0Y0FoD16Wb oOZuBb5PZv2HQFofGCZF408w/6rXDIkHRIo+c18YREYhl4HNvuA8BZr7/dTlPbNm dWVFEb9b9EQK1KjkpWRFCjlaAlDchhtWmY7sTXeaFReBO3IrrbjraSX6zTM1Oy6U 9Qp4+ZBHx8uHRt4u/gOeGNnxx8HOljdLElgzMfye/ZWiVkWcNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAEXlCwzMUySYYPK510B1Kj9kOj0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvMjNiYmZiOWQtYWEzZi0z MzI2LTgwNjQtOGE2ODJhNzkxODMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARVueMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGavfrFafnPHgPngsWZjD8e3wgsmfXkwZNUxu3alI+UMq9b1nYF/gK9G 8R1DPXBjeVyuEBA8sZWe6F0ebw73KrfYm/9In36Kzj8ucccsZy9DnW4LGqSVqSSR wFOF7rHNJbkZNpTL9+TI/SmtW+Qi0QnUXUCKgzraOKN8U77Kfnv8yjCOHpiDMmrQ croeUj8Righjv+Q99Ib+QOOtyoKA3XdQ/tk+zM4v5dTu8xbVhXjva8Rc6RWEfY2Z n93rc+3JwCysPxYScWlSsyl54WSHTseMUbn7ceJTwuqEi4eUiHVNt+wU0BuFI3kF nDJc2E2QUt/b7qDnGZY9PPh39MwAyic= -----END CERTIFICATE-----Generated at Wed Mar 11 20:06:10 2026 by rpki-client