$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e84e88d1-804b-445f-9551-b2b8634de3c4/07f6cc41-1ed6-3718-a24e-2c2317175251.roa File: 07f6cc41-1ed6-3718-a24e-2c2317175251.roa (raw, json) Hash identifier: VC/sBfAX7AV5bvMb0A5cH4BNWbQgbbT9LgZFNbPEQeY= Subject key identifier: 56:71:E8:BD:EE:08:1A:57:80:3C:AF:D9:BB:AD:FD:FD:69:07:C7:B0 Certificate issuer: /CN=e84e88d1-804b-445f-9551-b2b8634de3c4 Certificate serial: 010D0C9F4328584F225D08F2852A9E46DAD86670 Authority key identifier: 73:8E:96:57:65:98:D9:4F:87:1D:7B:3D:E1:78:86:81:8D:BD:62:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e84e88d1-804b-445f-9551-b2b8634de3c4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e84e88d1-804b-445f-9551-b2b8634de3c4/07f6cc41-1ed6-3718-a24e-2c2317175251.roa Signing time: Fri 11 Sep 2026 01:00:12 +0000 ROA not before: Fri 11 Sep 2026 01:00:12 +0000 ROA not after: Thu 10 Dec 2026 02:00:12 +0000 asID: 376 IP address blocks: 205.236.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e84e88d1-804b-445f-9551-b2b8634de3c4/e84e88d1-804b-445f-9551-b2b8634de3c4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e84e88d1-804b-445f-9551-b2b8634de3c4/e84e88d1-804b-445f-9551-b2b8634de3c4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e84e88d1-804b-445f-9551-b2b8634de3c4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:22:5d:08:f2:85:2a:9e:46:da:d8:66:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e84e88d1-804b-445f-9551-b2b8634de3c4 Validity Not Before: Sep 11 01:00:12 2026 GMT Not After : Dec 10 02:00:12 2026 GMT Subject: CN=5bd25919-cbab-4cbd-8dbc-cb229b23a25d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:36:4f:35:0e:d7:a1:1b:f8:27:11:04:d1:84: 05:20:60:bb:0d:31:7a:10:ca:f6:6d:e2:e6:7a:b9: 38:b9:ac:b0:36:ae:3f:12:0e:77:f8:e4:64:30:f4: 6d:8e:50:70:e1:a5:da:b7:a9:25:5e:12:e1:c2:37: 3c:12:21:4c:43:8d:e7:46:40:29:21:14:40:04:7b: 8d:61:14:85:b8:60:06:59:43:dc:a3:8b:34:01:4e: 38:91:9b:c3:3c:c1:7b:48:ef:b3:5c:9e:74:85:7a: 29:51:a8:95:c2:d5:98:ea:64:01:b1:0e:52:91:79: c0:0f:32:d5:8c:39:08:5f:1d:3d:de:50:07:61:4d: 6b:b5:38:38:b2:d5:d2:6d:9f:29:32:7c:d4:51:ba: b4:05:17:56:10:ba:d8:eb:4b:93:e2:fa:50:8e:b1: 9d:04:ba:42:50:cd:99:be:67:d7:ac:95:07:ce:4d: 26:fc:bb:3c:4c:c4:81:93:7b:d6:f8:8e:8a:2a:00: d6:e4:0d:bb:bb:2d:27:69:e8:00:da:b8:6e:eb:36: c0:90:b1:c3:cb:c6:57:05:ea:8d:71:f8:9d:bb:9d: 45:c1:63:33:b2:c4:0e:77:d3:06:cd:2d:fb:33:2f: ad:92:1e:73:2a:3e:95:da:1c:e3:da:7e:60:97:0f: f0:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:71:E8:BD:EE:08:1A:57:80:3C:AF:D9:BB:AD:FD:FD:69:07:C7:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e84e88d1-804b-445f-9551-b2b8634de3c4/07f6cc41-1ed6-3718-a24e-2c2317175251.