$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/1922afe2-3bab-3e13-a7c0-c1a88e6beab9.roa File: 1922afe2-3bab-3e13-a7c0-c1a88e6beab9.roa (raw, json) Hash identifier: EqY4CUjNGdyHdA2WQmTl4Dd2HhdQ2vuJdi1jCBlBphs= Subject key identifier: 92:17:84:A4:5A:2A:24:FE:7D:B0:6A:D4:27:4B:CB:2C:E2:FC:D5:BE Certificate issuer: /CN=35ccbd7e-0844-48b1-88d7-0a8ef46e8168 Certificate serial: 010D0C9F4328584F3FAD4240D76F567B0BCD6C20 Authority key identifier: 31:67:54:B4:BF:16:7E:AD:F1:F4:10:C1:D9:D2:FA:DA:AA:85:3C:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/1922afe2-3bab-3e13-a7c0-c1a88e6beab9.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 29744 IP address blocks: 216.196.64.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:42:40:d7:6f:56:7b:0b:cd:6c:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35ccbd7e-0844-48b1-88d7-0a8ef46e8168 Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=367a25a5-1b48-42ef-9be0-f129a106070d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:e3:c5:3b:44:61:4b:8e:7a:cb:8f:88:2b:87: db:14:7b:ba:b5:a6:9e:e2:18:aa:2c:21:24:a8:fb: d8:f3:bf:3f:97:f6:50:8c:39:d6:6d:28:a1:f5:04: e7:10:63:0a:e8:d7:4a:79:56:07:b7:62:20:eb:68: 49:42:6b:f0:a4:ff:5c:44:69:e8:0e:ab:09:7e:a2: 50:17:44:a7:36:ab:b4:e4:85:81:f2:0c:2d:3e:eb: 4b:2f:90:d9:c1:81:14:44:03:d5:1a:a6:6e:ea:a8: 44:aa:e3:cc:54:af:71:c5:c2:5c:8c:d0:f5:9b:51: e4:5b:ed:ce:8b:0e:e2:6a:03:2c:85:0b:c7:32:e4: 68:17:fe:35:05:34:e8:f5:78:7e:a3:e0:b3:8d:32: 58:2a:46:5c:ab:51:8e:1f:da:43:82:d7:f4:b3:05: 9b:86:3b:b2:aa:f1:93:c5:f4:ae:c7:62:e3:aa:b7: 58:6c:5c:b1:a0:ef:24:32:da:0d:4d:a7:6f:66:1a: 40:c5:73:2b:39:7e:de:7a:67:e2:8d:c4:49:5d:8a: 6e:fa:ec:2f:ce:2d:4f:5c:b8:8d:25:33:3d:16:ac: a9:6f:75:ac:25:80:7c:b5:91:25:ee:60:34:4a:22: cf:56:bb:08:40:be:9a:44:27:16:32:c5:e1:82:5f: 9b:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:17:84:A4:5A:2A:24:FE:7D:B0:6A:D4:27:4B:CB:2C:E2:FC:D5:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/1922afe2-3bab-3e13-a7c0-c1a88e6beab9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.crl X509v3 Authority Key Identifier: keyid:31:67:54:B4:BF:16:7E:AD:F1:F4:10:C1:D9:D2:FA:DA:AA:85:3C:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.cer sbgp-ipAddrBlock: critical IPv4: 216.196.64.