$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/520c8bf1-7f7b-32e8-a201-2a5aa8d6fff7.roa File: 520c8bf1-7f7b-32e8-a201-2a5aa8d6fff7.roa (raw, json) Hash identifier: FSi9GltQUMu5YAqq7hJ/PlrQTo3EjNyGgHr4LLY1iis= Subject key identifier: C8:D9:B9:B4:3C:0A:91:10:19:1B:B3:66:85:45:95:85:F7:1D:0D:E4 Certificate issuer: /CN=bc6884d6-b11e-4280-9c4c-8177287d9869 Certificate serial: 010D0C9F4328584F4975665D35707706C311E700 Authority key identifier: 15:C8:EE:BC:17:5F:6B:10:C3:DC:7A:CF:57:D4:D1:F3:90:0F:0E:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/520c8bf1-7f7b-32e8-a201-2a5aa8d6fff7.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 398324 IP address blocks: 206.168.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/bc6884d6-b11e-4280-9c4c-8177287d9869.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/bc6884d6-b11e-4280-9c4c-8177287d9869.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:66:5d:35:70:77:06:c3:11:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc6884d6-b11e-4280-9c4c-8177287d9869 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=1047c4d1-08e5-46c7-aa23-38206aa3060e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:f6:89:4e:9d:30:3c:47:6e:7e:97:2b:b7:c6: e8:2b:9b:4c:1b:d4:f5:ea:bd:6b:5d:03:f8:49:77: 72:28:fc:b1:34:4e:37:a7:16:23:ac:77:c7:6b:f3: 01:30:64:f6:ba:08:c8:50:d0:f1:80:97:e6:08:a7: 90:f3:ea:f1:9d:20:38:34:ab:40:c2:d2:ca:24:1b: e4:01:b1:f7:f6:1b:43:00:aa:ee:9c:53:11:06:1c: f1:3c:41:a1:8d:5b:75:01:1b:18:16:c4:7e:e5:c0: 11:58:29:8c:9d:02:b6:25:64:60:76:fb:83:cf:d0: 29:b9:d9:b2:4b:65:a2:4d:48:79:3e:6b:f5:22:b2: 42:3d:ea:b6:be:5e:8d:d5:31:87:2e:a8:f5:d4:e0: 75:46:49:11:91:60:0a:a0:6a:53:72:d1:e7:d2:d2: 4b:23:0c:93:18:bc:95:4f:a5:65:1b:19:c6:1c:14: dd:6b:82:15:35:19:b9:30:4f:d2:fe:37:fc:4c:b9: 35:2a:9b:2a:af:5b:15:ea:d4:8f:fb:96:62:b6:0e: 59:a7:e5:09:e6:12:6c:92:71:06:87:8f:a9:84:a8: 13:cf:08:11:cf:70:09:c6:98:4a:17:59:c7:75:5d: e3:41:21:0a:e8:8a:67:c9:b7:48:ed:3d:ce:a6:8d: 77:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:D9:B9:B4:3C:0A:91:10:19:1B:B3:66:85:45:95:85:F7:1D:0D:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/520c8bf1-7f7b-32e8-a201-2a5aa8d6fff7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/bc6884d6-b11e-4280-9c4c-8177287d9869.crl X509v3 Authority Key Identifier: keyid:15:C8:EE:BC:17:5F:6B:10:C3:DC:7A:CF:57:D4:D1:F3:90:0F:0E:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869.cer sbgp-ipAddrBlock: critical IPv4: 206.168.