$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35b4b3a4-a195-4325-8f07-9376a8ef2903/976a2d8b-f6cf-3428-afc3-45e6a1e5cd0f.roa File: 976a2d8b-f6cf-3428-afc3-45e6a1e5cd0f.roa (raw, json) Hash identifier: 0pk40YnzX3+9kQHeyvEYiixG4QoKsMpBbHxD4wLNVwc= Subject key identifier: D4:2D:5C:01:ED:86:30:0C:CA:3F:06:66:8E:32:36:AF:17:5E:16:D4 Certificate issuer: /CN=35b4b3a4-a195-4325-8f07-9376a8ef2903 Certificate serial: 010D0C9F4328584F225CFB33336AE79EF0203E90 Authority key identifier: B9:A9:F4:73:94:60:F8:F9:C3:99:A8:3D:01:57:52:82:5F:7B:DC:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35b4b3a4-a195-4325-8f07-9376a8ef2903.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35b4b3a4-a195-4325-8f07-9376a8ef2903/976a2d8b-f6cf-3428-afc3-45e6a1e5cd0f.roa Signing time: Fri 11 Sep 2026 01:00:12 +0000 ROA not before: Fri 11 Sep 2026 01:00:12 +0000 ROA not after: Thu 10 Dec 2026 02:00:12 +0000 asID: 8075 IP address blocks: 66.94.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35b4b3a4-a195-4325-8f07-9376a8ef2903/35b4b3a4-a195-4325-8f07-9376a8ef2903.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35b4b3a4-a195-4325-8f07-9376a8ef2903/35b4b3a4-a195-4325-8f07-9376a8ef2903.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35b4b3a4-a195-4325-8f07-9376a8ef2903.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:22:5c:fb:33:33:6a:e7:9e:f0:20:3e:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35b4b3a4-a195-4325-8f07-9376a8ef2903 Validity Not Before: Sep 11 01:00:12 2026 GMT Not After : Dec 10 02:00:12 2026 GMT Subject: CN=e0e1324b-fe56-40d5-a4a6-b78c7e3a84ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:fb:50:cf:b6:d0:d4:0d:b5:4c:e1:79:d1:9f: 30:6b:b7:0b:1f:cf:0c:2b:03:bd:cc:c2:e9:79:e6: 8a:f6:be:61:c4:61:43:f3:5c:d4:a7:10:7c:10:29: 3d:e9:86:ee:fe:6f:0b:69:d6:bd:2c:3d:70:a8:2b: 7d:6c:d2:03:fc:ce:0b:d9:ff:41:53:03:63:f9:25: b9:d6:9c:0c:96:47:65:fb:68:21:ea:05:02:7d:f5: e5:c5:cc:de:ad:b0:68:4c:f2:cd:50:cd:40:99:87: 41:21:9c:e4:2f:10:e7:3b:ca:43:b8:d0:09:c3:33: fa:59:07:b7:0f:64:72:c2:2b:23:5e:c4:45:19:c0: 4c:87:33:00:c7:12:9a:05:42:c1:71:28:2c:0c:f1: 15:9d:d7:77:8a:6c:ce:37:81:59:68:0b:dc:cb:a1: 8c:e2:f2:9c:72:ab:67:e3:40:fa:b3:7a:c1:c5:96: af:90:e7:90:42:e9:ea:a5:27:7b:eb:92:41:ec:b1: f2:34:cf:92:f4:b0:a2:b6:61:a7:25:77:3f:6b:f8: d3:63:12:1b:2e:16:81:0a:15:f4:74:f3:32:cd:ff: 25:d1:9d:e6:14:4d:5c:51:02:9f:cf:2e:df:47:49: 45:c2:0b:18:6d:38:61:7c:e7:34:78:13:72:00:a0: a0:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:2D:5C:01:ED:86:30:0C:CA:3F:06:66:8E:32:36:AF:17:5E:16:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35b4b3a4-a195-4325-8f07-9376a8ef2903/976a2d8b-f6cf-3428-afc3-45e6a1e5cd0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35b4b3a4-a195-4325-8f07-9376a8ef2903/35b4b3a4-a195-4325-8f07-9376a8ef2903.crl X509v3 Authority Key Identifier: keyid:B9:A9:F4:73:94:60:F8:F9:C3:99:A8:3D:01:57:52:82:5F:7B:DC:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35b4b3a4-a195-4325-8f07-9376a8ef2903.cer sbgp-ipAddrBlock: critical IPv4: 66.94.