$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/b1abb89d-f5a0-39e2-9f3e-765e2e7ac368.roa File: b1abb89d-f5a0-39e2-9f3e-765e2e7ac368.roa (raw, json) Hash identifier: aUvrntv58BDDn3Pg2AYdi3Q4/V/YNhLjcycyAlISIgY= Subject key identifier: 89:57:9C:5E:D7:36:D5:3B:27:32:02:39:0D:3C:D9:5A:5D:CE:AE:1D Certificate issuer: /CN=a6f26d75-0d3a-4bef-8d6a-36d16664307e Certificate serial: 010D0C9F4328584B9B3CE17E68A9A25A6066EF00 Authority key identifier: 95:63:35:33:47:05:5D:59:71:3A:DA:67:E9:EB:BB:5A:F5:DC:7D:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/b1abb89d-f5a0-39e2-9f3e-765e2e7ac368.roa Signing time: Wed 22 Oct 2025 13:00:38 +0000 ROA not before: Wed 22 Oct 2025 13:00:38 +0000 ROA not after: Tue 20 Jan 2026 14:00:38 +0000 asID: 29 IP address blocks: 192.35.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/a6f26d75-0d3a-4bef-8d6a-36d16664307e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/a6f26d75-0d3a-4bef-8d6a-36d16664307e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:3c:e1:7e:68:a9:a2:5a:60:66:ef:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6f26d75-0d3a-4bef-8d6a-36d16664307e Validity Not Before: Oct 22 13:00:38 2025 GMT Not After : Jan 20 14:00:38 2026 GMT Subject: CN=3d1847e2-9c86-4943-92a0-da8885400889 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:70:18:ab:62:7d:63:24:2d:7d:28:11:2e:2c: d6:c6:bd:a9:39:ef:a4:83:16:b4:cb:0e:bf:9c:6e: ae:81:e6:e9:7c:c7:26:b5:74:af:7d:25:b6:e5:91: 47:6c:5b:2b:5e:c4:1a:76:cb:b4:5d:b4:22:79:f0: ea:03:7a:89:8c:51:28:7b:0d:54:4b:a3:4b:57:f2: 03:f7:c7:b1:52:dc:cd:90:57:d7:d7:9d:a6:d4:b0: 7d:88:11:02:31:19:0e:36:f9:08:3b:88:1f:a8:bd: c2:23:eb:4f:74:80:11:c1:ac:2c:d2:03:31:9b:22: 12:7f:36:d8:2f:ad:07:5e:16:9d:28:d8:0b:86:b3: 4a:ef:4c:21:1c:17:07:a1:0d:e6:bf:d7:d2:83:43: fd:ca:7d:f4:27:25:d8:c7:62:5c:d8:16:c3:cb:3b: 7c:e0:08:aa:8e:f6:81:f6:61:c2:83:69:62:8b:2c: 10:a1:da:a8:e2:70:41:9a:aa:41:3a:db:89:74:f9: dc:a6:e2:5c:ff:19:14:92:5c:ef:47:64:7d:2f:4d: 65:aa:58:89:d5:ee:08:48:eb:25:7f:5a:a4:06:6f: 41:f5:b1:d6:a6:73:27:b7:25:a6:4e:58:9e:4d:42: de:72:12:89:85:bc:50:68:d0:10:83:f3:54:16:8c: f5:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:57:9C:5E:D7:36:D5:3B:27:32:02:39:0D:3C:D9:5A:5D:CE:AE:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/b1abb89d-f5a0-39e2-9f3e-765e2e7ac368.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/a6f26d75-0d3a-4bef-8d6a-36d16664307e.crl X509v3 Authority Key Identifier: keyid:95:63:35:33:47:05:5D:59:71:3A:DA:67:E9:EB:BB:5A:F5:DC:7D:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e.cer sbgp-ipAddrBlock: critical IPv4: 192.35.