$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/3a4c33e4-6a79-33f2-8c92-073c6ab35091.roa File: 3a4c33e4-6a79-33f2-8c92-073c6ab35091.roa (raw, json) Hash identifier: ujsxkYH6vqajQkztTs2RXqJGgNMBZR+XAeDsGeJfQrU= Subject key identifier: 90:5E:F0:7B:EC:3D:98:F5:1D:BF:CD:4D:CE:03:CE:24:CD:14:F1:1A Certificate issuer: /CN=fbb903a2-4c83-4bfa-9572-36fbafb84a23 Certificate serial: 010D0C9F4328584F20F7B769E5AC59B620874C40 Authority key identifier: CE:EB:2A:7E:8A:E7:AC:3D:5A:73:26:E7:7B:49:A4:44:96:84:91:8A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/3a4c33e4-6a79-33f2-8c92-073c6ab35091.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 400072 IP address blocks: 192.159.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/fbb903a2-4c83-4bfa-9572-36fbafb84a23.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/fbb903a2-4c83-4bfa-9572-36fbafb84a23.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:b7:69:e5:ac:59:b6:20:87:4c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fbb903a2-4c83-4bfa-9572-36fbafb84a23 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=1d8cfb59-50e0-4439-83a5-6313158bb49e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d3:cc:27:55:cd:52:9e:8d:a4:f8:1a:0e:6e: 1d:b1:42:9c:cb:9e:24:dd:5d:5d:08:15:bc:bb:bd: 79:85:fe:3f:31:f7:77:07:0a:16:e1:11:74:26:49: 62:e3:be:4e:4c:a4:6c:d5:eb:0f:f6:82:33:c1:35: 38:5b:4f:21:cc:f2:2d:a1:9d:95:b1:36:76:85:02: 76:36:4d:08:8a:b9:90:82:41:80:48:5c:ee:1f:28: 61:8e:9b:10:7e:ed:3f:34:ac:6f:44:2b:ef:b5:69: c0:57:7a:83:98:75:47:0e:c5:d5:12:46:d8:6f:5c: 06:6f:c0:4b:f6:f0:58:d4:3f:85:b4:84:7f:10:3c: 99:6f:f6:bc:ca:a7:3b:a5:54:c0:5c:fe:69:c9:a9: ff:22:b7:0f:24:a5:07:17:c2:af:11:36:6b:df:0d: cd:26:81:dc:5f:69:8e:c7:ec:d8:d6:6e:ab:0f:16: 84:51:ec:1e:c8:fd:9c:b2:c8:d7:56:9e:54:5a:46: 91:c7:64:47:5d:71:9f:bc:fd:12:5d:54:16:60:37: 5d:62:2e:d6:65:fb:9e:0b:f5:1e:1c:63:58:6a:55: ec:b4:32:1b:9f:6f:18:f3:e2:d8:52:96:9e:17:77: df:47:ae:d8:fd:c2:21:90:fb:06:74:a3:a2:99:8f: 0b:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:5E:F0:7B:EC:3D:98:F5:1D:BF:CD:4D:CE:03:CE:24:CD:14:F1:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/3a4c33e4-6a79-33f2-8c92-073c6ab35091.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/fbb903a2-4c83-4bfa-9572-36fbafb84a23.crl X509v3 Authority Key Identifier: keyid:CE:EB:2A:7E:8A:E7:AC:3D:5A:73:26:E7:7B:49:A4:44:96:84:91:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23.cer sbgp-ipAddrBlock: critical IPv4: 192.159.