$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/35da68f2-165e-4898-bf59-8aa1e523eba7/4896ec55-6dfa-3368-8efa-47a497365333.roa File: 4896ec55-6dfa-3368-8efa-47a497365333.roa (raw, json) Hash identifier: eX0G/PzNsiydcTS1ifmT6wPMUZjJWBS7pQsXr/Xj5F8= Subject key identifier: 31:08:33:2A:C6:03:49:D1:3B:51:25:C1:4F:B3:36:66:B9:CE:56:E7 Certificate issuer: /CN=35da68f2-165e-4898-bf59-8aa1e523eba7 Certificate serial: 010D0C9F4328584F00DCC4BB41DA47488C07E700 Authority key identifier: 3F:89:5F:7D:C6:6A:66:03:06:06:37:08:8B:9E:AE:53:F7:D9:72:19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/35da68f2-165e-4898-bf59-8aa1e523eba7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/35da68f2-165e-4898-bf59-8aa1e523eba7/4896ec55-6dfa-3368-8efa-47a497365333.roa Signing time: Sun 30 Aug 2026 01:00:12 +0000 ROA not before: Sun 30 Aug 2026 01:00:12 +0000 ROA not after: Sat 28 Nov 2026 02:00:12 +0000 asID: 14618 IP address blocks: 167.254.172.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/35da68f2-165e-4898-bf59-8aa1e523eba7/35da68f2-165e-4898-bf59-8aa1e523eba7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/35da68f2-165e-4898-bf59-8aa1e523eba7/35da68f2-165e-4898-bf59-8aa1e523eba7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/35da68f2-165e-4898-bf59-8aa1e523eba7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:00:dc:c4:bb:41:da:47:48:8c:07:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35da68f2-165e-4898-bf59-8aa1e523eba7 Validity Not Before: Aug 30 01:00:12 2026 GMT Not After : Nov 28 02:00:12 2026 GMT Subject: CN=66c76ecc-f816-4c12-a80a-c87a4a20aaf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:5e:e4:ae:60:39:cd:44:75:e2:f4:18:49:35: ed:11:07:00:b3:b2:79:b8:12:72:7d:bb:5a:21:65: 1f:f5:64:08:da:b3:aa:f1:69:40:18:db:29:a7:8f: 9e:63:ae:27:45:c8:0b:5d:42:cb:9a:cf:03:1e:e3: 4d:d3:e6:15:7f:07:68:57:35:5c:c7:4a:2a:a5:ff: 4d:9a:9e:1d:40:8a:d0:49:18:8e:ff:e7:bd:38:01: bb:5a:b6:68:82:4e:7d:1b:02:7c:6d:48:c3:56:bb: b5:31:99:1e:3a:97:4d:9a:da:30:5f:95:d0:22:52: f7:64:51:cc:73:31:21:f5:38:db:57:de:00:c1:b4: 3c:64:30:f9:5d:4f:2f:3e:1d:6a:d2:7a:4c:ce:37: b0:b6:06:f9:5c:99:55:ca:ea:94:8d:2e:11:ae:42: 7b:13:f1:94:9e:ef:19:5c:b8:a5:ed:38:9a:e3:34: 64:eb:f1:2f:6e:78:5a:d5:6f:a9:70:19:c6:92:09: eb:29:e1:f9:a2:90:82:80:40:5b:1a:53:5f:24:8f: c7:b4:e6:c0:12:e5:a9:88:ec:e0:f3:25:0e:d8:46: b4:19:bb:88:5f:7c:2d:a2:4f:89:af:0e:57:68:8b: 0c:5a:06:dd:44:61:dd:93:a3:74:f5:77:be:3f:87: 5d:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:08:33:2A:C6:03:49:D1:3B:51:25:C1:4F:B3:36:66:B9:CE:56:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/35da68f2-165e-4898-bf59-8aa1e523eba7/4896ec55-6dfa-3368-8efa-47a497365333.