$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/f95c153a-ffa8-3b75-b0a0-97514874b1b8.roa File: f95c153a-ffa8-3b75-b0a0-97514874b1b8.roa (raw, json) Hash identifier: UY5bPGVbu45ALVCgp8Bhu/0UO9PsTW2OFBnnYLt4rT4= Subject key identifier: 31:F9:3F:D4:DA:5D:A2:E5:E6:E9:59:FC:A6:1D:E1:F1:81:F9:AB:D6 Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63 Certificate serial: 010D0C9F4328584F374D41FA3AE7107445212600 Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/f95c153a-ffa8-3b75-b0a0-97514874b1b8.roa Signing time: Fri 18 Sep 2026 13:00:12 +0000 ROA not before: Fri 18 Sep 2026 13:00:12 +0000 ROA not after: Thu 17 Dec 2026 14:00:12 +0000 asID: 54113 IP address blocks: 23.235.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:37:4d:41:fa:3a:e7:10:74:45:21:26:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63 Validity Not Before: Sep 18 13:00:12 2026 GMT Not After : Dec 17 14:00:12 2026 GMT Subject: CN=acb6dc9a-3f30-4e5f-a7b0-88ca43d6a698 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:10:63:94:59:6d:80:b7:0f:91:d8:76:9b:1b: 56:41:c4:29:dd:2e:ea:7d:b3:53:aa:19:03:64:5f: 06:16:d9:ef:45:60:67:e3:71:0e:eb:80:0c:c1:d9: ea:2e:d9:ed:b6:11:96:1f:c2:ab:02:36:3f:15:e2: bd:15:27:21:52:09:25:30:99:ac:55:38:8f:3d:53: 98:b2:d3:f6:a7:1a:5d:3c:fb:99:97:39:fd:fd:07: 2c:4c:fd:86:64:e7:76:db:2d:47:c6:db:f4:1c:2f: b4:c8:88:6d:e6:63:a4:e1:f4:fd:51:42:87:2c:0a: ba:0b:8c:a7:23:17:e6:ca:c7:92:96:18:cc:28:aa: eb:aa:6c:0d:e2:5e:83:97:27:a6:a0:30:a8:ec:46: b9:2d:8c:fa:40:d1:33:04:16:97:7e:ad:9f:c6:0b: 1c:45:e2:8d:3b:f3:08:ee:ad:7b:0b:ec:00:c6:17: 4c:16:fa:e3:37:9c:fe:d8:13:38:7e:3e:02:74:87: 5d:57:88:e7:23:7e:5c:31:c3:be:94:1b:cc:99:90: c1:26:1a:30:36:1d:70:f5:da:a1:94:1c:a9:46:7b: be:ea:98:3c:3e:62:9e:96:d5:cf:b0:d1:96:c0:c1: 18:cc:3f:17:e8:36:f6:26:da:86:8d:50:e0:11:52: 1b:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:F9:3F:D4:DA:5D:A2:E5:E6:E9:59:FC:A6:1D:E1:F1:81:F9:AB:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/f95c153a-ffa8-3b75-b0a0-97514874b1b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl X509v3 Authority Key Identifier: keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer sbgp-ipAddrBlock: critical IPv4: 23.235.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:aa:3e:c6:bb:7b:a5:17:5e:a9:d7:4c:c8:46:56:3f:35:bb: c8:33:c1:8c:fb:58:ba:25:d8:ca:51:8e:d0:6d:d8:b8:06:e5: fb:70:1c:35:a5:57:0b:96:90:bc:fa:33:5c:1c:24:7e:a2:58: 86:e5:43:b1:8e:d7:89:33:83:35:f5:d1:c4:d0:4a:44:dd:74: 51:d7:b5:ac:4a:0b:02:57:9b:fd:ac:bb:ce:8c:26:0f:6f:e8: 09:ef:2f:8c:5f:1d:78:f7:4b:00:6d:a6:10:33:59:d8:15:95: 59:2b:82:62:3d:eb:70:80:74:74:6b:47:6b:7b:fa:f2:7a:03: 67:9b:62:3b:00:63:34:9c:ae:85:9f:d0:99:e7:da:52:77:37: f0:e0:19:9d:1e:a1:d1:0c:ca:74:af:ce:36:93:db:be:0a:b5: 8a:f1:1a:56:b9:17:b5:02:3c:d4:cf:db:7a:a0:0e:91:82:85: 55:68:89:22:d3:01:47:7a:c4:8e:63:ca:89:0c:17:16:46:a9: cf:9c:1b:ef:01:d9:68:38:fa:5b:b8:94:ec:a1:30:4f:2f:08: 1f:9d:83:f1:13:80:1c:6f:4b:69:ee:32:98:2c:45:4d:eb:49: de:2a:18:09:7a:6e:5d:51:14:40:4f:59:45:a8:2d:d6:25:87: 6e:81:1d:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE83TUH6OucQdEUhJgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz YTYzMB4XDTI2MDkxODEzMDAxMloXDTI2MTIxNzE0MDAxMlowLzEtMCsGA1UEAxMk YWNiNmRjOWEtM2YzMC00ZTVmLWE3YjAtODhjYTQzZDZhNjk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBBjlFltgLcPkdh2mxtWQcQp3S7qfbNTqhkD ZF8GFtnvRWBn43EO64AMwdnqLtntthGWH8KrAjY/FeK9FSchUgklMJmsVTiPPVOY stP2pxpdPPuZlzn9/QcsTP2GZOd22y1Hxtv0HC+0yIht5mOk4fT9UUKHLAq6C4yn IxfmyseSlhjMKKrrqmwN4l6DlyemoDCo7Ea5LYz6QNEzBBaXfq2fxgscReKNO/MI 7q17C+wAxhdMFvrjN5z+2BM4fj4CdIddV4jnI35cMcO+lBvMmZDBJhowNh1w9dqh lBypRnu+6pg8PmKeltXPsNGWwMEYzD8X6Db2JtqGjVDgEVIb/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDH5P9TaXaLl5ulZ/KYd4fGB+avWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1 ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvZjk1YzE1M2EtZmZhOC0z Yjc1LWIwYTAtOTc1MTQ4NzRiMWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3 M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1 YzA5NzNhNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+sjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA+qPsa7e6UXXqnXTMhGVj81u8gzwYz7WLol2MpRjtBt2LgG5ftwHDWl VwuWkLz6M1wcJH6iWIblQ7GO14kzgzX10cTQSkTddFHXtaxKCwJXm/2su86MJg9v 6AnvL4xfHXj3SwBtphAzWdgVlVkrgmI963CAdHRrR2t7+vJ6A2ebYjsAYzScroWf 0Jnn2lJ3N/DgGZ0eodEMynSvzjaT274KtYrxGla5F7UCPNTP23qgDpGChVVoiSLT AUd6xI5jyokMFxZGqc+cG+8B2Wg4+lu4lOyhME8vCB+dg/ETgBxvS2nuMpgsRU3r Sd4qGAl6bl1RFEBPWUWoLdYlh26BHXQ= -----END CERTIFICATE-----Generated at Sat Sep 26 15:30:00 2026 by rpki-client