$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84/3c85918a-2baf-3ff9-856c-4f7666c40d1e.roa File: 3c85918a-2baf-3ff9-856c-4f7666c40d1e.roa (raw, json) Hash identifier: TInUKZNHs703u+BbjEO2OB2AA4JWztoDro7A5aXNsoU= Subject key identifier: 45:7A:59:F7:B5:A6:3A:1B:D4:F6:4B:8A:C3:B4:F3:5C:A2:86:2F:BF Certificate issuer: /CN=219560ff-1a32-4424-9e54-f95df54ecc84 Certificate serial: 010D0C9F4328584F03A7708942BAC59A682E3980 Authority key identifier: B7:5A:46:BD:48:BF:FF:E6:F1:D7:1B:DB:F4:3B:BA:BB:79:2F:C0:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84/3c85918a-2baf-3ff9-856c-4f7666c40d1e.roa Signing time: Mon 31 Aug 2026 01:00:12 +0000 ROA not before: Mon 31 Aug 2026 01:00:12 +0000 ROA not after: Sun 29 Nov 2026 02:00:12 +0000 asID: 14618 IP address blocks: 192.35.220.0/24 maxlen: 24 192.35.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84/219560ff-1a32-4424-9e54-f95df54ecc84.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84/219560ff-1a32-4424-9e54-f95df54ecc84.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:03:a7:70:89:42:ba:c5:9a:68:2e:39:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=219560ff-1a32-4424-9e54-f95df54ecc84 Validity Not Before: Aug 31 01:00:12 2026 GMT Not After : Nov 29 02:00:12 2026 GMT Subject: CN=be03c12d-43a4-4805-8a0e-28293d44a7c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:9b:96:f6:65:c7:93:4d:40:a9:f8:b9:1e:44: 73:4d:b9:39:a6:a3:92:d9:ff:ea:9c:7b:89:19:ea: 39:30:af:c7:86:58:43:95:db:97:c5:6d:47:39:0f: ed:a8:cc:33:c7:6a:32:91:2e:a7:02:81:bf:91:30: 58:ab:1c:9f:2b:47:36:85:65:a7:4d:98:d1:c1:ba: f1:7a:07:92:bd:e8:0f:f2:ab:c9:1c:df:da:57:b2: 02:25:f8:07:b7:ce:51:4c:0f:ff:ab:f7:de:04:28: 8e:86:d0:25:47:9d:83:3a:6d:33:d3:4f:d1:20:99: 9b:0f:67:e1:a4:27:ca:b5:fa:7b:84:60:c6:8f:a9: fa:0d:86:6e:0c:6c:20:33:4e:af:be:14:c1:4e:4d: ab:4d:6d:1f:53:67:53:38:b9:47:f5:fb:3c:d6:39: f4:c2:c1:c2:ae:90:42:57:8c:0b:c8:12:5c:d8:3c: b0:70:3e:91:95:f7:58:55:6e:51:60:f0:eb:05:15: 0a:a0:fe:fd:7c:ef:31:43:73:0f:c9:a7:2b:65:b1: 32:b4:fc:b5:b9:ed:d5:4e:60:5f:1a:4f:fe:51:9b: 21:8c:3c:b3:95:13:c8:3d:59:cc:a4:56:e6:e8:88: 71:8a:97:c3:51:d0:f9:cd:64:c8:e9:f6:da:3e:a3: bd:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:7A:59:F7:B5:A6:3A:1B:D4:F6:4B:8A:C3:B4:F3:5C:A2:86:2F:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84/3c85918a-2baf-3ff9-856c-4f7666c40d1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84/219560ff-1a32-4424-9e54-f95df54ecc84.crl X509v3 Authority Key Identifier: keyid:B7:5A:46:BD:48:BF:FF:E6:F1:D7:1B:DB:F4:3B:BA:BB:79:2F:C0:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84.cer sbgp-ipAddrBlock: critical IPv4: 192.35.220.0/24 192.35.