$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1/38ab099a-c486-3d85-b2d6-12eaea43131b.roa File: 38ab099a-c486-3d85-b2d6-12eaea43131b.roa (raw, json) Hash identifier: 5g/YSiHRKszGVQpQ+T8F5APXGSt223nv3BqKceSbdxA= Subject key identifier: 17:BB:60:81:09:9B:27:3C:CF:DA:C0:CB:8B:C3:5C:93:F5:48:5E:AA Certificate issuer: /CN=f6a15183-2c23-4d0a-9aaa-fee47f7a61f1 Certificate serial: 010D0C9F4328584E6C19A837C5ACC7FFC8413680 Authority key identifier: 5E:7D:66:AB:68:3C:74:74:46:85:34:BA:FB:50:A4:2F:7D:CF:A9:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1/38ab099a-c486-3d85-b2d6-12eaea43131b.roa Signing time: Tue 07 Jul 2026 18:07:31 +0000 ROA not before: Tue 07 Jul 2026 18:07:31 +0000 ROA not after: Mon 05 Oct 2026 18:07:31 +0000 asID: 397285 IP address blocks: 199.58.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6c:19:a8:37:c5:ac:c7:ff:c8:41:36:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6a15183-2c23-4d0a-9aaa-fee47f7a61f1 Validity Not Before: Jul 7 18:07:31 2026 GMT Not After : Oct 5 18:07:31 2026 GMT Subject: CN=b3452967-2f1f-40fd-89bd-32a5a018699a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:94:d2:6f:7c:e3:44:d0:ba:6d:cf:0e:e3:97: bb:b6:e8:16:0a:23:a6:95:5d:5d:8d:55:7e:1a:05: 49:87:89:b9:98:b5:d3:13:06:44:ce:24:c3:5d:11: b1:cd:86:88:56:b8:d3:b6:e9:48:9d:f4:c8:ed:cc: b9:71:9d:05:4d:93:ef:24:00:cc:eb:7d:e3:2e:b8: 5b:b2:64:44:0a:68:eb:a7:56:61:af:b4:25:93:43: 07:05:ad:43:c3:c7:3c:eb:91:f0:fd:dd:92:94:48: 31:09:51:5a:69:58:65:18:e8:e7:00:63:5e:df:c4: aa:2a:9e:5f:84:16:71:a2:53:1e:49:23:81:ca:87: 94:f5:5a:b3:f1:48:c3:7c:47:c9:0f:4d:bf:b7:87: f1:ff:4c:5b:69:1b:87:c0:b0:d0:0d:de:13:35:c5: bb:a5:4a:b4:54:11:c1:0e:7c:73:0c:db:2b:91:db: 7f:75:89:25:4f:53:4b:aa:b8:0a:43:b0:a5:6d:75: 22:31:1e:6b:2c:88:4f:2c:e9:79:3f:d7:e2:df:e8: 30:99:ce:26:e9:8d:a6:63:5b:4b:ac:fc:32:82:83: aa:ee:64:34:d2:3e:9a:2a:61:cd:cc:8f:cd:cb:c8: ab:98:d3:d1:ac:76:da:ac:a0:af:e3:b2:d2:4e:74: 38:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:BB:60:81:09:9B:27:3C:CF:DA:C0:CB:8B:C3:5C:93:F5:48:5E:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1/38ab099a-c486-3d85-b2d6-12eaea43131b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1.crl X509v3 Authority Key Identifier: keyid:5E:7D:66:AB:68:3C:74:74:46:85:34:BA:FB:50:A4:2F:7D:CF:A9:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1.cer sbgp-ipAddrBlock: critical IPv4: 199.58.122.