$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756/2b93d2a9-8779-3d10-9e6f-ddb702dc8e09.roa File: 2b93d2a9-8779-3d10-9e6f-ddb702dc8e09.roa (raw, json) Hash identifier: am/b3OJGuQrnAnM8lrYAfKFFrTLyZoGPwUjZBx/qiCE= Subject key identifier: CF:04:B3:ED:F6:54:14:96:DF:52:BB:1F:3B:85:77:1C:69:1F:BB:6F Certificate issuer: /CN=895b91dd-3a1f-46e8-88e9-1a06a1c88756 Certificate serial: 010D0C9F4328584E9EAFE9234EA793696A4DF980 Authority key identifier: 8B:A3:70:CC:C8:96:6C:14:AB:9C:B7:BF:2E:DB:F1:66:BF:63:A8:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756/2b93d2a9-8779-3d10-9e6f-ddb702dc8e09.roa Signing time: Sat 25 Jul 2026 21:00:12 +0000 ROA not before: Sat 25 Jul 2026 21:00:12 +0000 ROA not after: Fri 23 Oct 2026 21:00:12 +0000 asID: 53486 IP address blocks: 209.35.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756/895b91dd-3a1f-46e8-88e9-1a06a1c88756.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756/895b91dd-3a1f-46e8-88e9-1a06a1c88756.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9e:af:e9:23:4e:a7:93:69:6a:4d:f9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=895b91dd-3a1f-46e8-88e9-1a06a1c88756 Validity Not Before: Jul 25 21:00:12 2026 GMT Not After : Oct 23 21:00:12 2026 GMT Subject: CN=2e126f60-6bd4-4199-84d5-092f0d59c4cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:44:9f:df:12:cf:83:54:70:98:76:cf:eb:eb: e0:74:e4:0c:c7:0a:2d:d6:b4:f9:a9:24:4d:b0:17: e4:a1:6e:81:39:09:64:52:a3:05:5d:00:39:b8:72: c6:30:1b:10:54:93:9e:f3:f4:31:51:21:80:f1:d1: 1a:0f:73:d7:ba:7e:af:c6:99:6d:c5:5f:9c:a1:16: 45:9a:52:61:6e:1d:61:18:bc:91:f6:d3:6a:9e:eb: 45:77:cd:a2:fa:fd:e9:aa:7f:b1:8d:17:58:d9:a2: 39:3c:6f:bd:fd:e7:cb:df:0b:f3:f6:a5:86:93:f2: 39:12:97:89:9b:0e:35:01:e8:85:b6:10:d7:12:0d: 4c:f8:09:d1:f8:60:dc:4a:9e:75:68:ff:19:ca:fd: bd:1a:99:6d:ea:4b:59:71:70:ee:35:16:86:ec:70: 5a:bf:0c:d9:74:cf:02:4f:2f:c3:5c:10:48:00:15: 6f:f7:2b:52:c5:a4:31:30:e4:ed:52:59:ab:b7:0c: 5e:7c:91:d2:4c:f9:cd:0f:89:d0:74:98:e8:4f:c2: c9:86:e4:68:7b:9f:e1:2e:a5:fe:59:b8:df:f4:87: 67:d0:32:5a:94:75:68:20:76:86:c5:aa:93:83:7d: c2:87:b7:52:49:c3:a5:4b:b2:42:6a:9d:a4:57:a8: f5:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:04:B3:ED:F6:54:14:96:DF:52:BB:1F:3B:85:77:1C:69:1F:BB:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756/2b93d2a9-8779-3d10-9e6f-ddb702dc8e09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756/895b91dd-3a1f-46e8-88e9-1a06a1c88756.crl X509v3 Authority Key Identifier: keyid:8B:A3:70:CC:C8:96:6C:14:AB:9C:B7:BF:2E:DB:F1:66:BF:63:A8:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756.cer sbgp-ipAddrBlock: critical IPv4: 209.35.