$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/c038d6f1-52c4-353f-bf06-0895e4955e50.roa File: c038d6f1-52c4-353f-bf06-0895e4955e50.roa (raw, json) Hash identifier: 16rVEoBvLMvjAZTfCbiZp6uStsREyLF27Bx2OlAlRxc= Subject key identifier: 92:D1:54:DF:85:B6:BB:BD:24:7C:D9:55:48:32:C1:30:40:B3:E5:A2 Certificate issuer: /CN=35be4068-f7e5-404b-9693-dcff4b2e8f95 Certificate serial: 010D0C9F4328584ED861E77FEA3FB2AE0E9FACA0 Authority key identifier: C7:9B:4D:25:4A:8B:FB:52:4F:3B:6E:96:D2:D8:02:62:D1:A9:07:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/c038d6f1-52c4-353f-bf06-0895e4955e50.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 64236 IP address blocks: 199.193.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/35be4068-f7e5-404b-9693-dcff4b2e8f95.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/35be4068-f7e5-404b-9693-dcff4b2e8f95.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:61:e7:7f:ea:3f:b2:ae:0e:9f:ac:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35be4068-f7e5-404b-9693-dcff4b2e8f95 Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=ed912e90-ad03-4f34-991d-e5827e643d8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:78:8f:6f:10:dc:4e:59:2b:d0:8b:e0:95:42: c7:73:66:7c:6a:4e:6c:6b:1f:b4:29:2d:5f:f9:75: 65:cf:6b:da:8a:81:8d:13:12:30:9f:36:bf:9c:d7: 99:32:52:49:8b:e5:bb:d6:6d:b5:91:a0:ad:1c:8c: 66:c9:a7:32:80:1a:25:ec:52:ae:c1:d5:80:5e:86: 47:be:28:46:b2:25:57:74:ba:98:c8:7f:84:07:db: fb:13:9f:bc:32:da:14:16:c0:80:e1:b8:8b:98:a7: 17:cb:e2:4f:0d:de:79:a3:31:cd:4e:9b:73:e1:7f: b2:b3:cf:01:45:20:af:be:c4:c1:57:33:36:9c:60: e6:1d:f1:6a:87:48:ab:2b:36:ac:b0:1d:57:ad:d7: a1:ea:98:6a:c8:8c:ca:97:29:17:44:36:af:83:f8: 83:f4:f8:75:16:48:6f:57:cf:3f:dc:17:ab:ae:2d: ee:28:99:61:84:8a:eb:47:93:20:3c:53:bd:e3:78: 20:55:ca:f9:ee:ba:ee:af:e4:f4:ab:13:20:2f:25: 1b:b4:5d:39:3a:83:0f:a2:59:7c:23:09:5e:39:66: b7:1c:fd:80:51:71:9e:3a:a2:bd:e6:12:fb:a1:42: 2f:e8:9d:9e:aa:5a:22:93:31:60:1d:a1:f3:3e:f0: bf:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:D1:54:DF:85:B6:BB:BD:24:7C:D9:55:48:32:C1:30:40:B3:E5:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/c038d6f1-52c4-353f-bf06-0895e4955e50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/35be4068-f7e5-404b-9693-dcff4b2e8f95.crl X509v3 Authority Key Identifier: keyid:C7:9B:4D:25:4A:8B:FB:52:4F:3B:6E:96:D2:D8:02:62:D1:A9:07:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95.cer sbgp-ipAddrBlock: critical IPv4: 199.193.