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:93:75:9a:fb:66:f5:7d:01:9b:52:44:10:00:70:c5:08:d7: a6:f0:fc:34:f1:12:46:c5:2d:48:39:db:28:05:8e:1d:2f:6c: ad:f1:6f:36:8b:ab:a6:e1:ed:f9:c0:f8:8f:c3:13:9c:35:41: df:34:70:aa:41:67:d4:18:66:38:4f:e9:8d:a6:53:54:69:73: e8:f3:8a:80:9d:d5:1e:90:9e:c5:db:78:65:5e:9c:16:87:33: 7f:e6:c9:bb:e9:b4:87:91:07:3d:56:74:68:66:16:8f:4e:be: c2:7a:7d:00:b9:40:53:9a:71:a9:d4:8b:4b:a7:04:9a:34:a8: fc:53:fc:ac:15:28:1b:40:63:16:61:78:c0:95:73:7e:2a:86: d5:b0:02:90:b3:47:42:30:aa:89:f5:a0:37:f1:37:79:94:99: 0b:40:c6:9f:c7:ae:f5:14:7c:4c:f6:47:b8:ff:01:26:4c:bf: 26:bb:95:ed:79:cd:0c:25:af:c1:7d:5d:eb:93:99:ac:b5:6f: a8:36:f9:7f:97:32:ea:b0:a4:0c:9e:32:19:15:1a:5d:7d:f2: 97:18:5f:fd:6e:26:06:51:85:cd:ff:c2:70:35:02:14:78:71: 19:c8:17:b4:ca:99:69:4b:e7:93:f5:d0:a7:69:2a:00:83:fd: 3e:6c:e1:40 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE8Dp3CJQrrFmmguOYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjE5NTYwZmYtMWEzMi00NDI0LTllNTQtZjk1ZGY1NGVj Yzg0MB4XDTI2MDgzMTAxMDAxMloXDTI2MTEyOTAyMDAxMlowLzEtMCsGA1UEAxMk YmUwM2MxMmQtNDNhNC00ODA1LThhMGUtMjgyOTNkNDRhN2M4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZuW9mXHk01Aqfi5HkRzTbk5pqOS2f/qnHuJ Geo5MK/HhlhDlduXxW1HOQ/tqMwzx2oykS6nAoG/kTBYqxyfK0c2hWWnTZjRwbrx egeSvegP8qvJHN/aV7ICJfgHt85RTA//q/feBCiOhtAlR52DOm0z00/RIJmbD2fh pCfKtfp7hGDGj6n6DYZuDGwgM06vvhTBTk2rTW0fU2dTOLlH9fs81jn0wsHCrpBC V4wLyBJc2DywcD6RlfdYVW5RYPDrBRUKoP79fO8xQ3MPyacrZbEytPy1ue3VTmBf Gk/+UZshjDyzlRPIPVnMpFbm6IhxipfDUdD5zWTI6fbaPqO9eQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFEV6Wfe1pjob1PZLisO081yihi+/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yMTk1 NjBmZi0xYTMyLTQ0MjQtOWU1NC1mOTVkZjU0ZWNjODQvM2M4NTkxOGEtMmJhZi0z ZmY5LTg1NmMtNGY3NjY2YzQwZDFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMjE5NTYwZmYtMWEzMi00NDI0LTll NTQtZjk1ZGY1NGVjYzg0LzIxOTU2MGZmLTFhMzItNDQyNC05ZTU0LWY5NWRmNTRl Y2M4NC5jcmwwHwYDVR0jBBgwFoAUt1pGvUi//+bx1xvb9Du6u3kvwIIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yMTk1NjBmZi0xYTMyLTQ0MjQtOWU1NC1mOTVk ZjU0ZWNjODQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwCPcAwQA wCPfMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBABmTdZr7ZvV9AZtSRBAAcMUI16bw/DTxEkbFLUg52ygFjh0v bK3xbzaLq6bh7fnA+I/DE5w1Qd80cKpBZ9QYZjhP6Y2mU1Rpc+jzioCd1R6QnsXb eGVenBaHM3/mybvptIeRBz1WdGhmFo9OvsJ6fQC5QFOacanUi0unBJo0qPxT/KwV KBtAYxZheMCVc34qhtWwApCzR0Iwqon1oDfxN3mUmQtAxp/HrvUUfEz2R7j/ASZM vya7le15zQwlr8F9XeuTmay1b6g2+X+XMuqwpAyeMhkVGl198pcYX/1uJgZRhc3/ wnA1AhR4cRnIF7TKmWlL55P10KdpKgCD/T5s4UA= -----END CERTIFICATE-----Generated at Sun Oct 4 11:09:41 2026 by rpki-client