$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792/5388bc64-7e00-3aef-b50b-4426eee59515.roa File: 5388bc64-7e00-3aef-b50b-4426eee59515.roa (raw, json) Hash identifier: XxDqxT6sAo/z9XWKnoefxzU0GO+OmMJCcoWtRmetGPo= Subject key identifier: 09:5E:26:96:12:EB:4A:8D:E3:9B:9D:14:D2:5C:3E:CD:1B:E5:C7:87 Certificate issuer: /CN=e35c7007-7a33-480f-a32e-40481f8f1792 Certificate serial: 010D0C9F4328584E640F62CACD01371211DFA680 Authority key identifier: 69:C5:93:B3:CB:4A:4F:6B:F2:C7:1E:19:B2:7A:66:85:BA:C2:EA:EC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792/5388bc64-7e00-3aef-b50b-4426eee59515.roa Signing time: Sat 04 Jul 2026 21:00:12 +0000 ROA not before: Sat 04 Jul 2026 21:00:12 +0000 ROA not after: Fri 02 Oct 2026 21:00:12 +0000 asID: 53636 IP address blocks: 199.59.144.0/24 maxlen: 24 199.59.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792/e35c7007-7a33-480f-a32e-40481f8f1792.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792/e35c7007-7a33-480f-a32e-40481f8f1792.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:64:0f:62:ca:cd:01:37:12:11:df:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e35c7007-7a33-480f-a32e-40481f8f1792 Validity Not Before: Jul 4 21:00:12 2026 GMT Not After : Oct 2 21:00:12 2026 GMT Subject: CN=5c3d8414-de26-43e3-8ff8-ebbaa74c6beb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a8:9c:8b:a5:2f:84:c4:a8:ab:5f:40:df:d7: b3:06:15:35:92:3e:51:72:84:51:24:43:c6:60:39: af:a0:23:e2:24:a8:27:39:4c:67:5d:aa:6d:e8:a4: 76:19:9b:e8:00:ab:0e:03:65:26:ae:39:b7:79:ed: 30:da:7b:4b:e3:ca:e5:e1:b1:f6:01:a3:e9:ce:78: a1:4d:d1:1a:65:c7:5a:33:f8:60:26:58:ce:e2:a2: 68:c4:c2:f7:8f:0a:48:2f:75:e6:5e:41:c5:9c:41: 81:40:70:30:45:3f:dc:73:87:25:b3:52:3f:79:f7: ee:23:c0:6f:02:ea:a9:02:c0:e1:8a:7c:b8:61:97: 6a:49:12:42:37:24:bc:a3:73:a5:f2:cc:e0:91:fb: b8:44:e6:e4:8f:56:53:b9:04:90:6f:f1:3e:79:b6: a3:ce:2b:b4:64:84:96:56:61:c2:e3:aa:6a:dc:44: 7f:7e:fe:9c:5c:5a:71:c1:4f:cb:20:b9:5f:bd:e4: ed:5a:5d:01:20:55:c5:4a:af:e5:09:38:18:ff:69: 87:5d:2d:c6:0d:34:b9:46:98:72:10:b1:ec:74:48: fd:76:13:75:e7:08:4f:fd:72:21:bb:ee:f9:49:0a: 1e:98:65:15:6c:e8:e1:f4:11:1c:4b:60:7b:ee:b5: a0:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:5E:26:96:12:EB:4A:8D:E3:9B:9D:14:D2:5C:3E:CD:1B:E5:C7:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792/5388bc64-7e00-3aef-b50b-4426eee59515.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792/e35c7007-7a33-480f-a32e-40481f8f1792.crl X509v3 Authority Key Identifier: keyid:69:C5:93:B3:CB:4A:4F:6B:F2:C7:1E:19:B2:7A:66:85:BA:C2:EA:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792.cer sbgp-ipAddrBlock: critical IPv4: 199.59.144.0/24 199.59.146.