$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c98136f0-3efc-4dfb-a3fe-596d9a8df01a/d6a3954a-281e-3441-b4f0-d432435afda3.roa File: d6a3954a-281e-3441-b4f0-d432435afda3.roa (raw, json) Hash identifier: pdoiKeShG44IpwvPJP7KhfS8r0x3qOtMUC33PZacPgI= Subject key identifier: B3:A0:D0:E1:A8:C5:CD:60:4E:04:BE:66:2A:D0:C6:C4:D9:13:B1:3A Certificate issuer: /CN=c98136f0-3efc-4dfb-a3fe-596d9a8df01a Certificate serial: 010D0C9F4328584EA7946DAA5EC87530D5B2CD20 Authority key identifier: F9:A6:75:02:28:D4:3A:8D:33:46:9E:1C:BC:95:0E:36:D7:3B:3E:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c98136f0-3efc-4dfb-a3fe-596d9a8df01a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c98136f0-3efc-4dfb-a3fe-596d9a8df01a/d6a3954a-281e-3441-b4f0-d432435afda3.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 31898 IP address blocks: 192.35.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c98136f0-3efc-4dfb-a3fe-596d9a8df01a/c98136f0-3efc-4dfb-a3fe-596d9a8df01a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c98136f0-3efc-4dfb-a3fe-596d9a8df01a/c98136f0-3efc-4dfb-a3fe-596d9a8df01a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c98136f0-3efc-4dfb-a3fe-596d9a8df01a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:94:6d:aa:5e:c8:75:30:d5:b2:cd:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c98136f0-3efc-4dfb-a3fe-596d9a8df01a Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=68b7c0d6-0c03-4fa8-9ed5-df86c7ce7260 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:4c:eb:e6:2f:25:32:7c:4b:25:e3:28:c9:6d: 59:6b:03:0c:0b:16:04:cd:6c:e1:76:52:b6:0d:cd: 3c:f6:c6:7b:6d:38:c2:1a:58:8f:f7:60:d0:09:26: cd:3e:6b:7d:ee:8a:fc:d9:00:02:46:21:e4:8e:3b: 14:92:a8:bb:21:c7:89:e8:52:fd:b8:9a:cb:57:06: f8:29:ea:e5:64:26:23:5b:a2:94:d8:b3:73:d2:eb: f8:e6:99:ef:dc:fe:38:44:48:9e:26:bb:07:b1:ea: 28:81:6d:b7:5a:bf:5d:1f:6d:dd:7d:6c:c0:24:77: a0:90:c9:2d:93:1d:7e:29:84:0e:dc:87:16:51:72: 88:0e:25:72:06:bc:10:ce:b0:6f:f8:dd:f5:79:19: 0e:c6:cf:28:29:f9:bf:60:c2:60:06:9e:a2:c7:fd: 04:18:90:62:2d:ff:cb:ae:9c:6d:e5:d0:90:66:f0: dc:82:28:ae:8e:fc:54:5b:84:d7:c6:ee:2b:d6:04: 4d:14:78:79:aa:a5:5c:46:0c:95:d0:96:92:85:13: 22:e9:ef:ba:b0:e7:09:5e:43:c3:a1:ec:63:92:6c: 1d:b5:7f:e6:d8:2f:4c:e6:d1:b5:4b:19:55:b5:b2: f1:46:07:ac:fc:5f:0e:9b:ad:43:a8:52:0c:7f:1f: 67:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:A0:D0:E1:A8:C5:CD:60:4E:04:BE:66:2A:D0:C6:C4:D9:13:B1:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c98136f0-3efc-4dfb-a3fe-596d9a8df01a/d6a3954a-281e-3441-b4f0-d432435afda3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c98136f0-3efc-4dfb-a3fe-596d9a8df01a/c98136f0-3efc-4dfb-a3fe-596d9a8df01a.crl X509v3 Authority Key Identifier: keyid:F9:A6:75:02:28:D4:3A:8D:33:46:9E:1C:BC:95:0E:36:D7:3B:3E:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c98136f0-3efc-4dfb-a3fe-596d9a8df01a.cer sbgp-ipAddrBlock: critical IPv4: 192.35.