$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84/844b98f5-e6cd-370e-ac40-d2d72926edf0.roa File: 844b98f5-e6cd-370e-ac40-d2d72926edf0.roa (raw, json) Hash identifier: d5gxqAx5Wga6M1YCiFc5NFllBsDsx1Ee0VDuA+2dKkg= Subject key identifier: 22:C3:A8:6F:F3:81:44:0E:DF:B0:DD:13:A9:FC:13:C0:BB:A9:54:A1 Certificate issuer: /CN=219560ff-1a32-4424-9e54-f95df54ecc84 Certificate serial: 010D0C9F4328584F03A84BCC8AFC369F0F8953F0 Authority key identifier: B7:5A:46:BD:48:BF:FF:E6:F1:D7:1B:DB:F4:3B:BA:BB:79:2F:C0:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84/844b98f5-e6cd-370e-ac40-d2d72926edf0.roa Signing time: Mon 31 Aug 2026 01:00:12 +0000 ROA not before: Mon 31 Aug 2026 01:00:12 +0000 ROA not after: Sun 29 Nov 2026 02:00:12 +0000 asID: 5739 IP address blocks: 192.35.220.0/24 maxlen: 24 192.35.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84/219560ff-1a32-4424-9e54-f95df54ecc84.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84/219560ff-1a32-4424-9e54-f95df54ecc84.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:03:a8:4b:cc:8a:fc:36:9f:0f:89:53:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=219560ff-1a32-4424-9e54-f95df54ecc84 Validity Not Before: Aug 31 01:00:12 2026 GMT Not After : Nov 29 02:00:12 2026 GMT Subject: CN=4729e7d1-1356-48a7-9a7f-feed6cb8af6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:f3:cb:b2:5c:b2:ce:de:5d:d9:ee:33:d7:1a: 8b:6c:0f:8c:d1:b5:5e:e5:d4:66:a3:05:13:90:3b: b9:54:de:12:45:8d:68:c3:84:03:49:70:6b:2b:1c: 91:3a:0e:f2:46:a9:53:36:72:9c:74:d4:d9:ee:19: 78:d8:e0:b9:80:78:a6:49:d1:9d:c7:4c:7d:7e:cd: d4:0b:0a:f2:e6:ae:7e:c1:c1:c6:fe:ce:20:4c:90: 33:c1:3f:98:c9:a0:90:21:4f:19:04:73:5f:5e:29: b6:ba:f6:a2:35:c0:67:26:f0:72:da:14:97:50:54: ff:23:5b:2a:ce:e7:93:8e:fc:99:32:c3:05:d4:d1: 0a:8f:38:a3:7a:fd:3d:48:44:7f:0e:78:de:c6:16: 38:1d:e8:22:2c:f2:e3:25:26:2d:e2:ab:27:d8:f3: 7d:41:f6:4a:03:54:8b:f5:fe:c0:f0:40:33:31:cf: ab:be:41:55:bb:1c:35:85:6c:84:5a:ea:bb:1e:4f: 07:e5:04:99:1a:e8:70:08:f8:cb:20:c1:94:3d:cf: e6:e0:c3:2b:05:14:e6:d7:2b:18:f0:5a:b6:e6:52: 94:08:ba:54:3e:2c:75:27:9e:33:ae:3f:26:6a:3b: 21:ff:0f:82:d6:a3:47:ad:da:8f:b3:1c:1c:b7:63: df:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:C3:A8:6F:F3:81:44:0E:DF:B0:DD:13:A9:FC:13:C0:BB:A9:54:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84/844b98f5-e6cd-370e-ac40-d2d72926edf0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84/219560ff-1a32-4424-9e54-f95df54ecc84.crl X509v3 Authority Key Identifier: keyid:B7:5A:46:BD:48:BF:FF:E6:F1:D7:1B:DB:F4:3B:BA:BB:79:2F:C0:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84.cer sbgp-ipAddrBlock: critical IPv4: 192.35.220.0/24 192.35.