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:44:24:28:9d:5b:b1:00:a3:55:a6:b9:3a:97:fe:36:0d:c5: 1d:71:f8:a7:4b:2d:df:13:20:25:6e:b5:b8:90:ba:b1:01:9a: 92:19:76:27:b2:d1:7a:b5:73:c9:03:34:83:33:ce:15:89:cf: dc:77:56:e0:eb:c7:b0:ff:24:85:2d:fc:11:ad:72:8b:33:e8: a6:30:de:f0:09:7c:75:b4:da:56:61:5f:97:68:cb:aa:d1:7e: f7:1c:60:03:0f:90:2f:69:49:a1:f7:ad:9b:66:b8:41:6f:64: fc:f9:ce:9c:61:0b:71:57:c0:2e:f1:85:93:6f:0a:91:2c:11: 1c:71:11:41:c3:fc:07:de:5c:9e:a2:57:b3:8f:f5:12:01:b8: 51:2b:ee:6d:0a:ce:59:ea:9e:1e:d0:b2:cd:52:71:5b:42:fb: 3a:ea:d9:67:a4:b9:3c:4a:4a:69:17:d2:90:12:93:8b:34:0f: c9:ed:d4:ee:b0:08:4c:ab:48:bb:bb:22:ce:6a:51:37:1e:f8: d4:74:05:c4:45:79:6d:a4:1f:06:7b:f5:9a:44:73:53:75:a8: 09:7c:1e:97:a1:b1:3c:f0:8f:3c:f2:46:85:dc:d9:50:cf:97: 04:38:4c:2b:89:37:00:d9:79:1d:36:8a:f7:86:50:70:0e:48: 84:02:71:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8/rUJA129WewvNbCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVjY2JkN2UtMDg0NC00OGIxLTg4ZDctMGE4ZWY0NmU4 MTY4MB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk MzY3YTI1YTUtMWI0OC00MmVmLTliZTAtZjEyOWExMDYwNzBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+PFO0RhS456y4+IK4fbFHu6taae4hiqLCEk qPvY878/l/ZQjDnWbSih9QTnEGMK6NdKeVYHt2Ig62hJQmvwpP9cRGnoDqsJfqJQ F0SnNqu05IWB8gwtPutLL5DZwYEURAPVGqZu6qhEquPMVK9xxcJcjND1m1HkW+3O iw7iagMshQvHMuRoF/41BTTo9Xh+o+CzjTJYKkZcq1GOH9pDgtf0swWbhjuyqvGT xfSux2LjqrdYbFyxoO8kMtoNTadvZhpAxXMrOX7eemfijcRJXYpu+uwvzi1PXLiN JTM9Fqypb3WsJYB8tZEl7mA0SiLPVrsIQL6aRCcWMsXhgl+bvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJIXhKRaKiT+fbBq1CdLyyzi/NW+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zNWNj YmQ3ZS0wODQ0LTQ4YjEtODhkNy0wYThlZjQ2ZTgxNjgvMTkyMmFmZTItM2JhYi0z ZTEzLWE3YzAtYzFhODhlNmJlYWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMzVjY2JkN2UtMDg0NC00OGIxLTg4 ZDctMGE4ZWY0NmU4MTY4LzM1Y2NiZDdlLTA4NDQtNDhiMS04OGQ3LTBhOGVmNDZl ODE2OC5jcmwwHwYDVR0jBBgwFoAUMWdUtL8Wfq3x9BDB2dL62qqFPBcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zNWNjYmQ3ZS0wODQ0LTQ4YjEtODhkNy0wYThl ZjQ2ZTgxNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD2MRAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAABEJCidW7EAo1WmuTqX/jYNxR1x+KdLLd8TICVutbiQurEBmpIZdiey 0Xq1c8kDNIMzzhWJz9x3VuDrx7D/JIUt/BGtcosz6KYw3vAJfHW02lZhX5doy6rR fvccYAMPkC9pSaH3rZtmuEFvZPz5zpxhC3FXwC7xhZNvCpEsERxxEUHD/AfeXJ6i V7OP9RIBuFEr7m0Kzlnqnh7Qss1ScVtC+zrq2WekuTxKSmkX0pASk4s0D8nt1O6w CEyrSLu7Is5qUTce+NR0BcRFeW2kHwZ79ZpEc1N1qAl8HpehsTzwjzzyRoXc2VDP lwQ4TCuJNwDZeR02iveGUHAOSIQCccg= -----END CERTIFICATE-----Generated at Tue Oct 6 14:19:24 2026 by rpki-client