$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b2b67f7b-dd68-3772-a536-83a136b8df01.roa File: b2b67f7b-dd68-3772-a536-83a136b8df01.roa (raw, json) Hash identifier: vDFhR5G4+VMs7fCh1nNb8VqSFJUGm1Z8kqIELn7iXJM= Subject key identifier: B9:C9:26:2F:B8:BB:47:45:DA:61:8C:D8:C0:94:BE:9D:09:27:8E:4C Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F497486ED605665F96CDD5800 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b2b67f7b-dd68-3772-a536-83a136b8df01.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 150.195.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:86:ed:60:56:65:f9:6c:dd:58:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=a8e99170-252a-4fbf-921b-a368a2fdf6fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:0c:e4:c8:f8:3c:bb:3a:da:10:9b:80:35:a2: aa:26:00:a9:87:88:1e:5c:79:2e:bd:eb:76:ef:94: bd:5c:e8:ef:a5:15:0b:a8:65:e4:b1:c4:e6:f6:eb: be:ba:4e:3b:4d:ab:e3:2c:0b:f7:82:99:4e:68:e7: 58:36:15:6c:17:d9:dd:b0:5c:e1:18:47:86:13:4f: c8:87:cc:e7:39:fc:27:5f:cd:c9:fe:29:fb:15:da: e3:25:31:55:c4:a9:28:d6:e7:85:81:5a:8d:8b:5c: d6:6b:4c:ba:64:05:d5:d8:52:5b:d9:b4:78:26:19: e8:41:63:34:3f:bd:6e:46:c5:a9:bb:3d:f0:3f:fa: bd:af:68:ca:da:9b:2e:5a:2f:1e:d8:f7:36:0d:79: 73:c0:bb:bf:85:bd:39:0d:a2:fe:f2:b4:6b:45:4a: 4a:24:9c:f1:7c:30:fb:6e:aa:10:8a:0a:f8:13:bd: 80:80:8f:5e:40:ac:aa:d7:7d:a8:9a:97:5d:b9:06: b1:5d:59:02:fd:ef:96:3b:fc:ca:f3:8a:a5:e4:7e: 06:ad:6e:1e:cb:9c:00:90:a1:65:b2:58:bc:54:68: 73:fd:71:4e:fe:c6:59:60:c5:c4:98:d0:04:eb:63: 75:c4:19:de:12:44:ae:39:18:9d:eb:b8:7c:12:fe: ed:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:C9:26:2F:B8:BB:47:45:DA:61:8C:D8:C0:94:BE:9D:09:27:8E:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b2b67f7b-dd68-3772-a536-83a136b8df01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 150.195.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:fe:21:b8:68:3c:0f:b7:5b:c3:c6:40:2e:07:7c:d0:18:e3: fd:87:e2:0a:40:28:87:ac:40:4d:2d:db:8d:0b:6e:c6:3f:9d: 89:2a:a5:9a:4b:ed:9d:0e:47:ee:c4:e3:f2:75:fd:c8:cd:19: 76:84:5f:62:9e:4b:c9:3a:c0:3c:64:2e:b9:d3:ea:46:bb:be: b3:d8:35:04:0b:2f:64:ee:4d:f6:70:e0:f5:8b:fd:71:fe:ae: d4:45:88:c8:8a:2d:7c:e2:23:56:45:f0:1d:84:0f:68:1c:c7: 2e:0e:64:78:7f:a3:24:8f:d8:52:eb:00:07:8c:d3:ed:c6:e6: aa:1e:97:af:31:d9:9f:0e:e9:5c:b0:80:b1:56:b4:cf:6c:5d: 64:c5:73:3d:e6:9e:c1:3c:6b:f3:d7:9c:ee:fa:24:ba:11:07: e4:6c:bd:bb:97:dc:0a:b8:5a:1a:9e:99:61:71:11:68:af:f3: 54:7a:a8:53:8e:bf:4d:34:30:a7:03:df:c5:ac:67:27:b2:3e: a9:2f:d3:62:ed:b2:39:b8:68:92:dc:ca:3b:b9:76:66:dd:5e: 76:8c:13:d2:04:fc:bb:b3:46:44:fe:ac:61:99:cb:4e:5e:96: 68:5c:f2:d0:e7:8f:9e:79:76:05:e9:78:48:86:44:8e:90:ba: c8:7c:43:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdIbtYFZl+WzdWAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YThlOTkxNzAtMjUyYS00ZmJmLTkyMWItYTM2OGEyZmRmNmZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwzkyPg8uzraEJuANaKqJgCph4geXHkuvet2 75S9XOjvpRULqGXkscTm9uu+uk47TavjLAv3gplOaOdYNhVsF9ndsFzhGEeGE0/I h8znOfwnX83J/in7FdrjJTFVxKko1ueFgVqNi1zWa0y6ZAXV2FJb2bR4JhnoQWM0 P71uRsWpuz3wP/q9r2jK2psuWi8e2Pc2DXlzwLu/hb05DaL+8rRrRUpKJJzxfDD7 bqoQigr4E72AgI9eQKyq132ompdduQaxXVkC/e+WO/zK84ql5H4GrW4ey5wAkKFl sli8VGhz/XFO/sZZYMXEmNAE62N1xBneEkSuORid67h8Ev7tnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLnJJi+4u0dF2mGM2MCUvp0JJ45MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYjJiNjdmN2ItZGQ2OC0z NzcyLWE1MzYtODNhMTM2YjhkZjAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlsMjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFv+IbhoPA+3W8PGQC4HfNAY4/2H4gpAKIesQE0t240LbsY/nYkqpZpL 7Z0OR+7E4/J1/cjNGXaEX2KeS8k6wDxkLrnT6ka7vrPYNQQLL2TuTfZw4PWL/XH+ rtRFiMiKLXziI1ZF8B2ED2gcxy4OZHh/oySP2FLrAAeM0+3G5qoel68x2Z8O6Vyw gLFWtM9sXWTFcz3mnsE8a/PXnO76JLoRB+RsvbuX3Aq4WhqemWFxEWiv81R6qFOO v000MKcD38WsZyeyPqkv02Ltsjm4aJLcyju5dmbdXnaME9IE/LuzRkT+rGGZy05e lmhc8tDnj555dgXpeEiGRI6Qush8Q0A= -----END CERTIFICATE-----Generated at Fri Sep 25 09:02:55 2026 by rpki-client