$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/19f169ac-4d44-31d4-9e68-73ac833a5b93.roa File: 19f169ac-4d44-31d4-9e68-73ac833a5b93.roa (raw, json) Hash identifier: BljEkTiZ/MCMBV7r5JcA3pAGnRyfZQ4orRbfR6RfDHY= Subject key identifier: 4E:59:05:A6:45:57:45:68:97:7B:5C:EA:23:A3:EC:ED:94:E9:EC:47 Certificate issuer: /CN=61f3c7c4-a771-47a9-a4e8-0aae7df7b234 Certificate serial: 010D0C9F4328584D905AA3E82C3FD80F43D96F80 Authority key identifier: BB:88:4D:5F:DE:1F:DC:B6:62:A7:DE:13:88:FD:FC:A0:3F:0F:F8:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/19f169ac-4d44-31d4-9e68-73ac833a5b93.roa Signing time: Mon 20 Apr 2026 01:00:24 +0000 ROA not before: Mon 20 Apr 2026 01:00:24 +0000 ROA not after: Sun 19 Jul 2026 01:00:24 +0000 asID: 15296 IP address blocks: 199.216.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:90:5a:a3:e8:2c:3f:d8:0f:43:d9:6f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61f3c7c4-a771-47a9-a4e8-0aae7df7b234 Validity Not Before: Apr 20 01:00:24 2026 GMT Not After : Jul 19 01:00:24 2026 GMT Subject: CN=49bde419-a029-4a61-83ba-1e7cb377ed31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:89:c8:94:bb:c1:c1:91:3b:8c:be:0e:66:08: 41:f7:5f:2d:19:0f:be:f0:f1:08:61:68:7a:07:ec: a9:d8:d9:4b:fa:34:fd:ab:dc:54:22:13:4e:bc:ed: e9:bb:b0:0b:98:bc:c8:c0:d8:ed:26:41:98:a8:0e: d3:92:e2:69:f2:62:4c:31:6a:49:f3:82:2a:d1:c8: 05:54:0d:1d:8d:ac:36:f8:22:14:0f:e1:e9:f7:5c: 90:1e:4a:b9:25:5c:75:ee:4a:3f:44:6c:d8:88:b8: d2:8c:0a:5f:9f:71:32:5a:6c:4e:31:37:42:30:cc: b2:f6:70:dd:f6:13:c6:41:3f:c8:e0:f3:d3:62:6f: 33:de:ec:9f:55:7c:0b:fa:0d:1c:67:1c:4c:43:e5: 7d:f1:39:8f:e6:14:6b:49:ad:a5:f0:ef:ac:d6:cc: 07:58:3d:04:8e:bf:e7:7a:73:cf:8a:0d:40:2d:aa: fe:2c:4f:ba:97:0c:e0:77:cb:e3:48:94:e7:95:38: 62:a1:40:d5:bf:97:cb:11:4d:70:10:4d:72:dd:18: de:a0:d7:35:80:76:6b:62:7e:07:c5:c1:57:0c:9c: bd:70:bd:f7:bc:8a:3e:bb:13:05:6e:87:73:c0:66: 65:39:0a:ce:9b:3e:98:b6:15:af:43:db:85:6e:21: 8a:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:59:05:A6:45:57:45:68:97:7B:5C:EA:23:A3:EC:ED:94:E9:EC:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/19f169ac-4d44-31d4-9e68-73ac833a5b93.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.crl X509v3 Authority Key Identifier: keyid:BB:88:4D:5F:DE:1F:DC:B6:62:A7:DE:13:88:FD:FC:A0:3F:0F:F8:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer sbgp-ipAddrBlock: critical IPv4: 199.216.