$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84/88c5a7c0-ec9c-37a8-9ee4-af450aa4d8f2.roa File: 88c5a7c0-ec9c-37a8-9ee4-af450aa4d8f2.roa (raw, json) Hash identifier: 8YF9CktOatKpy5WZ7pGFfbuLSPPGRFBl577Yp3lzzWo= Subject key identifier: B8:4D:D9:FB:10:97:3D:DC:34:18:33:D8:6A:CD:37:BE:3D:76:1F:AA Certificate issuer: /CN=219560ff-1a32-4424-9e54-f95df54ecc84 Certificate serial: 010D0C9F4328584F03A8449CAFE1748F69DE0680 Authority key identifier: B7:5A:46:BD:48:BF:FF:E6:F1:D7:1B:DB:F4:3B:BA:BB:79:2F:C0:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84/88c5a7c0-ec9c-37a8-9ee4-af450aa4d8f2.roa Signing time: Mon 31 Aug 2026 01:00:12 +0000 ROA not before: Mon 31 Aug 2026 01:00:12 +0000 ROA not after: Sun 29 Nov 2026 02:00:12 +0000 asID: 16509 IP address blocks: 192.35.220.0/24 maxlen: 24 192.35.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84/219560ff-1a32-4424-9e54-f95df54ecc84.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84/219560ff-1a32-4424-9e54-f95df54ecc84.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:03:a8:44:9c:af:e1:74:8f:69:de:06:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=219560ff-1a32-4424-9e54-f95df54ecc84 Validity Not Before: Aug 31 01:00:12 2026 GMT Not After : Nov 29 02:00:12 2026 GMT Subject: CN=71a02d60-d3eb-4faa-8e9d-28f847d62e7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:cd:d8:c4:af:84:55:35:98:0f:63:ac:67:df: a3:6e:56:de:86:53:3a:a8:fb:18:3d:f2:70:76:57: 03:50:ad:c6:9e:ea:cc:4e:c2:0a:7c:de:82:0d:91: 95:b6:ed:61:93:2e:b6:58:bc:df:d7:df:12:0e:98: dd:02:d1:9b:c5:21:c8:70:0d:46:85:a7:6a:b4:ca: 8e:10:f5:d1:79:ae:5a:48:70:52:7d:56:bd:b9:52: 20:98:f4:24:57:7b:64:d4:a5:d0:95:ba:48:2e:91: c4:10:c6:16:c5:68:3a:be:1e:fc:da:b7:33:16:4a: c2:63:9e:1a:62:52:22:68:04:6a:3d:fa:b3:52:1b: af:cc:d5:9a:d1:f8:55:99:f9:a8:5e:38:8e:58:fa: 64:51:66:3c:9d:c2:9b:cf:94:de:e4:c3:75:cd:3d: 86:2b:00:79:f1:5c:61:bd:ce:32:95:f1:70:d5:88: c7:07:92:89:65:64:40:a8:4c:14:1b:10:35:39:21: cc:27:e1:a1:c4:fe:f7:fd:99:7c:c7:b6:bc:d0:00: e8:dd:cb:ac:93:13:4a:32:63:71:b8:3e:3e:c9:1e: 8e:97:6a:b2:08:0a:67:4a:d4:f5:dd:b5:3c:39:5d: f9:f2:b4:f8:7d:2d:d7:50:ca:36:a5:f0:9a:52:d6: db:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:4D:D9:FB:10:97:3D:DC:34:18:33:D8:6A:CD:37:BE:3D:76:1F:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84/88c5a7c0-ec9c-37a8-9ee4-af450aa4d8f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84/219560ff-1a32-4424-9e54-f95df54ecc84.crl X509v3 Authority Key Identifier: keyid:B7:5A:46:BD:48:BF:FF:E6:F1:D7:1B:DB:F4:3B:BA:BB:79:2F:C0:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84.cer sbgp-ipAddrBlock: critical IPv4: 192.35.220.0/24 192.35.