$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/35b5598c-6468-4a07-ba62-b390f60d1dde/8abff7f9-96e2-3742-a40e-adf79635dd42.roa File: 8abff7f9-96e2-3742-a40e-adf79635dd42.roa (raw, json) Hash identifier: NJ9ENkr80xXEjeSg/TInksH8iENG7Q58I+2ZlJ+0sdo= Subject key identifier: C8:6C:24:7F:58:D9:43:46:F0:FF:EF:1B:25:EE:33:B7:6A:DA:A1:55 Certificate issuer: /CN=35b5598c-6468-4a07-ba62-b390f60d1dde Certificate serial: 010D0C9F4328584F4091A8ABC3632E24EFAD2380 Authority key identifier: DD:5D:3B:CD:F9:81:21:7B:71:FC:0A:A5:9C:06:B7:F8:82:62:FD:C6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/35b5598c-6468-4a07-ba62-b390f60d1dde.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/35b5598c-6468-4a07-ba62-b390f60d1dde/8abff7f9-96e2-3742-a40e-adf79635dd42.roa Signing time: Mon 21 Sep 2026 20:40:40 +0000 ROA not before: Mon 21 Sep 2026 20:40:40 +0000 ROA not after: Sun 20 Dec 2026 21:40:40 +0000 asID: 198949 IP address blocks: 199.192.8.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/35b5598c-6468-4a07-ba62-b390f60d1dde/35b5598c-6468-4a07-ba62-b390f60d1dde.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/35b5598c-6468-4a07-ba62-b390f60d1dde/35b5598c-6468-4a07-ba62-b390f60d1dde.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/35b5598c-6468-4a07-ba62-b390f60d1dde.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:40:91:a8:ab:c3:63:2e:24:ef:ad:23:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35b5598c-6468-4a07-ba62-b390f60d1dde Validity Not Before: Sep 21 20:40:40 2026 GMT Not After : Dec 20 21:40:40 2026 GMT Subject: CN=fde7a8bb-4c4f-4b1e-8d96-a73d91f6364e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:b0:81:65:c4:46:b5:b6:44:28:b4:1a:35:bc: 0f:e4:8a:a1:ae:c6:6f:fb:c8:63:d5:73:dd:e2:39: 7a:59:b3:78:5b:a2:06:a8:dc:2a:54:39:61:3c:e0: 99:26:cb:8b:e8:34:ca:87:11:4f:05:dd:4a:9e:4a: cc:68:1e:5e:c6:cd:6e:42:23:a9:e1:a1:33:ba:25: 14:2f:7e:45:cf:68:13:18:2a:34:bf:c2:fc:63:f6: 37:f3:52:a0:2d:ef:bd:f8:37:d8:43:20:76:6a:7a: 02:ca:2d:30:aa:41:9d:38:07:d1:18:b9:12:2b:f1: 5a:b8:91:21:44:e7:d4:98:86:ee:60:02:d4:6b:e7: 79:2d:68:cd:b3:90:0e:19:8e:83:f0:11:f7:06:3f: bc:76:ab:9f:8f:ed:44:e8:c6:dd:1f:5f:6c:6f:aa: 37:bc:66:3b:a8:e7:df:21:bf:21:da:e0:52:db:d3: d4:de:b1:59:40:93:00:8b:12:29:95:f6:9a:d0:fe: ac:52:86:7f:2d:3d:c8:6c:9a:8b:17:82:c1:7c:17: c6:dc:1e:d2:5a:39:10:24:1d:a9:8b:8b:e9:18:69: 45:84:e3:74:5d:14:5a:7d:d5:82:8f:01:b8:31:28: 94:a0:db:85:80:3d:39:89:77:33:08:0e:59:1e:0a: a8:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:6C:24:7F:58:D9:43:46:F0:FF:EF:1B:25:EE:33:B7:6A:DA:A1:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/35b5598c-6468-4a07-ba62-b390f60d1dde/8abff7f9-96e2-3742-a40e-adf79635dd42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/35b5598c-6468-4a07-ba62-b390f60d1dde/35b5598c-6468-4a07-ba62-b390f60d1dde.crl X509v3 Authority Key Identifier: keyid:DD:5D:3B:CD:F9:81:21:7B:71:FC:0A:A5:9C:06:B7:F8:82:62:FD:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/35b5598c-6468-4a07-ba62-b390f60d1dde.cer sbgp-ipAddrBlock: critical IPv4: 199.192.