$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84/88c5a7c0-ec9c-37a8-9ee4-af450aa4d8f2.roa File: 88c5a7c0-ec9c-37a8-9ee4-af450aa4d8f2.roa (raw, json) Hash identifier: 5QrQon7q9XfUL+WW8XX/GljCHsNB/n5xgYUgya/Xe0E= Subject key identifier: 98:B4:66:B3:87:37:A1:86:98:B1:33:2A:6F:6B:4B:70:A0:E8:FB:B3 Certificate issuer: /CN=219560ff-1a32-4424-9e54-f95df54ecc84 Certificate serial: 010D0C9F4328584E614560C3C3AF29C24EDAC080 Authority key identifier: B7:5A:46:BD:48:BF:FF:E6:F1:D7:1B:DB:F4:3B:BA:BB:79:2F:C0:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84/88c5a7c0-ec9c-37a8-9ee4-af450aa4d8f2.roa Signing time: Fri 03 Jul 2026 21:00:11 +0000 ROA not before: Fri 03 Jul 2026 21:00:11 +0000 ROA not after: Thu 01 Oct 2026 21:00:11 +0000 asID: 16509 IP address blocks: 192.35.220.0/24 maxlen: 24 192.35.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84/219560ff-1a32-4424-9e54-f95df54ecc84.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84/219560ff-1a32-4424-9e54-f95df54ecc84.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 Jul 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:61:45:60:c3:c3:af:29:c2:4e:da:c0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=219560ff-1a32-4424-9e54-f95df54ecc84 Validity Not Before: Jul 3 21:00:11 2026 GMT Not After : Oct 1 21:00:11 2026 GMT Subject: CN=3bbc1b20-cb8f-400c-9b79-b6bbc667d46d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:dc:a1:45:3a:6f:a1:9f:11:5f:7b:fb:40:76: 1f:88:9b:97:71:b4:f6:53:e6:99:c2:75:02:78:0d: 53:46:b6:38:53:bb:9c:40:6e:c5:a7:77:d3:a6:27: 66:34:e2:62:b3:a2:2e:9c:9b:db:ac:75:4a:e5:ee: 25:67:ee:d3:03:91:15:20:ab:d5:fe:db:ef:c0:9f: de:41:60:19:4c:bd:5e:2e:03:81:e4:ce:da:a9:c6: ab:7b:ba:74:6c:d4:05:89:7b:59:24:79:64:69:81: 8c:75:71:de:f9:d8:b4:46:3f:d9:76:fc:b6:c6:bc: 63:2d:95:e2:db:32:89:6d:ae:16:7f:4c:5a:23:91: 98:4d:35:fa:61:6c:72:99:e9:80:5b:12:13:40:96: 99:70:b8:92:19:35:e1:44:9e:f4:66:1b:72:bf:f9: fc:0c:40:62:20:10:b6:1a:fb:e5:b0:50:98:f0:27: d9:84:6d:6f:a6:27:55:29:eb:f2:07:33:cb:61:c2: ab:da:3f:fa:6c:9a:ff:8c:79:0a:26:87:c2:1f:1f: 09:93:11:b5:f8:1d:4f:de:57:51:0d:bc:37:23:5d: f5:07:8f:da:ac:72:62:5e:32:29:a7:ec:ac:c8:05: fb:77:52:ee:75:6d:19:ce:04:ff:c5:92:a6:e9:c2: 92:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:B4:66:B3:87:37:A1:86:98:B1:33:2A:6F:6B:4B:70:A0:E8:FB:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84/88c5a7c0-ec9c-37a8-9ee4-af450aa4d8f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84/219560ff-1a32-4424-9e54-f95df54ecc84.crl X509v3 Authority Key Identifier: keyid:B7:5A:46:BD:48:BF:FF:E6:F1:D7:1B:DB:F4:3B:BA:BB:79:2F:C0:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84.cer sbgp-ipAddrBlock: critical IPv4: 192.35.220.0/24 192.35.