$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/76c375a0-d704-3fe6-a68e-c4f387fa72e3.roa File: 76c375a0-d704-3fe6-a68e-c4f387fa72e3.roa (raw, json) Hash identifier: Zz9rjbzq/g7Qx+PrnBsxYUZs/xqIo2mam0zd68X5sAg= Subject key identifier: 27:B6:96:AB:52:5C:89:68:AB:DF:3C:DA:25:AF:5F:98:56:4D:73:9E Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F4328584F454287923222289607947440 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/76c375a0-d704-3fe6-a68e-c4f387fa72e3.roa Signing time: Wed 23 Sep 2026 13:00:11 +0000 ROA not before: Wed 23 Sep 2026 13:00:11 +0000 ROA not after: Tue 22 Dec 2026 14:00:11 +0000 asID: 16509 IP address blocks: 199.255.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:45:42:87:92:32:22:28:96:07:94:74:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Sep 23 13:00:11 2026 GMT Not After : Dec 22 14:00:11 2026 GMT Subject: CN=2db2a42c-71ed-4a89-b751-44e4f3c08e3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d8:43:29:02:cd:1a:89:48:38:a6:d8:fe:70: 64:ff:e4:9f:ca:b4:53:84:8d:d1:7a:79:2c:53:f3: c7:1a:6c:f0:b7:a8:0d:7b:3f:7d:04:05:0a:34:97: 3f:a8:0e:f4:6d:e0:b7:bb:62:d1:0d:a6:35:4c:04: b4:6f:9b:b3:05:fa:4e:16:f9:92:d0:ed:52:1a:fa: 7c:99:3f:9c:54:ab:28:7e:de:61:c4:88:16:9d:e6: 7e:59:37:87:14:01:01:ed:92:e3:13:f4:f4:31:3e: 3d:cc:e9:8b:71:e8:63:07:89:44:00:54:cf:48:6c: 3e:8b:d7:0a:d4:92:87:f4:23:88:97:40:0b:3c:ce: 15:62:c7:d8:b5:ed:71:e2:0c:15:a8:73:aa:0d:ee: 8b:09:71:d2:58:b2:fa:af:45:79:a3:cf:71:aa:04: 89:8f:01:5a:f2:bf:51:32:93:28:b0:60:27:34:75: f9:c2:9c:a6:48:8d:9e:41:73:b6:fb:da:e7:cf:23: 58:1d:42:de:91:67:b3:87:ff:f6:28:da:05:b2:42: 2e:c1:6d:86:b3:14:81:97:c9:cc:09:f0:12:a2:2e: ec:bd:dd:df:a7:4a:d5:a1:cf:f6:1c:6d:a2:b4:8f: d5:ec:05:db:1f:f3:f1:13:5e:6b:82:da:81:d7:cf: 8b:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:B6:96:AB:52:5C:89:68:AB:DF:3C:DA:25:AF:5F:98:56:4D:73:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/76c375a0-d704-3fe6-a68e-c4f387fa72e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 199.255.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:49:d3:be:18:6e:b3:6b:7a:1d:2c:28:e7:df:20:30:37:4f: 03:db:cb:37:7a:7d:e9:71:7a:bc:9f:8b:f2:ba:1e:10:70:ee: 79:2c:70:05:59:14:77:b7:8d:6b:85:cb:8d:e9:d1:5a:53:56: ef:4c:ba:02:a0:b6:c7:25:03:24:00:da:79:a9:d1:f7:03:b1: b9:6e:22:41:12:8d:69:d0:3f:32:4d:07:5a:58:35:04:7f:98: 6b:05:3f:0c:d8:80:f3:71:84:25:ae:ea:c0:95:4b:a9:da:e9: 7a:07:f7:3d:8a:ef:68:01:b6:15:d0:5e:30:43:54:d9:13:41: ab:7d:3e:3b:f5:12:86:e6:54:5a:e7:8c:0b:18:a4:34:e6:5c: df:e1:59:91:a3:02:2b:73:0e:56:64:18:c4:a9:81:ed:b4:d2: e2:e1:6d:10:e5:f1:3c:f7:24:bf:19:61:c4:53:75:a7:6f:f9: b5:14:7c:33:8d:22:e7:85:43:03:1e:89:1a:5c:38:c8:36:63: 94:fd:65:9e:f6:a7:12:a5:b1:f0:e0:60:e9:76:58:86:71:9f: 0b:cb:49:9b:a1:85:76:ab:73:59:71:2f:5c:02:2b:dc:37:d1: 0a:43:44:c8:35:9c:a5:d0:37:fe:09:e2:d2:f5:17:ff:07:2d: af:f2:30:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9FQoeSMiIolgeUdEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI2MDkyMzEzMDAxMVoXDTI2MTIyMjE0MDAxMVowLzEtMCsGA1UEAxMk MmRiMmE0MmMtNzFlZC00YTg5LWI3NTEtNDRlNGYzYzA4ZTNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNhDKQLNGolIOKbY/nBk/+SfyrRThI3Renks U/PHGmzwt6gNez99BAUKNJc/qA70beC3u2LRDaY1TAS0b5uzBfpOFvmS0O1SGvp8 mT+cVKsoft5hxIgWneZ+WTeHFAEB7ZLjE/T0MT49zOmLcehjB4lEAFTPSGw+i9cK 1JKH9COIl0ALPM4VYsfYte1x4gwVqHOqDe6LCXHSWLL6r0V5o89xqgSJjwFa8r9R MpMosGAnNHX5wpymSI2eQXO2+9rnzyNYHULekWezh//2KNoFskIuwW2GsxSBl8nM CfASoi7svd3fp0rVoc/2HG2itI/V7AXbH/PxE15rgtqB18+L+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCe2lqtSXIloq9882iWvX5hWTXOeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvNzZjMzc1YTAtZDcwNC0z ZmU2LWE2OGUtYzRmMzg3ZmE3MmUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/8jMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE9J074YbrNreh0sKOffIDA3TwPbyzd6felxeryfi/K6HhBw7nkscAVZ FHe3jWuFy43p0VpTVu9MugKgtsclAyQA2nmp0fcDsbluIkESjWnQPzJNB1pYNQR/ mGsFPwzYgPNxhCWu6sCVS6na6XoH9z2K72gBthXQXjBDVNkTQat9Pjv1EobmVFrn jAsYpDTmXN/hWZGjAitzDlZkGMSpge200uLhbRDl8Tz3JL8ZYcRTdadv+bUUfDON IueFQwMeiRpcOMg2Y5T9ZZ72pxKlsfDgYOl2WIZxnwvLSZuhhXarc1lxL1wCK9w3 0QpDRMg1nKXQN/4J4tL1F/8HLa/yMII= -----END CERTIFICATE-----Generated at Sat Sep 26 09:19:43 2026 by rpki-client