$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8b5a35ee-86db-4e85-8064-926e18942592/5c470cfc-de1d-3669-a2b7-446cad267bdd.roa File: 5c470cfc-de1d-3669-a2b7-446cad267bdd.roa (raw, json) Hash identifier: W+PMacbuJoavCYcyOrlfqfeUgszcZh6LP+DPkCjW3qg= Subject key identifier: ED:56:21:72:1C:C6:4B:1E:0C:49:96:D6:C7:78:70:90:24:09:9B:E3 Certificate issuer: /CN=8b5a35ee-86db-4e85-8064-926e18942592 Certificate serial: 010D0C9F4328584EC371B01FA05C6418B608D480 Authority key identifier: 83:47:FD:3C:F0:2A:F2:17:B5:1C:90:25:91:8F:52:83:63:9C:85:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8b5a35ee-86db-4e85-8064-926e18942592.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8b5a35ee-86db-4e85-8064-926e18942592/5c470cfc-de1d-3669-a2b7-446cad267bdd.roa Signing time: Sat 08 Aug 2026 01:00:11 +0000 ROA not before: Sat 08 Aug 2026 01:00:11 +0000 ROA not after: Fri 06 Nov 2026 02:00:11 +0000 asID: 22664 IP address blocks: 199.104.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8b5a35ee-86db-4e85-8064-926e18942592/8b5a35ee-86db-4e85-8064-926e18942592.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8b5a35ee-86db-4e85-8064-926e18942592/8b5a35ee-86db-4e85-8064-926e18942592.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8b5a35ee-86db-4e85-8064-926e18942592.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c3:71:b0:1f:a0:5c:64:18:b6:08:d4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b5a35ee-86db-4e85-8064-926e18942592 Validity Not Before: Aug 8 01:00:11 2026 GMT Not After : Nov 6 02:00:11 2026 GMT Subject: CN=28b840a1-3057-4c7b-a51c-a75ebfc9c588 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:39:09:95:75:b3:db:5a:c8:c2:02:83:17:85: f7:93:1d:4d:18:a5:4e:ea:7a:d3:ab:01:36:dd:a0: df:59:7c:95:d0:9d:95:d3:4d:8f:18:6e:25:62:e7: 59:81:51:59:f7:6d:33:71:ea:c6:0c:d3:3c:23:69: 2d:46:26:17:88:18:94:81:b3:f9:9d:5f:96:39:77: b1:7a:a2:c2:e4:1a:b2:65:1d:3a:60:36:4d:b9:f8: 01:82:57:5b:59:15:c2:95:bf:28:1b:31:23:02:53: 67:3c:6a:fd:0b:ac:69:06:20:93:68:92:95:37:fe: 51:fe:ca:4a:b5:15:93:91:89:f3:2f:8c:78:f4:bc: 5c:23:e8:69:51:be:0a:cd:a4:6f:2e:bb:6e:22:cd: 60:25:9f:aa:21:5c:f2:36:02:18:05:c5:9a:3f:6c: 14:79:f3:5e:dc:d8:a7:b6:e0:02:99:28:3f:f3:02: 81:a7:80:31:78:52:4f:3f:5c:ab:5f:b8:e2:88:07: e1:c2:f0:ec:c6:f2:cb:ec:57:3f:36:5c:04:ec:9a: c7:0b:bd:38:c1:d8:f6:47:e5:e1:b1:03:21:3e:14: 0b:54:cc:f1:2e:40:e0:fc:9d:95:f7:1a:e1:bc:0c: bd:00:7a:de:25:a6:62:a8:3a:b2:f5:46:2d:c5:f2: f6:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:56:21:72:1C:C6:4B:1E:0C:49:96:D6:C7:78:70:90:24:09:9B:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8b5a35ee-86db-4e85-8064-926e18942592/5c470cfc-de1d-3669-a2b7-446cad267bdd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8b5a35ee-86db-4e85-8064-926e18942592/8b5a35ee-86db-4e85-8064-926e18942592.crl X509v3 Authority Key Identifier: keyid:83:47:FD:3C:F0:2A:F2:17:B5:1C:90:25:91:8F:52:83:63:9C:85:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8b5a35ee-86db-4e85-8064-926e18942592.cer sbgp-ipAddrBlock: critical IPv4: 199.104.22.