$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1/aa6fcdc2-a1ba-38e3-908b-dee04291d8f4.roa File: aa6fcdc2-a1ba-38e3-908b-dee04291d8f4.roa (raw, json) Hash identifier: bWYQJDAF3rmfgRYLUvcs5JsTVcd1waIv/HejnJJrbI0= Subject key identifier: 89:AE:62:C4:90:D0:24:9E:23:4A:CC:F0:6D:EC:FA:9F:CB:FC:B9:80 Certificate issuer: /CN=f6a15183-2c23-4d0a-9aaa-fee47f7a61f1 Certificate serial: 010D0C9F4328584F0ED22C8A8024519FF9B06000 Authority key identifier: 5E:7D:66:AB:68:3C:74:74:46:85:34:BA:FB:50:A4:2F:7D:CF:A9:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1/aa6fcdc2-a1ba-38e3-908b-dee04291d8f4.roa Signing time: Fri 04 Sep 2026 01:00:12 +0000 ROA not before: Fri 04 Sep 2026 01:00:12 +0000 ROA not after: Thu 03 Dec 2026 02:00:12 +0000 asID: 397285 IP address blocks: 199.58.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0e:d2:2c:8a:80:24:51:9f:f9:b0:60:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6a15183-2c23-4d0a-9aaa-fee47f7a61f1 Validity Not Before: Sep 4 01:00:12 2026 GMT Not After : Dec 3 02:00:12 2026 GMT Subject: CN=d1010219-4b04-4694-8315-c7a0a106c9dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:e0:93:36:8c:72:cc:2d:b2:c5:52:ae:e7:50: a4:50:d7:08:4f:06:d3:d2:93:9f:de:ad:09:02:e4: 2e:a1:ac:3c:78:0a:01:bf:de:a5:59:ae:74:10:dc: a5:8b:49:3b:b7:6b:84:44:4b:e5:a8:be:8e:e7:11: 3a:3c:73:b2:d3:e2:98:52:b9:9b:05:cb:55:5b:47: 18:72:e8:4d:5c:ee:03:6c:72:37:f6:62:a4:fe:64: a9:db:4d:e9:cb:d4:b3:46:3a:24:9c:ea:94:d4:f0: 67:a2:41:29:00:df:ca:fc:17:d0:65:5e:db:09:24: 1c:c3:9c:91:7e:c1:7c:71:84:25:99:94:1b:f6:4d: 53:2a:be:74:05:14:46:0e:d0:6a:ab:df:7c:ab:1f: 6b:40:29:6c:95:de:ff:e0:15:25:e4:4e:94:c9:d1: 97:43:df:d1:99:45:1c:16:aa:f7:a5:ff:cb:06:33: 5f:e5:7b:42:d6:c2:7d:ac:56:fc:8c:7c:64:a7:85: b7:11:34:31:f9:af:61:32:af:a3:c5:51:34:7d:91: 02:c5:8a:6d:a2:4a:a9:17:8c:9b:81:f4:2e:bc:6d: cf:a1:ae:83:49:26:7b:5e:8b:d5:55:d2:ba:98:04: 30:54:80:69:3c:73:00:78:35:a0:67:3a:aa:df:32: 1d:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:AE:62:C4:90:D0:24:9E:23:4A:CC:F0:6D:EC:FA:9F:CB:FC:B9:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1/aa6fcdc2-a1ba-38e3-908b-dee04291d8f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1.crl X509v3 Authority Key Identifier: keyid:5E:7D:66:AB:68:3C:74:74:46:85:34:BA:FB:50:A4:2F:7D:CF:A9:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1.cer sbgp-ipAddrBlock: critical IPv4: 199.58.