$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1/38ab099a-c486-3d85-b2d6-12eaea43131b.roa File: 38ab099a-c486-3d85-b2d6-12eaea43131b.roa (raw, json) Hash identifier: FQjbFRtZaCqob6tHPTvwlYn54fM9gNBqYl4C2HLK1aI= Subject key identifier: 14:D4:DA:76:1D:62:B5:4B:72:6A:5F:A1:FD:10:E5:9E:22:1E:93:1C Certificate issuer: /CN=f6a15183-2c23-4d0a-9aaa-fee47f7a61f1 Certificate serial: 010D0C9F4328584F0ED22CA84D188376D9D59780 Authority key identifier: 5E:7D:66:AB:68:3C:74:74:46:85:34:BA:FB:50:A4:2F:7D:CF:A9:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1/38ab099a-c486-3d85-b2d6-12eaea43131b.roa Signing time: Fri 04 Sep 2026 01:00:12 +0000 ROA not before: Fri 04 Sep 2026 01:00:12 +0000 ROA not after: Thu 03 Dec 2026 02:00:12 +0000 asID: 397285 IP address blocks: 199.58.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0e:d2:2c:a8:4d:18:83:76:d9:d5:97:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6a15183-2c23-4d0a-9aaa-fee47f7a61f1 Validity Not Before: Sep 4 01:00:12 2026 GMT Not After : Dec 3 02:00:12 2026 GMT Subject: CN=074c83ae-75dc-4bf8-8433-b143632e4595 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a9:dd:32:26:81:54:98:d9:3e:bd:10:7d:7d: 52:42:1c:d4:82:22:98:fc:ba:24:b1:8a:f0:56:8c: 85:2a:d1:10:8f:88:f2:8f:fc:8f:69:2b:b6:34:34: 86:a3:e7:45:75:7e:a3:c3:82:96:72:b5:28:d5:1b: 26:ca:a0:c5:10:40:7a:61:7d:93:17:cb:23:cc:f0: 10:ce:f9:16:28:76:60:b9:3a:81:3f:8e:e0:43:75: 81:71:46:b5:b5:b1:a4:0b:a1:8c:11:5b:af:bb:18: 36:0d:62:2b:5b:33:61:b4:9d:ab:f1:ca:8b:8d:f0: b4:89:ba:39:70:57:83:ad:78:14:e6:98:70:c8:36: 3e:fa:f9:c0:1c:d3:c8:16:92:90:54:14:ec:8d:a3: 11:73:d7:06:64:87:28:1b:05:d0:37:5f:d4:38:5d: 6a:ff:6b:c2:3e:19:ce:03:52:29:f7:49:8c:70:2e: 3b:f6:cf:45:72:80:10:56:15:7f:b0:9b:f3:3c:56: 0c:fe:ea:2c:d2:ed:aa:4a:ee:52:78:8e:1f:95:11: 60:c4:18:70:a7:26:0f:d9:7e:64:2e:c5:65:a7:bc: af:ce:60:10:49:b8:70:5a:7f:ec:21:42:8c:c9:dd: 1c:da:96:4a:90:7a:e7:b4:00:56:6f:77:c2:78:34: dd:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:D4:DA:76:1D:62:B5:4B:72:6A:5F:A1:FD:10:E5:9E:22:1E:93:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1/38ab099a-c486-3d85-b2d6-12eaea43131b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1.crl X509v3 Authority Key Identifier: keyid:5E:7D:66:AB:68:3C:74:74:46:85:34:BA:FB:50:A4:2F:7D:CF:A9:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1.cer sbgp-ipAddrBlock: critical IPv4: 199.58.122.