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:ab:af:45:c3:c7:6a:28:cc:6d:f5:a0:ec:1e:e0:c9:a5:4f: e1:ce:1b:ee:45:7f:c7:e0:f9:50:98:07:4e:8c:8b:78:f1:d8: 14:d3:1b:2a:c4:30:8d:6c:07:f1:27:5e:2a:68:59:73:36:9b: 23:b2:37:36:0b:dd:aa:8b:52:a9:c9:a4:ed:13:71:d2:44:23: 5a:72:e9:8c:61:d9:74:a0:4e:4f:06:06:cc:2c:3f:83:b0:92: a8:14:08:9f:5b:70:86:9e:3a:d2:c7:da:f3:e2:4a:10:7a:8a: c8:22:6a:bd:ce:ac:09:50:0a:75:cf:ca:f4:96:3e:6f:7f:de: e1:8b:04:e9:86:de:05:5c:d5:01:76:64:a9:f3:5b:c8:31:5e: 5f:1b:29:22:aa:d5:0b:57:3b:ad:20:5a:c2:fd:72:41:8a:6e: 94:d0:18:c7:bc:0c:5f:c1:50:ff:5b:a3:82:79:ec:16:89:5f: d1:94:63:9c:1d:13:d0:0f:60:a1:db:f0:e5:72:a6:9f:74:9b: 10:0c:64:c8:ed:28:15:bf:d4:6c:59:65:60:94:76:7d:a8:a2: 72:65:32:64:ab:9f:8c:28:42:9f:19:26:5f:08:21:e7:bd:d4: 6c:7f:69:24:a7:d4:3f:13:d2:62:52:97:4d:13:f0:e3:a2:3f: a4:d9:7e:85 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE5kD2LKzQE3EhHfpoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTM1YzcwMDctN2EzMy00ODBmLWEzMmUtNDA0ODFmOGYx NzkyMB4XDTI2MDcwNDIxMDAxMloXDTI2MTAwMjIxMDAxMlowLzEtMCsGA1UEAxMk NWMzZDg0MTQtZGUyNi00M2UzLThmZjgtZWJiYWE3NGM2YmViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6ici6UvhMSoq19A39ezBhU1kj5RcoRRJEPG YDmvoCPiJKgnOUxnXapt6KR2GZvoAKsOA2Umrjm3ee0w2ntL48rl4bH2AaPpznih TdEaZcdaM/hgJljO4qJoxML3jwpIL3XmXkHFnEGBQHAwRT/cc4cls1I/effuI8Bv AuqpAsDhiny4YZdqSRJCNyS8o3Ol8szgkfu4RObkj1ZTuQSQb/E+ebajziu0ZISW VmHC46pq3ER/fv6cXFpxwU/LILlfveTtWl0BIFXFSq/lCTgY/2mHXS3GDTS5Rphy ELHsdEj9dhN15whP/XIhu+75SQoemGUVbOjh9BEcS2B77rWg3QIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFAleJpYS60qN45udFNJcPs0b5ceHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lMzVj NzAwNy03YTMzLTQ4MGYtYTMyZS00MDQ4MWY4ZjE3OTIvNTM4OGJjNjQtN2UwMC0z YWVmLWI1MGItNDQyNmVlZTU5NTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTM1YzcwMDctN2EzMy00ODBmLWEz MmUtNDA0ODFmOGYxNzkyL2UzNWM3MDA3LTdhMzMtNDgwZi1hMzJlLTQwNDgxZjhm MTc5Mi5jcmwwHwYDVR0jBBgwFoAUacWTs8tKT2vyxx4ZsnpmhbrC6uwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lMzVjNzAwNy03YTMzLTQ4MGYtYTMyZS00MDQ4 MWY4ZjE3OTIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAxzuQAwQA xzuSMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAJyrr0XDx2oozG31oOwe4MmlT+HOG+5Ff8fg+VCYB06Mi3jx 2BTTGyrEMI1sB/EnXipoWXM2myOyNzYL3aqLUqnJpO0TcdJEI1py6Yxh2XSgTk8G BswsP4OwkqgUCJ9bcIaeOtLH2vPiShB6isgiar3OrAlQCnXPyvSWPm9/3uGLBOmG 3gVc1QF2ZKnzW8gxXl8bKSKq1QtXO60gWsL9ckGKbpTQGMe8DF/BUP9bo4J57BaJ X9GUY5wdE9APYKHb8OVypp90mxAMZMjtKBW/1GxZZWCUdn2oonJlMmSrn4woQp8Z Jl8IIee91Gx/aSSn1D8T0mJSl00T8OOiP6TZfoU= -----END CERTIFICATE-----Generated at Fri Jul 24 09:41:46 2026 by rpki-client