$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/3ac2f426-8b20-3807-8729-c56bcbde4bdf.roa File: 3ac2f426-8b20-3807-8729-c56bcbde4bdf.roa (raw, json) Hash identifier: VjimzqvRsRYSfDZ5ciEvGO20C8wUiS3oQD4QGTmYXsA= Subject key identifier: 4B:CA:BD:24:94:70:83:EA:FB:65:F8:22:06:DF:4D:4F:9E:3A:5B:72 Certificate issuer: /CN=a6f26d75-0d3a-4bef-8d6a-36d16664307e Certificate serial: 010D0C9F4328584F82AD971EBB27B7065C38AD38 Authority key identifier: 95:63:35:33:47:05:5D:59:71:3A:DA:67:E9:EB:BB:5A:F5:DC:7D:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/3ac2f426-8b20-3807-8729-c56bcbde4bdf.roa Signing time: Thu 15 Oct 2026 13:00:13 +0000 ROA not before: Thu 15 Oct 2026 13:00:13 +0000 ROA not after: Wed 13 Jan 2027 14:00:13 +0000 asID: 398083 IP address blocks: 192.35.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/a6f26d75-0d3a-4bef-8d6a-36d16664307e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/a6f26d75-0d3a-4bef-8d6a-36d16664307e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 21 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:82:ad:97:1e:bb:27:b7:06:5c:38:ad:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6f26d75-0d3a-4bef-8d6a-36d16664307e Validity Not Before: Oct 15 13:00:13 2026 GMT Not After : Jan 13 14:00:13 2027 GMT Subject: CN=40f79e2f-72c3-4179-b060-e4a8ced24792 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c9:73:a8:a8:67:cb:a7:7c:94:14:4c:1b:8a: ae:8e:20:4b:52:ed:c6:c0:9d:51:53:cc:22:9a:cf: 12:dc:0f:1a:31:37:0c:8e:23:7c:28:43:7b:b5:ea: 96:b0:91:1c:7c:26:9c:4f:69:bc:bf:29:9f:fb:e3: b5:3e:e1:38:f6:08:4f:ac:ee:96:2c:80:e9:dc:33: 45:c3:9a:3a:4f:a8:a9:77:3e:c1:de:fb:14:32:19: 84:74:8c:d1:be:cb:3e:12:e7:1f:fa:81:3f:08:42: 49:b8:fb:31:14:0e:2b:67:0e:aa:b3:1a:6c:06:d0: ce:58:62:05:fe:fe:a3:ed:47:b5:12:8d:d2:54:68: 58:11:a1:94:72:5d:31:c9:78:12:92:b1:56:7f:9c: f5:c9:7f:cc:01:0c:89:23:b6:7e:5c:2b:cd:96:61: a9:45:29:2a:63:a6:34:e5:6f:9e:97:e6:e3:96:fb: 9e:7d:3d:ac:e1:26:f7:3d:f7:80:e5:f3:ab:20:b0: 01:76:3e:0e:b2:07:d9:95:e7:dd:dd:d8:2e:40:08: cb:db:d5:a3:56:22:98:f9:b9:6d:e0:be:c0:99:65: 89:6f:37:b5:71:86:7e:10:8d:7a:43:e1:44:0e:cc: b4:b5:5a:44:77:d5:bb:28:10:4e:44:72:de:f3:f1: 31:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:CA:BD:24:94:70:83:EA:FB:65:F8:22:06:DF:4D:4F:9E:3A:5B:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/3ac2f426-8b20-3807-8729-c56bcbde4bdf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/a6f26d75-0d3a-4bef-8d6a-36d16664307e.crl X509v3 Authority Key Identifier: keyid:95:63:35:33:47:05:5D:59:71:3A:DA:67:E9:EB:BB:5A:F5:DC:7D:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e.cer sbgp-ipAddrBlock: critical IPv4: 192.35.