$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35a72605-99bc-4c4b-995e-c01a3684dcbf/097c095d-ece4-3ab9-b654-21a67c8b50d9.roa File: 097c095d-ece4-3ab9-b654-21a67c8b50d9.roa (raw, json) Hash identifier: 8QSh35qcIBxBlGjfUQdWqdcej3TusNbuVciUrmjWKfI= Subject key identifier: 13:E3:CC:CC:C3:05:61:1B:CB:D2:8D:99:FD:51:E9:2A:F3:62:2D:30 Certificate issuer: /CN=35a72605-99bc-4c4b-995e-c01a3684dcbf Certificate serial: 010D0C9F4328584F2EED0F130F14C31485E4FAC0 Authority key identifier: 9D:27:9D:66:57:C4:C6:28:D7:0E:13:BE:95:CD:3A:7F:D7:2B:84:50 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35a72605-99bc-4c4b-995e-c01a3684dcbf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35a72605-99bc-4c4b-995e-c01a3684dcbf/097c095d-ece4-3ab9-b654-21a67c8b50d9.roa Signing time: Tue 15 Sep 2026 13:00:12 +0000 ROA not before: Tue 15 Sep 2026 13:00:12 +0000 ROA not after: Mon 14 Dec 2026 14:00:12 +0000 asID: 965 IP address blocks: 23.129.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35a72605-99bc-4c4b-995e-c01a3684dcbf/35a72605-99bc-4c4b-995e-c01a3684dcbf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35a72605-99bc-4c4b-995e-c01a3684dcbf/35a72605-99bc-4c4b-995e-c01a3684dcbf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35a72605-99bc-4c4b-995e-c01a3684dcbf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2e:ed:0f:13:0f:14:c3:14:85:e4:fa:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35a72605-99bc-4c4b-995e-c01a3684dcbf Validity Not Before: Sep 15 13:00:12 2026 GMT Not After : Dec 14 14:00:12 2026 GMT Subject: CN=fbddfebe-cb96-4263-bcc4-48986c4401b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:96:1b:dc:36:12:f5:ba:21:ff:cb:12:48:c0: 20:47:59:f1:86:1b:a5:1c:00:74:6e:ff:43:4e:e3: 7f:45:77:36:07:71:86:34:0e:16:12:1b:0e:b3:7c: 9c:65:23:c5:94:b9:86:48:88:43:ef:22:ea:a6:fc: 98:34:bf:08:d1:cd:a3:0b:a7:d8:35:c3:c3:91:76: a7:78:5d:d5:1f:ff:9a:b3:73:95:9b:25:2e:ce:e8: 69:12:1d:05:13:af:03:bf:52:2e:35:4a:8a:c1:bd: 8d:ad:2c:a7:2c:ca:73:26:28:b0:f0:ee:b2:06:bc: d7:9b:62:b5:65:da:f9:70:81:58:52:94:3a:a2:bc: a7:3f:d3:e9:0a:47:05:12:85:71:43:e4:04:1e:eb: ff:33:04:1d:48:17:b0:0f:52:0c:25:d1:7c:76:bb: 25:5e:04:f6:ba:d2:3e:2d:7c:91:ba:73:25:c4:33: 35:d5:96:dd:fa:e3:dc:46:08:4e:8b:53:91:7f:74: 42:ac:07:cc:a2:6e:d6:8d:e1:2a:2d:df:83:bf:b5: 37:13:f9:7b:0e:d5:39:ac:a9:73:5e:ec:97:b3:82: ac:88:ec:ae:b8:67:0b:d7:12:62:b1:9c:d2:72:d1: e9:54:8f:e8:01:b1:d0:63:36:01:85:46:26:6f:f0: b3:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:E3:CC:CC:C3:05:61:1B:CB:D2:8D:99:FD:51:E9:2A:F3:62:2D:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35a72605-99bc-4c4b-995e-c01a3684dcbf/097c095d-ece4-3ab9-b654-21a67c8b50d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35a72605-99bc-4c4b-995e-c01a3684dcbf/35a72605-99bc-4c4b-995e-c01a3684dcbf.crl X509v3 Authority Key Identifier: keyid:9D:27:9D:66:57:C4:C6:28:D7:0E:13:BE:95:CD:3A:7F:D7:2B:84:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35a72605-99bc-4c4b-995e-c01a3684dcbf.cer sbgp-ipAddrBlock: critical IPv4: 23.129.