$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/85f38b04-ad15-3524-b975-d2b3e17da9f9.roa File: 85f38b04-ad15-3524-b975-d2b3e17da9f9.roa (raw, json) Hash identifier: ulxxQtHU0A5YwYUakHsYLsU/XhnVSdvqzDXjZoEtc7g= Subject key identifier: 4D:4F:FC:C6:DB:C6:B0:60:AD:C3:6A:E2:A6:66:8E:CC:30:AC:9A:D0 Certificate issuer: /CN=3c1b9e2d-457a-403f-9256-27f272ed993d Certificate serial: 010D0C9F4328584EA787EDB78B37B0BCB342F040 Authority key identifier: EE:DF:25:D2:42:4C:99:1F:D5:04:B3:D0:D3:64:9E:B5:B5:6A:72:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/85f38b04-ad15-3524-b975-d2b3e17da9f9.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 16509 IP address blocks: 192.135.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Aug 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:ed:b7:8b:37:b0:bc:b3:42:f0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c1b9e2d-457a-403f-9256-27f272ed993d Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=5e855739-8787-45ae-b8ab-26faad027565 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:61:37:99:b0:85:18:c0:69:67:e5:08:cc:26: 92:78:20:cc:b6:8e:06:1d:09:cc:ce:9c:02:72:dd: 86:1a:1d:09:28:61:a8:01:0c:5c:d8:37:95:77:87: ee:1f:17:09:08:e2:ae:c9:6d:84:ba:cd:a5:f7:96: 94:3a:63:db:6d:03:8e:69:06:b1:39:0a:7e:08:1a: bf:7e:93:b8:22:e4:5c:95:0c:16:01:3c:b4:d7:5b: 5f:ca:fb:78:f7:7b:ab:66:8f:3c:c0:90:53:7f:d1: 64:79:e0:a9:25:f2:da:dc:fa:cf:d6:48:88:5d:e8: 24:c4:a2:ae:28:8d:01:35:bd:ae:2a:7f:c4:f6:6e: 6d:24:43:6b:3a:f5:43:a1:1d:20:b5:08:a4:6a:84: 53:a4:ed:9e:48:6a:1b:b2:b4:3e:62:03:28:a1:d8: 44:86:dd:19:a2:8e:a0:f0:70:1b:b3:ee:ca:a3:a3: 01:24:3f:85:32:88:3f:60:fc:e0:6f:df:24:47:37: e6:b1:5b:5f:65:99:ab:ee:b6:b2:a7:e0:56:01:ea: 32:3b:07:e9:11:26:47:fa:7e:5e:98:ca:2c:b2:4d: f5:e4:77:b6:f4:a5:37:c4:cd:1b:64:d1:13:e7:08: 1b:9d:bd:88:3b:bd:e9:23:20:1c:cd:48:9d:8f:27: e6:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:4F:FC:C6:DB:C6:B0:60:AD:C3:6A:E2:A6:66:8E:CC:30:AC:9A:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/85f38b04-ad15-3524-b975-d2b3e17da9f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.crl X509v3 Authority Key Identifier: keyid:EE:DF:25:D2:42:4C:99:1F:D5:04:B3:D0:D3:64:9E:B5:B5:6A:72:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer sbgp-ipAddrBlock: critical IPv4: 192.135.