$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/097c44a0-7f9a-36a9-9016-4355a163faf9.roa File: 097c44a0-7f9a-36a9-9016-4355a163faf9.roa (raw, json) Hash identifier: ckUSeypSlWvB1FiZk4t2UEiaVxlcx9v16+yVtxk0dDA= Subject key identifier: 0C:A4:EA:8C:D4:D4:44:BC:EE:73:82:EF:01:AF:EE:02:F4:AF:E4:F7 Certificate issuer: /CN=35ccbd7e-0844-48b1-88d7-0a8ef46e8168 Certificate serial: 010D0C9F4328584F3FAD4234F3156C4B01F44F80 Authority key identifier: 31:67:54:B4:BF:16:7E:AD:F1:F4:10:C1:D9:D2:FA:DA:AA:85:3C:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/097c44a0-7f9a-36a9-9016-4355a163faf9.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 29744 IP address blocks: 66.231.120.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:42:34:f3:15:6c:4b:01:f4:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35ccbd7e-0844-48b1-88d7-0a8ef46e8168 Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=53836ea8-9134-43b4-bd07-56c99888346e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:c9:22:3c:e4:02:bb:cb:7b:88:98:a7:7b:8f: 66:72:f5:b4:92:bb:f3:03:1a:e8:57:99:f4:66:1e: d5:99:ef:bf:71:52:bc:04:75:47:d5:4b:76:27:7d: ff:f6:19:c4:24:f4:75:c0:41:61:06:ce:e0:43:54: 4c:74:71:49:d0:ea:d4:c2:3d:39:52:4b:52:b6:dc: 74:e3:4c:80:62:10:d4:8d:6b:7c:ab:6b:77:b9:32: 2f:af:e3:36:93:4c:b3:d7:49:a6:3d:a7:58:80:9d: 38:aa:d8:7c:00:38:a3:0a:8b:3d:5f:c7:c7:d5:2b: 9d:6a:b6:a9:cb:13:64:46:9e:38:7b:7e:ca:ad:46: 72:43:e0:7b:93:a8:95:5f:d1:2d:6c:e3:a9:d0:80: 5a:82:c7:14:f9:5f:d7:32:5c:3c:e9:35:26:d8:c8: 2a:6e:50:10:26:9d:d1:51:f5:07:98:8a:96:76:d9: 16:32:84:a2:02:4d:8d:ae:4f:2e:57:e3:58:f3:2f: 7c:d1:44:09:cf:cc:9c:a3:fa:cb:1a:c5:f1:bb:a3: c6:7d:1c:af:ef:03:6a:a2:4d:5d:25:9a:fc:13:22: 8a:cd:51:8d:58:b0:ae:3b:9b:3c:a4:cf:4d:c0:5e: 21:02:70:8f:2e:fe:1b:ff:3a:97:1e:e7:dd:4c:96: d8:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:A4:EA:8C:D4:D4:44:BC:EE:73:82:EF:01:AF:EE:02:F4:AF:E4:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/097c44a0-7f9a-36a9-9016-4355a163faf9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.crl X509v3 Authority Key Identifier: keyid:31:67:54:B4:BF:16:7E:AD:F1:F4:10:C1:D9:D2:FA:DA:AA:85:3C:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.cer sbgp-ipAddrBlock: critical IPv4: 66.231.