$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35b4b3a4-a195-4325-8f07-9376a8ef2903/3aaaadca-24e4-3f81-8fc4-456ca0f93295.roa File: 3aaaadca-24e4-3f81-8fc4-456ca0f93295.roa (raw, json) Hash identifier: ux1DJLn/BxA32rTZbeN0Z67CdfXrHWYjApEJsoEAC5Y= Subject key identifier: A7:9B:1D:34:78:22:44:3A:28:55:C3:DE:67:CB:9D:CF:BF:9C:F5:42 Certificate issuer: /CN=35b4b3a4-a195-4325-8f07-9376a8ef2903 Certificate serial: 010D0C9F4328584F225CFB980F464C881C80F880 Authority key identifier: B9:A9:F4:73:94:60:F8:F9:C3:99:A8:3D:01:57:52:82:5F:7B:DC:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35b4b3a4-a195-4325-8f07-9376a8ef2903.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35b4b3a4-a195-4325-8f07-9376a8ef2903/3aaaadca-24e4-3f81-8fc4-456ca0f93295.roa Signing time: Fri 11 Sep 2026 01:00:12 +0000 ROA not before: Fri 11 Sep 2026 01:00:12 +0000 ROA not after: Thu 10 Dec 2026 02:00:12 +0000 asID: 8075 IP address blocks: 66.94.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35b4b3a4-a195-4325-8f07-9376a8ef2903/35b4b3a4-a195-4325-8f07-9376a8ef2903.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35b4b3a4-a195-4325-8f07-9376a8ef2903/35b4b3a4-a195-4325-8f07-9376a8ef2903.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35b4b3a4-a195-4325-8f07-9376a8ef2903.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:22:5c:fb:98:0f:46:4c:88:1c:80:f8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35b4b3a4-a195-4325-8f07-9376a8ef2903 Validity Not Before: Sep 11 01:00:12 2026 GMT Not After : Dec 10 02:00:12 2026 GMT Subject: CN=5535ade6-7333-4050-bc35-e6ebab7c7ed8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:86:18:77:75:06:27:68:70:ca:5e:ed:4e:d8: 6e:d2:9a:97:78:27:77:0a:8f:86:94:7b:eb:8a:18: 9b:41:e1:23:43:66:81:5c:66:91:22:29:d6:28:68: 5d:79:68:83:25:76:dd:18:98:cf:34:0a:64:7d:53: 03:b4:9e:62:50:f6:9f:23:76:d6:36:db:fe:33:d3: 27:89:2d:d4:94:bd:b6:41:22:a8:dc:56:d4:4c:3b: 5f:c2:e9:8b:a2:49:7f:1a:55:7b:a6:78:2c:54:b9: 51:bc:93:87:0f:82:ea:b9:68:08:f3:31:94:a0:4b: a6:e0:7f:4f:35:f1:79:e7:11:90:08:4e:93:af:98: f1:5d:29:d5:bd:ee:75:c4:f8:00:48:74:9e:13:75: 22:71:fa:7d:f4:f6:ec:ef:97:71:dc:00:0b:99:10: 94:d7:f9:20:98:16:1b:54:af:b8:5c:c0:75:9d:13: e1:b5:95:cc:37:7e:20:48:8b:27:3c:d2:82:af:36: e4:49:c4:89:75:d2:2c:0e:3b:a2:c6:5a:75:d7:38: 0c:db:e9:b1:e0:6b:ff:0b:81:37:73:f6:4f:59:be: 24:54:7d:63:2c:c8:72:c7:76:4d:2a:61:e9:7f:9a: 90:0f:b0:a3:0e:a6:f6:f4:60:ed:a1:18:13:2f:44: 32:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:9B:1D:34:78:22:44:3A:28:55:C3:DE:67:CB:9D:CF:BF:9C:F5:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35b4b3a4-a195-4325-8f07-9376a8ef2903/3aaaadca-24e4-3f81-8fc4-456ca0f93295.