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:29:e8:99:9c:cd:ca:a0:ad:fa:42:b1:2e:33:10:05:8f:45: 4f:c6:05:b8:fd:0a:60:23:f7:6a:18:4a:44:a2:8b:eb:c0:31: d3:cc:b9:3f:d8:c1:25:3b:73:0b:75:5b:da:23:c9:89:76:75: 0f:9d:d8:61:f6:df:a5:84:c3:23:7f:c7:1c:af:ae:a9:1d:72: d0:3b:a0:9f:ba:a0:c4:d2:90:ca:2b:17:76:7c:77:cb:ea:86: 1b:32:68:7c:01:52:9b:68:cf:cd:81:60:0e:12:5f:85:d2:ba: ea:48:de:9f:08:27:eb:d2:79:27:8e:5f:26:f8:a6:a6:e3:bc: 58:e9:41:68:3e:3f:06:e3:0a:47:08:82:68:87:77:0c:d8:ea: 5d:80:39:69:53:a5:14:74:8a:43:c3:e8:9d:26:84:a4:5d:f4: 6d:78:97:21:d7:c4:8d:9f:20:95:45:50:26:7f:13:ce:7c:61: 98:68:9d:a6:07:c6:4b:46:c8:5d:58:f7:e5:67:c2:cd:a0:9c: 13:26:41:08:09:a6:3d:14:84:c1:f9:3a:1a:b9:6a:31:9d:49: c0:51:0d:cb:46:d7:18:3e:8c:4b:de:12:20:03:da:b9:8e:22: 4f:7a:29:05:82:c8:d1:ef:d2:d2:ea:37:bc:15:a7:1d:d1:27: 73:b6:da:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g97dp5axZtiCHTEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmJiOTAzYTItNGM4My00YmZhLTk1NzItMzZmYmFmYjg0 YTIzMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk MWQ4Y2ZiNTktNTBlMC00NDM5LTgzYTUtNjMxMzE1OGJiNDllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9PMJ1XNUp6NpPgaDm4dsUKcy54k3V1dCBW8 u715hf4/Mfd3BwoW4RF0Jkli475OTKRs1esP9oIzwTU4W08hzPItoZ2VsTZ2hQJ2 Nk0IirmQgkGASFzuHyhhjpsQfu0/NKxvRCvvtWnAV3qDmHVHDsXVEkbYb1wGb8BL 9vBY1D+FtIR/EDyZb/a8yqc7pVTAXP5pyan/IrcPJKUHF8KvETZr3w3NJoHcX2mO x+zY1m6rDxaEUeweyP2cssjXVp5UWkaRx2RHXXGfvP0SXVQWYDddYi7WZfueC/Ue HGNYalXstDIbn28Y8+LYUpaeF3ffR67Y/cIhkPsGdKOimY8LqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJBe8HvsPZj1Hb/NTc4DziTNFPEaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mYmI5 MDNhMi00YzgzLTRiZmEtOTU3Mi0zNmZiYWZiODRhMjMvM2E0YzMzZTQtNmE3OS0z M2YyLThjOTItMDczYzZhYjM1MDkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZmJiOTAzYTItNGM4My00YmZhLTk1 NzItMzZmYmFmYjg0YTIzL2ZiYjkwM2EyLTRjODMtNGJmYS05NTcyLTM2ZmJhZmI4 NGEyMy5jcmwwHwYDVR0jBBgwFoAUzusqfornrD1acybne0mkRJaEkYowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9mYmI5MDNhMi00YzgzLTRiZmEtOTU3Mi0zNmZi YWZiODRhMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJ8jMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFcp6JmczcqgrfpCsS4zEAWPRU/GBbj9CmAj92oYSkSii+vAMdPMuT/Y wSU7cwt1W9ojyYl2dQ+d2GH236WEwyN/xxyvrqkdctA7oJ+6oMTSkMorF3Z8d8vq hhsyaHwBUptoz82BYA4SX4XSuupI3p8IJ+vSeSeOXyb4pqbjvFjpQWg+PwbjCkcI gmiHdwzY6l2AOWlTpRR0ikPD6J0mhKRd9G14lyHXxI2fIJVFUCZ/E858YZhonaYH xktGyF1Y9+Vnws2gnBMmQQgJpj0UhMH5Ohq5ajGdScBRDctG1xg+jEveEiAD2rmO Ik96KQWCyNHv0tLqN7wVpx3RJ3O22og= -----END CERTIFICATE-----Generated at Fri Sep 25 05:27:41 2026 by rpki-client