$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/85f38b04-ad15-3524-b975-d2b3e17da9f9.roa File: 85f38b04-ad15-3524-b975-d2b3e17da9f9.roa (raw, json) Hash identifier: 8Hizat1nqKgbnnv7FEjlm63AKOZQZEr/oIArMzYUAbg= Subject key identifier: 23:14:B8:DE:48:19:30:0E:EC:3A:2C:90:DB:DF:88:7B:31:3C:47:22 Certificate issuer: /CN=3c1b9e2d-457a-403f-9256-27f272ed993d Certificate serial: 010D0C9F4328584F4974B50B49B94731BEAE4E00 Authority key identifier: EE:DF:25:D2:42:4C:99:1F:D5:04:B3:D0:D3:64:9E:B5:B5:6A:72:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/85f38b04-ad15-3524-b975-d2b3e17da9f9.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16509 IP address blocks: 192.135.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:b5:0b:49:b9:47:31:be:ae:4e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c1b9e2d-457a-403f-9256-27f272ed993d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=36c7774b-0d5f-45d8-af31-ae3991f4287e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:2a:d6:6d:45:6d:df:1e:02:28:5e:ad:bd:01: d4:61:73:c8:50:73:e5:d8:2b:a3:12:1e:bd:5a:29: 9b:1d:c6:29:a6:12:58:3f:de:34:c6:51:80:07:9b: 75:8b:59:02:bb:d5:f4:01:bb:ea:a8:ab:61:84:c8: d6:ec:4d:c2:6f:49:b4:53:f3:38:3e:83:33:c3:d4: 87:91:ee:6c:1e:be:23:8c:ae:f6:97:a4:51:b2:cc: 41:59:34:bb:05:a5:fd:32:8e:49:6c:1c:6c:86:58: 95:6f:4a:62:11:44:e8:60:31:6a:9d:af:1b:6f:18: 0e:3a:9b:2e:87:20:8b:0e:6b:97:dd:44:51:1a:2a: 82:da:43:a2:56:6b:ed:7b:4f:74:9b:84:2e:1c:e2: 4b:bb:00:6b:f4:0f:f2:e7:48:c4:a0:fc:82:7a:32: dd:4d:09:dd:3b:98:b7:59:84:49:8b:6e:e9:59:01: 64:a1:9c:e6:9e:b1:6e:f1:74:a1:21:64:ef:8a:40: 1e:dc:54:25:2f:f8:1e:f2:ea:ad:cd:2e:92:94:3e: f2:7e:84:20:83:2e:97:51:9b:33:6a:c0:ac:04:be: 02:d3:16:40:48:27:f8:6f:83:29:d3:65:ce:91:0b: 29:63:97:90:9c:3d:3a:4b:5f:6d:23:a6:a7:55:eb: ac:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:14:B8:DE:48:19:30:0E:EC:3A:2C:90:DB:DF:88:7B:31:3C:47:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/85f38b04-ad15-3524-b975-d2b3e17da9f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.crl X509v3 Authority Key Identifier: keyid:EE:DF:25:D2:42:4C:99:1F:D5:04:B3:D0:D3:64:9E:B5:B5:6A:72:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer sbgp-ipAddrBlock: critical IPv4: 192.135.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:73:6a:32:24:6d:c9:dd:65:e2:59:28:36:00:41:6c:80:0f: 19:a4:08:9c:04:92:57:23:69:0c:f5:7f:e4:9a:96:8f:fb:26: d3:e4:92:15:63:01:38:c3:a8:f2:f1:51:44:f3:95:84:ae:a5: 93:17:7d:e0:36:79:6f:8b:eb:21:a0:05:9a:65:11:f6:40:ac: 49:fa:0c:e2:9d:9f:32:8b:c9:13:1c:de:84:d7:d3:9a:b6:ac: c9:ba:04:13:7f:cb:8b:26:3e:02:aa:e0:d0:4a:b2:20:32:3b: 60:59:e0:7f:3a:b8:86:15:9e:c2:88:b7:ca:69:7f:c6:ff:89: b9:39:de:03:1d:c0:8b:6e:1b:cc:fd:de:b4:94:ed:5c:f1:6e: 6c:84:a2:48:ed:6a:f5:2e:d4:b1:87:85:4d:39:17:0f:d0:03: a5:ac:d8:39:2b:53:99:2a:4d:38:31:c1:75:43:8d:0d:78:5d: 1b:0e:2f:b7:04:00:09:94:ec:7f:5f:0a:a4:2e:90:1e:07:cf: 51:79:4a:68:f1:6c:22:c3:e3:87:bb:58:ec:f9:36:f6:07:cc: 35:51:0d:2d:21:a9:99:bf:9d:ab:4b:bb:f4:5e:f9:53:a3:ac: 3a:e8:00:2b:d2:0e:ba:8f:e5:70:54:cf:94:8e:74:60:fa:69: d9:7a:88:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdLULSblHMb6uTgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2MxYjllMmQtNDU3YS00MDNmLTkyNTYtMjdmMjcyZWQ5 OTNkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MzZjNzc3NGItMGQ1Zi00NWQ4LWFmMzEtYWUzOTkxZjQyODdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCrWbUVt3x4CKF6tvQHUYXPIUHPl2CujEh69 WimbHcYpphJYP940xlGAB5t1i1kCu9X0AbvqqKthhMjW7E3Cb0m0U/M4PoMzw9SH ke5sHr4jjK72l6RRssxBWTS7BaX9Mo5JbBxshliVb0piEUToYDFqna8bbxgOOpsu hyCLDmuX3URRGiqC2kOiVmvte090m4QuHOJLuwBr9A/y50jEoPyCejLdTQndO5i3 WYRJi27pWQFkoZzmnrFu8XShIWTvikAe3FQlL/ge8uqtzS6SlD7yfoQggy6XUZsz asCsBL4C0xZASCf4b4Mp02XOkQspY5eQnD06S19tI6anVeusiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCMUuN5IGTAO7DoskNvfiHsxPEciMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zYzFi OWUyZC00NTdhLTQwM2YtOTI1Ni0yN2YyNzJlZDk5M2QvODVmMzhiMDQtYWQxNS0z NTI0LWI5NzUtZDJiM2UxN2RhOWY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2MxYjllMmQtNDU3YS00MDNmLTky NTYtMjdmMjcyZWQ5OTNkLzNjMWI5ZTJkLTQ1N2EtNDAzZi05MjU2LTI3ZjI3MmVk OTkzZC5jcmwwHwYDVR0jBBgwFoAU7t8l0kJMmR/VBLPQ02SetbVqcsMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zYzFiOWUyZC00NTdhLTQwM2YtOTI1Ni0yN2Yy NzJlZDk5M2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwIffMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEJzajIkbcndZeJZKDYAQWyADxmkCJwEklcjaQz1f+Salo/7JtPkkhVj ATjDqPLxUUTzlYSupZMXfeA2eW+L6yGgBZplEfZArEn6DOKdnzKLyRMc3oTX05q2 rMm6BBN/y4smPgKq4NBKsiAyO2BZ4H86uIYVnsKIt8ppf8b/ibk53gMdwItuG8z9 3rSU7VzxbmyEokjtavUu1LGHhU05Fw/QA6Ws2DkrU5kqTTgxwXVDjQ14XRsOL7cE AAmU7H9fCqQukB4Hz1F5SmjxbCLD44e7WOz5NvYHzDVRDS0hqZm/natLu/Re+VOj rDroACvSDrqP5XBUz5SOdGD6adl6iJM= -----END CERTIFICATE-----Generated at Sun Sep 27 12:33:00 2026 by rpki-client