$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8889e625-ceff-37ab-8fa1-2f75cf7d31f6.roa File: 8889e625-ceff-37ab-8fa1-2f75cf7d31f6.roa (raw, json) Hash identifier: ddj8c1NYB15GwNA9uH6Ok8v9QJBmlh+8a67GypAmpJE= Subject key identifier: C5:1C:E8:BE:50:61:2B:46:C0:B2:42:38:B3:AE:9E:F6:B4:E2:18:62 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F4974997CE4E59202E9D743A0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8889e625-ceff-37ab-8fa1-2f75cf7d31f6.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396553 IP address blocks: 192.35.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:99:7c:e4:e5:92:02:e9:d7:43:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=5c62ee3c-ae20-404d-aac0-91120607eff6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:d7:97:94:14:23:22:9d:cf:45:03:5e:2a:d7: 06:ef:6d:91:84:b7:6c:1f:65:92:2b:fe:9f:76:63: 0b:77:08:77:17:50:b2:da:b7:71:4f:f0:b5:db:8f: 99:f6:31:08:f9:04:da:9f:ec:21:bc:12:d5:e7:6f: 06:ce:4f:cb:04:25:12:fa:22:38:e1:f2:75:2e:20: 4f:3f:15:6d:93:88:ba:68:f1:10:8b:de:56:58:a9: 0e:0f:7f:77:0d:75:e0:d3:ef:89:37:2f:19:2a:93: fe:24:6e:c1:2b:8e:b6:01:8e:1d:be:59:55:5f:a9: d3:ae:af:8b:6d:0e:2c:1b:73:42:84:52:41:48:39: 5a:e0:58:2e:a0:5f:a3:ba:b8:92:a1:e3:d4:a4:f6: 44:1f:bc:03:31:a8:0f:ba:f0:d0:21:2f:ee:33:f1: 7e:43:8a:8d:2e:9f:6d:18:60:fd:6a:42:48:27:92: be:d7:35:8e:35:e9:06:9f:09:c6:87:69:5b:0e:12: b8:e6:71:0f:1e:f4:e9:69:7d:ff:25:47:0b:3a:cb: f8:9f:e1:ce:74:4e:e8:13:9f:fe:8a:95:d8:23:05: 42:a9:0d:14:88:b9:ce:62:54:3b:c8:38:0e:f8:1b: 90:cc:d1:3d:bc:2b:b8:e7:33:97:8d:b5:60:89:af: 45:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:1C:E8:BE:50:61:2B:46:C0:B2:42:38:B3:AE:9E:F6:B4:E2:18:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8889e625-ceff-37ab-8fa1-2f75cf7d31f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.35.51.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:3a:7e:14:69:d1:8f:9b:64:00:60:58:58:9e:c2:50:29:0d: e0:a9:f0:08:1a:47:02:11:21:d5:7f:a1:94:94:bb:1a:6b:63: ae:f1:82:4e:cb:34:fb:7c:f2:17:54:8f:1b:d5:32:bf:b9:a1: 63:66:36:0c:73:53:6c:5b:0e:f7:75:06:59:a0:08:9c:8a:28: 29:6b:22:09:da:3b:73:a6:08:71:aa:5d:9e:e8:8f:4a:ba:e1: 4e:ea:68:bf:9b:7a:3e:c4:87:5a:30:55:80:43:21:4c:0d:3b: 25:71:e7:8a:ff:bc:f7:3c:9a:d2:44:4b:d7:29:c0:76:29:06: 3a:a8:91:6b:36:ec:6c:f1:35:bc:6a:ea:93:24:3c:4d:73:1e: 47:1a:59:36:81:91:b7:91:da:13:fb:9c:da:2c:10:57:4a:3e: 55:44:db:fb:16:e5:f1:e9:6e:be:1a:63:06:76:4f:7b:63:df: 38:0d:54:5f:42:28:d4:d8:dd:a7:72:ad:3c:de:70:c8:83:24: 52:5c:ff:76:70:cc:57:b1:93:b4:5d:84:f9:03:89:91:de:e5: 38:40:74:47:91:cc:5f:ac:0b:3d:c6:52:ec:b4:cc:73:8a:c8: c9:8e:21:e1:6b:19:79:de:6e:27:3e:83:92:b5:3a:8d:c7:c8: fb:57:2a:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdJl85OWSAunXQ6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NWM2MmVlM2MtYWUyMC00MDRkLWFhYzAtOTExMjA2MDdlZmY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNeXlBQjIp3PRQNeKtcG722RhLdsH2WSK/6f dmMLdwh3F1Cy2rdxT/C124+Z9jEI+QTan+whvBLV528Gzk/LBCUS+iI44fJ1LiBP PxVtk4i6aPEQi95WWKkOD393DXXg0++JNy8ZKpP+JG7BK462AY4dvllVX6nTrq+L bQ4sG3NChFJBSDla4FguoF+juriSoePUpPZEH7wDMagPuvDQIS/uM/F+Q4qNLp9t GGD9akJIJ5K+1zWONekGnwnGh2lbDhK45nEPHvTpaX3/JUcLOsv4n+HOdE7oE5/+ ipXYIwVCqQ0UiLnOYlQ7yDgO+BuQzNE9vCu45zOXjbVgia9FAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMUc6L5QYStGwLJCOLOunva04hhiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODg4OWU2MjUtY2VmZi0z N2FiLThmYTEtMmY3NWNmN2QzMWY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCMzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIc6fhRp0Y+bZABgWFiewlApDeCp8AgaRwIRIdV/oZSUuxprY67xgk7L NPt88hdUjxvVMr+5oWNmNgxzU2xbDvd1BlmgCJyKKClrIgnaO3OmCHGqXZ7oj0q6 4U7qaL+bej7Eh1owVYBDIUwNOyVx54r/vPc8mtJES9cpwHYpBjqokWs27GzxNbxq 6pMkPE1zHkcaWTaBkbeR2hP7nNosEFdKPlVE2/sW5fHpbr4aYwZ2T3tj3zgNVF9C KNTY3adyrTzecMiDJFJc/3ZwzFexk7RdhPkDiZHe5ThAdEeRzF+sCz3GUuy0zHOK yMmOIeFrGXnebic+g5K1Oo3HyPtXKuU= -----END CERTIFICATE-----Generated at Fri Sep 25 06:48:04 2026 by rpki-client