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35b4b3a4-a195-4325-8f07-9376a8ef2903/35b4b3a4-a195-4325-8f07-9376a8ef2903.crl X509v3 Authority Key Identifier: keyid:B9:A9:F4:73:94:60:F8:F9:C3:99:A8:3D:01:57:52:82:5F:7B:DC:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35b4b3a4-a195-4325-8f07-9376a8ef2903.cer sbgp-ipAddrBlock: critical IPv4: 66.94.54.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:84:14:57:25:6f:70:a7:fc:f7:bc:b5:82:8d:5b:32:05:a0: ae:85:f4:74:c8:b6:f9:56:19:31:16:97:9d:9d:d9:51:d9:0e: 8b:ba:83:02:8b:32:f8:86:a1:b1:d1:8b:ff:49:8f:55:97:93: 61:9b:5a:41:33:e3:5d:94:71:58:07:f3:6f:95:46:42:d3:8d: 03:43:07:0e:99:91:85:44:cd:26:ca:3f:22:bf:43:0b:36:b1: a7:2c:b5:cc:80:41:05:a1:e2:1c:d9:1f:9a:a8:de:b5:ae:85: 39:6b:b9:9a:ae:fa:58:87:69:39:c5:63:c3:3b:a3:19:24:8b: e6:8c:d2:aa:d5:9d:6b:31:e0:59:1d:b9:c5:a3:c1:58:5a:b1: 15:98:ec:cf:a3:93:a6:42:7a:3d:ff:c3:98:e4:1a:70:c3:e2: ce:ff:11:1f:ec:b0:78:60:7f:20:ab:a0:fe:98:b1:1a:26:40: d7:fa:39:0b:1e:73:e3:dc:58:fc:5b:3e:86:20:62:43:7b:04: 35:91:cf:3b:83:92:ab:e8:47:77:81:10:18:e1:e8:64:bb:14: 5c:7f:7a:8f:45:4c:88:44:00:f3:34:36:cf:74:63:ea:d6:3b: dd:56:61:4a:ec:32:af:23:f3:07:4f:31:d1:94:ea:0f:ce:c0: 55:a7:9d:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8iXPuYD0ZMiByA+IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViNGIzYTQtYTE5NS00MzI1LThmMDctOTM3NmE4ZWYy OTAzMB4XDTI2MDkxMTAxMDAxMloXDTI2MTIxMDAyMDAxMlowLzEtMCsGA1UEAxMk NTUzNWFkZTYtNzMzMy00MDUwLWJjMzUtZTZlYmFiN2M3ZWQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYYYd3UGJ2hwyl7tTthu0pqXeCd3Co+GlHvr ihibQeEjQ2aBXGaRIinWKGhdeWiDJXbdGJjPNApkfVMDtJ5iUPafI3bWNtv+M9Mn iS3UlL22QSKo3FbUTDtfwumLokl/GlV7pngsVLlRvJOHD4LquWgI8zGUoEum4H9P NfF55xGQCE6Tr5jxXSnVve51xPgASHSeE3Uicfp99Pbs75dx3AALmRCU1/kgmBYb VK+4XMB1nRPhtZXMN34gSIsnPNKCrzbkScSJddIsDjuixlp11zgM2+mx4Gv/C4E3 c/ZPWb4kVH1jLMhyx3ZNKmHpf5qQD7CjDqb29GDtoRgTL0QyTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKebHTR4IkQ6KFXD3mfLnc+/nPVCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zNWI0 YjNhNC1hMTk1LTQzMjUtOGYwNy05Mzc2YThlZjI5MDMvM2FhYWFkY2EtMjRlNC0z ZjgxLThmYzQtNDU2Y2EwZjkzMjk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMzViNGIzYTQtYTE5NS00MzI1LThm MDctOTM3NmE4ZWYyOTAzLzM1YjRiM2E0LWExOTUtNDMyNS04ZjA3LTkzNzZhOGVm MjkwMy5jcmwwHwYDVR0jBBgwFoAUuan0c5Rg+PnDmag9AVdSgl973GYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zNWI0YjNhNC1hMTk1LTQzMjUtOGYwNy05Mzc2 YThlZjI5MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQl42MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAqEFFclb3Cn/Pe8tYKNWzIFoK6F9HTItvlWGTEWl52d2VHZDou6gwKL MviGobHRi/9Jj1WXk2GbWkEz412UcVgH82+VRkLTjQNDBw6ZkYVEzSbKPyK/Qws2 sacstcyAQQWh4hzZH5qo3rWuhTlruZqu+liHaTnFY8M7oxkki+aM0qrVnWsx4Fkd ucWjwVhasRWY7M+jk6ZCej3/w5jkGnDD4s7/ER/ssHhgfyCroP6YsRomQNf6OQse c+PcWPxbPoYgYkN7BDWRzzuDkqvoR3eBEBjh6GS7FFx/eo9FTIhEAPM0Ns90Y+rW O91WYUrsMq8j8wdPMdGU6g/OwFWnnVo= -----END CERTIFICATE-----Generated at Sun Sep 20 15:41:38 2026 by rpki-client