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/35da68f2-165e-4898-bf59-8aa1e523eba7/35da68f2-165e-4898-bf59-8aa1e523eba7.crl X509v3 Authority Key Identifier: keyid:3F:89:5F:7D:C6:6A:66:03:06:06:37:08:8B:9E:AE:53:F7:D9:72:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/35da68f2-165e-4898-bf59-8aa1e523eba7.cer sbgp-ipAddrBlock: critical IPv4: 167.254.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:62:98:59:50:04:d2:9a:97:b5:ae:72:08:34:77:f6:b6:21: f0:b8:2f:fd:6c:57:60:c0:aa:35:18:2d:34:bc:d0:e7:76:13: 4b:38:f9:25:0a:c6:f2:8c:6c:f7:73:ba:a8:ec:2c:21:12:af: f2:29:16:32:e2:e5:50:01:e5:bb:8e:3b:87:15:8c:b7:f9:c9: 73:f8:90:02:b9:8c:ec:70:00:47:c3:b8:cb:04:fe:b3:4e:bf: 41:9e:ea:77:0d:91:3b:cf:23:68:95:76:b7:3e:64:83:41:cc: 8a:a0:db:26:ad:d2:97:db:47:8a:d9:97:2c:33:da:ed:00:02: 0a:17:8a:cb:9a:88:9e:19:d1:7a:7e:1a:96:2f:e8:1b:70:69: 4e:5b:d4:be:3c:6b:12:0e:6a:41:bf:e8:c0:23:29:8e:50:60: 11:0b:5a:fb:5b:62:88:34:07:e5:4f:21:0d:8c:fb:84:50:41: 0e:ce:7e:9c:76:71:56:74:32:80:43:52:2c:01:b2:70:05:dc: 09:17:36:1e:e5:b9:b2:82:8c:a4:4e:ff:3d:ad:5c:ef:b1:7b: 86:b7:45:59:c2:bb:78:35:64:94:b1:d9:9a:a2:61:8a:e7:6c: 0e:1b:7b:89:63:42:41:da:9f:b6:94:1a:e6:67:8b:55:a1:3c: 79:9a:c3:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8A3MS7QdpHSIwH5wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVkYTY4ZjItMTY1ZS00ODk4LWJmNTktOGFhMWU1MjNl YmE3MB4XDTI2MDgzMDAxMDAxMloXDTI2MTEyODAyMDAxMlowLzEtMCsGA1UEAxMk NjZjNzZlY2MtZjgxNi00YzEyLWE4MGEtYzg3YTRhMjBhYWY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjF7krmA5zUR14vQYSTXtEQcAs7J5uBJyfbta IWUf9WQI2rOq8WlAGNspp4+eY64nRcgLXULLms8DHuNN0+YVfwdoVzVcx0oqpf9N mp4dQIrQSRiO/+e9OAG7WrZogk59GwJ8bUjDVru1MZkeOpdNmtowX5XQIlL3ZFHM czEh9TjbV94AwbQ8ZDD5XU8vPh1q0npMzjewtgb5XJlVyuqUjS4RrkJ7E/GUnu8Z XLil7Tia4zRk6/Evbnha1W+pcBnGkgnrKeH5opCCgEBbGlNfJI/HtObAEuWpiOzg 8yUO2Ea0GbuIX3wtok+Jrw5XaIsMWgbdRGHdk6N09Xe+P4ddYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDEIMyrGA0nRO1ElwU+zNma5zlbnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8zNWRh NjhmMi0xNjVlLTQ4OTgtYmY1OS04YWExZTUyM2ViYTcvNDg5NmVjNTUtNmRmYS0z MzY4LThlZmEtNDdhNDk3MzY1MzMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvMzVkYTY4ZjItMTY1ZS00ODk4LWJm NTktOGFhMWU1MjNlYmE3LzM1ZGE2OGYyLTE2NWUtNDg5OC1iZjU5LThhYTFlNTIz ZWJhNy5jcmwwHwYDVR0jBBgwFoAUP4lffcZqZgMGBjcIi56uU/fZchkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS8zNWRhNjhmMi0xNjVlLTQ4OTgtYmY1OS04YWEx ZTUyM2ViYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCp/6sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFRimFlQBNKal7Wucgg0d/a2IfC4L/1sV2DAqjUYLTS80Od2E0s4+SUK xvKMbPdzuqjsLCESr/IpFjLi5VAB5buOO4cVjLf5yXP4kAK5jOxwAEfDuMsE/rNO v0Ge6ncNkTvPI2iVdrc+ZINBzIqg2yat0pfbR4rZlywz2u0AAgoXisuaiJ4Z0Xp+ GpYv6BtwaU5b1L48axIOakG/6MAjKY5QYBELWvtbYog0B+VPIQ2M+4RQQQ7Ofpx2 cVZ0MoBDUiwBsnAF3AkXNh7lubKCjKRO/z2tXO+xe4a3RVnCu3g1ZJSx2ZqiYYrn bA4be4ljQkHan7aUGuZni1WhPHmaw+E= -----END CERTIFICATE-----Generated at Fri Sep 25 07:07:35 2026 by rpki-client