$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/b1abb89d-f5a0-39e2-9f3e-765e2e7ac368.roa File: b1abb89d-f5a0-39e2-9f3e-765e2e7ac368.roa (raw, json) Hash identifier: MUih5yXfuVr5Z4uJLtWGOyfG4eZ/5rBMyB1bDsHtEWg= Subject key identifier: 3A:D2:72:68:64:3C:E9:A6:15:19:FC:8A:B1:F3:2F:57:0C:7D:3C:E1 Certificate issuer: /CN=a6f26d75-0d3a-4bef-8d6a-36d16664307e Certificate serial: 010D0C9F4328584F7FE2E66A57ED071A40B34800 Authority key identifier: 95:63:35:33:47:05:5D:59:71:3A:DA:67:E9:EB:BB:5A:F5:DC:7D:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/b1abb89d-f5a0-39e2-9f3e-765e2e7ac368.roa Signing time: Wed 14 Oct 2026 13:00:12 +0000 ROA not before: Wed 14 Oct 2026 13:00:12 +0000 ROA not after: Tue 12 Jan 2027 14:00:12 +0000 asID: 29 IP address blocks: 192.35.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/a6f26d75-0d3a-4bef-8d6a-36d16664307e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/a6f26d75-0d3a-4bef-8d6a-36d16664307e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7f:e2:e6:6a:57:ed:07:1a:40:b3:48:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6f26d75-0d3a-4bef-8d6a-36d16664307e Validity Not Before: Oct 14 13:00:12 2026 GMT Not After : Jan 12 14:00:12 2027 GMT Subject: CN=cbc8c28f-8c53-44b2-a6fa-ccc71849f7a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:94:9f:4a:4e:c7:58:c3:31:c3:cd:3d:e0:c9: 83:1d:ad:be:30:91:cb:59:3d:31:7a:b0:d3:4c:b3: 0c:8c:cd:05:5c:6a:fd:58:ac:83:d2:06:c9:ee:d6: f1:f5:70:75:81:46:45:f1:6f:9e:87:02:88:41:cd: 1b:9b:68:ae:4f:df:9a:12:4b:68:98:27:96:02:63: 6b:1c:de:5b:f0:b9:f2:1a:87:2e:a7:9d:38:af:1c: 13:bb:d2:9f:e3:97:65:f1:f3:11:90:90:01:05:c3: 2e:22:f5:04:d1:93:0f:1d:7e:57:97:1f:fc:11:7b: 4e:c7:b1:76:5c:eb:99:7d:eb:b4:73:0d:7f:a0:7c: 41:0f:f7:08:9a:b5:44:d2:9c:7a:07:d3:a0:c7:51: e3:dc:a2:03:f8:26:e4:a2:ba:66:e7:a0:f8:8f:31: a3:53:5e:81:80:5f:81:f9:a9:e7:dc:dd:31:8f:57: dc:01:19:35:30:19:05:fe:c7:84:3b:44:c4:d9:33: 9d:34:9e:1b:8b:b2:af:e6:c4:e6:be:1d:a0:b5:a7: 4b:e3:23:72:4e:5f:f6:5e:f3:97:9e:1a:48:8e:12: 84:cc:9d:f1:b0:9f:2f:06:3c:4c:76:20:74:ad:d8: 8d:0a:c9:e6:ea:4f:3b:2d:ff:33:4e:6a:87:74:b7: 36:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:D2:72:68:64:3C:E9:A6:15:19:FC:8A:B1:F3:2F:57:0C:7D:3C:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/b1abb89d-f5a0-39e2-9f3e-765e2e7ac368.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/a6f26d75-0d3a-4bef-8d6a-36d16664307e.crl X509v3 Authority Key Identifier: keyid:95:63:35:33:47:05:5D:59:71:3A:DA:67:E9:EB:BB:5A:F5:DC:7D:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e.cer sbgp-ipAddrBlock: critical IPv4: 192.35.