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:eb:e4:80:15:c2:1f:8d:19:b1:b9:af:d8:04:ab:45:71:d5: cf:c7:81:d3:26:bc:82:17:9a:73:36:44:4f:b0:22:26:4b:27: da:09:e3:b3:45:28:fc:9d:03:45:83:a3:51:88:bb:3a:36:e2: 48:60:6d:ed:5c:80:5f:c7:bb:9e:37:db:8b:2c:f7:95:69:13: 94:bc:13:ed:f9:20:0b:b9:80:59:d5:71:3a:37:a3:43:52:4f: f1:87:40:28:00:ad:30:5d:00:b0:c2:90:d5:07:96:84:cc:e8: bc:b6:0a:27:af:b2:31:7c:8a:21:1f:f1:15:50:da:00:e0:63: 1d:60:b7:a3:11:25:01:47:a7:d7:79:45:4b:4e:88:d8:9d:e3: 69:95:e3:2d:a3:0d:35:38:9d:5b:b1:6d:29:36:09:0d:99:71: 20:b0:96:d7:4b:7f:c1:80:10:05:19:e5:bf:95:fc:1e:2c:bf: 4e:70:fe:c8:1f:17:f5:93:fb:2b:24:05:ea:39:a2:42:37:b1: 6c:e2:8d:73:26:13:f2:fa:a8:21:85:d2:6a:bb:69:e4:66:68: 3f:39:9b:23:03:bc:e6:e9:09:7e:9e:fd:bc:68:48:4f:45:00: 46:9d:c3:e0:2d:be:f7:92:fb:bd:51:46:e1:9f:bd:ef:5b:98: de:25:77:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YYed/6j+yrg6frKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZTQwNjgtZjdlNS00MDRiLTk2OTMtZGNmZjRiMmU4 Zjk1MB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk ZWQ5MTJlOTAtYWQwMy00ZjM0LTk5MWQtZTU4MjdlNjQzZDhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjniPbxDcTlkr0IvglULHc2Z8ak5sax+0KS1f +XVlz2vaioGNExIwnza/nNeZMlJJi+W71m21kaCtHIxmyacygBol7FKuwdWAXoZH vihGsiVXdLqYyH+EB9v7E5+8MtoUFsCA4biLmKcXy+JPDd55ozHNTptz4X+ys88B RSCvvsTBVzM2nGDmHfFqh0irKzassB1Xrdeh6phqyIzKlykXRDavg/iD9Ph1Fkhv V88/3Berri3uKJlhhIrrR5MgPFO943ggVcr57rrur+T0qxMgLyUbtF05OoMPoll8 IwleOWa3HP2AUXGeOqK95hL7oUIv6J2eqloikzFgHaHzPvC/pwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJLRVN+Ftru9JHzZVUgywTBAs+WiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zNWJl NDA2OC1mN2U1LTQwNGItOTY5My1kY2ZmNGIyZThmOTUvYzAzOGQ2ZjEtNTJjNC0z NTNmLWJmMDYtMDg5NWU0OTU1ZTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzViZTQwNjgtZjdlNS00MDRiLTk2 OTMtZGNmZjRiMmU4Zjk1LzM1YmU0MDY4LWY3ZTUtNDA0Yi05NjkzLWRjZmY0YjJl OGY5NS5jcmwwHwYDVR0jBBgwFoAUx5tNJUqL+1JPO26W0tgCYtGpB88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zNWJlNDA2OC1mN2U1LTQwNGItOTY5My1kY2Zm NGIyZThmOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx8GYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEfr5IAVwh+NGbG5r9gEq0Vx1c/HgdMmvIIXmnM2RE+wIiZLJ9oJ47NF KPydA0WDo1GIuzo24khgbe1cgF/Hu54324ss95VpE5S8E+35IAu5gFnVcTo3o0NS T/GHQCgArTBdALDCkNUHloTM6Ly2CievsjF8iiEf8RVQ2gDgYx1gt6MRJQFHp9d5 RUtOiNid42mV4y2jDTU4nVuxbSk2CQ2ZcSCwltdLf8GAEAUZ5b+V/B4sv05w/sgf F/WT+yskBeo5okI3sWzijXMmE/L6qCGF0mq7aeRmaD85myMDvObpCX6e/bxoSE9F AEadw+AtvveS+71RRuGfve9bmN4ld8w= -----END CERTIFICATE-----Generated at Sat Oct 3 11:14:51 2026 by rpki-client