$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756/2b93d2a9-8779-3d10-9e6f-ddb702dc8e09.roa File: 2b93d2a9-8779-3d10-9e6f-ddb702dc8e09.roa (raw, json) Hash identifier: 4MaH50sRnPOnTcgMZhh87ttgCAMzuia7XQyCg/Z9jS0= Subject key identifier: A7:A3:35:D6:D8:8B:8D:98:07:FF:67:E0:C2:74:6B:AB:A1:6F:11:FC Certificate issuer: /CN=895b91dd-3a1f-46e8-88e9-1a06a1c88756 Certificate serial: 010D0C9F4328584F4112B5B228383052075214C0 Authority key identifier: 8B:A3:70:CC:C8:96:6C:14:AB:9C:B7:BF:2E:DB:F1:66:BF:63:A8:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756/2b93d2a9-8779-3d10-9e6f-ddb702dc8e09.roa Signing time: Tue 22 Sep 2026 01:00:12 +0000 ROA not before: Tue 22 Sep 2026 01:00:12 +0000 ROA not after: Mon 21 Dec 2026 02:00:12 +0000 asID: 53486 IP address blocks: 209.35.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756/895b91dd-3a1f-46e8-88e9-1a06a1c88756.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756/895b91dd-3a1f-46e8-88e9-1a06a1c88756.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:41:12:b5:b2:28:38:30:52:07:52:14:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=895b91dd-3a1f-46e8-88e9-1a06a1c88756 Validity Not Before: Sep 22 01:00:12 2026 GMT Not After : Dec 21 02:00:12 2026 GMT Subject: CN=592ceb85-fc95-4eaf-b822-75166e3a8c07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:85:07:47:1c:d7:07:ff:8f:dd:03:d7:d3:4c: 08:93:31:9a:af:7a:7b:c0:53:73:b2:b6:23:f2:40: 59:45:7d:75:d9:9c:16:b9:c5:54:76:e2:a8:32:1a: 3c:ef:5a:cf:9f:4a:22:4b:c6:3c:17:38:f1:5b:21: 57:21:31:ef:49:33:c1:54:9b:98:df:8a:91:0c:5d: fe:24:e9:e6:d7:e0:4d:ff:2e:c1:89:05:ae:81:cf: 85:52:d4:a5:a2:c6:43:4f:bc:70:16:ce:7d:37:50: 9c:0b:47:14:91:a2:ae:6f:6b:46:f6:70:33:09:90: 47:03:3f:99:66:63:5a:25:7b:23:bf:b3:5e:88:df: 5a:e5:46:e7:06:23:a7:7d:ce:16:cb:f5:ae:79:ef: d8:01:50:95:2e:aa:09:81:2f:14:eb:b3:32:59:89: e4:04:9c:a2:13:9b:d7:b1:4c:4c:cf:40:9e:86:1d: 39:55:e5:8b:f2:af:fe:3b:c7:bc:29:53:ca:94:4b: d6:eb:4a:56:1f:0c:13:fe:fd:a4:5a:19:f4:2e:f3: ad:8c:34:f9:ec:4d:28:63:c2:d3:b7:e8:da:47:40: bd:eb:46:de:19:3c:a5:6f:5c:0f:d1:25:38:c2:39: bd:e0:4f:fc:c0:6e:07:08:df:ea:6f:80:cd:e7:70: c9:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:A3:35:D6:D8:8B:8D:98:07:FF:67:E0:C2:74:6B:AB:A1:6F:11:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756/2b93d2a9-8779-3d10-9e6f-ddb702dc8e09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756/895b91dd-3a1f-46e8-88e9-1a06a1c88756.crl X509v3 Authority Key Identifier: keyid:8B:A3:70:CC:C8:96:6C:14:AB:9C:B7:BF:2E:DB:F1:66:BF:63:A8:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756.cer sbgp-ipAddrBlock: critical IPv4: 209.35.