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:57:54:06:32:6b:d5:35:1b:68:3a:ce:a6:8e:f4:db:e4:eb: b1:d1:04:3e:ee:9c:5e:4f:a5:e3:66:6c:f7:9a:c3:c0:cf:5e: e1:2a:89:77:0e:76:6c:23:bd:76:07:d9:6f:5f:87:48:8e:20: b4:df:8b:49:ca:32:ac:77:cb:b0:c3:87:0e:ea:bb:f1:ba:15: d8:ae:14:da:c1:8d:6d:cc:ee:e1:5b:02:0b:74:a9:f3:da:cb: b5:cd:56:2b:98:37:30:99:7b:93:71:d1:96:35:37:3e:73:49: d0:0d:9d:02:0f:c1:5b:d2:23:12:90:db:ef:46:64:6c:51:5d: a4:35:2b:76:a6:07:b9:05:40:92:81:5f:09:88:a9:4d:f8:79: 9d:4c:1c:99:17:db:2b:ff:18:68:c1:b4:1b:38:33:f2:15:c2: 4f:95:90:d7:23:24:58:8d:11:88:f5:38:1c:82:5e:36:6e:6d: 49:ea:e1:05:2e:28:94:1e:44:79:4c:2b:4a:dd:dd:b4:7a:c0: 3e:a2:76:df:53:02:8d:5a:56:aa:75:55:31:a7:e6:e9:cd:65: ae:86:61:30:f5:9b:9a:e6:c3:26:18:b1:56:de:cc:dd:54:9d: e1:37:b0:39:13:63:64:66:f1:f6:de:43:63:63:79:15:46:2f: 47:34:2d:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlG2qXsh1MNWyzSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzk4MTM2ZjAtM2VmYy00ZGZiLWEzZmUtNTk2ZDlhOGRm MDFhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NjhiN2MwZDYtMGMwMy00ZmE4LTllZDUtZGY4NmM3Y2U3MjYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEzr5i8lMnxLJeMoyW1ZawMMCxYEzWzhdlK2 Dc089sZ7bTjCGliP92DQCSbNPmt97or82QACRiHkjjsUkqi7IceJ6FL9uJrLVwb4 KerlZCYjW6KU2LNz0uv45pnv3P44REieJrsHseoogW23Wr9dH23dfWzAJHegkMkt kx1+KYQO3IcWUXKIDiVyBrwQzrBv+N31eRkOxs8oKfm/YMJgBp6ix/0EGJBiLf/L rpxt5dCQZvDcgiiujvxUW4TXxu4r1gRNFHh5qqVcRgyV0JaShRMi6e+6sOcJXkPD oexjkmwdtX/m2C9M5tG1SxlVtbLxRges/F8Om61DqFIMfx9nEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLOg0OGoxc1gTgS+ZirQxsTZE7E6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jOTgx MzZmMC0zZWZjLTRkZmItYTNmZS01OTZkOWE4ZGYwMWEvZDZhMzk1NGEtMjgxZS0z NDQxLWI0ZjAtZDQzMjQzNWFmZGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzk4MTM2ZjAtM2VmYy00ZGZiLWEz ZmUtNTk2ZDlhOGRmMDFhL2M5ODEzNmYwLTNlZmMtNGRmYi1hM2ZlLTU5NmQ5YThk ZjAxYS5jcmwwHwYDVR0jBBgwFoAU+aZ1AijUOo0zRp4cvJUONtc7Pn0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jOTgxMzZmMC0zZWZjLTRkZmItYTNmZS01OTZk OWE4ZGYwMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCP6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEhXVAYya9U1G2g6zqaO9Nvk67HRBD7unF5PpeNmbPeaw8DPXuEqiXcO dmwjvXYH2W9fh0iOILTfi0nKMqx3y7DDhw7qu/G6FdiuFNrBjW3M7uFbAgt0qfPa y7XNViuYNzCZe5Nx0ZY1Nz5zSdANnQIPwVvSIxKQ2+9GZGxRXaQ1K3amB7kFQJKB XwmIqU34eZ1MHJkX2yv/GGjBtBs4M/IVwk+VkNcjJFiNEYj1OByCXjZubUnq4QUu KJQeRHlMK0rd3bR6wD6idt9TAo1aVqp1VTGn5unNZa6GYTD1m5rmwyYYsVbezN1U neE3sDkTY2Rm8fbeQ2NjeRVGL0c0LWo= -----END CERTIFICATE-----Generated at Sat Sep 5 10:59:45 2026 by rpki-client