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:e0:28:b4:e8:cd:f2:87:b3:76:b9:e3:e1:d3:1f:9e:6e:87: 1b:27:db:e7:17:d0:e6:b2:ab:83:91:cf:60:62:11:cc:ae:08: dc:be:d1:73:c6:1a:b0:99:4d:d5:c8:97:97:51:d4:21:8f:7a: c6:b0:41:82:07:12:10:ad:62:49:4a:17:e3:6f:a9:10:df:32: b5:18:4a:0b:ae:ac:d5:81:96:99:33:ba:df:4f:65:48:b7:b6: bc:19:6b:87:5a:98:43:43:85:45:62:39:76:5a:66:ab:6d:cf: 0a:b3:0b:3a:49:c5:b8:ff:6b:2e:38:7e:db:f9:13:62:87:42: cd:71:f3:09:56:79:cf:03:d8:0f:3d:48:18:ad:37:11:7b:88: 35:85:97:3f:fd:46:60:75:f7:bc:1d:46:5a:ef:ad:c3:2d:94: 93:46:63:65:c1:66:fe:a6:93:12:9a:de:82:4d:85:cd:0c:ff: 50:32:f6:db:a8:0a:d9:21:9e:89:71:23:54:6e:16:59:13:36: 4c:18:a9:8d:8d:fc:17:55:18:cb:eb:71:a7:eb:b5:d4:a5:3f: 4f:df:ef:c3:47:6e:51:3e:ef:78:ad:fd:e0:c0:77:53:23:93: 1b:93:9d:96:7f:8c:37:a1:6e:19:05:09:59:ba:05:bf:f3:a7: 81:d5:61:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9/4uZqV+0HGkCzSAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTZmMjZkNzUtMGQzYS00YmVmLThkNmEtMzZkMTY2NjQz MDdlMB4XDTI2MTAxNDEzMDAxMloXDTI3MDExMjE0MDAxMlowLzEtMCsGA1UEAxMk Y2JjOGMyOGYtOGM1My00NGIyLWE2ZmEtY2NjNzE4NDlmN2E4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZSfSk7HWMMxw8094MmDHa2+MJHLWT0xerDT TLMMjM0FXGr9WKyD0gbJ7tbx9XB1gUZF8W+ehwKIQc0bm2iuT9+aEktomCeWAmNr HN5b8LnyGocup504rxwTu9Kf45dl8fMRkJABBcMuIvUE0ZMPHX5Xlx/8EXtOx7F2 XOuZfeu0cw1/oHxBD/cImrVE0px6B9Ogx1Hj3KID+Cbkorpm56D4jzGjU16BgF+B +ann3N0xj1fcARk1MBkF/seEO0TE2TOdNJ4bi7Kv5sTmvh2gtadL4yNyTl/2XvOX nhpIjhKEzJ3xsJ8vBjxMdiB0rdiNCsnm6k87Lf8zTmqHdLc2UQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDrScmhkPOmmFRn8irHzL1cMfTzhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hNmYy NmQ3NS0wZDNhLTRiZWYtOGQ2YS0zNmQxNjY2NDMwN2UvYjFhYmI4OWQtZjVhMC0z OWUyLTlmM2UtNzY1ZTJlN2FjMzY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTZmMjZkNzUtMGQzYS00YmVmLThk NmEtMzZkMTY2NjQzMDdlL2E2ZjI2ZDc1LTBkM2EtNGJlZi04ZDZhLTM2ZDE2NjY0 MzA3ZS5jcmwwHwYDVR0jBBgwFoAUlWM1M0cFXVlxOtpn6eu7WvXcfSswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hNmYyNmQ3NS0wZDNhLTRiZWYtOGQ2YS0zNmQx NjY2NDMwN2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCNZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFngKLTozfKHs3a54+HTH55uhxsn2+cX0Oayq4ORz2BiEcyuCNy+0XPG GrCZTdXIl5dR1CGPesawQYIHEhCtYklKF+NvqRDfMrUYSguurNWBlpkzut9PZUi3 trwZa4damENDhUViOXZaZqttzwqzCzpJxbj/ay44ftv5E2KHQs1x8wlWec8D2A89 SBitNxF7iDWFlz/9RmB197wdRlrvrcMtlJNGY2XBZv6mkxKa3oJNhc0M/1Ay9tuo CtkhnolxI1RuFlkTNkwYqY2N/BdVGMvrcafrtdSlP0/f78NHblE+73it/eDAd1Mj kxuTnZZ/jDehbhkFCVm6Bb/zp4HVYZg= -----END CERTIFICATE-----Generated at Sun Oct 25 14:35:39 2026 by rpki-client