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:92:cb:ef:9b:7c:59:89:3c:b6:23:33:46:8d:6f:32:52:7b: 83:c6:ef:6e:2a:ba:93:d0:33:a4:a1:65:7d:b1:21:1e:aa:e4: 6c:59:29:80:5f:4b:03:64:d3:91:81:83:4c:53:f6:3b:f2:65: 8a:6c:43:79:04:f5:c7:76:e1:43:bb:cd:e3:8c:a2:a2:34:8c: 19:5b:d6:33:36:85:d6:8d:42:3d:3e:1b:28:02:2e:35:da:37: 46:5e:a7:65:7b:b7:b1:a4:05:c0:9d:e8:18:23:32:fe:bc:36: dc:56:93:57:40:1a:ec:b1:f3:04:eb:94:8c:fb:d3:eb:85:12: 01:cc:5b:71:cb:26:dc:0e:55:f9:af:88:8f:11:b2:21:f8:d6: 67:18:c8:6d:41:d1:06:8e:8b:e5:39:0b:34:a6:2e:1a:31:6b: 8c:43:df:03:1f:f2:07:38:7c:45:2d:2e:05:38:fd:8c:c4:47: 32:ad:12:78:4e:74:de:54:c9:cb:8c:6a:cc:ae:32:09:7c:d9: 4e:16:ed:5a:36:f4:a1:d7:5c:a8:d6:bc:64:5a:88:22:00:92: 86:18:0a:cf:00:a0:36:fc:23:d9:8a:c4:a6:b0:b1:74:a0:2f: 32:c9:de:98:a7:47:83:80:d8:60:7e:8d:82:fc:ed:bf:9a:c0: 28:4a:ef:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9BErWyKDgwUgdSFMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODk1YjkxZGQtM2ExZi00NmU4LTg4ZTktMWEwNmExYzg4 NzU2MB4XDTI2MDkyMjAxMDAxMloXDTI2MTIyMTAyMDAxMlowLzEtMCsGA1UEAxMk NTkyY2ViODUtZmM5NS00ZWFmLWI4MjItNzUxNjZlM2E4YzA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIUHRxzXB/+P3QPX00wIkzGar3p7wFNzsrYj 8kBZRX112ZwWucVUduKoMho871rPn0oiS8Y8FzjxWyFXITHvSTPBVJuY34qRDF3+ JOnm1+BN/y7BiQWugc+FUtSlosZDT7xwFs59N1CcC0cUkaKub2tG9nAzCZBHAz+Z ZmNaJXsjv7NeiN9a5UbnBiOnfc4Wy/Wuee/YAVCVLqoJgS8U67MyWYnkBJyiE5vX sUxMz0Cehh05VeWL8q/+O8e8KVPKlEvW60pWHwwT/v2kWhn0LvOtjDT57E0oY8LT t+jaR0C960beGTylb1wP0SU4wjm94E/8wG4HCN/qb4DN53DJAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKejNdbYi42YB/9n4MJ0a6uhbxH8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84OTVi OTFkZC0zYTFmLTQ2ZTgtODhlOS0xYTA2YTFjODg3NTYvMmI5M2QyYTktODc3OS0z ZDEwLTllNmYtZGRiNzAyZGM4ZTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODk1YjkxZGQtM2ExZi00NmU4LTg4 ZTktMWEwNmExYzg4NzU2Lzg5NWI5MWRkLTNhMWYtNDZlOC04OGU5LTFhMDZhMWM4 ODc1Ni5jcmwwHwYDVR0jBBgwFoAUi6NwzMiWbBSrnLe/LtvxZr9jqMUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84OTViOTFkZC0zYTFmLTQ2ZTgtODhlOS0xYTA2 YTFjODg3NTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0SMgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE2Sy++bfFmJPLYjM0aNbzJSe4PG724qupPQM6ShZX2xIR6q5GxZKYBf SwNk05GBg0xT9jvyZYpsQ3kE9cd24UO7zeOMoqI0jBlb1jM2hdaNQj0+GygCLjXa N0Zep2V7t7GkBcCd6BgjMv68NtxWk1dAGuyx8wTrlIz70+uFEgHMW3HLJtwOVfmv iI8RsiH41mcYyG1B0QaOi+U5CzSmLhoxa4xD3wMf8gc4fEUtLgU4/YzERzKtEnhO dN5UycuMasyuMgl82U4W7Vo29KHXXKjWvGRaiCIAkoYYCs8AoDb8I9mKxKawsXSg LzLJ3pinR4OA2GB+jYL87b+awChK7xM= -----END CERTIFICATE-----Generated at Sun Oct 4 23:20:54 2026 by rpki-client