$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f7322b5f-0541-4784-9e5e-c4e8dd728e59/41b8dafa-6c42-34c0-af1f-0d3173ac6ac0.roa File: 41b8dafa-6c42-34c0-af1f-0d3173ac6ac0.roa (raw, json) Hash identifier: 55xW5qKdzSMIv3s2WtIMs7NW+2qSlZZ8/y27hEee3uM= Subject key identifier: 8C:20:0D:FC:29:7D:50:B3:6F:6C:BB:DE:4C:89:36:3F:5E:AA:56:88 Certificate issuer: /CN=f7322b5f-0541-4784-9e5e-c4e8dd728e59 Certificate serial: 010D0C9F4328584F093D0E2EBC7BD210C6190C80 Authority key identifier: 3B:72:1A:C5:54:9A:F6:70:C0:81:FD:58:38:ED:59:4E:48:46:A3:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f7322b5f-0541-4784-9e5e-c4e8dd728e59.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f7322b5f-0541-4784-9e5e-c4e8dd728e59/41b8dafa-6c42-34c0-af1f-0d3173ac6ac0.roa Signing time: Wed 02 Sep 2026 01:00:12 +0000 ROA not before: Wed 02 Sep 2026 01:00:12 +0000 ROA not after: Tue 01 Dec 2026 02:00:12 +0000 asID: 393462 IP address blocks: 192.35.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f7322b5f-0541-4784-9e5e-c4e8dd728e59/f7322b5f-0541-4784-9e5e-c4e8dd728e59.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f7322b5f-0541-4784-9e5e-c4e8dd728e59/f7322b5f-0541-4784-9e5e-c4e8dd728e59.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f7322b5f-0541-4784-9e5e-c4e8dd728e59.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:3d:0e:2e:bc:7b:d2:10:c6:19:0c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f7322b5f-0541-4784-9e5e-c4e8dd728e59 Validity Not Before: Sep 2 01:00:12 2026 GMT Not After : Dec 1 02:00:12 2026 GMT Subject: CN=1c440b1a-7ec0-4e26-ac8a-ce686dcedc79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:50:44:c7:18:aa:07:78:8d:81:d9:0f:9a:36: bf:b8:e9:a1:df:31:6a:2e:15:f2:e3:c2:f5:4f:c2: 93:ce:dc:5c:98:79:33:2e:09:a9:d5:29:e1:bc:70: 72:df:cf:1b:a7:06:7a:b8:a8:a1:1b:16:f2:47:93: 2d:37:54:e4:37:ac:18:a1:4a:36:a4:75:75:75:90: ce:6b:6c:9a:e1:b1:d8:9d:44:c5:67:8f:06:a4:ee: 9c:fa:ca:a1:5d:1c:d1:00:65:5c:ff:25:77:d7:aa: a9:74:ef:43:fa:35:40:72:ec:30:26:f9:df:6b:81: ce:a9:f5:74:39:e5:91:5c:fb:ad:2e:7c:45:c2:c8: 09:df:eb:8e:2f:2b:40:df:ec:d6:e7:3a:38:7c:24: d3:41:5f:a5:ce:7b:48:9a:c7:b6:a5:75:8d:10:85: 9f:14:4b:6d:04:ab:e2:1b:a0:c9:bb:a6:16:54:3b: e5:fd:96:14:d8:e2:b2:f8:89:c5:97:d4:77:77:b5: 80:a2:db:9c:58:3d:4e:30:a5:bf:9f:67:be:f6:8b: 1c:53:c4:87:77:8c:ce:98:99:cb:8e:d7:bf:99:ae: c5:77:f7:3b:8b:2e:b7:1c:34:71:55:08:0c:13:9b: b7:2e:e8:12:69:7e:7d:03:32:8d:62:30:21:5d:86: aa:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:20:0D:FC:29:7D:50:B3:6F:6C:BB:DE:4C:89:36:3F:5E:AA:56:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f7322b5f-0541-4784-9e5e-c4e8dd728e59/41b8dafa-6c42-34c0-af1f-0d3173ac6ac0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f7322b5f-0541-4784-9e5e-c4e8dd728e59/f7322b5f-0541-4784-9e5e-c4e8dd728e59.crl X509v3 Authority Key Identifier: keyid:3B:72:1A:C5:54:9A:F6:70:C0:81:FD:58:38:ED:59:4E:48:46:A3:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f7322b5f-0541-4784-9e5e-c4e8dd728e59.cer sbgp-ipAddrBlock: critical IPv4: 192.35.