$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/3f7c2cc1-e2c4-3546-b6d3-cbfb4428e18a.roa File: 3f7c2cc1-e2c4-3546-b6d3-cbfb4428e18a.roa (raw, json) Hash identifier: eeaTBdKAo9XBqUxONyELgsnc+UtS7rAROAENNa6yyE8= Subject key identifier: 49:94:6B:B8:65:1B:A1:40:E8:E0:66:A4:5F:21:92:71:99:51:62:29 Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F4328584E6144ACD70B7FD547988A89C0 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/3f7c2cc1-e2c4-3546-b6d3-cbfb4428e18a.roa Signing time: Fri 03 Jul 2026 21:00:11 +0000 ROA not before: Fri 03 Jul 2026 21:00:11 +0000 ROA not after: Thu 01 Oct 2026 21:00:11 +0000 asID: 13414 IP address blocks: 199.59.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:61:44:ac:d7:0b:7f:d5:47:98:8a:89:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: Jul 3 21:00:11 2026 GMT Not After : Oct 1 21:00:11 2026 GMT Subject: CN=5e9a9b48-ef75-4ec4-af8a-bcc7dff161e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:b5:17:dc:57:25:1d:e3:ba:a6:d7:5b:1e:1d: 8c:b3:bd:97:01:f6:42:34:cc:3e:b4:c1:f9:4b:25: 42:81:1c:ea:f9:e0:2d:96:4f:dd:d0:ce:3a:c7:10: 81:19:62:3d:7f:7e:6a:d5:d0:8e:1d:fb:a6:09:c6: cc:58:cc:72:18:c6:0a:53:be:a2:66:0f:99:29:39: 2f:4f:19:77:3c:08:3d:8d:5e:e6:9f:03:08:bc:63: fa:87:db:21:3e:ba:73:65:48:7f:3d:0d:6c:e6:64: 20:33:60:05:2f:fb:da:ab:2a:33:ea:62:44:d5:c8: 01:6c:7e:5d:6a:b2:a2:39:0e:62:91:38:4e:34:9f: 9c:5e:eb:c9:f9:0a:57:21:30:ea:0e:99:40:94:02: 2b:f6:be:9d:bb:d8:8d:05:b0:b4:d5:9f:8e:a8:4c: 7f:85:21:6d:7b:58:37:f8:0d:c1:6a:b5:76:72:8b: 2d:15:04:e1:83:c0:48:2d:85:5d:91:4b:b2:eb:f8: 0f:80:63:02:f3:3b:b3:ee:f4:c4:7b:54:c3:4c:14: c8:27:f6:17:79:e4:11:b9:92:f5:b9:08:18:d6:bd: b5:83:67:a8:ab:85:19:65:31:b2:9f:52:bd:89:68: 6d:dc:e0:73:2a:cb:77:59:c5:a5:79:4a:19:e6:0a: 7a:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:94:6B:B8:65:1B:A1:40:E8:E0:66:A4:5F:21:92:71:99:51:62:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/3f7c2cc1-e2c4-3546-b6d3-cbfb4428e18a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 199.59.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:c6:fb:2c:ab:34:05:26:e8:2e:91:9d:a4:73:fc:92:0f:3b: 68:e3:8e:83:7c:8c:39:25:e2:ac:03:d3:2f:7a:d5:e1:8e:24: 34:91:4a:b4:0a:57:15:c8:8d:84:2e:4a:cf:79:6c:d3:32:a3: 46:0f:bc:e8:7b:19:95:d1:15:34:d1:0c:3c:07:83:fe:52:83: ba:fc:88:09:e0:9c:b7:b0:37:ca:8e:ea:75:8d:76:d5:d5:a4: 16:f7:a5:00:14:ea:84:af:8e:60:15:05:15:0a:5e:bb:34:75: 94:24:bd:fb:5e:e5:85:fb:de:a5:a3:ac:17:e2:58:a9:8e:93: ef:c1:87:d3:a5:d7:a1:0d:a8:8b:04:55:26:c5:7f:6d:40:23: c7:2d:0d:d1:23:72:15:f1:8d:95:c1:28:59:e9:bc:3c:e8:03: b0:28:9d:00:27:f1:a8:1f:6c:a3:f4:5e:d7:44:8c:a4:99:b4: fa:b2:7d:bd:e8:69:2d:83:1d:8a:e6:af:31:15:85:c6:10:01: ec:10:8f:8f:10:f6:ea:9b:4b:28:81:9a:ec:a6:e5:d3:de:e9: bc:ff:d6:74:ce:c6:f7:13:97:28:b4:ff:74:d9:54:26:64:29: 98:f3:a2:c1:01:b1:8f:d9:33:f4:52:1a:1d:ef:c6:6f:ac:ce: 50:5e:0a:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5hRKzXC3/VR5iKicAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI2MDcwMzIxMDAxMVoXDTI2MTAwMTIxMDAxMVowLzEtMCsGA1UEAxMk NWU5YTliNDgtZWY3NS00ZWM0LWFmOGEtYmNjN2RmZjE2MWU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7UX3FclHeO6ptdbHh2Ms72XAfZCNMw+tMH5 SyVCgRzq+eAtlk/d0M46xxCBGWI9f35q1dCOHfumCcbMWMxyGMYKU76iZg+ZKTkv Txl3PAg9jV7mnwMIvGP6h9shPrpzZUh/PQ1s5mQgM2AFL/vaqyoz6mJE1cgBbH5d arKiOQ5ikThONJ+cXuvJ+QpXITDqDplAlAIr9r6du9iNBbC01Z+OqEx/hSFte1g3 +A3BarV2costFQThg8BILYVdkUuy6/gPgGMC8zuz7vTEe1TDTBTIJ/YXeeQRuZL1 uQgY1r21g2eoq4UZZTGyn1K9iWht3OBzKst3WcWleUoZ5gp6qwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEmUa7hlG6FA6OBmpF8hknGZUWIpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvM2Y3YzJjYzEtZTJjNC0z NTQ2LWI2ZDMtY2JmYjQ0MjhlMThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxzuWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALjG+yyrNAUm6C6RnaRz/JIPO2jjjoN8jDkl4qwD0y961eGOJDSRSrQK VxXIjYQuSs95bNMyo0YPvOh7GZXRFTTRDDwHg/5Sg7r8iAngnLewN8qO6nWNdtXV pBb3pQAU6oSvjmAVBRUKXrs0dZQkvfte5YX73qWjrBfiWKmOk+/Bh9Ol16ENqIsE VSbFf21AI8ctDdEjchXxjZXBKFnpvDzoA7AonQAn8agfbKP0XtdEjKSZtPqyfb3o aS2DHYrmrzEVhcYQAewQj48Q9uqbSyiBmuym5dPe6bz/1nTOxvcTlyi0/3TZVCZk KZjzosEBsY/ZM/RSGh3vxm+szlBeClk= -----END CERTIFICATE-----Generated at Fri Jul 24 12:40:42 2026 by rpki-client