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:70:9b:59:49:3c:d6:0f:4a:a7:f0:90:f2:02:3c:2a:03:bb: 94:0f:9c:64:4a:35:8e:6b:63:71:18:24:0c:16:f1:ff:d4:91: 2f:ab:6a:2a:54:71:86:58:0d:1c:6c:74:96:a1:c1:b4:07:b4: dc:0a:c7:38:c6:16:7e:38:52:9e:90:e7:39:c2:76:a2:c5:83: e1:ba:59:79:f3:7d:c7:b4:21:b8:a4:12:a7:3c:cf:5e:88:5a: 91:62:3d:5a:78:ef:6c:5b:f6:5e:a3:8b:b4:f9:a5:b1:22:3f: a3:fb:66:a7:f6:b4:77:67:02:3e:ba:a0:c2:5c:e9:99:f6:fc: f8:57:11:05:44:9f:18:fb:30:4f:2c:37:00:89:58:02:b9:4b: 78:4b:cb:71:e3:99:02:9c:33:f7:03:2c:60:a0:7c:24:1a:f5: 43:52:67:1e:5a:32:81:bc:b2:27:dd:e4:24:ca:9e:1a:45:a6: d6:08:d0:d0:0c:85:92:e4:90:6a:5f:d9:67:16:b6:38:fe:2d: 84:e1:28:6f:65:84:68:16:b3:f9:ec:c9:22:b6:5c:3e:b2:65: 05:e7:19:a4:33:1e:d7:6f:35:c9:8e:98:6d:eb:6f:2e:56:7f: bc:ea:b2:28:ee:8d:3d:0c:0d:20:dd:e8:7a:3e:8f:43:65:63: 58:30:bb:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nh+23izewvLNC8EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2MxYjllMmQtNDU3YS00MDNmLTkyNTYtMjdmMjcyZWQ5 OTNkMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NWU4NTU3MzktODc4Ny00NWFlLWI4YWItMjZmYWFkMDI3NTY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmE3mbCFGMBpZ+UIzCaSeCDMto4GHQnMzpwC ct2GGh0JKGGoAQxc2DeVd4fuHxcJCOKuyW2Eus2l95aUOmPbbQOOaQaxOQp+CBq/ fpO4IuRclQwWATy011tfyvt493urZo88wJBTf9FkeeCpJfLa3PrP1kiIXegkxKKu KI0BNb2uKn/E9m5tJENrOvVDoR0gtQikaoRTpO2eSGobsrQ+YgMoodhEht0Zoo6g 8HAbs+7Ko6MBJD+FMog/YPzgb98kRzfmsVtfZZmr7rayp+BWAeoyOwfpESZH+n5e mMossk315He29KU3xM0bZNET5wgbnb2IO73pIyAczUidjyfmMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE1P/MbbxrBgrcNq4qZmjswwrJrQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zYzFi OWUyZC00NTdhLTQwM2YtOTI1Ni0yN2YyNzJlZDk5M2QvODVmMzhiMDQtYWQxNS0z NTI0LWI5NzUtZDJiM2UxN2RhOWY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2MxYjllMmQtNDU3YS00MDNmLTky NTYtMjdmMjcyZWQ5OTNkLzNjMWI5ZTJkLTQ1N2EtNDAzZi05MjU2LTI3ZjI3MmVk OTkzZC5jcmwwHwYDVR0jBBgwFoAU7t8l0kJMmR/VBLPQ02SetbVqcsMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zYzFiOWUyZC00NTdhLTQwM2YtOTI1Ni0yN2Yy NzJlZDk5M2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwIffMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF1wm1lJPNYPSqfwkPICPCoDu5QPnGRKNY5rY3EYJAwW8f/UkS+raipU cYZYDRxsdJahwbQHtNwKxzjGFn44Up6Q5znCdqLFg+G6WXnzfce0IbikEqc8z16I WpFiPVp472xb9l6ji7T5pbEiP6P7Zqf2tHdnAj66oMJc6Zn2/PhXEQVEnxj7ME8s NwCJWAK5S3hLy3HjmQKcM/cDLGCgfCQa9UNSZx5aMoG8sifd5CTKnhpFptYI0NAM hZLkkGpf2WcWtjj+LYThKG9lhGgWs/nsySK2XD6yZQXnGaQzHtdvNcmOmG3rby5W f7zqsijujT0MDSDd6Ho+j0NlY1gwu50= -----END CERTIFICATE-----Generated at Tue Aug 4 17:57:32 2026 by rpki-client