$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/5706359d-fe2c-332a-a359-78aed3483fec.roa File: 5706359d-fe2c-332a-a359-78aed3483fec.roa (raw, json) Hash identifier: JIcK6S53pIvFeSQ6CA5/AtxQ1cKNBb9TFsJAcgl8fWA= Subject key identifier: 88:C6:8B:5A:20:EA:CF:00:42:04:6E:7A:0A:4B:11:46:0B:0B:58:62 Certificate issuer: /CN=01586a37-c709-480e-ac0d-b07d855c615b Certificate serial: 010D0C9F4328584F119CDE2912D26B2977A65D80 Authority key identifier: 40:B8:69:3F:C9:14:9F:5C:2B:7B:FA:88:B8:C7:FF:62:32:EB:9B:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/5706359d-fe2c-332a-a359-78aed3483fec.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 209043 IP address blocks: 172.103.35.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/01586a37-c709-480e-ac0d-b07d855c615b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/01586a37-c709-480e-ac0d-b07d855c615b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9c:de:29:12:d2:6b:29:77:a6:5d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01586a37-c709-480e-ac0d-b07d855c615b Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=5a77590d-aaf2-4bcd-8b5f-3ec6e92930de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:53:ae:48:b1:c9:b9:e7:43:7b:79:1f:50:e5: 4e:b5:00:7b:a7:6f:20:54:6a:14:ba:c6:84:e6:1d: 3f:bd:37:ce:3e:65:65:59:27:10:95:2e:b1:11:22: 03:1f:30:4a:95:1d:b1:2d:65:c0:54:99:19:ea:92: 6b:1e:04:39:bd:c5:62:03:a4:ea:b7:1f:7d:f9:47: bc:01:e5:82:49:04:6c:ba:7f:fd:49:d8:a8:84:be: 6a:6d:8b:ef:9f:9b:97:bb:45:c9:d2:a3:69:32:35: f4:29:7e:49:da:d8:94:83:ea:1b:09:c6:0c:bd:13: 50:65:4f:53:9e:e6:f0:c9:fc:c4:f9:39:e0:e5:81: ff:e6:a0:8b:ed:4e:d2:95:ea:48:43:5b:9d:17:10: 11:60:f3:18:f7:95:06:31:5e:55:f3:1b:10:46:cb: 76:d3:7b:6b:f8:56:fe:fb:17:17:e9:07:35:b2:56: 1b:ea:fc:cd:48:e3:a7:c9:19:51:e9:3e:7a:e1:62: ad:66:48:c1:75:46:87:2d:8d:0a:db:61:19:8b:c7: 7e:9b:fe:bc:98:b4:b7:d1:cb:ec:a9:bb:f0:cb:08: fb:a4:f7:04:97:ed:4c:35:1b:2e:b4:46:df:bb:3d: 97:bd:6f:08:6b:b6:29:58:45:b1:a5:9f:33:c1:0b: f0:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:C6:8B:5A:20:EA:CF:00:42:04:6E:7A:0A:4B:11:46:0B:0B:58:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/5706359d-fe2c-332a-a359-78aed3483fec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/01586a37-c709-480e-ac0d-b07d855c615b.crl X509v3 Authority Key Identifier: keyid:40:B8:69:3F:C9:14:9F:5C:2B:7B:FA:88:B8:C7:FF:62:32:EB:9B:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b.cer sbgp-ipAddrBlock: critical IPv4: 172.103.