$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3bc43be8-8d0b-4477-b04e-dd07b171f4c2/35c48c29-10d5-3d16-8263-3665c3708250.roa File: 35c48c29-10d5-3d16-8263-3665c3708250.roa (raw, json) Hash identifier: js33BfHA+H8n/SbHZv2e54D7D8WEWGLHpbNSCPTgGlo= Subject key identifier: 9C:33:62:7F:7A:C3:EA:95:69:7E:0F:C0:4D:E7:C9:0E:23:A0:06:80 Certificate issuer: /CN=3bc43be8-8d0b-4477-b04e-dd07b171f4c2 Certificate serial: 010D0C9F4328584F5A046BFB64A6CCE35F34E430 Authority key identifier: D2:16:24:B5:53:5E:F6:BB:B2:3C:CE:A9:B8:76:40:53:D6:3D:8D:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3bc43be8-8d0b-4477-b04e-dd07b171f4c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3bc43be8-8d0b-4477-b04e-dd07b171f4c2/35c48c29-10d5-3d16-8263-3665c3708250.roa Signing time: Wed 30 Sep 2026 23:27:07 +0000 ROA not before: Wed 30 Sep 2026 23:27:07 +0000 ROA not after: Wed 30 Dec 2026 00:27:07 +0000 asID: 401486 IP address blocks: 192.150.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3bc43be8-8d0b-4477-b04e-dd07b171f4c2/3bc43be8-8d0b-4477-b04e-dd07b171f4c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3bc43be8-8d0b-4477-b04e-dd07b171f4c2/3bc43be8-8d0b-4477-b04e-dd07b171f4c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3bc43be8-8d0b-4477-b04e-dd07b171f4c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5a:04:6b:fb:64:a6:cc:e3:5f:34:e4:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bc43be8-8d0b-4477-b04e-dd07b171f4c2 Validity Not Before: Sep 30 23:27:07 2026 GMT Not After : Dec 30 00:27:07 2026 GMT Subject: CN=1e737bb6-8120-40c0-942b-7169637198c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:1c:9f:21:42:ad:06:fa:af:d0:69:4f:ba:9c: 6f:e1:32:5b:91:e5:92:44:e4:6c:5e:ce:19:2d:d9: 35:6c:a6:b2:4e:df:a2:86:11:a2:78:fd:bd:c3:54: a0:f6:02:d3:a5:a9:29:ff:b6:75:22:4d:28:4f:a3: 25:2e:d0:b7:ad:62:5e:78:32:76:0f:4b:99:54:f9: c3:52:c2:1e:5b:1c:13:b9:13:30:14:b4:17:82:5d: af:b8:7a:2c:06:92:b9:77:20:fe:c8:69:4f:6d:da: f3:68:58:06:3c:59:b6:ab:af:96:5c:6d:9b:51:1d: 02:31:4a:b0:02:2d:78:e6:b0:cd:e2:b4:13:0a:94: 63:20:94:dc:a5:78:4e:03:f1:84:f0:b6:ca:c0:3e: c5:8d:a1:5e:90:87:6d:74:f8:78:bd:82:6f:bb:c0: 0a:4b:71:91:95:7a:d2:61:80:24:fa:e3:33:3b:36: ba:91:e6:80:47:30:b4:b2:d0:dd:aa:ef:fa:cc:16: 22:64:fa:51:34:c9:5b:79:e2:f2:c2:a8:20:8f:05: 49:fa:7c:ae:8e:b9:62:55:b9:e1:c4:a3:86:1b:9c: 35:31:10:9f:a3:70:f0:5a:32:9d:84:93:6a:fc:67: 32:15:a9:20:23:58:c2:54:26:e1:38:b9:dc:33:1b: 31:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:33:62:7F:7A:C3:EA:95:69:7E:0F:C0:4D:E7:C9:0E:23:A0:06:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3bc43be8-8d0b-4477-b04e-dd07b171f4c2/35c48c29-10d5-3d16-8263-3665c3708250.