$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/35f7ada9-1c77-3d7e-8e32-048a015c2c12.roa File: 35f7ada9-1c77-3d7e-8e32-048a015c2c12.roa (raw, json) Hash identifier: 21/rGDhOtnJBlWEiQBBjd3zQYFoX4IpbNLdGZLJb/O4= Subject key identifier: 04:4C:14:33:E1:4C:E8:C6:C3:3D:BA:77:7D:E6:FE:CE:0D:02:4F:D3 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584D1B1A01FE21D9D391DB2C7EC0 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/35f7ada9-1c77-3d7e-8e32-048a015c2c12.roa Signing time: Mon 09 Mar 2026 01:00:32 +0000 ROA not before: Mon 09 Mar 2026 01:00:32 +0000 ROA not after: Sun 07 Jun 2026 01:00:32 +0000 asID: 16417 IP address blocks: 204.15.80.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 21 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1b:1a:01:fe:21:d9:d3:91:db:2c:7e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Mar 9 01:00:32 2026 GMT Not After : Jun 7 01:00:32 2026 GMT Subject: CN=1b0a85ee-3065-40cd-83b7-f81e973f73b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:bc:ea:99:f4:fb:9c:d6:3e:28:15:8f:42:4f: 77:d9:99:9a:5a:f1:50:4c:d8:53:b3:47:70:f3:d3: ec:74:95:55:0e:3e:6f:38:17:41:b2:a6:b1:3e:35: f8:49:0e:a0:b0:32:e5:2d:4a:00:99:3c:4f:73:ab: e9:ea:4d:ab:41:96:6f:45:a2:ba:50:5a:cb:1f:8d: 15:6c:58:3d:f9:2c:c0:dd:fc:d5:ab:44:5d:1a:79: e0:aa:07:f8:c8:ad:e7:4b:90:f4:f3:bb:ec:f3:1d: 48:f8:47:76:a6:6c:86:b5:ec:71:5d:87:5b:69:cc: 3a:40:b3:e6:5e:7b:90:66:c0:a7:89:e5:4f:15:f6: 1b:75:54:e4:bf:69:9a:47:ee:9f:d0:4b:91:34:b5: 94:74:e3:b7:a6:ac:25:41:41:cb:55:e0:8f:48:c6: 87:67:f1:38:40:fa:f6:05:3a:93:04:92:f9:0e:75: 47:2f:e9:06:14:d4:b4:b6:2c:f0:30:07:5b:23:fe: 35:77:37:b6:ef:36:52:88:d9:44:2e:30:3f:bb:c2: 52:77:29:f8:aa:ee:8d:21:91:01:36:b0:5b:88:c2: a9:bf:36:cc:46:36:ac:90:fb:bf:97:3f:f8:84:f5: 31:26:f0:13:f8:54:5f:e6:64:52:7f:2a:7f:47:8b: 18:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:4C:14:33:E1:4C:E8:C6:C3:3D:BA:77:7D:E6:FE:CE:0D:02:4F:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/35f7ada9-1c77-3d7e-8e32-048a015c2c12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 204.15.80.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:34:1b:4a:1a:3b:d3:79:84:59:a1:f0:bc:61:a3:46:1c:e5: fe:7a:6d:59:41:35:92:4f:7d:ab:28:f1:e5:6c:ab:27:c4:e7: b4:43:81:35:c7:19:01:ef:b1:80:d2:46:2d:e8:ad:d8:6a:5f: b6:63:de:0c:19:f9:fd:b0:c1:92:3c:23:29:3b:c7:1a:dd:74: 42:7c:fd:b3:f5:de:1d:98:b2:b1:12:0d:81:b4:e2:56:6e:04: 78:c1:d6:60:f4:7e:63:77:7d:58:9a:60:fb:75:c4:75:af:29: 18:60:2e:17:d1:00:22:54:1a:67:87:cc:f7:e3:bb:b7:14:1c: 7b:c4:5a:6c:bd:63:99:61:1e:ea:d4:0d:a3:d1:ec:14:54:e4: 51:1c:bf:39:88:81:ec:b1:30:93:d3:16:9b:53:11:0e:c1:dc: 7e:96:ec:23:9c:17:af:77:1e:e5:71:25:4a:bc:a7:35:11:ba: 30:c5:b5:08:36:cf:21:08:62:8b:97:e9:4a:f5:ab:86:8a:84: 74:50:14:92:8a:25:90:56:fd:94:96:da:2e:b2:c9:25:d8:8a: ec:1e:14:cb:61:bd:0d:14:b9:70:f2:cd:d7:30:74:1e:1c:2e: c9:e8:66:72:38:e7:b9:42:49:9d:0b:03:ec:0a:8e:22:dc:8a: b7:b8:e6:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0bGgH+IdnTkdssfsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk MWIwYTg1ZWUtMzA2NS00MGNkLTgzYjctZjgxZTk3M2Y3M2I1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2LzqmfT7nNY+KBWPQk932ZmaWvFQTNhTs0dw 89PsdJVVDj5vOBdBsqaxPjX4SQ6gsDLlLUoAmTxPc6vp6k2rQZZvRaK6UFrLH40V bFg9+SzA3fzVq0RdGnngqgf4yK3nS5D087vs8x1I+Ed2pmyGtexxXYdbacw6QLPm XnuQZsCnieVPFfYbdVTkv2maR+6f0EuRNLWUdOO3pqwlQUHLVeCPSMaHZ/E4QPr2 BTqTBJL5DnVHL+kGFNS0tizwMAdbI/41dze27zZSiNlELjA/u8JSdyn4qu6NIZEB NrBbiMKpvzbMRjaskPu/lz/4hPUxJvAT+FRf5mRSfyp/R4sYQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFARMFDPhTOjGwz26d33m/s4NAk/TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvMzVmN2FkYTktMWM3Ny0z ZDdlLThlMzItMDQ4YTAxNWMyYzEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzA9QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIE0G0oaO9N5hFmh8Lxho0Yc5f56bVlBNZJPfaso8eVsqyfE57RDgTXH GQHvsYDSRi3ordhqX7Zj3gwZ+f2wwZI8Iyk7xxrddEJ8/bP13h2YsrESDYG04lZu BHjB1mD0fmN3fViaYPt1xHWvKRhgLhfRACJUGmeHzPfju7cUHHvEWmy9Y5lhHurU DaPR7BRU5FEcvzmIgeyxMJPTFptTEQ7B3H6W7COcF693HuVxJUq8pzURujDFtQg2 zyEIYouX6Ur1q4aKhHRQFJKKJZBW/ZSW2i6yySXYiuweFMthvQ0UuXDyzdcwdB4c LsnoZnI457lCSZ0LA+wKjiLcire45kw= -----END CERTIFICATE-----Generated at Thu Mar 19 21:39:44 2026 by rpki-client