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:98:87:94:93:8c:e9:f0:a8:bb:de:4a:1f:07:cb:b8:eb:47: d4:a0:a3:f8:f9:bf:97:98:70:c3:ee:6c:b7:a1:05:8a:a0:c2: b9:9a:12:41:dd:9b:e7:6c:3f:56:cd:f1:8c:c1:b3:a5:58:a6: 8d:9b:95:9b:a0:52:47:c0:be:8f:52:a5:f2:59:40:18:55:e0: 72:ac:0e:c3:34:76:c6:d9:5f:2e:a5:a7:09:8c:5e:49:ce:0e: 31:dd:b5:04:ab:63:d6:e3:21:94:99:a1:f0:eb:82:47:93:f4: c6:2f:fc:3d:58:e0:82:b1:10:aa:39:42:87:3c:14:c8:1f:c0: 34:ba:68:a8:26:21:76:72:10:2a:12:85:52:cf:a6:2f:bc:03: 78:f9:ef:f5:bd:5b:53:3a:3e:09:96:b0:d1:0e:c8:12:dd:4e: 11:46:e8:f3:9f:f0:05:99:5a:67:0d:0c:89:17:e4:03:ad:c9: 87:e9:e6:ff:66:48:d9:66:57:33:29:a7:db:6e:95:28:4e:36: 2c:2b:77:b4:83:d5:73:e2:9f:b3:2e:e2:59:ec:b2:3d:f3:0f: a9:a1:3c:34:10:67:90:3e:f6:3d:f4:80:e4:37:09:73:a7:2e: ec:75:19:e1:0a:35:f7:39:02:57:18:bf:e7:a5:8f:14:d2:f3: 5b:f2:c5:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+CrZceuye3Blw4rTgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTZmMjZkNzUtMGQzYS00YmVmLThkNmEtMzZkMTY2NjQz MDdlMB4XDTI2MTAxNTEzMDAxM1oXDTI3MDExMzE0MDAxM1owLzEtMCsGA1UEAxMk NDBmNzllMmYtNzJjMy00MTc5LWIwNjAtZTRhOGNlZDI0NzkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqclzqKhny6d8lBRMG4qujiBLUu3GwJ1RU8wi ms8S3A8aMTcMjiN8KEN7teqWsJEcfCacT2m8vymf++O1PuE49ghPrO6WLIDp3DNF w5o6T6ipdz7B3vsUMhmEdIzRvss+Eucf+oE/CEJJuPsxFA4rZw6qsxpsBtDOWGIF /v6j7Ue1Eo3SVGhYEaGUcl0xyXgSkrFWf5z1yX/MAQyJI7Z+XCvNlmGpRSkqY6Y0 5W+el+bjlvuefT2s4Sb3PfeA5fOrILABdj4OsgfZlefd3dguQAjL29WjViKY+blt 4L7AmWWJbze1cYZ+EI16Q+FEDsy0tVpEd9W7KBBORHLe8/ExxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEvKvSSUcIPq+2X4IgbfTU+eOltyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hNmYy NmQ3NS0wZDNhLTRiZWYtOGQ2YS0zNmQxNjY2NDMwN2UvM2FjMmY0MjYtOGIyMC0z ODA3LTg3MjktYzU2YmNiZGU0YmRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTZmMjZkNzUtMGQzYS00YmVmLThk NmEtMzZkMTY2NjQzMDdlL2E2ZjI2ZDc1LTBkM2EtNGJlZi04ZDZhLTM2ZDE2NjY0 MzA3ZS5jcmwwHwYDVR0jBBgwFoAUlWM1M0cFXVlxOtpn6eu7WvXcfSswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hNmYyNmQ3NS0wZDNhLTRiZWYtOGQ2YS0zNmQx NjY2NDMwN2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCNZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALeYh5STjOnwqLveSh8Hy7jrR9Sgo/j5v5eYcMPubLehBYqgwrmaEkHd m+dsP1bN8YzBs6VYpo2blZugUkfAvo9SpfJZQBhV4HKsDsM0dsbZXy6lpwmMXknO DjHdtQSrY9bjIZSZofDrgkeT9MYv/D1Y4IKxEKo5Qoc8FMgfwDS6aKgmIXZyECoS hVLPpi+8A3j57/W9W1M6PgmWsNEOyBLdThFG6POf8AWZWmcNDIkX5AOtyYfp5v9m SNlmVzMpp9tulShONiwrd7SD1XPin7Mu4lnssj3zD6mhPDQQZ5A+9j30gOQ3CXOn Lux1GeEKNfc5AlcYv+eljxTS81vyxbA= -----END CERTIFICATE-----Generated at Tue Oct 20 22:09:54 2026 by rpki-client