$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/d2380e1c-4584-3fbe-9ac7-c00fc51996f1.roa File: d2380e1c-4584-3fbe-9ac7-c00fc51996f1.roa (raw, json) Hash identifier: QM9MKIo8xghyYlaIHBnl0GZvM6jBJ9Bv52OXkbqJFiE= Subject key identifier: 15:27:80:1D:DF:08:30:C1:08:20:42:86:C5:A3:B1:69:98:13:DF:BB Certificate issuer: /CN=35ccbd7e-0844-48b1-88d7-0a8ef46e8168 Certificate serial: 010D0C9F4328584F3FAD41F83F20314E3E2AF880 Authority key identifier: 31:67:54:B4:BF:16:7E:AD:F1:F4:10:C1:D9:D2:FA:DA:AA:85:3C:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/d2380e1c-4584-3fbe-9ac7-c00fc51996f1.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 14511 IP address blocks: 66.231.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:41:f8:3f:20:31:4e:3e:2a:f8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35ccbd7e-0844-48b1-88d7-0a8ef46e8168 Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=c4ede15b-3ace-48b4-8f8a-0333bcb5e5ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f7:5a:ef:64:7c:98:7a:11:0c:b1:fb:4b:26: be:ce:4e:d3:ff:b5:86:5c:96:3a:19:71:67:0e:01: df:80:93:fa:bb:71:36:1a:1d:54:26:18:2f:74:31: 25:1b:d5:22:53:55:d1:12:8b:00:3a:3b:56:31:14: 89:00:ef:ae:52:d0:b3:8a:20:91:c4:47:ba:60:d2: 09:b1:cc:d7:94:d5:6a:cd:f3:6c:ba:b7:87:c5:2c: 2a:b5:ea:79:2c:8b:f7:ca:2a:49:8d:ee:e2:f4:6d: 7e:06:3c:9d:fb:97:c7:6f:25:3b:68:5e:3e:82:9a: 6a:29:91:65:6d:a0:7b:26:f9:e2:ec:ef:7f:83:52: 38:0b:b4:30:e0:c7:67:24:91:3e:0d:dc:64:d0:98: 8a:85:4f:33:83:96:cc:31:4c:8a:b4:58:86:fa:23: 8a:a6:fb:9c:e5:c5:f0:fd:a4:cb:3d:a5:6e:34:c7: ea:7e:e1:43:05:3c:0f:d3:18:b9:4c:94:32:74:4d: 54:32:62:f8:cf:8e:85:a2:60:7c:bd:d5:d2:8d:40: 18:bb:f8:57:97:3a:c4:75:9d:3b:ae:c4:19:f9:54: 55:d7:2d:19:78:90:7d:a5:ff:b6:fe:c9:94:a0:7b: f1:04:73:6f:fc:3f:7d:dd:08:53:74:2e:56:78:64: 52:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:27:80:1D:DF:08:30:C1:08:20:42:86:C5:A3:B1:69:98:13:DF:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/d2380e1c-4584-3fbe-9ac7-c00fc51996f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.crl X509v3 Authority Key Identifier: keyid:31:67:54:B4:BF:16:7E:AD:F1:F4:10:C1:D9:D2:FA:DA:AA:85:3C:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.cer sbgp-ipAddrBlock: critical IPv4: 66.231.