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:5c:0b:e7:f2:9e:89:b3:72:2e:1f:1f:64:10:f6:d8:45:a0: 9e:41:20:21:a8:a8:58:92:d3:f3:c2:dc:a2:e8:8f:ec:7e:1f: 7c:6f:be:73:ef:05:4a:e5:8d:fe:f5:aa:d0:02:de:24:03:56: 2b:11:1f:4d:fe:a9:f5:19:67:fd:46:41:0b:78:21:1d:0d:b0: e9:2e:3e:fb:5d:df:63:dc:75:d0:42:f5:fb:46:67:2c:9a:bf: b5:d3:82:fa:ac:8d:a1:f8:84:86:75:81:bb:5f:90:81:b1:00: 54:a3:95:76:b5:85:82:be:2a:ba:bc:9e:e3:78:14:a0:bb:54: 5b:12:94:5b:c2:1e:d1:69:40:b0:21:6a:08:f9:6d:6b:7c:06: aa:ad:de:db:4b:af:ff:90:d4:2c:18:06:21:39:56:35:ad:8b: 22:b6:c2:af:6f:83:b7:1d:8b:98:70:97:4b:bb:58:31:fa:40: 0d:c2:ef:45:23:fc:46:83:c9:d8:62:6a:8f:f5:57:98:94:2b: ea:bc:a2:af:fa:f3:6f:97:ae:33:7f:ff:9b:6b:78:3e:93:22: 86:14:95:d6:a7:cf:20:b0:64:99:b5:59:0a:cf:cc:b9:52:5b: d3:41:7c:ed:5b:ee:ab:c5:7c:f8:64:79:23:f3:3f:3a:e0:8e: 78:b9:85:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8O0iyoTRiDdtnVl4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjZhMTUxODMtMmMyMy00ZDBhLTlhYWEtZmVlNDdmN2E2 MWYxMB4XDTI2MDkwNDAxMDAxMloXDTI2MTIwMzAyMDAxMlowLzEtMCsGA1UEAxMk MDc0YzgzYWUtNzVkYy00YmY4LTg0MzMtYjE0MzYzMmU0NTk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqndMiaBVJjZPr0QfX1SQhzUgiKY/LoksYrw VoyFKtEQj4jyj/yPaSu2NDSGo+dFdX6jw4KWcrUo1RsmyqDFEEB6YX2TF8sjzPAQ zvkWKHZguTqBP47gQ3WBcUa1tbGkC6GMEVuvuxg2DWIrWzNhtJ2r8cqLjfC0ibo5 cFeDrXgU5phwyDY++vnAHNPIFpKQVBTsjaMRc9cGZIcoGwXQN1/UOF1q/2vCPhnO A1Ip90mMcC479s9FcoAQVhV/sJvzPFYM/uos0u2qSu5SeI4flRFgxBhwpyYP2X5k LsVlp7yvzmAQSbhwWn/sIUKMyd0c2pZKkHrntABWb3fCeDTdJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBTU2nYdYrVLcmpfof0Q5Z4iHpMcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9mNmEx NTE4My0yYzIzLTRkMGEtOWFhYS1mZWU0N2Y3YTYxZjEvMzhhYjA5OWEtYzQ4Ni0z ZDg1LWIyZDYtMTJlYWVhNDMxMzFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvZjZhMTUxODMtMmMyMy00ZDBhLTlh YWEtZmVlNDdmN2E2MWYxL2Y2YTE1MTgzLTJjMjMtNGQwYS05YWFhLWZlZTQ3Zjdh NjFmMS5jcmwwHwYDVR0jBBgwFoAUXn1mq2g8dHRGhTS6+1CkL33PqZowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9mNmExNTE4My0yYzIzLTRkMGEtOWFhYS1mZWU0 N2Y3YTYxZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxzp6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHdcC+fynomzci4fH2QQ9thFoJ5BICGoqFiS0/PC3KLoj+x+H3xvvnPv BUrljf71qtAC3iQDVisRH03+qfUZZ/1GQQt4IR0NsOkuPvtd32PcddBC9ftGZyya v7XTgvqsjaH4hIZ1gbtfkIGxAFSjlXa1hYK+Krq8nuN4FKC7VFsSlFvCHtFpQLAh agj5bWt8Bqqt3ttLr/+Q1CwYBiE5VjWtiyK2wq9vg7cdi5hwl0u7WDH6QA3C70Uj /EaDydhiao/1V5iUK+q8oq/682+XrjN//5treD6TIoYUldanzyCwZJm1WQrPzLlS W9NBfO1b7qvFfPhkeSPzPzrgjni5hf0= -----END CERTIFICATE-----Generated at Fri Sep 4 22:27:46 2026 by rpki-client