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e84e88d1-804b-445f-9551-b2b8634de3c4/e84e88d1-804b-445f-9551-b2b8634de3c4.crl X509v3 Authority Key Identifier: keyid:73:8E:96:57:65:98:D9:4F:87:1D:7B:3D:E1:78:86:81:8D:BD:62:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e84e88d1-804b-445f-9551-b2b8634de3c4.cer sbgp-ipAddrBlock: critical IPv4: 205.236.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:d1:90:60:c8:9b:95:51:88:cb:e3:c3:1d:1d:7b:bc:25:49: ea:19:f4:f7:dc:1a:37:4c:ae:04:32:39:c4:da:f1:3d:c1:8c: 8d:d9:a9:82:10:ad:77:5d:fc:58:85:79:c4:e2:fd:5e:55:bc: 33:38:3f:a1:8d:c9:1e:3e:0a:0e:c9:a1:5a:52:ef:12:32:86: 4f:a8:d1:20:84:ea:e9:c1:ba:c3:17:f5:7f:39:28:f3:6f:d4: 3b:2b:54:87:d0:4f:02:8b:c1:6c:fc:02:a7:4c:83:a1:8e:06: 61:80:6a:2f:8f:b4:38:a5:a5:eb:ab:7c:7d:85:9b:24:c5:16: 6f:e2:4d:3f:2f:e9:89:52:45:30:54:d6:32:d9:e8:4e:71:38: 3b:81:0d:7d:28:4e:4f:8b:33:18:3c:b7:26:e9:04:ea:8e:3c: 0f:13:a2:02:78:b6:64:03:67:cd:9c:5b:ea:47:5f:b6:5f:bf: cd:48:8a:85:f2:02:2a:45:b0:a0:2e:a4:0b:40:1a:fe:f4:4b: 5d:20:52:e3:fb:42:68:de:fa:c2:96:c6:10:93:1f:9e:ed:15: 62:f8:ae:0d:66:09:fa:e8:dd:f3:29:a1:77:74:62:30:43:14: af:f2:ab:ce:9d:91:22:ea:f1:59:0e:02:38:77:66:43:61:5c: 85:9d:76:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8iXQjyhSqeRtrYZnAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTg0ZTg4ZDEtODA0Yi00NDVmLTk1NTEtYjJiODYzNGRl M2M0MB4XDTI2MDkxMTAxMDAxMloXDTI2MTIxMDAyMDAxMlowLzEtMCsGA1UEAxMk NWJkMjU5MTktY2JhYi00Y2JkLThkYmMtY2IyMjliMjNhMjVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0jZPNQ7XoRv4JxEE0YQFIGC7DTF6EMr2beLm erk4uaywNq4/Eg53+ORkMPRtjlBw4aXat6klXhLhwjc8EiFMQ43nRkApIRRABHuN YRSFuGAGWUPco4s0AU44kZvDPMF7SO+zXJ50hXopUaiVwtWY6mQBsQ5SkXnADzLV jDkIXx093lAHYU1rtTg4stXSbZ8pMnzUUbq0BRdWELrY60uT4vpQjrGdBLpCUM2Z vmfXrJUHzk0m/Ls8TMSBk3vW+I6KKgDW5A27uy0naegA2rhu6zbAkLHDy8ZXBeqN cfidu51FwWMzssQOd9MGzS37My+tkh5zKj6V2hzj2n5glw/wbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFZx6L3uCBpXgDyv2but/f1pB8ewMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lODRl ODhkMS04MDRiLTQ0NWYtOTU1MS1iMmI4NjM0ZGUzYzQvMDdmNmNjNDEtMWVkNi0z NzE4LWEyNGUtMmMyMzE3MTc1MjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTg0ZTg4ZDEtODA0Yi00NDVmLTk1 NTEtYjJiODYzNGRlM2M0L2U4NGU4OGQxLTgwNGItNDQ1Zi05NTUxLWIyYjg2MzRk ZTNjNC5jcmwwHwYDVR0jBBgwFoAUc46WV2WY2U+HHXs94XiGgY29YtwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lODRlODhkMS04MDRiLTQ0NWYtOTU1MS1iMmI4 NjM0ZGUzYzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzewjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABfRkGDIm5VRiMvjwx0de7wlSeoZ9PfcGjdMrgQyOcTa8T3BjI3ZqYIQ rXdd/FiFecTi/V5VvDM4P6GNyR4+Cg7JoVpS7xIyhk+o0SCE6unBusMX9X85KPNv 1DsrVIfQTwKLwWz8AqdMg6GOBmGAai+PtDilpeurfH2FmyTFFm/iTT8v6YlSRTBU 1jLZ6E5xODuBDX0oTk+LMxg8tybpBOqOPA8TogJ4tmQDZ82cW+pHX7Zfv81IioXy AipFsKAupAtAGv70S10gUuP7Qmje+sKWxhCTH57tFWL4rg1mCfro3fMpoXd0YjBD FK/yq86dkSLq8VkOAjh3ZkNhXIWddhc= -----END CERTIFICATE-----Generated at Sat Oct 3 11:05:49 2026 by rpki-client