$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/3ac2f426-8b20-3807-8729-c56bcbde4bdf.roa File: 3ac2f426-8b20-3807-8729-c56bcbde4bdf.roa (raw, json) Hash identifier: a2QrF6WuyZ13ZVvHd5bP5EcAsxiaGJ+iGa/v/4dTAiw= Subject key identifier: 8C:4E:4E:96:91:17:AB:7B:D6:D9:3A:B7:57:5B:44:A5:1A:74:D7:5E Certificate issuer: /CN=a6f26d75-0d3a-4bef-8d6a-36d16664307e Certificate serial: 010D0C9F4328584B9E07D03498C059556ED78780 Authority key identifier: 95:63:35:33:47:05:5D:59:71:3A:DA:67:E9:EB:BB:5A:F5:DC:7D:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/3ac2f426-8b20-3807-8729-c56bcbde4bdf.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 398083 IP address blocks: 192.35.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/a6f26d75-0d3a-4bef-8d6a-36d16664307e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/a6f26d75-0d3a-4bef-8d6a-36d16664307e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:d0:34:98:c0:59:55:6e:d7:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6f26d75-0d3a-4bef-8d6a-36d16664307e Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=e12f35be-66f2-4b30-8f3d-66330c4bc7bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:2f:2f:d1:fd:4d:b5:ec:d8:c7:27:16:74:5a: 01:89:6b:d2:ac:0a:36:de:74:5d:c2:36:9a:aa:5d: fb:de:02:41:d3:79:96:b8:a3:38:45:1f:b1:2f:4d: 19:c6:3f:21:ef:5b:62:e2:43:1b:21:c0:62:22:b3: 39:ea:89:17:f5:7e:51:cb:59:a9:82:e5:9c:0a:e0: 87:c0:9e:d3:58:0d:55:d0:ae:87:00:5b:66:e5:f8: 84:bb:7c:94:71:f9:c1:53:0b:c0:ec:ec:ab:c1:82: 95:27:36:76:2d:eb:b0:5e:db:3a:32:4f:44:8f:7b: 2b:a0:ce:bc:24:2e:7d:04:42:9b:0d:c3:a5:6f:58: cd:92:97:63:6e:e3:76:f5:d1:67:c1:b4:1d:6f:1a: 3d:04:0f:06:38:b0:e2:1b:8f:ba:91:44:5e:9e:29: 58:cd:4b:c0:3c:a0:0a:dd:38:d9:63:fd:a1:32:c5: 66:28:4e:f1:65:d6:57:bb:96:d5:07:4a:be:ad:7d: ac:63:3f:07:83:94:35:fa:56:38:d4:ad:cd:c0:02: c1:77:28:4f:70:96:e3:3f:7c:18:7d:65:09:82:fe: 27:28:54:6e:9c:c4:93:b0:1b:32:28:35:c8:90:04: ea:1f:18:c5:ab:2f:5f:8a:3d:5c:6b:39:1d:fa:c8: 9b:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:4E:4E:96:91:17:AB:7B:D6:D9:3A:B7:57:5B:44:A5:1A:74:D7:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/3ac2f426-8b20-3807-8729-c56bcbde4bdf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/a6f26d75-0d3a-4bef-8d6a-36d16664307e.crl X509v3 Authority Key Identifier: keyid:95:63:35:33:47:05:5D:59:71:3A:DA:67:E9:EB:BB:5A:F5:DC:7D:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e.cer sbgp-ipAddrBlock: critical IPv4: 192.35.