$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a/31cc6585-64bc-3ce7-ba25-02c5c963d659.roa File: 31cc6585-64bc-3ce7-ba25-02c5c963d659.roa (raw, json) Hash identifier: pwa7Y0IQ8m3BpKnNUDyVUQrX/saOyBarvz4dGVgc54Y= Subject key identifier: F0:EA:8B:E1:7D:E5:BE:8A:29:BA:6D:82:85:2A:2B:F3:35:63:D9:83 Certificate issuer: /CN=e8abcb36-7d75-4654-a098-d032ddf03d8a Certificate serial: 010D0C9F4328584D09125DFAAB1531702E540700 Authority key identifier: E5:22:9B:0E:EE:F4:E6:A8:68:D5:13:06:B2:99:9D:E3:8D:58:1C:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a/31cc6585-64bc-3ce7-ba25-02c5c963d659.roa Signing time: Mon 02 Mar 2026 14:00:41 +0000 ROA not before: Mon 02 Mar 2026 14:00:41 +0000 ROA not after: Sun 31 May 2026 13:00:41 +0000 asID: 16509 IP address blocks: 174.34.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a/e8abcb36-7d75-4654-a098-d032ddf03d8a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a/e8abcb36-7d75-4654-a098-d032ddf03d8a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:12:5d:fa:ab:15:31:70:2e:54:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8abcb36-7d75-4654-a098-d032ddf03d8a Validity Not Before: Mar 2 14:00:41 2026 GMT Not After : May 31 13:00:41 2026 GMT Subject: CN=d49773a2-3670-493f-a44b-12a05c06bc6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ef:58:eb:38:f9:35:ac:e0:8a:5d:72:09:c4: 82:65:e7:b0:39:a0:b3:b9:c4:43:d0:8c:d9:fb:28: f9:ce:16:fd:25:aa:3a:84:b6:83:29:be:dd:12:b9: d7:25:6b:9a:db:17:d4:6b:04:68:b0:0e:90:a5:e4: b0:b0:f4:22:1c:e5:7b:7a:df:d5:b4:52:8a:0a:62: db:8a:67:8b:06:c4:a9:20:5f:52:a2:c2:6c:bd:7f: b5:28:1e:28:52:b9:d2:ca:31:63:e0:48:4e:ee:66: 4c:9d:d0:53:ff:a1:28:70:7e:9a:ca:3b:93:09:ac: 1b:64:72:c7:4e:d0:80:6a:ee:9f:11:0e:ad:1b:9e: 9b:7a:a4:88:37:29:79:3e:5f:c5:d4:76:ac:08:6a: 19:f4:f9:fa:ae:bd:f3:7d:ad:f8:c4:9b:1e:09:ea: 64:f6:d3:2a:62:b6:a3:67:3f:d3:4a:d7:35:d2:df: 8b:4c:5d:3c:5b:0a:f3:79:d0:25:9a:fe:e7:2d:a2: ff:1a:82:7c:78:bc:11:5a:d3:b9:2d:8b:59:e7:67: 1b:27:55:6a:7f:79:cf:ca:b5:b0:9b:2a:b4:ff:a2: b4:51:17:b6:2c:9c:5b:87:d8:81:fb:de:0d:f2:99: 96:b9:68:a8:fd:22:01:e2:03:97:7b:76:9f:69:d6: a6:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:EA:8B:E1:7D:E5:BE:8A:29:BA:6D:82:85:2A:2B:F3:35:63:D9:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a/31cc6585-64bc-3ce7-ba25-02c5c963d659.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a/e8abcb36-7d75-4654-a098-d032ddf03d8a.crl X509v3 Authority Key Identifier: keyid:E5:22:9B:0E:EE:F4:E6:A8:68:D5:13:06:B2:99:9D:E3:8D:58:1C:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a.cer sbgp-ipAddrBlock: critical IPv4: 174.34.