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:27:cc:73:18:57:4c:5b:80:7e:17:eb:fb:7b:64:e2:45:b2: 3b:53:19:e1:86:90:06:2b:24:a4:b6:31:d8:58:39:eb:6d:9d: 2c:9e:2e:93:65:8e:fa:b4:fe:c9:d6:53:ac:92:b2:f8:14:90: a4:87:28:b8:c0:47:b5:7d:67:7f:36:01:26:59:35:ec:38:e6: fc:46:87:53:08:ab:16:d6:b2:31:19:a2:db:60:fa:39:48:09: 4e:23:7e:60:18:54:8e:11:e5:19:74:96:4a:85:12:e0:e0:7c: 91:d1:1c:8a:95:1d:1e:56:b9:db:c3:2f:b9:11:50:4c:e4:d4: da:0d:3e:42:d1:ec:75:7a:c0:38:88:78:c0:0b:dc:5d:91:a9: 7a:24:d3:1b:a8:9e:9d:e0:9b:78:d8:3c:3c:96:d4:23:52:dd: 08:e3:a3:70:f5:2d:5c:64:48:32:c6:db:6c:d0:d7:1e:69:54: 09:d9:c9:b8:4e:60:c1:bc:48:a6:da:43:bc:50:2c:ca:82:4d: 5c:23:cf:d5:ae:0b:7d:dd:ef:b3:c3:d9:69:a6:87:94:de:35: 36:9e:dc:66:c5:ce:dc:5c:4b:91:bf:a5:0a:29:8d:7a:e0:ed: f7:de:69:cc:d9:dc:e0:66:25:33:00:1a:8e:62:de:fa:f2:bc: 9f:22:84:89 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE8DqEScr+F0j2neBoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjE5NTYwZmYtMWEzMi00NDI0LTllNTQtZjk1ZGY1NGVj Yzg0MB4XDTI2MDgzMTAxMDAxMloXDTI2MTEyOTAyMDAxMlowLzEtMCsGA1UEAxMk NzFhMDJkNjAtZDNlYi00ZmFhLThlOWQtMjhmODQ3ZDYyZTdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvc3YxK+EVTWYD2OsZ9+jblbehlM6qPsYPfJw dlcDUK3GnurMTsIKfN6CDZGVtu1hky62WLzf198SDpjdAtGbxSHIcA1GhadqtMqO EPXRea5aSHBSfVa9uVIgmPQkV3tk1KXQlbpILpHEEMYWxWg6vh782rczFkrCY54a YlIiaARqPfqzUhuvzNWa0fhVmfmoXjiOWPpkUWY8ncKbz5Te5MN1zT2GKwB58Vxh vc4ylfFw1YjHB5KJZWRAqEwUGxA1OSHMJ+GhxP73/Zl8x7a80ADo3cuskxNKMmNx uD4+yR6Ol2qyCApnStT13bU8OV358rT4fS3XUMo2pfCaUtbb3QIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFLhN2fsQlz3cNBgz2GrNN749dh+qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yMTk1 NjBmZi0xYTMyLTQ0MjQtOWU1NC1mOTVkZjU0ZWNjODQvODhjNWE3YzAtZWM5Yy0z N2E4LTllZTQtYWY0NTBhYTRkOGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMjE5NTYwZmYtMWEzMi00NDI0LTll NTQtZjk1ZGY1NGVjYzg0LzIxOTU2MGZmLTFhMzItNDQyNC05ZTU0LWY5NWRmNTRl Y2M4NC5jcmwwHwYDVR0jBBgwFoAUt1pGvUi//+bx1xvb9Du6u3kvwIIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yMTk1NjBmZi0xYTMyLTQ0MjQtOWU1NC1mOTVk ZjU0ZWNjODQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwCPcAwQA wCPfMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAA8nzHMYV0xbgH4X6/t7ZOJFsjtTGeGGkAYrJKS2MdhYOett nSyeLpNljvq0/snWU6ySsvgUkKSHKLjAR7V9Z382ASZZNew45vxGh1MIqxbWsjEZ ottg+jlICU4jfmAYVI4R5Rl0lkqFEuDgfJHRHIqVHR5WudvDL7kRUEzk1NoNPkLR 7HV6wDiIeMAL3F2RqXok0xuonp3gm3jYPDyW1CNS3Qjjo3D1LVxkSDLG22zQ1x5p VAnZybhOYMG8SKbaQ7xQLMqCTVwjz9WuC33d77PD2Wmmh5TeNTae3GbFztxcS5G/ pQopjXrg7ffeaczZ3OBmJTMAGo5i3vryvJ8ihIk= -----END CERTIFICATE-----Generated at Mon Oct 12 23:45:08 2026 by rpki-client