$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756/2b93d2a9-8779-3d10-9e6f-ddb702dc8e09.roa File: 2b93d2a9-8779-3d10-9e6f-ddb702dc8e09.roa (raw, json) Hash identifier: QDF4RscMW9GZcnT12uGuxq1SzzAgQz4f9znt1ocCJhY= Subject key identifier: 43:95:27:09:D9:84:41:14:4A:98:E9:7A:AE:6B:59:F2:4E:CF:5E:AE Certificate issuer: /CN=895b91dd-3a1f-46e8-88e9-1a06a1c88756 Certificate serial: 010D0C9F4328584DBE6B246AF79B59BCB460EF80 Authority key identifier: 8B:A3:70:CC:C8:96:6C:14:AB:9C:B7:BF:2E:DB:F1:66:BF:63:A8:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756/2b93d2a9-8779-3d10-9e6f-ddb702dc8e09.roa Signing time: Wed 06 May 2026 13:00:30 +0000 ROA not before: Wed 06 May 2026 13:00:30 +0000 ROA not after: Tue 04 Aug 2026 13:00:30 +0000 asID: 53486 IP address blocks: 209.35.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756/895b91dd-3a1f-46e8-88e9-1a06a1c88756.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756/895b91dd-3a1f-46e8-88e9-1a06a1c88756.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:be:6b:24:6a:f7:9b:59:bc:b4:60:ef:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=895b91dd-3a1f-46e8-88e9-1a06a1c88756 Validity Not Before: May 6 13:00:30 2026 GMT Not After : Aug 4 13:00:30 2026 GMT Subject: CN=02fe5d1a-fcb3-4074-8ac4-37b0965199a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:d5:15:ef:c2:3d:fb:77:ad:15:f3:c8:96:39: 7d:34:d8:7e:b3:40:7b:8b:7a:ad:98:d5:d2:ea:ea: 5a:51:29:a0:bc:12:05:91:8d:8d:93:4b:8d:31:f2: 01:a2:6e:a6:7d:8d:e6:9a:07:4a:f1:e4:b9:fd:d0: d3:62:52:be:38:49:d2:31:c0:a5:6a:55:7a:7a:cc: 72:89:ae:ba:15:2a:0d:83:74:25:74:41:b1:b8:66: f7:51:eb:e3:a5:24:db:6f:1c:29:9a:95:0f:2b:0c: 2b:ee:19:32:a4:e3:47:e0:bd:58:2f:f7:3d:66:a7: ff:2c:e5:f2:ea:91:de:b7:94:69:e6:35:10:94:af: 04:16:2a:6e:5a:6e:a3:55:c7:1a:b7:29:11:47:b3: ca:8f:37:a8:1f:4b:72:a5:0d:f6:21:25:f5:8b:f9: a8:49:a6:93:74:4a:6c:77:25:82:0a:63:e8:1b:51: f7:d0:eb:a9:a8:8f:10:17:ad:6e:ae:f7:ba:0b:78: bd:49:78:38:ee:89:29:35:e6:18:76:59:a6:ca:0c: bb:d8:5e:fa:e6:d7:47:ad:de:46:7d:df:df:45:c7: 46:9c:89:d4:be:d6:b9:6b:db:ac:51:26:97:2e:dd: 27:a7:51:09:fc:c9:cf:3c:aa:19:f1:be:51:06:d1: 3c:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:95:27:09:D9:84:41:14:4A:98:E9:7A:AE:6B:59:F2:4E:CF:5E:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756/2b93d2a9-8779-3d10-9e6f-ddb702dc8e09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756/895b91dd-3a1f-46e8-88e9-1a06a1c88756.crl X509v3 Authority Key Identifier: keyid:8B:A3:70:CC:C8:96:6C:14:AB:9C:B7:BF:2E:DB:F1:66:BF:63:A8:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756.cer sbgp-ipAddrBlock: critical IPv4: 209.35.