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:00:30:cd:96:0e:65:9f:f8:4a:10:92:87:48:46:00:26:eb: 0b:f7:70:62:2d:1b:0b:87:5a:e8:13:da:33:c7:15:48:dd:c3: 3f:0b:fb:29:d0:73:de:7e:69:ce:bd:f2:b9:70:7e:4a:d0:bb: 53:c3:f7:39:fc:ac:06:5a:2d:4d:42:b8:63:11:be:36:ad:83: 99:7a:18:9d:23:fe:25:70:61:52:01:d0:e5:87:0e:54:fc:c6: 53:e5:e8:4e:1f:5a:5c:27:69:25:10:b8:f3:5f:aa:dc:d3:a8: 4e:a3:77:42:d0:84:57:ff:e3:e8:fb:60:ee:de:4f:c9:53:5a: d4:d2:2f:31:4d:38:0d:53:17:3b:54:c1:f6:32:ca:fb:ad:d0: c6:77:6c:cc:a6:2b:61:8c:60:6a:8f:06:0f:ca:1f:10:42:13: d8:c4:a7:3a:58:51:fe:71:a8:fc:e6:f0:bd:c3:2e:f4:5f:a0: 35:27:71:77:f8:67:26:b9:c6:94:1b:d6:64:f1:2d:68:0d:c6: 41:ab:f6:89:d3:16:9e:fc:46:18:9d:81:f5:d6:e8:07:1e:3f: d4:be:68:09:04:b1:c3:8e:2f:a6:90:77:25:89:6e:f7:bb:e4: a4:5e:c8:05:6b:5a:03:a9:8e:a8:3d:f0:03:32:c0:63:19:7d: b4:4a:0e:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0JEl36qxUxcC5UBwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZThhYmNiMzYtN2Q3NS00NjU0LWEwOTgtZDAzMmRkZjAz ZDhhMB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk ZDQ5NzczYTItMzY3MC00OTNmLWE0NGItMTJhMDVjMDZiYzZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAte9Y6zj5Nazgil1yCcSCZeewOaCzucRD0IzZ +yj5zhb9Jao6hLaDKb7dErnXJWua2xfUawRosA6QpeSwsPQiHOV7et/VtFKKCmLb imeLBsSpIF9SosJsvX+1KB4oUrnSyjFj4EhO7mZMndBT/6EocH6ayjuTCawbZHLH TtCAau6fEQ6tG56beqSINyl5Pl/F1HasCGoZ9Pn6rr3zfa34xJseCepk9tMqYraj Zz/TStc10t+LTF08WwrzedAlmv7nLaL/GoJ8eLwRWtO5LYtZ52cbJ1Vqf3nPyrWw myq0/6K0URe2LJxbh9iB+94N8pmWuWio/SIB4gOXe3afadamCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPDqi+F95b6KKbptgoUqK/M1Y9mDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lOGFi Y2IzNi03ZDc1LTQ2NTQtYTA5OC1kMDMyZGRmMDNkOGEvMzFjYzY1ODUtNjRiYy0z Y2U3LWJhMjUtMDJjNWM5NjNkNjU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZThhYmNiMzYtN2Q3NS00NjU0LWEw OTgtZDAzMmRkZjAzZDhhL2U4YWJjYjM2LTdkNzUtNDY1NC1hMDk4LWQwMzJkZGYw M2Q4YS5jcmwwHwYDVR0jBBgwFoAU5SKbDu705qho1RMGspmd441YHB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9lOGFiY2IzNi03ZDc1LTQ2NTQtYTA5OC1kMDMy ZGRmMDNkOGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAriLhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAEAMM2WDmWf+EoQkodIRgAm6wv3cGItGwuHWugT2jPHFUjdwz8L+ynQ c95+ac698rlwfkrQu1PD9zn8rAZaLU1CuGMRvjatg5l6GJ0j/iVwYVIB0OWHDlT8 xlPl6E4fWlwnaSUQuPNfqtzTqE6jd0LQhFf/4+j7YO7eT8lTWtTSLzFNOA1TFztU wfYyyvut0MZ3bMymK2GMYGqPBg/KHxBCE9jEpzpYUf5xqPzm8L3DLvRfoDUncXf4 Zya5xpQb1mTxLWgNxkGr9onTFp78RhidgfXW6AceP9S+aAkEscOOL6aQdyWJbve7 5KReyAVrWgOpjqg98AMywGMZfbRKDns= -----END CERTIFICATE-----Generated at Thu Mar 19 12:33:21 2026 by rpki-client