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:75:c2:f6:e4:c2:8d:94:40:e3:5f:bf:51:28:f2:2f:f1:b9: 96:cc:da:e2:f1:f8:8c:47:c6:4d:87:ac:2d:60:b1:e5:70:1d: 89:dd:33:2e:13:7a:e5:db:3c:ec:9d:9d:31:b0:03:a6:9f:8f: bc:ec:34:10:79:56:f7:82:05:9b:a7:1c:22:7f:3f:22:db:59: 93:e9:ea:db:4b:a2:01:17:4a:2d:b2:41:3a:bc:07:6e:92:d8: 67:23:cb:08:04:4f:3e:56:5a:d4:69:95:46:c6:a5:a2:c7:f3: b2:52:96:c5:96:50:dd:05:be:90:1e:c2:24:9a:59:9d:17:68: f8:27:10:03:33:70:dc:fe:2f:29:8d:71:c3:33:09:8d:2e:ce: e8:c7:56:72:be:78:bf:f2:94:71:23:23:87:b5:89:80:d7:60: 3e:8e:63:38:8b:fa:80:30:1e:aa:a2:a7:d9:47:db:83:68:c6: c2:3f:b4:82:3d:fe:a3:7c:d5:9e:bd:18:35:77:24:f2:76:9b: 5b:24:37:79:87:92:25:55:1c:3e:11:e2:49:f2:18:ed:91:00: 20:d0:42:8d:97:05:ea:52:c5:28:dd:80:67:96:0c:19:3f:43: 97:9f:69:47:19:03:7c:4a:25:ca:c6:c6:6f:9a:f5:47:60:f1: bb:8e:3a:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7DcbAfoFxkGLYI1IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGI1YTM1ZWUtODZkYi00ZTg1LTgwNjQtOTI2ZTE4OTQy NTkyMB4XDTI2MDgwODAxMDAxMVoXDTI2MTEwNjAyMDAxMVowLzEtMCsGA1UEAxMk MjhiODQwYTEtMzA1Ny00YzdiLWE1MWMtYTc1ZWJmYzljNTg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTkJlXWz21rIwgKDF4X3kx1NGKVO6nrTqwE2 3aDfWXyV0J2V002PGG4lYudZgVFZ920zcerGDNM8I2ktRiYXiBiUgbP5nV+WOXex eqLC5BqyZR06YDZNufgBgldbWRXClb8oGzEjAlNnPGr9C6xpBiCTaJKVN/5R/spK tRWTkYnzL4x49LxcI+hpUb4KzaRvLrtuIs1gJZ+qIVzyNgIYBcWaP2wUefNe3Nin tuACmSg/8wKBp4AxeFJPP1yrX7jiiAfhwvDsxvLL7Fc/NlwE7JrHC704wdj2R+Xh sQMhPhQLVMzxLkDg/J2V9xrhvAy9AHreJaZiqDqy9UYtxfL2yQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO1WIXIcxkseDEmW1sd4cJAkCZvjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi84YjVh MzVlZS04NmRiLTRlODUtODA2NC05MjZlMTg5NDI1OTIvNWM0NzBjZmMtZGUxZC0z NjY5LWEyYjctNDQ2Y2FkMjY3YmRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvOGI1YTM1ZWUtODZkYi00ZTg1LTgw NjQtOTI2ZTE4OTQyNTkyLzhiNWEzNWVlLTg2ZGItNGU4NS04MDY0LTkyNmUxODk0 MjU5Mi5jcmwwHwYDVR0jBBgwFoAUg0f9PPAq8he1HJAlkY9Sg2OchZQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi84YjVhMzVlZS04NmRiLTRlODUtODA2NC05MjZl MTg5NDI1OTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx2gWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFh1wvbkwo2UQONfv1Eo8i/xuZbM2uLx+IxHxk2HrC1gseVwHYndMy4T euXbPOydnTGwA6afj7zsNBB5VveCBZunHCJ/PyLbWZPp6ttLogEXSi2yQTq8B26S 2GcjywgETz5WWtRplUbGpaLH87JSlsWWUN0FvpAewiSaWZ0XaPgnEAMzcNz+LymN ccMzCY0uzujHVnK+eL/ylHEjI4e1iYDXYD6OYziL+oAwHqqip9lH24NoxsI/tII9 /qN81Z69GDV3JPJ2m1skN3mHkiVVHD4R4knyGO2RACDQQo2XBepSxSjdgGeWDBk/ Q5efaUcZA3xKJcrGxm+a9Udg8buOOlw= -----END CERTIFICATE-----Generated at Sat Sep 5 00:45:04 2026 by rpki-client