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:8f:da:54:86:91:69:7e:e3:e5:11:d2:cb:5c:28:3c:88:5e: b2:1a:1e:03:03:4a:70:57:13:c4:3a:93:39:63:78:b5:83:b2: 9c:8c:5b:f3:e8:ac:e8:12:fd:8f:5f:d6:3a:d2:ac:01:df:de: 68:bf:33:b6:26:3f:ce:ba:25:89:66:4a:be:3a:6e:f3:94:02: 3e:f5:d0:b8:27:ef:93:3e:7f:11:1a:9f:d8:ba:69:5c:01:e7: fd:1d:da:8c:a2:7c:dc:cc:03:31:14:f8:8f:29:8b:39:2a:99: db:a4:63:a2:ca:43:70:7d:e8:8e:1a:bc:0d:31:b2:6c:1a:c9: 2d:f3:a2:94:0c:94:aa:11:f3:d8:b3:a8:e2:89:d5:fc:3d:e9: b6:ba:ec:a0:39:8a:db:a1:92:75:5f:61:30:97:1e:8c:57:af: fa:24:8e:46:c8:c7:e2:54:1c:97:d1:91:bd:87:02:dd:16:14: ef:2a:46:94:90:da:3b:29:5b:05:38:6a:30:56:06:04:a9:d9: 0e:73:35:a9:be:1c:8b:b8:8e:77:21:db:37:2b:bb:d0:27:28: ac:6a:29:bb:ea:00:18:72:c0:06:e8:ac:a4:46:6c:6c:eb:9b: d9:21:29:5b:33:1a:16:b7:d4:75:88:8a:5a:02:7d:3d:57:4c: dc:58:8d:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Akairw2MuJO+tI4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViNTU5OGMtNjQ2OC00YTA3LWJhNjItYjM5MGY2MGQx ZGRlMB4XDTI2MDkyMTIwNDA0MFoXDTI2MTIyMDIxNDA0MFowLzEtMCsGA1UEAxMk ZmRlN2E4YmItNGM0Zi00YjFlLThkOTYtYTczZDkxZjYzNjRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkrCBZcRGtbZEKLQaNbwP5IqhrsZv+8hj1XPd 4jl6WbN4W6IGqNwqVDlhPOCZJsuL6DTKhxFPBd1KnkrMaB5exs1uQiOp4aEzuiUU L35Fz2gTGCo0v8L8Y/Y381KgLe+9+DfYQyB2anoCyi0wqkGdOAfRGLkSK/FauJEh ROfUmIbuYALUa+d5LWjNs5AOGY6D8BH3Bj+8dqufj+1E6MbdH19sb6o3vGY7qOff Ib8h2uBS29PU3rFZQJMAixIplfaa0P6sUoZ/LT3IbJqLF4LBfBfG3B7SWjkQJB2p i4vpGGlFhON0XRRafdWCjwG4MSiUoNuFgD05iXczCA5ZHgqoiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMhsJH9Y2UNG8P/vGyXuM7dq2qFVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi8zNWI1 NTk4Yy02NDY4LTRhMDctYmE2Mi1iMzkwZjYwZDFkZGUvOGFiZmY3ZjktOTZlMi0z NzQyLWE0MGUtYWRmNzk2MzVkZDQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvMzViNTU5OGMtNjQ2OC00YTA3LWJh NjItYjM5MGY2MGQxZGRlLzM1YjU1OThjLTY0NjgtNGEwNy1iYTYyLWIzOTBmNjBk MWRkZS5jcmwwHwYDVR0jBBgwFoAU3V07zfmBIXtx/AqlnAa3+IJi/cYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4 Ny1iMmNjLTU2ODkzODFhM2M0Mi8zNWI1NTk4Yy02NDY4LTRhMDctYmE2Mi1iMzkw ZjYwZDFkZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx8AIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABqP2lSGkWl+4+UR0stcKDyIXrIaHgMDSnBXE8Q6kzljeLWDspyMW/Po rOgS/Y9f1jrSrAHf3mi/M7YmP866JYlmSr46bvOUAj710Lgn75M+fxEan9i6aVwB 5/0d2oyifNzMAzEU+I8pizkqmdukY6LKQ3B96I4avA0xsmwayS3zopQMlKoR89iz qOKJ1fw96ba67KA5ituhknVfYTCXHoxXr/okjkbIx+JUHJfRkb2HAt0WFO8qRpSQ 2jspWwU4ajBWBgSp2Q5zNam+HIu4jnch2zcru9AnKKxqKbvqABhywAborKRGbGzr m9khKVszGha31HWIiloCfT1XTNxYjYI= -----END CERTIFICATE-----Generated at Mon Sep 28 23:28:45 2026 by rpki-client