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:d3:6c:36:00:dc:17:6c:6c:c6:7d:1c:81:cc:63:e8:0e:5a: 27:52:bc:11:7c:61:9e:49:ac:3d:f7:83:b4:cc:bd:2f:21:4d: 13:14:d0:57:13:f2:fe:05:07:87:6e:17:b6:81:b8:cc:90:ea: a0:4a:90:e7:eb:30:5d:58:2b:0a:6d:30:b1:0a:9b:dd:98:f7: 57:a8:86:fc:55:62:db:43:5d:2c:5e:78:a7:b4:bb:c6:2f:90: 6c:c7:08:37:b6:d1:cc:5a:1a:4e:cb:8b:c2:7a:2f:1d:b5:07: 64:42:75:e7:6e:4a:74:7a:6b:3b:f1:58:e3:d5:c4:c2:42:db: 43:64:e4:51:5c:e6:63:d5:65:7a:8e:db:86:53:aa:57:84:d0: 6f:77:dc:a0:1b:29:5e:b2:d8:c5:cb:95:9f:2f:f8:6e:b9:c6: fc:67:de:5a:ce:1c:dc:dc:27:5f:dd:5f:00:ef:8c:b6:e9:12: 7e:fe:fd:4f:b0:41:95:fa:71:2c:bb:cf:88:fe:01:95:ae:03: 1d:af:45:a3:f9:49:fb:22:f5:e9:ad:fe:df:95:d8:6c:60:84: fa:59:a1:04:61:c8:0b:13:a6:10:c8:9d:c2:b4:67:51:72:4b: 72:30:8f:ea:bc:3d:90:d7:ec:51:aa:d2:1d:94:bf:b0:6b:38: 99:f3:74:a9 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE8DqEvMivw2nw+JU/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjE5NTYwZmYtMWEzMi00NDI0LTllNTQtZjk1ZGY1NGVj Yzg0MB4XDTI2MDgzMTAxMDAxMloXDTI2MTEyOTAyMDAxMlowLzEtMCsGA1UEAxMk NDcyOWU3ZDEtMTM1Ni00OGE3LTlhN2YtZmVlZDZjYjhhZjZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/PLslyyzt5d2e4z1xqLbA+M0bVe5dRmowUT kDu5VN4SRY1ow4QDSXBrKxyROg7yRqlTNnKcdNTZ7hl42OC5gHimSdGdx0x9fs3U Cwry5q5+wcHG/s4gTJAzwT+YyaCQIU8ZBHNfXim2uvaiNcBnJvBy2hSXUFT/I1sq zueTjvyZMsMF1NEKjzijev09SER/DnjexhY4HegiLPLjJSYt4qsn2PN9QfZKA1SL 9f7A8EAzMc+rvkFVuxw1hWyEWuq7Hk8H5QSZGuhwCPjLIMGUPc/m4MMrBRTm1ysY 8Fq25lKUCLpUPix1J54zrj8majsh/w+C1qNHrdqPsxwct2PfdwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFCLDqG/zgUQO37DdE6n8E8C7qVShMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yMTk1 NjBmZi0xYTMyLTQ0MjQtOWU1NC1mOTVkZjU0ZWNjODQvODQ0Yjk4ZjUtZTZjZC0z NzBlLWFjNDAtZDJkNzI5MjZlZGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMjE5NTYwZmYtMWEzMi00NDI0LTll NTQtZjk1ZGY1NGVjYzg0LzIxOTU2MGZmLTFhMzItNDQyNC05ZTU0LWY5NWRmNTRl Y2M4NC5jcmwwHwYDVR0jBBgwFoAUt1pGvUi//+bx1xvb9Du6u3kvwIIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yMTk1NjBmZi0xYTMyLTQ0MjQtOWU1NC1mOTVk ZjU0ZWNjODQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwCPcAwQA wCPfMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAFPTbDYA3BdsbMZ9HIHMY+gOWidSvBF8YZ5JrD33g7TMvS8h TRMU0FcT8v4FB4duF7aBuMyQ6qBKkOfrMF1YKwptMLEKm92Y91eohvxVYttDXSxe eKe0u8YvkGzHCDe20cxaGk7Li8J6Lx21B2RCdeduSnR6azvxWOPVxMJC20Nk5FFc 5mPVZXqO24ZTqleE0G933KAbKV6y2MXLlZ8v+G65xvxn3lrOHNzcJ1/dXwDvjLbp En7+/U+wQZX6cSy7z4j+AZWuAx2vRaP5Sfsi9emt/t+V2GxghPpZoQRhyAsTphDI ncK0Z1FyS3Iwj+q8PZDX7FGq0h2Uv7BrOJnzdKk= -----END CERTIFICATE-----Generated at Sat Oct 10 15:40:47 2026 by rpki-client