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3bc43be8-8d0b-4477-b04e-dd07b171f4c2/3bc43be8-8d0b-4477-b04e-dd07b171f4c2.crl X509v3 Authority Key Identifier: keyid:D2:16:24:B5:53:5E:F6:BB:B2:3C:CE:A9:B8:76:40:53:D6:3D:8D:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3bc43be8-8d0b-4477-b04e-dd07b171f4c2.cer sbgp-ipAddrBlock: critical IPv4: 192.150.185.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:e9:91:f9:36:e6:f1:cb:7a:58:55:ac:a8:25:be:21:33:30: 2d:88:da:a5:82:38:3e:31:b3:a9:e8:3b:8a:67:0b:b4:5b:a9: 50:b0:35:e0:b4:b6:29:70:dd:19:de:cf:52:ac:4a:e0:bc:cd: e9:18:b1:75:c7:46:97:1e:25:2e:3a:8d:70:4b:13:ae:a9:15: 07:dc:79:bc:be:45:f3:0d:0d:63:7e:e6:f2:98:af:3a:15:54: 7a:42:e3:ef:bf:42:49:77:73:fc:d9:f4:f7:5e:a3:ba:bb:9f: 6d:4e:e1:5e:8b:be:ed:72:59:1d:3b:b7:ce:e7:a6:37:a8:11: 9d:2e:1f:78:c5:85:8d:d0:3d:45:3b:c6:00:d1:00:ff:ae:19: ce:fa:c6:70:ed:e0:67:d6:78:f1:9e:e4:cc:b2:46:6a:33:dd: 94:f9:f2:5a:72:7c:36:dd:04:02:16:08:9b:05:df:cc:2d:e9: 9c:ed:38:1c:05:7e:cb:15:3b:e6:fb:49:ad:0e:49:aa:40:25: 81:e8:fc:f6:4d:bd:16:0e:3d:45:17:dd:fd:e0:37:f5:28:6e: fc:81:9a:6e:bc:9a:5a:7d:9e:f0:32:22:88:91:07:65:67:6f: 50:45:b3:eb:58:26:2f:94:02:ea:52:03:a7:2d:e4:a4:56:5a: c9:6b:34:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9aBGv7ZKbM41805DAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2JjNDNiZTgtOGQwYi00NDc3LWIwNGUtZGQwN2IxNzFm NGMyMB4XDTI2MDkzMDIzMjcwN1oXDTI2MTIzMDAwMjcwN1owLzEtMCsGA1UEAxMk MWU3MzdiYjYtODEyMC00MGMwLTk0MmItNzE2OTYzNzE5OGM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxyfIUKtBvqv0GlPupxv4TJbkeWSRORsXs4Z Ldk1bKayTt+ihhGieP29w1Sg9gLTpakp/7Z1Ik0oT6MlLtC3rWJeeDJ2D0uZVPnD UsIeWxwTuRMwFLQXgl2vuHosBpK5dyD+yGlPbdrzaFgGPFm2q6+WXG2bUR0CMUqw Ai145rDN4rQTCpRjIJTcpXhOA/GE8LbKwD7FjaFekIdtdPh4vYJvu8AKS3GRlXrS YYAk+uMzOza6keaARzC0stDdqu/6zBYiZPpRNMlbeeLywqggjwVJ+nyujrliVbnh xKOGG5w1MRCfo3DwWjKdhJNq/GcyFakgI1jCVCbhOLncMxsx+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJwzYn96w+qVaX4PwE3nyQ4joAaAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zYmM0 M2JlOC04ZDBiLTQ0NzctYjA0ZS1kZDA3YjE3MWY0YzIvMzVjNDhjMjktMTBkNS0z ZDE2LTgyNjMtMzY2NWMzNzA4MjUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvM2JjNDNiZTgtOGQwYi00NDc3LWIw NGUtZGQwN2IxNzFmNGMyLzNiYzQzYmU4LThkMGItNDQ3Ny1iMDRlLWRkMDdiMTcx ZjRjMi5jcmwwHwYDVR0jBBgwFoAU0hYktVNe9ruyPM6puHZAU9Y9jS0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zYmM0M2JlOC04ZDBiLTQ0NzctYjA0ZS1kZDA3 YjE3MWY0YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJa5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAInpkfk25vHLelhVrKglviEzMC2I2qWCOD4xs6noO4pnC7RbqVCwNeC0 tilw3Rnez1KsSuC8zekYsXXHRpceJS46jXBLE66pFQfceby+RfMNDWN+5vKYrzoV VHpC4++/Qkl3c/zZ9Pdeo7q7n21O4V6Lvu1yWR07t87npjeoEZ0uH3jFhY3QPUU7 xgDRAP+uGc76xnDt4GfWePGe5MyyRmoz3ZT58lpyfDbdBAIWCJsF38wt6ZztOBwF fssVO+b7Sa0OSapAJYHo/PZNvRYOPUUX3f3gN/UobvyBmm68mlp9nvAyIoiRB2Vn b1BFs+tYJi+UAupSA6ct5KRWWslrNIU= -----END CERTIFICATE-----Generated at Sun Oct 11 11:31:00 2026 by rpki-client