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:2a:c0:db:62:2c:20:0e:7a:0f:c6:b9:fe:62:48:ff:e9:e7: 0e:00:b2:6f:27:72:32:1c:fd:b3:8e:9d:f0:cf:73:f5:eb:41: 35:39:ec:57:f1:b2:20:c0:bb:09:41:31:b0:f6:65:f8:db:48: 28:fe:cf:01:91:d7:59:d2:a9:3b:31:74:86:d8:d4:b2:f7:50: 5c:95:01:b7:c5:53:11:86:8a:d2:f5:66:cc:57:33:ce:f4:07: 70:74:b8:ef:f8:19:6b:44:f7:97:31:be:ce:2b:92:52:4a:c2: 82:b1:26:06:a5:e8:1b:81:a9:ed:eb:a3:e1:39:c0:e4:b4:5c: be:f5:22:f0:1b:68:97:6f:4b:99:2d:c1:28:b9:d3:ca:b7:1c: d3:4e:2c:31:c4:70:20:ea:d3:4a:6c:7f:a8:e6:3a:9d:e3:a8: 3b:06:01:7c:b1:69:c2:31:45:2c:a4:af:50:2e:d9:ff:2c:79: db:f1:70:bc:e1:57:22:ec:71:a0:39:2d:0d:8d:af:19:d4:c9: bb:1f:3e:2b:03:83:1d:41:07:85:23:2f:f9:49:8b:d5:bd:10: 33:4d:6c:c5:dc:70:d3:a1:81:9d:b3:b4:9c:95:44:2b:8b:0c: ba:a7:a7:43:4b:5d:36:f4:07:1b:be:e3:d1:dd:07:18:8c:2b: 02:be:25:e0 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE5hRWDDw68pwk7awIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjE5NTYwZmYtMWEzMi00NDI0LTllNTQtZjk1ZGY1NGVj Yzg0MB4XDTI2MDcwMzIxMDAxMVoXDTI2MTAwMTIxMDAxMVowLzEtMCsGA1UEAxMk M2JiYzFiMjAtY2I4Zi00MDBjLTliNzktYjZiYmM2NjdkNDZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhdyhRTpvoZ8RX3v7QHYfiJuXcbT2U+aZwnUC eA1TRrY4U7ucQG7Fp3fTpidmNOJis6IunJvbrHVK5e4lZ+7TA5EVIKvV/tvvwJ/e QWAZTL1eLgOB5M7aqcare7p0bNQFiXtZJHlkaYGMdXHe+di0Rj/Zdvy2xrxjLZXi 2zKJba4Wf0xaI5GYTTX6YWxymemAWxITQJaZcLiSGTXhRJ70Zhtyv/n8DEBiIBC2 GvvlsFCY8CfZhG1vpidVKevyBzPLYcKr2j/6bJr/jHkKJofCHx8JkxG1+B1P3ldR Dbw3I131B4/arHJiXjIpp+ysyAX7d1LudW0ZzgT/xZKm6cKSSQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFJi0ZrOHN6GGmLEzKm9rS3Cg6PuzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yMTk1 NjBmZi0xYTMyLTQ0MjQtOWU1NC1mOTVkZjU0ZWNjODQvODhjNWE3YzAtZWM5Yy0z N2E4LTllZTQtYWY0NTBhYTRkOGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMjE5NTYwZmYtMWEzMi00NDI0LTll NTQtZjk1ZGY1NGVjYzg0LzIxOTU2MGZmLTFhMzItNDQyNC05ZTU0LWY5NWRmNTRl Y2M4NC5jcmwwHwYDVR0jBBgwFoAUt1pGvUi//+bx1xvb9Du6u3kvwIIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yMTk1NjBmZi0xYTMyLTQ0MjQtOWU1NC1mOTVk ZjU0ZWNjODQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwCPcAwQA wCPfMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAFsqwNtiLCAOeg/Guf5iSP/p5w4Asm8ncjIc/bOOnfDPc/Xr QTU57FfxsiDAuwlBMbD2ZfjbSCj+zwGR11nSqTsxdIbY1LL3UFyVAbfFUxGGitL1 ZsxXM870B3B0uO/4GWtE95cxvs4rklJKwoKxJgal6BuBqe3ro+E5wOS0XL71IvAb aJdvS5ktwSi508q3HNNOLDHEcCDq00psf6jmOp3jqDsGAXyxacIxRSykr1Au2f8s edvxcLzhVyLscaA5LQ2NrxnUybsfPisDgx1BB4UjL/lJi9W9EDNNbMXccNOhgZ2z tJyVRCuLDLqnp0NLXTb0Bxu+49HdBxiMKwK+JeA= -----END CERTIFICATE-----Generated at Mon Jul 6 20:35:51 2026 by rpki-client