$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3ac7205c-ab51-3193-b471-f846870351c0.roa File: 3ac7205c-ab51-3193-b471-f846870351c0.roa (raw, json) Hash identifier: +KJDjM474/4q0xGf2keC6QR2LA5In1D1URDQNUPkNHs= Subject key identifier: 96:B8:D8:20:EC:95:25:A7:47:B8:03:6B:26:30:6F:81:26:AE:28:1A Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F6C58235EFD9EB93BDA512A20 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3ac7205c-ab51-3193-b471-f846870351c0.roa Signing time: Wed 07 Oct 2026 13:00:13 +0000 ROA not before: Wed 07 Oct 2026 13:00:13 +0000 ROA not after: Tue 05 Jan 2027 14:00:13 +0000 asID: 396597 IP address blocks: 192.35.51.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6c:58:23:5e:fd:9e:b9:3b:da:51:2a:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 7 13:00:13 2026 GMT Not After : Jan 5 14:00:13 2027 GMT Subject: CN=e10a6b45-f03d-4132-aa7d-028c83180ec1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:fa:6a:ad:b3:67:b1:bf:98:b0:dd:86:2d:ee: 2b:49:a8:0e:a4:68:3b:8f:10:6c:6d:38:f3:76:96: 2f:b8:56:e5:4c:71:e0:97:51:32:cb:39:e1:06:63: 82:58:96:b0:0f:df:4f:71:b8:b0:e0:3d:92:46:4c: 1a:03:b7:e3:7d:f6:9d:43:7b:c9:7e:69:32:f7:83: 0e:18:a3:ec:8a:d9:59:35:9c:9e:27:b8:b2:58:d1: 2a:e9:73:37:cc:08:c7:7f:99:f4:9a:b6:32:78:1c: bd:5c:6f:4f:28:96:d1:18:9b:ea:54:11:54:d7:d5: 99:7f:af:55:77:ee:e3:de:61:1e:26:4e:51:55:5a: 38:0b:97:a4:ba:5a:7c:28:54:73:09:06:90:16:68: be:6a:f7:cf:0c:47:57:f7:26:05:62:97:37:34:d1: 35:dd:31:7f:08:de:dd:2e:b8:61:52:5b:63:10:b2: c4:89:93:4c:9d:c8:c0:bf:a2:e9:0f:08:31:00:cc: 81:3b:82:d7:72:0d:d6:d6:13:63:66:b2:4f:61:4d: 41:e1:e6:47:0a:bc:bb:a4:c9:21:89:de:48:0d:e7: 2d:ff:5e:a9:34:8b:03:14:7e:b9:b2:fe:db:4a:1c: de:1b:f6:fa:5e:ce:4a:ce:86:31:d6:bb:56:1b:a3: 67:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:B8:D8:20:EC:95:25:A7:47:B8:03:6B:26:30:6F:81:26:AE:28:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3ac7205c-ab51-3193-b471-f846870351c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.35.51.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:cd:38:76:a9:35:ff:74:86:c1:25:26:cb:87:59:fe:08:72: 50:52:0b:34:f6:73:c7:be:e9:62:98:7b:0a:41:ce:b4:c6:a9: 0d:a4:cd:db:30:bd:26:9b:96:d4:9e:bc:a5:c4:27:8e:a4:aa: 9b:79:42:3b:bb:60:c8:3b:db:70:98:8d:97:25:d3:04:9a:cd: 07:8e:51:44:f4:95:44:28:83:21:f4:4b:d8:ef:e5:35:97:2b: 56:ef:9d:be:29:f8:30:61:6d:bd:55:78:74:44:c4:c0:28:b4: 13:6c:b9:f8:af:1c:62:01:a6:f5:40:5d:90:41:68:bc:81:71: cb:16:99:b4:3a:b3:60:37:31:b2:59:7f:9e:d4:8c:a4:0b:ec: 22:d4:18:47:c2:df:53:ed:d1:e8:4b:e1:e2:5b:eb:6c:8b:b8: e7:41:9c:c1:28:f5:29:6b:47:f8:cf:2a:a1:29:7b:cb:60:b5: d4:73:96:33:42:d8:c8:f1:bc:f1:60:53:43:c7:4b:29:58:90: 1b:d6:f9:36:62:2b:af:35:c9:bb:bc:74:93:94:b4:9a:fc:01: d7:19:1d:ad:0d:b9:3f:51:86:fe:f6:62:83:2e:bf:64:fa:ed: a9:10:59:54:74:da:1c:5f:a8:cd:11:d1:4c:2c:03:e9:a5:26: 06:dd:b8:e1 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9sWCNe/Z65O9pRKiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MTAwNzEzMDAxM1oXDTI3MDEwNTE0MDAxM1owLzEtMCsGA1UEAxMk ZTEwYTZiNDUtZjAzZC00MTMyLWFhN2QtMDI4YzgzMTgwZWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivpqrbNnsb+YsN2GLe4rSagOpGg7jxBsbTjz dpYvuFblTHHgl1EyyznhBmOCWJawD99Pcbiw4D2SRkwaA7fjffadQ3vJfmky94MO GKPsitlZNZyeJ7iyWNEq6XM3zAjHf5n0mrYyeBy9XG9PKJbRGJvqVBFU19WZf69V d+7j3mEeJk5RVVo4C5ekulp8KFRzCQaQFmi+avfPDEdX9yYFYpc3NNE13TF/CN7d LrhhUltjELLEiZNMncjAv6LpDwgxAMyBO4LXcg3W1hNjZrJPYU1B4eZHCry7pMkh id5IDect/16pNIsDFH65sv7bShzeG/b6Xs5KzoYx1rtWG6Nn2wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJa42CDslSWnR7gDayYwb4EmrigaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2FjNzIwNWMtYWI1MS0z MTkzLWI0NzEtZjg0Njg3MDM1MWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCMzHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCBzTh2qTX/dIbBJSbLh1n+CHJQUgs09nPHvulimHsKQc60xqkNpM3b ML0mm5bUnrylxCeOpKqbeUI7u2DIO9twmI2XJdMEms0HjlFE9JVEKIMh9EvY7+U1 lytW752+KfgwYW29VXh0RMTAKLQTbLn4rxxiAab1QF2QQWi8gXHLFpm0OrNgNzGy WX+e1IykC+wi1BhHwt9T7dHoS+HiW+tsi7jnQZzBKPUpa0f4zyqhKXvLYLXUc5Yz QtjI8bzxYFNDx0spWJAb1vk2YiuvNcm7vHSTlLSa/AHXGR2tDbk/UYb+9mKDLr9k +u2pEFlUdNocX6jNEdFMLAPppSYG3bjh -----END CERTIFICATE-----Generated at Sat Oct 10 17:10:27 2026 by rpki-client