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:ec:ea:ed:0c:93:bd:f6:fc:2f:3d:6f:f5:92:02:a4:e2:4f: 28:03:10:aa:5c:f6:9f:44:e5:78:7e:5d:cc:ed:53:25:fb:85: 2d:2f:b1:98:ac:6c:95:84:41:6a:3d:28:3a:10:fa:3a:2d:1c: 95:3c:dc:ea:99:ad:d1:06:4e:74:21:cc:6f:d4:ef:98:e4:bc: 50:f1:45:17:d6:29:83:37:c7:62:0b:23:40:83:90:c7:66:90: ad:3c:61:e2:c1:1c:28:b7:33:20:5a:c4:c3:78:d2:14:b4:bd: 13:25:58:12:e6:c9:75:c7:43:7a:19:51:02:a9:90:78:a4:f0: 9e:9e:c4:ce:48:a9:3e:14:a3:93:6c:be:b1:e7:a0:74:24:84: 40:23:00:32:9f:26:da:84:75:f0:18:97:b4:38:39:44:c8:c9: 9c:c9:55:77:dc:4c:a5:5c:c0:1a:0a:ec:34:9e:37:ce:c0:6a: 37:ff:04:80:30:f0:9e:3d:2d:99:61:29:24:a3:05:8e:42:d9: 70:ca:88:aa:51:c5:5b:b3:61:c5:80:d3:93:8a:89:81:7f:c0: 40:c7:a1:a0:30:f0:20:4e:63:84:b0:40:b1:f8:01:91:74:93: f7:23:a6:63:39:dc:d0:2d:57:40:9f:d6:66:4d:d6:85:f4:19: 93:07:74:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2+ayRq95tZvLRg74AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODk1YjkxZGQtM2ExZi00NmU4LTg4ZTktMWEwNmExYzg4 NzU2MB4XDTI2MDUwNjEzMDAzMFoXDTI2MDgwNDEzMDAzMFowLzEtMCsGA1UEAxMk MDJmZTVkMWEtZmNiMy00MDc0LThhYzQtMzdiMDk2NTE5OWExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2tUV78I9+3etFfPIljl9NNh+s0B7i3qtmNXS 6upaUSmgvBIFkY2Nk0uNMfIBom6mfY3mmgdK8eS5/dDTYlK+OEnSMcClalV6esxy ia66FSoNg3QldEGxuGb3UevjpSTbbxwpmpUPKwwr7hkypONH4L1YL/c9Zqf/LOXy 6pHet5Rp5jUQlK8EFipuWm6jVccatykRR7PKjzeoH0typQ32ISX1i/moSaaTdEps dyWCCmPoG1H30OupqI8QF61urve6C3i9SXg47okpNeYYdlmmygy72F765tdHrd5G fd/fRcdGnInUvta5a9usUSaXLt0np1EJ/MnPPKoZ8b5RBtE85wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEOVJwnZhEEUSpjpeq5rWfJOz16uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84OTVi OTFkZC0zYTFmLTQ2ZTgtODhlOS0xYTA2YTFjODg3NTYvMmI5M2QyYTktODc3OS0z ZDEwLTllNmYtZGRiNzAyZGM4ZTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODk1YjkxZGQtM2ExZi00NmU4LTg4 ZTktMWEwNmExYzg4NzU2Lzg5NWI5MWRkLTNhMWYtNDZlOC04OGU5LTFhMDZhMWM4 ODc1Ni5jcmwwHwYDVR0jBBgwFoAUi6NwzMiWbBSrnLe/LtvxZr9jqMUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84OTViOTFkZC0zYTFmLTQ2ZTgtODhlOS0xYTA2 YTFjODg3NTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0SMgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFzs6u0Mk732/C89b/WSAqTiTygDEKpc9p9E5Xh+XcztUyX7hS0vsZis bJWEQWo9KDoQ+jotHJU83OqZrdEGTnQhzG/U75jkvFDxRRfWKYM3x2ILI0CDkMdm kK08YeLBHCi3MyBaxMN40hS0vRMlWBLmyXXHQ3oZUQKpkHik8J6exM5IqT4Uo5Ns vrHnoHQkhEAjADKfJtqEdfAYl7Q4OUTIyZzJVXfcTKVcwBoK7DSeN87Aajf/BIAw 8J49LZlhKSSjBY5C2XDKiKpRxVuzYcWA05OKiYF/wEDHoaAw8CBOY4SwQLH4AZF0 k/cjpmM53NAtV0Cf1mZN1oX0GZMHdIY= -----END CERTIFICATE-----Generated at Wed May 13 14:06:22 2026 by rpki-client