$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/bca9cd84-b5a9-34b2-983a-541164ef60ba.roa File: bca9cd84-b5a9-34b2-983a-541164ef60ba.roa (raw, json) Hash identifier: uaS4VGafIdP4sJND30oI7u7YnC4n6eUE5nxxkDrGvGY= Subject key identifier: 3B:9D:62:94:33:9B:86:48:F3:3B:F5:52:C3:05:95:10:95:02:40:AC Certificate issuer: /CN=3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc Certificate serial: 010D0C9F4328584F49760348874A38805FF78800 Authority key identifier: 56:34:70:D9:2B:60:85:B1:A7:7C:A0:97:7D:A5:7A:1D:B8:27:54:05 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/bca9cd84-b5a9-34b2-983a-541164ef60ba.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 10497 IP address blocks: 192.86.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:03:48:87:4a:38:80:5f:f7:88:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=e39384e7-4b1c-45f8-a5aa-6ab6f92d4e2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:b9:85:52:86:2a:3e:b3:61:0b:22:c9:1b:25: 17:60:86:4b:26:7b:34:90:8f:e5:65:39:0c:e8:92: 2a:b9:75:cb:c1:e3:af:6f:24:b3:4e:15:5a:e0:06: 54:6f:f3:8b:b1:b5:92:ff:32:cf:3f:12:6c:1e:5a: 1c:83:b8:1d:11:4f:a5:54:70:1f:62:d3:53:fa:85: 0e:4e:72:91:7e:d7:dd:df:33:be:19:44:a4:35:89: f6:64:59:21:79:d3:4f:d8:a2:e3:2e:c0:55:e8:b1: 48:02:1a:b2:aa:43:ec:51:3b:05:de:0f:bc:5d:7d: 42:99:8b:77:e9:a4:13:c2:11:2d:ec:6e:9b:1e:80: f7:fc:c8:77:ab:14:4b:2f:da:e2:7a:74:ff:90:b2: ca:47:8d:82:fe:90:ba:9d:f6:b6:91:93:de:26:94: a8:01:17:ea:13:29:f5:e1:8e:f8:5b:13:f8:03:7a: b3:dd:e4:b2:2b:20:1b:44:61:8a:b6:ac:f2:03:be: 0f:68:04:53:63:73:87:c3:4b:97:a5:68:7a:90:55: 9c:f0:45:ce:3d:55:1d:b4:8f:94:a1:91:3f:96:97: 7c:2e:86:9e:11:69:4d:11:65:3b:36:db:be:24:2a: e9:6b:d7:94:46:67:a2:19:97:a6:84:55:aa:4e:81: ad:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:9D:62:94:33:9B:86:48:F3:3B:F5:52:C3:05:95:10:95:02:40:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/bca9cd84-b5a9-34b2-983a-541164ef60ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.crl X509v3 Authority Key Identifier: keyid:56:34:70:D9:2B:60:85:B1:A7:7C:A0:97:7D:A5:7A:1D:B8:27:54:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.cer sbgp-ipAddrBlock: critical IPv4: 192.86.97.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:75:de:b0:8a:fb:98:b2:fe:b4:79:5c:31:47:7a:9b:ea:fe: a0:3c:d1:7d:67:80:52:14:ac:a0:85:1d:49:8e:39:e6:6f:56: 33:66:c8:10:d5:e1:0c:dc:00:67:d5:ee:8a:da:37:0e:b1:90: 5a:d0:02:70:d5:03:3b:9e:25:e6:00:61:e6:ba:c7:6a:54:ab: a8:4c:17:55:7f:e3:82:d4:9f:6d:85:a6:b1:df:11:38:06:66: 94:75:2c:a4:08:d1:7c:5b:db:5d:43:c7:e4:82:54:fc:e7:69: 71:03:72:2e:30:cc:84:d9:e7:59:b2:a1:f6:15:fd:94:49:d0: 9f:92:d4:86:dc:d3:70:ff:8a:38:92:7b:38:0e:bd:5c:55:e8: d5:ae:b9:0a:c1:65:e9:18:8d:f9:5b:05:67:bc:a3:37:5c:67: a9:81:86:1a:b9:88:68:0c:8f:ab:56:63:16:e3:8e:bb:aa:19: d4:34:35:e9:f1:c7:f4:e6:7a:5e:69:e6:1f:1e:f4:53:98:4e: 48:27:95:1a:6a:0a:6c:65:6b:5d:aa:c4:76:17:60:f4:82:ea: 84:7b:65:e7:d4:cc:8f:85:5d:90:91:3c:b7:5b:b1:1f:c3:ef: 01:15:c5:e9:dd:7b:22:0e:9f:e1:4f:6c:47:5c:40:65:b6:0d: 98:f9:34:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdgNIh0o4gF/3iAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2I2MzVmZGQtODFhNy00YzVkLThmOTAtOWU3NTEzYjNk Y2RjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZTM5Mzg0ZTctNGIxYy00NWY4LWE1YWEtNmFiNmY5MmQ0ZTJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibmFUoYqPrNhCyLJGyUXYIZLJns0kI/lZTkM 6JIquXXLweOvbySzThVa4AZUb/OLsbWS/zLPPxJsHlocg7gdEU+lVHAfYtNT+oUO TnKRftfd3zO+GUSkNYn2ZFkhedNP2KLjLsBV6LFIAhqyqkPsUTsF3g+8XX1CmYt3 6aQTwhEt7G6bHoD3/Mh3qxRLL9rienT/kLLKR42C/pC6nfa2kZPeJpSoARfqEyn1 4Y74WxP4A3qz3eSyKyAbRGGKtqzyA74PaARTY3OHw0uXpWh6kFWc8EXOPVUdtI+U oZE/lpd8LoaeEWlNEWU7Ntu+JCrpa9eURmeiGZemhFWqToGtNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDudYpQzm4ZI8zv1UsMFlRCVAkCsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zYjYz NWZkZC04MWE3LTRjNWQtOGY5MC05ZTc1MTNiM2RjZGMvYmNhOWNkODQtYjVhOS0z NGIyLTk4M2EtNTQxMTY0ZWY2MGJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2I2MzVmZGQtODFhNy00YzVkLThm OTAtOWU3NTEzYjNkY2RjLzNiNjM1ZmRkLTgxYTctNGM1ZC04ZjkwLTllNzUxM2Iz ZGNkYy5jcmwwHwYDVR0jBBgwFoAUVjRw2StghbGnfKCXfaV6HbgnVAUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zYjYzNWZkZC04MWE3LTRjNWQtOGY5MC05ZTc1 MTNiM2RjZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFZhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE513rCK+5iy/rR5XDFHepvq/qA80X1ngFIUrKCFHUmOOeZvVjNmyBDV 4QzcAGfV7oraNw6xkFrQAnDVAzueJeYAYea6x2pUq6hMF1V/44LUn22FprHfETgG ZpR1LKQI0Xxb211Dx+SCVPznaXEDci4wzITZ51myofYV/ZRJ0J+S1Ibc03D/ijiS ezgOvVxV6NWuuQrBZekYjflbBWe8ozdcZ6mBhhq5iGgMj6tWYxbjjruqGdQ0Nenx x/Tmel5p5h8e9FOYTkgnlRpqCmxla12qxHYXYPSC6oR7ZefUzI+FXZCRPLdbsR/D 7wEVxendeyIOn+FPbEdcQGW2DZj5NCc= -----END CERTIFICATE-----Generated at Tue Sep 29 09:47:56 2026 by rpki-client