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:64:c7:ec:73:dc:93:d6:fe:7f:95:ce:75:66:f8:af:45:c6: 0a:c7:a4:ed:2c:fa:5d:bc:eb:c2:7b:2d:41:88:5e:09:dc:c8: 74:3d:a6:42:5f:3f:63:9c:ef:d9:2b:78:cf:36:e1:38:68:3d: 17:d5:26:d5:21:2b:34:89:fc:50:e3:df:be:bb:9d:ab:ac:b5: fc:7a:72:45:69:64:30:3f:28:d0:6c:da:46:0d:bf:39:07:23: 7f:40:ae:b4:d3:20:18:0c:b6:5d:51:04:51:fb:8d:21:b1:40: 38:0d:55:9a:de:01:8b:7a:58:b3:00:a3:20:61:33:8e:99:65: 1d:22:04:e1:bb:ea:3d:aa:36:50:87:cb:7b:9e:40:5e:eb:64: c9:39:44:da:fd:ca:39:d4:40:a8:64:a7:66:01:c3:75:7e:e0: 6b:2a:0a:33:13:b0:14:e5:8d:4d:ad:e9:5e:18:1c:e3:3f:27: 07:5d:80:ad:fc:70:fe:f4:6c:b4:3a:16:55:50:d5:0c:33:43: 95:81:4b:04:09:15:c7:0b:74:70:38:01:cd:32:2a:4d:68:e3: ee:40:91:00:8a:be:66:84:53:11:ce:bd:cf:bc:5e:87:d3:0d: c5:27:6f:52:05:00:a1:c4:6d:48:3b:35:96:2a:2b:9f:86:15: 56:13:c2:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8/rUH4PyAxTj4q+IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVjY2JkN2UtMDg0NC00OGIxLTg4ZDctMGE4ZWY0NmU4 MTY4MB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk YzRlZGUxNWItM2FjZS00OGI0LThmOGEtMDMzM2JjYjVlNWFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfda72R8mHoRDLH7Sya+zk7T/7WGXJY6GXFn DgHfgJP6u3E2Gh1UJhgvdDElG9UiU1XREosAOjtWMRSJAO+uUtCziiCRxEe6YNIJ sczXlNVqzfNsureHxSwqtep5LIv3yipJje7i9G1+Bjyd+5fHbyU7aF4+gppqKZFl baB7Jvni7O9/g1I4C7Qw4MdnJJE+Ddxk0JiKhU8zg5bMMUyKtFiG+iOKpvuc5cXw /aTLPaVuNMfqfuFDBTwP0xi5TJQydE1UMmL4z46FomB8vdXSjUAYu/hXlzrEdZ07 rsQZ+VRV1y0ZeJB9pf+2/smUoHvxBHNv/D993QhTdC5WeGRSAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBUngB3fCDDBCCBChsWjsWmYE9+7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zNWNj YmQ3ZS0wODQ0LTQ4YjEtODhkNy0wYThlZjQ2ZTgxNjgvZDIzODBlMWMtNDU4NC0z ZmJlLTlhYzctYzAwZmM1MTk5NmYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMzVjY2JkN2UtMDg0NC00OGIxLTg4 ZDctMGE4ZWY0NmU4MTY4LzM1Y2NiZDdlLTA4NDQtNDhiMS04OGQ3LTBhOGVmNDZl ODE2OC5jcmwwHwYDVR0jBBgwFoAUMWdUtL8Wfq3x9BDB2dL62qqFPBcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zNWNjYmQ3ZS0wODQ0LTQ4YjEtODhkNy0wYThl ZjQ2ZTgxNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQudgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABNkx+xz3JPW/n+VznVm+K9FxgrHpO0s+l2868J7LUGIXgncyHQ9pkJf P2Oc79kreM824ThoPRfVJtUhKzSJ/FDj3767naustfx6ckVpZDA/KNBs2kYNvzkH I39ArrTTIBgMtl1RBFH7jSGxQDgNVZreAYt6WLMAoyBhM46ZZR0iBOG76j2qNlCH y3ueQF7rZMk5RNr9yjnUQKhkp2YBw3V+4GsqCjMTsBTljU2t6V4YHOM/JwddgK38 cP70bLQ6FlVQ1QwzQ5WBSwQJFccLdHA4Ac0yKk1o4+5AkQCKvmaEUxHOvc+8XofT DcUnb1IFAKHEbUg7NZYqK5+GFVYTwlQ= -----END CERTIFICATE-----Generated at Mon Oct 5 00:57:41 2026 by rpki-client