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:70:53:e2:8b:44:9c:e0:13:51:a1:00:69:f6:a6:e6:d1:0f: 3d:c7:8b:10:c8:cf:62:d6:90:d0:99:7c:ab:a3:c6:70:c1:28: 99:78:01:d4:5a:61:a8:8a:95:fa:a7:d0:ae:b6:4e:df:2a:7b: 15:1c:76:8c:0d:0d:e4:83:8e:1a:35:10:cf:d8:33:26:52:aa: cc:7f:a9:ff:93:65:22:e1:7c:74:8e:06:f0:c0:18:13:ac:f2: 45:7b:8d:c8:bb:73:71:ca:9b:01:75:5b:8c:46:d1:34:49:5b: 80:03:56:57:4d:34:f3:94:24:c5:6c:f9:f2:cf:bf:81:07:b5: 8b:62:f5:06:29:f9:ad:18:1c:9b:f5:0f:bc:77:57:6a:8e:00: 0c:31:02:5f:42:a7:9d:e0:53:33:0f:36:34:c2:16:25:5d:42: 4e:35:f3:7c:97:b1:46:ab:d6:e8:8b:ff:60:29:4a:2f:fb:94: 4f:ae:a6:9a:36:8c:25:02:4c:4e:f9:d3:8b:d0:32:7f:1f:c0: 46:b7:ca:34:8f:2b:89:35:60:4e:11:54:b0:94:b1:aa:ec:77: 98:7c:22:8b:c2:70:7c:72:f3:37:45:22:b3:80:f7:35:ea:b3: d5:ce:36:40:34:7e:4b:7d:ba:0e:b0:9e:c5:be:9e:a4:1e:1b: 8c:22:19:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8/rUI08xVsSwH0T4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVjY2JkN2UtMDg0NC00OGIxLTg4ZDctMGE4ZWY0NmU4 MTY4MB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk NTM4MzZlYTgtOTEzNC00M2I0LWJkMDctNTZjOTk4ODgzNDZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8kiPOQCu8t7iJine49mcvW0krvzAxroV5n0 Zh7Vme+/cVK8BHVH1Ut2J33/9hnEJPR1wEFhBs7gQ1RMdHFJ0OrUwj05UktSttx0 40yAYhDUjWt8q2t3uTIvr+M2k0yz10mmPadYgJ04qth8ADijCos9X8fH1Sudarap yxNkRp44e37KrUZyQ+B7k6iVX9EtbOOp0IBagscU+V/XMlw86TUm2MgqblAQJp3R UfUHmIqWdtkWMoSiAk2Nrk8uV+NY8y980UQJz8yco/rLGsXxu6PGfRyv7wNqok1d JZr8EyKKzVGNWLCuO5s8pM9NwF4hAnCPLv4b/zqXHufdTJbYJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAyk6ozU1ES87nOC7wGv7gL0r+T3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zNWNj YmQ3ZS0wODQ0LTQ4YjEtODhkNy0wYThlZjQ2ZTgxNjgvMDk3YzQ0YTAtN2Y5YS0z NmE5LTkwMTYtNDM1NWExNjNmYWY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMzVjY2JkN2UtMDg0NC00OGIxLTg4 ZDctMGE4ZWY0NmU4MTY4LzM1Y2NiZDdlLTA4NDQtNDhiMS04OGQ3LTBhOGVmNDZl ODE2OC5jcmwwHwYDVR0jBBgwFoAUMWdUtL8Wfq3x9BDB2dL62qqFPBcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zNWNjYmQ3ZS0wODQ0LTQ4YjEtODhkNy0wYThl ZjQ2ZTgxNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQud4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGZwU+KLRJzgE1GhAGn2pubRDz3HixDIz2LWkNCZfKujxnDBKJl4AdRa YaiKlfqn0K62Tt8qexUcdowNDeSDjho1EM/YMyZSqsx/qf+TZSLhfHSOBvDAGBOs 8kV7jci7c3HKmwF1W4xG0TRJW4ADVldNNPOUJMVs+fLPv4EHtYti9QYp+a0YHJv1 D7x3V2qOAAwxAl9Cp53gUzMPNjTCFiVdQk4183yXsUar1uiL/2ApSi/7lE+uppo2 jCUCTE7504vQMn8fwEa3yjSPK4k1YE4RVLCUsarsd5h8IovCcHxy8zdFIrOA9zXq s9XONkA0fkt9ug6wnsW+nqQeG4wiGag= -----END CERTIFICATE-----Generated at Sun Oct 11 09:39:43 2026 by rpki-client