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:54:7c:51:65:5a:68:60:40:48:40:9a:44:5e:6f:b8:be:9b: 78:8d:f0:be:43:4c:fd:e1:da:49:b4:9c:01:ef:b2:07:2a:9b: 85:72:b5:79:d9:05:7f:bb:27:6b:39:12:d6:69:89:96:91:68: 2f:00:af:23:4e:ea:3a:cb:87:5e:27:21:39:f3:d4:5c:03:a3: f3:6d:89:66:7e:da:2d:23:5d:c7:07:5e:d1:c7:3a:f3:bc:57: 5e:8a:61:ac:e9:7a:11:e2:86:47:55:1c:2d:cf:52:68:2b:6f: d7:54:80:2a:07:20:ea:86:6c:23:58:1d:d5:c8:0f:7e:08:ad: fc:c7:9e:0c:0c:be:60:ce:f5:53:44:58:ab:3a:1c:c0:62:25: 55:b7:65:d6:71:50:e6:a7:b6:e8:5c:3c:be:a5:ac:20:be:58: b2:b8:53:29:35:6a:5a:95:ad:75:e8:f8:dd:43:e5:a6:43:ed: 02:34:35:e1:e9:cf:a6:b3:60:8d:28:75:5d:e7:cb:06:d2:58: 13:77:30:b2:bc:13:86:88:cb:c4:94:45:91:4b:c6:9d:07:56: 0d:20:fc:37:52:a6:ba:66:75:b9:66:f2:1c:48:c2:02:cc:c2: ba:c5:17:57:e4:db:85:18:07:6b:b7:3b:62:a3:ac:bf:98:9f: 6b:23:de:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdWZdNXB3BsMR5wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmM2ODg0ZDYtYjExZS00MjgwLTljNGMtODE3NzI4N2Q5 ODY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MTA0N2M0ZDEtMDhlNS00NmM3LWFhMjMtMzgyMDZhYTMwNjBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvaJTp0wPEdufpcrt8boK5tMG9T16r1rXQP4 SXdyKPyxNE43pxYjrHfHa/MBMGT2ugjIUNDxgJfmCKeQ8+rxnSA4NKtAwtLKJBvk AbH39htDAKrunFMRBhzxPEGhjVt1ARsYFsR+5cARWCmMnQK2JWRgdvuDz9Apudmy S2WiTUh5Pmv1IrJCPeq2vl6N1TGHLqj11OB1RkkRkWAKoGpTctHn0tJLIwyTGLyV T6VlGxnGHBTda4IVNRm5ME/S/jf8TLk1Kpsqr1sV6tSP+5Zitg5Zp+UJ5hJsknEG h4+phKgTzwgRz3AJxphKF1nHdV3jQSEK6IpnybdI7T3Opo13pwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMjZubQ8CpEQGRuzZoVFlYX3HQ3kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9iYzY4 ODRkNi1iMTFlLTQyODAtOWM0Yy04MTc3Mjg3ZDk4NjkvNTIwYzhiZjEtN2Y3Yi0z MmU4LWEyMDEtMmE1YWE4ZDZmZmY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYmM2ODg0ZDYtYjExZS00MjgwLTlj NGMtODE3NzI4N2Q5ODY5L2JjNjg4NGQ2LWIxMWUtNDI4MC05YzRjLTgxNzcyODdk OTg2OS5jcmwwHwYDVR0jBBgwFoAUFcjuvBdfaxDD3HrPV9TR85APDocwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9iYzY4ODRkNi1iMTFlLTQyODAtOWM0Yy04MTc3 Mjg3ZDk4NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzqgjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJFUfFFlWmhgQEhAmkReb7i+m3iN8L5DTP3h2km0nAHvsgcqm4VytXnZ BX+7J2s5EtZpiZaRaC8AryNO6jrLh14nITnz1FwDo/NtiWZ+2i0jXccHXtHHOvO8 V16KYazpehHihkdVHC3PUmgrb9dUgCoHIOqGbCNYHdXID34IrfzHngwMvmDO9VNE WKs6HMBiJVW3ZdZxUOantuhcPL6lrCC+WLK4Uyk1alqVrXXo+N1D5aZD7QI0NeHp z6azYI0odV3nywbSWBN3MLK8E4aIy8SURZFLxp0HVg0g/DdSprpmdblm8hxIwgLM wrrFF1fk24UYB2u3O2KjrL+Yn2sj3sg= -----END CERTIFICATE-----Generated at Sun Sep 27 14:25:29 2026 by rpki-client