$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/8b67b3c5-a1c4-33af-9d77-42349b4c66db.roa File: 8b67b3c5-a1c4-33af-9d77-42349b4c66db.roa (raw, json) Hash identifier: HZ4+O/X02DwK5N8fH5xE/mdISE5hOnKandXymNDMZvg= Subject key identifier: 3C:40:BB:B4:A6:41:E0:89:C1:44:79:84:BD:F2:DB:13:78:FC:C1:C7 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584ECA6C71D758FD96EE012B33C0 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/8b67b3c5-a1c4-33af-9d77-42349b4c66db.roa Signing time: Mon 10 Aug 2026 13:00:12 +0000 ROA not before: Mon 10 Aug 2026 13:00:12 +0000 ROA not after: Sun 08 Nov 2026 14:00:12 +0000 asID: 3356 IP address blocks: 199.35.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 23 Aug 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ca:6c:71:d7:58:fd:96:ee:01:2b:33:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Aug 10 13:00:12 2026 GMT Not After : Nov 8 14:00:12 2026 GMT Subject: CN=d3f82019-ffb7-46a6-b1f9-0fdd56d69523 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:ab:b4:25:0b:3d:cf:94:8e:9d:15:48:47:8f: 53:8e:f5:d1:f9:43:33:63:a2:a2:c1:47:44:5c:c0: ff:c1:46:57:ba:48:6c:ec:f6:1c:42:b3:9d:19:bf: 75:54:a7:13:ab:31:4a:1d:9e:13:b4:d7:b7:c6:4e: ff:7b:06:c1:1f:fa:1c:91:8c:51:dc:5e:15:74:0a: 61:be:d5:e9:4f:7e:bd:ea:e7:bc:40:99:c6:a4:9a: 53:72:38:b7:8f:99:40:9c:fa:2c:bb:99:1a:78:1d: e4:17:77:00:9a:48:35:09:d0:21:1a:8c:73:32:4c: f4:e3:d7:a1:59:4a:61:a0:91:30:38:68:0b:eb:67: 13:62:96:00:23:23:9e:11:d1:94:62:54:d1:4f:86: d8:fb:80:59:58:ac:ad:ce:60:57:5e:bd:83:df:dc: 62:56:d0:39:71:91:21:56:0a:1e:23:0d:a7:e8:a3: de:dc:08:f8:ad:c6:3a:7b:ad:44:ca:bf:d3:54:a8: 9a:a0:bd:07:80:ac:48:39:ce:50:8f:93:bd:37:9e: b5:0f:3b:f3:21:bd:1a:71:71:51:a2:ac:ce:6e:a7: 1b:05:3b:fc:c7:75:7d:06:28:1a:97:f0:14:86:90: e8:35:fa:ba:0a:e7:f1:04:b2:62:6b:a5:b6:3e:70: 9c:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:40:BB:B4:A6:41:E0:89:C1:44:79:84:BD:F2:DB:13:78:FC:C1:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/8b67b3c5-a1c4-33af-9d77-42349b4c66db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 199.35.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:9b:5d:22:01:93:66:63:f4:38:47:ee:09:62:d8:8d:01:79: d6:25:d9:23:3a:41:8f:13:2e:05:4c:6e:55:f0:19:1a:b7:c9: 7f:29:40:4c:a4:a7:98:69:82:4c:31:ae:2b:7d:c4:b1:04:14: 1a:f4:11:aa:5b:85:92:cc:d4:2c:1a:9f:69:88:99:fa:92:22: 4a:65:51:64:d3:25:dd:c0:3a:02:d1:70:28:94:b2:90:ca:3f: d1:dc:fe:03:03:53:2a:ae:36:d4:17:c9:36:b2:0d:9f:48:06: 9c:95:ca:c3:a1:73:31:fb:07:1e:85:fe:2b:a1:88:14:4a:86: fd:3b:02:95:55:9e:ea:e4:b7:68:c6:ec:80:48:a9:1d:86:8e: 2d:bd:73:e2:9d:7f:92:23:11:dc:0b:7d:e8:cc:82:00:b6:64: 1c:cb:57:b8:88:39:9e:43:fb:b5:a2:a2:63:d3:ec:34:43:ba: ab:26:b4:09:fd:2a:a1:d5:33:b3:f2:27:23:85:b9:9c:d1:60: 87:4a:79:80:e8:02:20:a3:f7:1c:6b:d0:df:32:fb:15:99:fc: bb:6b:b8:e0:86:51:9d:55:49:75:6b:1d:c4:7e:fe:8e:f5:3c: fe:e6:bd:f2:70:f2:c7:96:67:fe:a2:c5:aa:5d:11:c2:94:64: 5e:c9:14:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7KbHHXWP2W7gErM8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MDgxMDEzMDAxMloXDTI2MTEwODE0MDAxMlowLzEtMCsGA1UEAxMk ZDNmODIwMTktZmZiNy00NmE2LWIxZjktMGZkZDU2ZDY5NTIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgKu0JQs9z5SOnRVIR49TjvXR+UMzY6KiwUdE XMD/wUZXukhs7PYcQrOdGb91VKcTqzFKHZ4TtNe3xk7/ewbBH/ockYxR3F4VdAph vtXpT3696ue8QJnGpJpTcji3j5lAnPosu5kaeB3kF3cAmkg1CdAhGoxzMkz049eh WUphoJEwOGgL62cTYpYAIyOeEdGUYlTRT4bY+4BZWKytzmBXXr2D39xiVtA5cZEh VgoeIw2n6KPe3Aj4rcY6e61Eyr/TVKiaoL0HgKxIOc5Qj5O9N561DzvzIb0acXFR oqzObqcbBTv8x3V9Bigal/AUhpDoNfq6CufxBLJia6W2PnCcIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDxAu7SmQeCJwUR5hL3y2xN4/MHHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvOGI2N2IzYzUtYTFjNC0z M2FmLTlkNzctNDIzNDliNGM2NmRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFxyNgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKObXSIBk2Zj9DhH7gli2I0BedYl2SM6QY8TLgVMblXwGRq3yX8pQEyk p5hpgkwxrit9xLEEFBr0EapbhZLM1Cwan2mImfqSIkplUWTTJd3AOgLRcCiUspDK P9Hc/gMDUyquNtQXyTayDZ9IBpyVysOhczH7Bx6F/iuhiBRKhv07ApVVnurkt2jG 7IBIqR2Gji29c+Kdf5IjEdwLfejMggC2ZBzLV7iIOZ5D+7WiomPT7DRDuqsmtAn9 KqHVM7PyJyOFuZzRYIdKeYDoAiCj9xxr0N8y+xWZ/LtruOCGUZ1VSXVrHcR+/o71 PP7mvfJw8seWZ/6ixapdEcKUZF7JFLk= -----END CERTIFICATE-----Generated at Fri Aug 21 03:33:38 2026 by rpki-client