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:c4:92:d7:f3:b9:04:69:c5:86:7c:17:d3:5d:d2:0b:bb:9c: 20:94:83:a7:e6:16:38:a6:1d:aa:c5:2e:ff:84:06:45:fc:40: 32:7b:ac:1b:50:03:74:e9:10:e0:e6:36:2c:b8:da:60:49:df: 96:8c:8f:97:96:df:20:60:58:de:17:24:99:b6:d3:f4:8a:18: 34:b7:7f:b2:0a:44:53:0c:11:ae:22:10:91:c1:10:c7:db:9a: 33:61:eb:60:96:79:39:07:6e:b1:d4:76:e4:15:8c:80:2f:af: 92:e4:3b:c3:66:29:31:41:b0:6c:19:f8:de:f6:6b:41:9b:27: 5e:63:27:0b:eb:2a:46:c0:29:7a:61:6d:d2:fb:7b:96:fe:7b: fc:71:a8:71:30:f2:ff:0e:f9:23:6b:fb:95:0e:7a:4e:7e:f5: 70:5e:49:99:39:89:f8:aa:5d:1a:fa:b1:2e:c5:35:75:e4:d2: 54:df:34:61:1f:73:42:27:fc:b2:5a:e6:75:4e:16:a7:5b:a9: 89:3b:50:87:26:45:6d:5f:32:ff:0b:88:8d:d3:13:c4:ce:77: e1:26:fb:6d:b4:41:2d:49:b6:35:d9:a5:92:7e:b5:95:03:7a: c8:ea:66:3b:f2:49:df:2a:f0:a4:9c:08:81:9e:f9:8e:19:11: bd:c0:93:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8iXPszM2rnnvAgPpAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViNGIzYTQtYTE5NS00MzI1LThmMDctOTM3NmE4ZWYy OTAzMB4XDTI2MDkxMTAxMDAxMloXDTI2MTIxMDAyMDAxMlowLzEtMCsGA1UEAxMk ZTBlMTMyNGItZmU1Ni00MGQ1LWE0YTYtYjc4YzdlM2E4NGFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/tQz7bQ1A21TOF50Z8wa7cLH88MKwO9zMLp eeaK9r5hxGFD81zUpxB8ECk96Ybu/m8Lada9LD1wqCt9bNID/M4L2f9BUwNj+SW5 1pwMlkdl+2gh6gUCffXlxczerbBoTPLNUM1AmYdBIZzkLxDnO8pDuNAJwzP6WQe3 D2RywisjXsRFGcBMhzMAxxKaBULBcSgsDPEVndd3imzON4FZaAvcy6GM4vKccqtn 40D6s3rBxZavkOeQQunqpSd765JB7LHyNM+S9LCitmGnJXc/a/jTYxIbLhaBChX0 dPMyzf8l0Z3mFE1cUQKfzy7fR0lFwgsYbThhfOc0eBNyAKCgRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNQtXAHthjAMyj8GZo4yNq8XXhbUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zNWI0 YjNhNC1hMTk1LTQzMjUtOGYwNy05Mzc2YThlZjI5MDMvOTc2YTJkOGItZjZjZi0z NDI4LWFmYzMtNDVlNmExZTVjZDBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMzViNGIzYTQtYTE5NS00MzI1LThm MDctOTM3NmE4ZWYyOTAzLzM1YjRiM2E0LWExOTUtNDMyNS04ZjA3LTkzNzZhOGVm MjkwMy5jcmwwHwYDVR0jBBgwFoAUuan0c5Rg+PnDmag9AVdSgl973GYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zNWI0YjNhNC1hMTk1LTQzMjUtOGYwNy05Mzc2 YThlZjI5MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQl40MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE/EktfzuQRpxYZ8F9Nd0gu7nCCUg6fmFjimHarFLv+EBkX8QDJ7rBtQ A3TpEODmNiy42mBJ35aMj5eW3yBgWN4XJJm20/SKGDS3f7IKRFMMEa4iEJHBEMfb mjNh62CWeTkHbrHUduQVjIAvr5LkO8NmKTFBsGwZ+N72a0GbJ15jJwvrKkbAKXph bdL7e5b+e/xxqHEw8v8O+SNr+5UOek5+9XBeSZk5ifiqXRr6sS7FNXXk0lTfNGEf c0In/LJa5nVOFqdbqYk7UIcmRW1fMv8LiI3TE8TOd+Em+220QS1JtjXZpZJ+tZUD esjqZjvySd8q8KScCIGe+Y4ZEb3Ak+w= -----END CERTIFICATE-----Generated at Tue Sep 29 00:55:29 2026 by rpki-client