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:e8:da:48:ed:f3:75:3d:c8:bc:40:8a:01:86:b1:1b:a6:22: 76:01:c8:3f:4a:a3:d1:ef:f0:d9:63:44:79:ed:2e:22:f6:6b: e5:c3:28:9f:90:d1:3c:43:db:a8:7f:18:8e:a3:5a:64:24:53: 6a:12:52:67:3c:65:95:37:d0:01:2f:d4:ff:0e:ac:0b:ea:21: cc:2b:07:90:d3:b2:86:65:e6:76:54:c1:89:a5:51:fb:28:0f: c8:57:50:43:b2:a0:7d:af:b9:ca:40:bf:d9:59:26:69:f6:36: 10:16:44:33:b6:5a:8c:b9:1d:33:05:be:b3:2b:3e:67:4d:b6: 40:97:39:92:2e:cb:e3:21:37:89:5c:0f:a2:aa:22:5f:a4:c1: a3:4d:ef:12:40:10:bc:b9:b6:80:ff:a5:fb:bd:4d:ab:67:07: cb:40:cb:e3:5f:fd:42:9c:39:81:81:a5:ba:68:28:29:5d:f7: af:77:f5:ce:76:bb:63:7d:52:73:cf:38:9c:c0:67:cf:38:c3: 01:e4:92:ff:b0:e9:16:07:27:ee:2b:c6:5f:fc:f5:53:92:a6: 11:31:84:95:07:29:c0:6d:fe:f5:51:0b:90:8e:75:80:1e:3e: 0a:1a:80:40:e2:4b:dd:79:76:20:ba:3d:3d:1a:6c:2d:be:c0: ff:00:09:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB9A0mMBZVW7Xh4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTZmMjZkNzUtMGQzYS00YmVmLThkNmEtMzZkMTY2NjQz MDdlMB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk ZTEyZjM1YmUtNjZmMi00YjMwLThmM2QtNjYzMzBjNGJjN2JmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhy8v0f1NtezYxycWdFoBiWvSrAo23nRdwjaa ql373gJB03mWuKM4RR+xL00Zxj8h71ti4kMbIcBiIrM56okX9X5Ry1mpguWcCuCH wJ7TWA1V0K6HAFtm5fiEu3yUcfnBUwvA7OyrwYKVJzZ2LeuwXts6Mk9Ej3sroM68 JC59BEKbDcOlb1jNkpdjbuN29dFnwbQdbxo9BA8GOLDiG4+6kURenilYzUvAPKAK 3TjZY/2hMsVmKE7xZdZXu5bVB0q+rX2sYz8Hg5Q1+lY41K3NwALBdyhPcJbjP3wY fWUJgv4nKFRunMSTsBsyKDXIkATqHxjFqy9fij1cazkd+sibCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIxOTpaRF6t71tk6t1dbRKUadNdeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hNmYy NmQ3NS0wZDNhLTRiZWYtOGQ2YS0zNmQxNjY2NDMwN2UvM2FjMmY0MjYtOGIyMC0z ODA3LTg3MjktYzU2YmNiZGU0YmRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTZmMjZkNzUtMGQzYS00YmVmLThk NmEtMzZkMTY2NjQzMDdlL2E2ZjI2ZDc1LTBkM2EtNGJlZi04ZDZhLTM2ZDE2NjY0 MzA3ZS5jcmwwHwYDVR0jBBgwFoAUlWM1M0cFXVlxOtpn6eu7WvXcfSswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hNmYyNmQ3NS0wZDNhLTRiZWYtOGQ2YS0zNmQx NjY2NDMwN2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCNZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMLo2kjt83U9yLxAigGGsRumInYByD9Ko9Hv8NljRHntLiL2a+XDKJ+Q 0TxD26h/GI6jWmQkU2oSUmc8ZZU30AEv1P8OrAvqIcwrB5DTsoZl5nZUwYmlUfso D8hXUEOyoH2vucpAv9lZJmn2NhAWRDO2Woy5HTMFvrMrPmdNtkCXOZIuy+MhN4lc D6KqIl+kwaNN7xJAELy5toD/pfu9TatnB8tAy+Nf/UKcOYGBpbpoKCld96939c52 u2N9UnPPOJzAZ884wwHkkv+w6RYHJ+4rxl/89VOSphExhJUHKcBt/vVRC5COdYAe PgoagEDiS915diC6PT0abC2+wP8ACdA= -----END CERTIFICATE-----Generated at Wed Nov 5 14:33:49 2025 by rpki-client