$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/35db1a21-9d13-36a4-92ff-c93c50255a11.roa File: 35db1a21-9d13-36a4-92ff-c93c50255a11.roa (raw, json) Hash identifier: jUCWx1wbqNNgsp7irQt8G0u6xL0J7cRv59vAsF1fC0I= Subject key identifier: 88:92:F8:7D:AA:E1:D6:55:54:E8:09:D3:F6:A3:17:93:64:94:64:DA Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584EE38C9FD1620BA3231F147500 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/35db1a21-9d13-36a4-92ff-c93c50255a11.roa Signing time: Wed 19 Aug 2026 13:00:11 +0000 ROA not before: Wed 19 Aug 2026 13:00:11 +0000 ROA not after: Tue 17 Nov 2026 14:00:11 +0000 asID: 30036 IP address blocks: 198.40.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e3:8c:9f:d1:62:0b:a3:23:1f:14:75:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Aug 19 13:00:11 2026 GMT Not After : Nov 17 14:00:11 2026 GMT Subject: CN=fdd8b835-a8c8-42d5-b9d6-595a10f0f219 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:e0:76:f1:de:25:cf:0a:2c:17:ef:93:eb:21: 4f:2b:97:dd:89:b4:6c:da:5e:23:c4:76:b9:df:1d: 89:20:3b:9c:a2:94:80:5b:0f:4b:97:d7:23:d2:75: 9b:a9:cc:34:9a:e2:59:d3:ba:9e:d0:21:c7:fe:a9: 84:34:68:65:71:65:86:2d:f7:03:1b:3c:4e:f8:2e: ae:b7:58:ec:06:59:d0:01:11:16:7e:2c:74:11:dd: f2:10:b9:cd:29:8e:dd:b7:e4:0b:11:49:c5:52:40: c4:c7:6b:b5:56:08:c4:5a:29:da:06:88:ae:72:c3: 28:3a:d7:1d:1a:43:f7:e1:d7:79:ac:6d:2a:65:f9: 5f:52:4d:af:c3:16:cf:42:b9:d0:e4:33:86:9c:6e: d4:f0:cf:9a:f7:e0:2e:52:76:10:e2:bf:c3:9b:2f: 97:54:b2:70:e3:2d:51:86:5e:33:30:79:13:23:ab: 0c:8d:9c:95:60:9a:3f:98:70:69:59:51:bf:40:4e: 51:f2:b1:3b:25:b3:a0:f3:8b:e7:25:5b:50:88:b0: 53:34:cb:1f:01:24:cc:2f:5f:8e:0c:63:37:8d:6a: fb:d6:28:49:3f:2a:70:6f:eb:d2:81:4a:fa:e8:27: 71:5a:1a:ce:20:45:1a:b9:59:bf:46:19:2b:9d:71: 82:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:92:F8:7D:AA:E1:D6:55:54:E8:09:D3:F6:A3:17:93:64:94:64:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/35db1a21-9d13-36a4-92ff-c93c50255a11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 198.40.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:87:c2:e0:0b:92:43:43:90:01:16:bc:bc:0e:c8:a6:33:0f: ac:ee:8c:c5:50:5b:26:a0:dd:dc:9d:b2:03:38:c8:c8:ad:fd: 2b:5d:c5:df:f4:b3:3d:0f:04:56:af:71:87:a5:be:65:2a:a9: 83:9d:66:87:6b:4e:21:a3:c3:ae:75:bf:89:0b:7a:4c:6a:74: 39:a2:5f:fd:73:53:11:9f:0d:e9:b7:7e:10:50:08:fa:e1:2a: ac:65:2f:f2:48:56:3f:37:1a:32:fd:93:27:12:53:c8:dd:ee: a0:1f:2e:64:d4:82:ee:09:50:3f:7f:09:17:dc:49:ff:c1:df: 85:3d:80:b4:50:06:64:9e:bf:c1:c2:e9:36:94:15:ff:2a:44: 3b:26:30:c8:8b:0d:21:ae:dc:ba:eb:b2:7d:f5:7a:80:f3:6d: c3:95:36:e4:67:67:23:f7:ae:bb:6a:df:aa:61:37:9a:63:05: 40:77:51:6e:91:58:6b:8e:4b:bc:07:6c:0b:4c:3a:de:6e:7c: a3:4d:88:65:4a:54:12:85:93:0a:40:84:72:0b:48:f1:3d:85: 34:ed:3d:16:30:75:38:00:b0:f4:23:ee:10:c9:6c:27:cc:fc: f1:bc:8a:80:a7:87:18:38:73:1d:c1:4a:65:c2:bc:7a:0e:8d: 36:82:ce:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7jjJ/RYgujIx8UdQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDgxOTEzMDAxMVoXDTI2MTExNzE0MDAxMVowLzEtMCsGA1UEAxMk ZmRkOGI4MzUtYThjOC00MmQ1LWI5ZDYtNTk1YTEwZjBmMjE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2eB28d4lzwosF++T6yFPK5fdibRs2l4jxHa5 3x2JIDucopSAWw9Ll9cj0nWbqcw0muJZ07qe0CHH/qmENGhlcWWGLfcDGzxO+C6u t1jsBlnQAREWfix0Ed3yELnNKY7dt+QLEUnFUkDEx2u1VgjEWinaBoiucsMoOtcd GkP34dd5rG0qZflfUk2vwxbPQrnQ5DOGnG7U8M+a9+AuUnYQ4r/Dmy+XVLJw4y1R hl4zMHkTI6sMjZyVYJo/mHBpWVG/QE5R8rE7JbOg84vnJVtQiLBTNMsfASTML1+O DGM3jWr71ihJPypwb+vSgUr66CdxWhrOIEUauVm/RhkrnXGCpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIiS+H2q4dZVVOgJ0/ajF5NklGTaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMzVkYjFhMjEtOWQxMy0z NmE0LTkyZmYtYzkzYzUwMjU1YTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxij6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ+HwuALkkNDkAEWvLwOyKYzD6zujMVQWyag3dydsgM4yMit/Stdxd/0 sz0PBFavcYelvmUqqYOdZodrTiGjw651v4kLekxqdDmiX/1zUxGfDem3fhBQCPrh KqxlL/JIVj83GjL9kycSU8jd7qAfLmTUgu4JUD9/CRfcSf/B34U9gLRQBmSev8HC 6TaUFf8qRDsmMMiLDSGu3Lrrsn31eoDzbcOVNuRnZyP3rrtq36phN5pjBUB3UW6R WGuOS7wHbAtMOt5ufKNNiGVKVBKFkwpAhHILSPE9hTTtPRYwdTgAsPQj7hDJbCfM /PG8ioCnhxg4cx3BSmXCvHoOjTaCzqk= -----END CERTIFICATE-----Generated at Fri Aug 21 01:47:37 2026 by rpki-client