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:6b:09:b7:2e:ab:0b:1c:9b:26:69:fa:63:39:93:b2:df:f6: 53:a9:8b:40:bb:cc:0b:50:60:12:be:ba:51:67:3a:73:c3:02: e7:28:38:fb:b1:b7:0c:3f:22:90:6f:49:4d:ab:22:91:16:73: 26:ad:5f:fb:fb:b2:25:fa:4d:e3:41:78:af:3b:3d:b8:eb:cf: 95:c3:70:12:d4:7a:30:4b:ca:6b:7b:70:ae:22:03:bf:57:ba: 5e:e7:43:72:05:bc:d5:83:09:ca:01:52:7a:b3:d6:83:70:9c: 31:3e:e4:0e:30:75:79:df:dd:bd:a8:3e:ad:74:60:99:9c:d1: 7c:06:d2:68:93:2b:04:31:03:84:f6:e2:fa:2e:b5:6d:2a:6e: b9:03:95:0f:c4:ec:5c:43:50:4f:0f:b4:27:74:f7:ed:50:59: 70:cb:56:f8:21:47:49:5b:9b:fb:0f:dd:dc:cc:a7:8c:77:58: b5:2f:cd:c3:68:01:20:0e:60:f4:e9:5e:02:30:77:1e:54:20: 8f:13:ff:e9:40:56:9f:fe:63:b1:50:33:c1:dc:3b:74:c3:8f: b9:c8:54:28:d5:9f:23:e9:22:0d:fd:64:78:1c:16:8c:00:a6: 59:b5:a8:55:39:a7:d8:e2:c2:09:a5:ce:13:43:04:2c:d6:cf: 48:78:fb:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8u7Q8TDxTDFIXk+sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVhNzI2MDUtOTliYy00YzRiLTk5NWUtYzAxYTM2ODRk Y2JmMB4XDTI2MDkxNTEzMDAxMloXDTI2MTIxNDE0MDAxMlowLzEtMCsGA1UEAxMk ZmJkZGZlYmUtY2I5Ni00MjYzLWJjYzQtNDg5ODZjNDQwMWI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5Yb3DYS9boh/8sSSMAgR1nxhhulHAB0bv9D TuN/RXc2B3GGNA4WEhsOs3ycZSPFlLmGSIhD7yLqpvyYNL8I0c2jC6fYNcPDkXan eF3VH/+as3OVmyUuzuhpEh0FE68Dv1IuNUqKwb2NrSynLMpzJiiw8O6yBrzXm2K1 Zdr5cIFYUpQ6orynP9PpCkcFEoVxQ+QEHuv/MwQdSBewD1IMJdF8drslXgT2utI+ LXyRunMlxDM11Zbd+uPcRghOi1ORf3RCrAfMom7WjeEqLd+Dv7U3E/l7DtU5rKlz XuyXs4KsiOyuuGcL1xJisZzSctHpVI/oAbHQYzYBhUYmb/CzqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBPjzMzDBWEby9KNmf1R6SrzYi0wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWE3 MjYwNS05OWJjLTRjNGItOTk1ZS1jMDFhMzY4NGRjYmYvMDk3YzA5NWQtZWNlNC0z YWI5LWI2NTQtMjFhNjdjOGI1MGQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVhNzI2MDUtOTliYy00YzRiLTk5 NWUtYzAxYTM2ODRkY2JmLzM1YTcyNjA1LTk5YmMtNGM0Yi05OTVlLWMwMWEzNjg0 ZGNiZi5jcmwwHwYDVR0jBBgwFoAUnSedZlfExijXDhO+lc06f9crhFAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWE3MjYwNS05OWJjLTRjNGItOTk1ZS1jMDFh MzY4NGRjYmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF4H8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAZrCbcuqwscmyZp+mM5k7Lf9lOpi0C7zAtQYBK+ulFnOnPDAucoOPux tww/IpBvSU2rIpEWcyatX/v7siX6TeNBeK87Pbjrz5XDcBLUejBLymt7cK4iA79X ul7nQ3IFvNWDCcoBUnqz1oNwnDE+5A4wdXnf3b2oPq10YJmc0XwG0miTKwQxA4T2 4voutW0qbrkDlQ/E7FxDUE8PtCd09+1QWXDLVvghR0lbm/sP3dzMp4x3WLUvzcNo ASAOYPTpXgIwdx5UII8T/+lAVp/+Y7FQM8HcO3TDj7nIVCjVnyPpIg39ZHgcFowA plm1qFU5p9jiwgmlzhNDBCzWz0h4+zg= -----END CERTIFICATE-----Generated at Tue Sep 22 22:29:41 2026 by rpki-client