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:d4:f9:d0:b2:1c:39:34:49:df:5a:b5:f7:6b:48:7e:d8:d8: 6e:b8:b2:f7:bf:7e:9e:72:be:29:17:0e:a1:4a:b1:22:0a:62: d2:aa:f2:8c:64:3b:51:2f:21:62:34:a5:54:d6:1b:10:33:a8: 4c:83:e3:4d:69:c8:ed:df:a3:93:e2:e0:e5:c9:a0:6f:ed:1f: d0:44:d1:7f:89:0a:4a:2c:12:47:15:51:03:a7:37:72:2c:1e: e8:03:bf:fc:44:9c:00:59:2f:40:2b:69:ba:27:4e:66:23:fd: 46:81:cf:0f:a1:1b:5e:62:2f:da:54:a3:58:f6:d0:00:c3:59: c5:90:b0:2a:11:b9:1a:2a:53:0c:6f:f1:f4:1f:84:6f:d6:b6: 71:db:2d:4c:81:51:11:3f:08:75:20:63:2b:13:eb:9f:70:42: 69:0c:bc:9d:8e:42:34:4f:42:43:04:b2:7a:c0:bc:fc:a6:ff: 71:55:95:d4:aa:d2:ff:ea:14:73:3e:be:03:49:fb:25:b7:0f: 33:f8:69:4f:18:2b:84:34:47:3c:41:1e:2f:a1:53:46:8d:ce: d9:7d:ed:f7:79:1f:df:d5:c2:e1:f6:1b:36:23:72:f7:fc:55: f5:2a:5d:0f:4e:09:12:50:5c:e4:78:59:c7:43:9d:9f:e0:24: 2b:e6:16:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8JPQ4uvHvSEMYZDIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjczMjJiNWYtMDU0MS00Nzg0LTllNWUtYzRlOGRkNzI4 ZTU5MB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk MWM0NDBiMWEtN2VjMC00ZTI2LWFjOGEtY2U2ODZkY2VkYzc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAglBExxiqB3iNgdkPmja/uOmh3zFqLhXy48L1 T8KTztxcmHkzLgmp1SnhvHBy388bpwZ6uKihGxbyR5MtN1TkN6wYoUo2pHV1dZDO a2ya4bHYnUTFZ48GpO6c+sqhXRzRAGVc/yV316qpdO9D+jVAcuwwJvnfa4HOqfV0 OeWRXPutLnxFwsgJ3+uOLytA3+zW5zo4fCTTQV+lzntImse2pXWNEIWfFEttBKvi G6DJu6YWVDvl/ZYU2OKy+InFl9R3d7WAotucWD1OMKW/n2e+9oscU8SHd4zOmJnL jte/ma7Fd/c7iy63HDRxVQgME5u3LugSaX59AzKNYjAhXYaqRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIwgDfwpfVCzb2y73kyJNj9eqlaIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9mNzMy MmI1Zi0wNTQxLTQ3ODQtOWU1ZS1jNGU4ZGQ3MjhlNTkvNDFiOGRhZmEtNmM0Mi0z NGMwLWFmMWYtMGQzMTczYWM2YWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZjczMjJiNWYtMDU0MS00Nzg0LTll NWUtYzRlOGRkNzI4ZTU5L2Y3MzIyYjVmLTA1NDEtNDc4NC05ZTVlLWM0ZThkZDcy OGU1OS5jcmwwHwYDVR0jBBgwFoAUO3IaxVSa9nDAgf1YOO1ZTkhGo9UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9mNzMyMmI1Zi0wNTQxLTQ3ODQtOWU1ZS1jNGU4 ZGQ3MjhlNTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCP8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHvU+dCyHDk0Sd9atfdrSH7Y2G64sve/fp5yvikXDqFKsSIKYtKq8oxk O1EvIWI0pVTWGxAzqEyD401pyO3fo5Pi4OXJoG/tH9BE0X+JCkosEkcVUQOnN3Is HugDv/xEnABZL0ArabonTmYj/UaBzw+hG15iL9pUo1j20ADDWcWQsCoRuRoqUwxv 8fQfhG/WtnHbLUyBURE/CHUgYysT659wQmkMvJ2OQjRPQkMEsnrAvPym/3FVldSq 0v/qFHM+vgNJ+yW3DzP4aU8YK4Q0RzxBHi+hU0aNztl97fd5H9/VwuH2GzYjcvf8 VfUqXQ9OCRJQXOR4WcdDnZ/gJCvmFhc= -----END CERTIFICATE-----Generated at Tue Sep 22 20:57:35 2026 by rpki-client