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:de:72:bf:35:ef:fb:0d:59:83:c2:40:9b:52:96:27:c7:ca: 6f:46:a9:76:9f:95:ba:f8:22:c5:c5:93:98:99:25:79:0e:02: 81:4a:dd:2c:09:d9:97:1f:ff:4a:84:94:4d:ce:80:37:1d:a6: fb:bf:df:9d:94:47:12:cc:54:de:a4:bf:c4:97:f7:2f:b3:d9: 0f:f7:07:0e:f4:6b:d4:4a:40:fe:c8:77:16:a8:93:42:c5:90: bd:d6:8d:3c:f1:68:16:9f:66:6a:d8:93:83:1a:32:28:38:a3: 93:ec:d4:7c:16:cc:d6:8c:dd:84:86:53:54:7b:d3:29:11:0d: 69:d8:0b:80:c1:f8:06:92:fa:54:7a:85:0e:27:87:ad:85:fb: 37:d6:08:d4:65:d0:6c:fc:a1:92:07:d2:6c:57:3c:be:80:3d: 2d:d9:94:95:84:8d:f6:25:e9:13:52:28:b3:a0:e7:5e:3a:83: 8f:c4:2e:84:4b:54:9c:ea:25:95:99:73:45:9c:75:e0:3a:03: 73:4b:5c:38:bd:39:94:9f:56:7e:c7:1e:6f:d4:c7:5d:95:d0: b3:fd:f0:d2:ae:93:bd:f3:92:58:e7:ab:1d:da:d3:92:e1:13: d4:f1:9a:ff:b6:eb:d6:79:c8:33:ef:b2:05:95:39:4e:40:68: c0:8c:1d:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8O0iyKgCRRn/mwYAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjZhMTUxODMtMmMyMy00ZDBhLTlhYWEtZmVlNDdmN2E2 MWYxMB4XDTI2MDkwNDAxMDAxMloXDTI2MTIwMzAyMDAxMlowLzEtMCsGA1UEAxMk ZDEwMTAyMTktNGIwNC00Njk0LTgzMTUtYzdhMGExMDZjOWRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4+CTNoxyzC2yxVKu51CkUNcITwbT0pOf3q0J AuQuoaw8eAoBv96lWa50ENyli0k7t2uEREvlqL6O5xE6PHOy0+KYUrmbBctVW0cY cuhNXO4DbHI39mKk/mSp203py9SzRjoknOqU1PBnokEpAN/K/BfQZV7bCSQcw5yR fsF8cYQlmZQb9k1TKr50BRRGDtBqq998qx9rQClsld7/4BUl5E6UydGXQ9/RmUUc Fqr3pf/LBjNf5XtC1sJ9rFb8jHxkp4W3ETQx+a9hMq+jxVE0fZECxYptokqpF4yb gfQuvG3Poa6DSSZ7XovVVdK6mAQwVIBpPHMAeDWgZzqq3zIdCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFImuYsSQ0CSeI0rM8G3s+p/L/LmAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9mNmEx NTE4My0yYzIzLTRkMGEtOWFhYS1mZWU0N2Y3YTYxZjEvYWE2ZmNkYzItYTFiYS0z OGUzLTkwOGItZGVlMDQyOTFkOGY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvZjZhMTUxODMtMmMyMy00ZDBhLTlh YWEtZmVlNDdmN2E2MWYxL2Y2YTE1MTgzLTJjMjMtNGQwYS05YWFhLWZlZTQ3Zjdh NjFmMS5jcmwwHwYDVR0jBBgwFoAUXn1mq2g8dHRGhTS6+1CkL33PqZowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9mNmExNTE4My0yYzIzLTRkMGEtOWFhYS1mZWU0 N2Y3YTYxZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxzp4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACzecr817/sNWYPCQJtSlifHym9GqXaflbr4IsXFk5iZJXkOAoFK3SwJ 2Zcf/0qElE3OgDcdpvu/352URxLMVN6kv8SX9y+z2Q/3Bw70a9RKQP7Idxaok0LF kL3WjTzxaBafZmrYk4MaMig4o5Ps1HwWzNaM3YSGU1R70ykRDWnYC4DB+AaS+lR6 hQ4nh62F+zfWCNRl0Gz8oZIH0mxXPL6APS3ZlJWEjfYl6RNSKLOg5146g4/ELoRL VJzqJZWZc0WcdeA6A3NLXDi9OZSfVn7HHm/Ux12V0LP98NKuk73zkljnqx3a05Lh E9Txmv+269Z5yDPvsgWVOU5AaMCMHVI= -----END CERTIFICATE-----Generated at Sat Sep 5 01:03:13 2026 by rpki-client