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c8:0b:95:15:cc:0d:01:fe:d6:cc:1a:c0:8d:37:fa:7a:43:44: bd:1f:c0:59:e4:a7:aa:e1:7c:0c:ed:bf:85:7c:17:f0:14:f3: 9b:71:df:01:77:7e:4d:57:27:cd:bc:c6:d4:03:87:43:8e:2a: 28:ae:cd:3f:ec:77:76:c5:94:35:3f:9e:73:47:8a:6c:36:d7: 9f:b9:92:b6:86:a7:31:88:36:02:37:6c:72:99:a3:20:80:cf: e0:fe:5e:34:d0:ea:f4:9f:af:65:49:00:08:7e:6a:85:01:44: 09:75:14:bd:5f:a2:f7:a1:29:ca:2b:10:ab:91:74:50:40:be: 7e:0d:5b:12:5e:da:e9:2d:93:5d:0e:c8:13:71:3b:bb:3d:16: 1e:55:02:b4:d4:92:cd:0e:32:db:20:8b:a7:3f:70:32:5c:4c: f0:84:72:37:bc:7e:d6:36:37:17:6e:a1:e9:f7:03:61:88:c9: e6:c8:94:1e:5c:67:f4:49:44:3c:4b:15:4d:c2:a7:7c:e6:51: e9:ba:ee:58:6e:26:80:eb:9b:5a:89:c0:21:59:f3:64:47:76: 0c:31:46:b5:be:1f:24:53:10:e5:0f:19:9e:11:06:36:e8:cd: a6:96:4b:f4:42:f3:c7:97:4b:d4:60:ea:9d:39:2b:f4:55:37: 92:e6:9b:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubPOF+aKmiWmBm7wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTZmMjZkNzUtMGQzYS00YmVmLThkNmEtMzZkMTY2NjQz MDdlMB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk M2QxODQ3ZTItOWM4Ni00OTQzLTkyYTAtZGE4ODg1NDAwODg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3AYq2J9YyQtfSgRLizWxr2pOe+kgxa0yw6/ nG6ugebpfMcmtXSvfSW25ZFHbFsrXsQadsu0XbQiefDqA3qJjFEoew1US6NLV/ID 98exUtzNkFfX152m1LB9iBECMRkONvkIO4gfqL3CI+tPdIARwaws0gMxmyISfzbY L60HXhadKNgLhrNK70whHBcHoQ3mv9fSg0P9yn30JyXYx2Jc2BbDyzt84AiqjvaB 9mHCg2liiywQodqo4nBBmqpBOtuJdPncpuJc/xkUklzvR2R9L01lqliJ1e4ISOsl f1qkBm9B9bHWpnMntyWmTlieTULechKJhbxQaNAQg/NUFoz13QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIlXnF7XNtU7JzICOQ082Vpdzq4dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hNmYy NmQ3NS0wZDNhLTRiZWYtOGQ2YS0zNmQxNjY2NDMwN2UvYjFhYmI4OWQtZjVhMC0z OWUyLTlmM2UtNzY1ZTJlN2FjMzY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTZmMjZkNzUtMGQzYS00YmVmLThk NmEtMzZkMTY2NjQzMDdlL2E2ZjI2ZDc1LTBkM2EtNGJlZi04ZDZhLTM2ZDE2NjY0 MzA3ZS5jcmwwHwYDVR0jBBgwFoAUlWM1M0cFXVlxOtpn6eu7WvXcfSswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hNmYyNmQ3NS0wZDNhLTRiZWYtOGQ2YS0zNmQx NjY2NDMwN2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCNZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMgLlRXMDQH+1swawI03+npDRL0fwFnkp6rhfAztv4V8F/AU85tx3wF3 fk1XJ828xtQDh0OOKiiuzT/sd3bFlDU/nnNHimw215+5kraGpzGINgI3bHKZoyCA z+D+XjTQ6vSfr2VJAAh+aoUBRAl1FL1fovehKcorEKuRdFBAvn4NWxJe2uktk10O yBNxO7s9Fh5VArTUks0OMtsgi6c/cDJcTPCEcje8ftY2Nxduoen3A2GIyebIlB5c Z/RJRDxLFU3Cp3zmUem67lhuJoDrm1qJwCFZ82RHdgwxRrW+HyRTEOUPGZ4RBjbo zaaWS/RC88eXS9Rg6p05K/RVN5LmmwQ= -----END CERTIFICATE-----Generated at Wed Nov 5 11:52:48 2025 by rpki-client