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:52:60:1a:c3:6b:1d:45:98:8c:b9:8a:4a:e7:35:ee:3a:8f: be:5f:f2:06:a7:16:ce:3f:5e:8b:1a:93:c0:09:cc:8a:5b:65: df:e3:9a:8a:8d:fc:fa:74:a4:4c:c2:57:61:f4:92:26:d5:ec: 32:c4:c1:74:a8:d5:b5:0a:34:35:e9:49:73:b2:7f:99:ac:25: b2:a8:b2:cd:ec:62:98:96:26:a2:80:a5:24:05:c0:85:db:f8: 58:75:00:d7:1f:68:6f:e0:e6:af:83:cc:62:42:c3:40:6e:95: d2:d8:8b:6d:1b:04:4f:41:43:71:20:e5:b6:b9:dd:8e:0f:5f: 8d:1d:08:eb:99:bd:41:dc:90:90:03:a8:58:46:a9:7d:48:f8: e5:d0:65:af:6e:f0:ac:04:90:17:f8:a0:a5:84:f6:e6:83:29: dd:60:d9:e5:41:9b:17:af:53:f2:b8:bd:5e:d2:0c:db:b5:e6: 40:9a:1f:ff:33:89:4d:f7:aa:03:1f:36:dd:7e:2b:fc:0a:1b: 5c:d0:fc:f4:10:08:86:c5:a7:15:f6:1c:51:33:bd:c8:fd:38: e9:f2:a2:b4:58:ae:8f:48:d5:d1:cf:c4:f5:ef:b9:c4:71:6f: b6:c9:22:fa:ab:a1:38:af:e0:1a:0f:bd:b3:90:90:c1:ad:01: fe:80:d5:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6er+kjTqeTaWpN+YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODk1YjkxZGQtM2ExZi00NmU4LTg4ZTktMWEwNmExYzg4 NzU2MB4XDTI2MDcyNTIxMDAxMloXDTI2MTAyMzIxMDAxMlowLzEtMCsGA1UEAxMk MmUxMjZmNjAtNmJkNC00MTk5LTg0ZDUtMDkyZjBkNTljNGNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiESf3xLPg1RwmHbP6+vgdOQMxwot1rT5qSRN sBfkoW6BOQlkUqMFXQA5uHLGMBsQVJOe8/QxUSGA8dEaD3PXun6vxpltxV+coRZF mlJhbh1hGLyR9tNqnutFd82i+v3pqn+xjRdY2aI5PG+9/efL3wvz9qWGk/I5EpeJ mw41AeiFthDXEg1M+AnR+GDcSp51aP8Zyv29Gplt6ktZcXDuNRaG7HBavwzZdM8C Ty/DXBBIABVv9ytSxaQxMOTtUlmrtwxefJHSTPnND4nQdJjoT8LJhuRoe5/hLqX+ Wbjf9Idn0DJalHVoIHaGxaqTg33Ch7dSScOlS7JCap2kV6j18wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM8Es+32VBSW31K7HzuFdxxpH7tvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84OTVi OTFkZC0zYTFmLTQ2ZTgtODhlOS0xYTA2YTFjODg3NTYvMmI5M2QyYTktODc3OS0z ZDEwLTllNmYtZGRiNzAyZGM4ZTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODk1YjkxZGQtM2ExZi00NmU4LTg4 ZTktMWEwNmExYzg4NzU2Lzg5NWI5MWRkLTNhMWYtNDZlOC04OGU5LTFhMDZhMWM4 ODc1Ni5jcmwwHwYDVR0jBBgwFoAUi6NwzMiWbBSrnLe/LtvxZr9jqMUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84OTViOTFkZC0zYTFmLTQ2ZTgtODhlOS0xYTA2 YTFjODg3NTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0SMgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACJSYBrDax1FmIy5ikrnNe46j75f8ganFs4/Xosak8AJzIpbZd/jmoqN /Pp0pEzCV2H0kibV7DLEwXSo1bUKNDXpSXOyf5msJbKoss3sYpiWJqKApSQFwIXb +Fh1ANcfaG/g5q+DzGJCw0BuldLYi20bBE9BQ3Eg5ba53Y4PX40dCOuZvUHckJAD qFhGqX1I+OXQZa9u8KwEkBf4oKWE9uaDKd1g2eVBmxevU/K4vV7SDNu15kCaH/8z iU33qgMfNt1+K/wKG1zQ/PQQCIbFpxX2HFEzvcj9OOnyorRYro9I1dHPxPXvucRx b7bJIvqroTiv4BoPvbOQkMGtAf6A1T4= -----END CERTIFICATE-----Generated at Wed Jul 29 20:37:32 2026 by rpki-client