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:72:1e:df:b8:10:ac:b2:b8:ce:bc:66:7e:40:0f:84:96:98: cf:d5:dd:e4:be:05:ad:20:65:0c:2e:44:7f:76:b3:59:21:52: 97:10:a1:26:b2:6c:f2:38:fa:2c:a2:d2:2f:04:89:4b:8f:62: 91:b8:f8:af:08:3a:27:38:6c:dc:71:db:5c:35:b1:cc:ee:80: a6:58:14:9a:35:ec:17:89:23:8a:64:61:cf:fa:64:bc:ce:73: cc:ba:40:81:3b:df:92:a8:7f:de:37:a4:cf:96:51:70:fe:22: ab:d8:87:19:47:33:b0:4a:39:92:22:92:62:c8:ee:ec:a2:6f: 4b:27:66:e1:4e:f9:c3:b9:db:ed:8a:59:60:39:72:7b:ef:b8: 34:6b:ee:fc:2f:a3:70:aa:29:69:7c:4d:4d:71:46:41:95:5f: c6:13:a0:2d:6f:37:b6:14:59:be:7a:33:6f:1a:2d:00:d3:10: 5f:03:6c:eb:64:1d:bb:4f:02:28:89:bd:85:c9:5b:ee:de:13: 6d:06:7e:47:3b:32:d4:f1:82:f7:53:3c:ce:8c:c3:1c:f6:4c: e0:48:86:a2:e3:f0:b3:c8:df:3d:3e:41:91:4d:cd:1c:75:41: c0:ce:a1:01:08:33:4e:a4:db:24:72:71:05:58:bb:8f:52:dd: c3:ed:58:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2QWqPoLD/YD0PZb4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjFmM2M3YzQtYTc3MS00N2E5LWE0ZTgtMGFhZTdkZjdi MjM0MB4XDTI2MDQyMDAxMDAyNFoXDTI2MDcxOTAxMDAyNFowLzEtMCsGA1UEAxMk NDliZGU0MTktYTAyOS00YTYxLTgzYmEtMWU3Y2IzNzdlZDMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3YnIlLvBwZE7jL4OZghB918tGQ++8PEIYWh6 B+yp2NlL+jT9q9xUIhNOvO3pu7ALmLzIwNjtJkGYqA7TkuJp8mJMMWpJ84Iq0cgF VA0djaw2+CIUD+Hp91yQHkq5JVx17ko/RGzYiLjSjApfn3EyWmxOMTdCMMyy9nDd 9hPGQT/I4PPTYm8z3uyfVXwL+g0cZxxMQ+V98TmP5hRrSa2l8O+s1swHWD0Ejr/n enPPig1ALar+LE+6lwzgd8vjSJTnlThioUDVv5fLEU1wEE1y3RjeoNc1gHZrYn4H xcFXDJy9cL33vIo+uxMFbodzwGZlOQrOmz6YthWvQ9uFbiGKWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE5ZBaZFV0Vol3tc6iOj7O2U6exHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82MWYz YzdjNC1hNzcxLTQ3YTktYTRlOC0wYWFlN2RmN2IyMzQvMTlmMTY5YWMtNGQ0NC0z MWQ0LTllNjgtNzNhYzgzM2E1YjkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNjFmM2M3YzQtYTc3MS00N2E5LWE0 ZTgtMGFhZTdkZjdiMjM0LzYxZjNjN2M0LWE3NzEtNDdhOS1hNGU4LTBhYWU3ZGY3 YjIzNC5jcmwwHwYDVR0jBBgwFoAUu4hNX94f3LZip94TiP38oD8P+I4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82MWYzYzdjNC1hNzcxLTQ3YTktYTRlOC0wYWFl N2RmN2IyMzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx9gjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFRyHt+4EKyyuM68Zn5AD4SWmM/V3eS+Ba0gZQwuRH92s1khUpcQoSay bPI4+iyi0i8EiUuPYpG4+K8IOic4bNxx21w1sczugKZYFJo17BeJI4pkYc/6ZLzO c8y6QIE735Kof943pM+WUXD+IqvYhxlHM7BKOZIikmLI7uyib0snZuFO+cO52+2K WWA5cnvvuDRr7vwvo3CqKWl8TU1xRkGVX8YToC1vN7YUWb56M28aLQDTEF8DbOtk HbtPAiiJvYXJW+7eE20Gfkc7MtTxgvdTPM6Mwxz2TOBIhqLj8LPI3z0+QZFNzRx1 QcDOoQEIM06k2yRycQVYu49S3cPtWBc= -----END CERTIFICATE-----Generated at Wed May 13 11:16:24 2026 by rpki-client