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:17:62:40:7d:c3:8e:59:6e:b4:c8:15:41:57:00:f9:f8:a6: 63:11:39:c4:ee:c5:35:74:55:b8:7b:5f:84:9b:34:d8:08:78: 53:ea:98:af:fb:27:9d:65:47:c7:e9:18:78:a8:3c:69:af:18: e6:84:84:d6:0a:32:a0:fb:70:c5:c0:d4:38:23:f8:70:4b:c3: 19:aa:68:ce:d2:3b:64:11:6b:42:4b:b9:6f:22:69:c4:bb:9e: 7c:58:45:38:09:eb:9c:53:80:a0:69:f3:01:56:6c:53:79:78: 22:26:4f:d0:9c:75:af:33:5f:1f:ee:a5:93:f1:86:f4:90:48: 80:ed:a0:e9:be:7f:96:6e:9a:29:bb:cd:db:aa:a7:9f:38:1a: e0:13:a1:e3:b8:e3:6e:79:aa:d1:87:0c:31:33:93:65:99:59: 52:4a:3f:f7:43:e9:52:c6:e8:bc:2b:ae:9c:a4:24:ae:d7:cc: 4e:65:8b:f9:70:ee:a2:33:cf:72:e6:34:19:68:f0:9f:3c:76: aa:d1:d9:6c:9a:b2:7a:f4:d9:d6:f8:8f:85:b2:0f:35:4f:a2: fe:20:eb:82:f7:15:d0:8c:e4:3a:61:8e:8f:dc:69:2d:82:94: e1:e4:4d:bf:f7:7a:fe:c8:e6:3b:13:9c:68:a5:c0:26:53:f7: 45:af:62:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5sGag3xazH/8hBNoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjZhMTUxODMtMmMyMy00ZDBhLTlhYWEtZmVlNDdmN2E2 MWYxMB4XDTI2MDcwNzE4MDczMVoXDTI2MTAwNTE4MDczMVowLzEtMCsGA1UEAxMk YjM0NTI5NjctMmYxZi00MGZkLTg5YmQtMzJhNWEwMTg2OTlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9JTSb3zjRNC6bc8O45e7tugWCiOmlV1djVV+ GgVJh4m5mLXTEwZEziTDXRGxzYaIVrjTtulInfTI7cy5cZ0FTZPvJADM633jLrhb smRECmjrp1Zhr7Qlk0MHBa1Dw8c865Hw/d2SlEgxCVFaaVhlGOjnAGNe38SqKp5f hBZxolMeSSOByoeU9Vqz8UjDfEfJD02/t4fx/0xbaRuHwLDQDd4TNcW7pUq0VBHB DnxzDNsrkdt/dYklT1NLqrgKQ7ClbXUiMR5rLIhPLOl5P9fi3+gwmc4m6Y2mY1tL rPwygoOq7mQ00j6aKmHNzI/Ny8irmNPRrHbarKCv47LSTnQ4EwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBe7YIEJmyc8z9rAy4vDXJP1SF6qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9mNmEx NTE4My0yYzIzLTRkMGEtOWFhYS1mZWU0N2Y3YTYxZjEvMzhhYjA5OWEtYzQ4Ni0z ZDg1LWIyZDYtMTJlYWVhNDMxMzFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvZjZhMTUxODMtMmMyMy00ZDBhLTlh YWEtZmVlNDdmN2E2MWYxL2Y2YTE1MTgzLTJjMjMtNGQwYS05YWFhLWZlZTQ3Zjdh NjFmMS5jcmwwHwYDVR0jBBgwFoAUXn1mq2g8dHRGhTS6+1CkL33PqZowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9mNmExNTE4My0yYzIzLTRkMGEtOWFhYS1mZWU0 N2Y3YTYxZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxzp6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIoXYkB9w45ZbrTIFUFXAPn4pmMROcTuxTV0Vbh7X4SbNNgIeFPqmK/7 J51lR8fpGHioPGmvGOaEhNYKMqD7cMXA1Dgj+HBLwxmqaM7SO2QRa0JLuW8iacS7 nnxYRTgJ65xTgKBp8wFWbFN5eCImT9Ccda8zXx/upZPxhvSQSIDtoOm+f5Zumim7 zduqp584GuAToeO44255qtGHDDEzk2WZWVJKP/dD6VLG6LwrrpykJK7XzE5li/lw 7qIzz3LmNBlo8J88dqrR2Wyasnr02db4j4WyDzVPov4g64L3FdCM5Dphjo/caS2C lOHkTb/3ev7I5jsTnGilwCZT90WvYg0= -----END CERTIFICATE-----Generated at Tue Jul 21 20:16:51 2026 by rpki-client