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bc:64:e5:0d:57:93:54:3a:e1:c7:e2:91:4f:c1:25:dd:bf:64: 0a:17:d4:9f:0f:56:1b:1f:b2:93:5f:f4:aa:ca:5c:42:fb:30: 0d:4c:83:40:83:b5:c1:47:b7:1b:58:12:13:b9:99:d7:e3:43: 73:83:ca:a2:a6:9e:f9:b1:ff:ff:51:ca:64:90:b1:77:4b:c4: 2d:1d:02:ba:c4:18:c4:04:cb:1d:e9:7c:01:3b:ce:e8:2f:a8: 21:79:75:97:5d:3d:fd:44:06:8c:93:15:ec:e1:85:45:b6:b5: e9:f8:21:1b:3c:23:b4:e6:fd:1c:67:06:23:0b:e5:49:d7:fd: 37:c5:98:7b:9a:c5:51:87:9f:53:77:46:a8:87:72:d5:6b:df: 6e:4e:81:06:40:86:89:d7:55:5a:a4:16:26:fb:0e:4d:45:a2: ae:57:f6:b9:8d:47:f8:7e:3c:73:92:3a:da:c2:46:b2:c9:2e: c4:d0:1d:0b:cc:bd:55:3c:6d:b5:aa:a4:cb:0e:81:ea:a4:21: f1:fe:74:a5:4f:fe:18:ca:d5:84:6c:cc:66:c0:cf:b6:a8:55: e1:e2:23:23:6b:4c:2c:92:53:34:ca:b0:c9:7d:ac:fe:17:5d: f5:a6:ee:45:8a:e0:75:16:d9:86:95:67:e0:55:8a:76:35:c0: ed:08:62:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnN4pEtJrKXemXYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDE1ODZhMzctYzcwOS00ODBlLWFjMGQtYjA3ZDg1NWM2 MTViMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk NWE3NzU5MGQtYWFmMi00YmNkLThiNWYtM2VjNmU5MjkzMGRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhFOuSLHJuedDe3kfUOVOtQB7p28gVGoUusaE 5h0/vTfOPmVlWScQlS6xESIDHzBKlR2xLWXAVJkZ6pJrHgQ5vcViA6Tqtx99+Ue8 AeWCSQRsun/9SdiohL5qbYvvn5uXu0XJ0qNpMjX0KX5J2tiUg+obCcYMvRNQZU9T nubwyfzE+Tng5YH/5qCL7U7SlepIQ1udFxARYPMY95UGMV5V8xsQRst203tr+Fb+ +xcX6Qc1slYb6vzNSOOnyRlR6T564WKtZkjBdUaHLY0K22EZi8d+m/68mLS30cvs qbvwywj7pPcEl+1MNRsutEbfuz2XvW8Ia7YpWEWxpZ8zwQvwFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIjGi1og6s8AQgRuegpLEUYLC1hiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wMTU4 NmEzNy1jNzA5LTQ4MGUtYWMwZC1iMDdkODU1YzYxNWIvNTcwNjM1OWQtZmUyYy0z MzJhLWEzNTktNzhhZWQzNDgzZmVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDE1ODZhMzctYzcwOS00ODBlLWFj MGQtYjA3ZDg1NWM2MTViLzAxNTg2YTM3LWM3MDktNDgwZS1hYzBkLWIwN2Q4NTVj NjE1Yi5jcmwwHwYDVR0jBBgwFoAUQLhpP8kUn1wre/qIuMf/YjLrm6kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wMTU4NmEzNy1jNzA5LTQ4MGUtYWMwZC1iMDdk ODU1YzYxNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGcjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALxk5Q1Xk1Q64cfikU/BJd2/ZAoX1J8PVhsfspNf9KrKXEL7MA1Mg0CD tcFHtxtYEhO5mdfjQ3ODyqKmnvmx//9RymSQsXdLxC0dArrEGMQEyx3pfAE7zugv qCF5dZddPf1EBoyTFezhhUW2ten4IRs8I7Tm/RxnBiML5UnX/TfFmHuaxVGHn1N3 RqiHctVr325OgQZAhonXVVqkFib7Dk1Foq5X9rmNR/h+PHOSOtrCRrLJLsTQHQvM vVU8bbWqpMsOgeqkIfH+dKVP/hjK1YRszGbAz7aoVeHiIyNrTCySUzTKsMl9rP4X XfWm7kWK4HUW2YaVZ+BVinY1wO0IYi0= -----END CERTIFICATE-----Generated at Tue Sep 22 00:24:47 2026 by rpki-client