$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498/515a67b5-2f6a-3154-891a-51ad1fa47cc0.roa File: 515a67b5-2f6a-3154-891a-51ad1fa47cc0.roa (raw, json) Hash identifier: FfiuftXn7nnIddyGpDMwXCe5DOBoEJsMlpqCrVl9qOs= Subject key identifier: 39:F6:E9:D4:0E:DC:C9:E0:E6:07:29:A0:2F:27:E7:B3:12:E0:CB:23 Certificate issuer: /CN=aae4f0de-2296-435c-b411-b16981804498 Certificate serial: 010D0C9F4328584F90A306FA84544CC490E84BC0 Authority key identifier: 1F:D3:27:64:4D:58:B9:AF:C5:7F:44:82:4D:FB:8F:B7:1E:18:CF:6D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498/515a67b5-2f6a-3154-891a-51ad1fa47cc0.roa Signing time: Tue 20 Oct 2026 13:00:13 +0000 ROA not before: Tue 20 Oct 2026 13:00:13 +0000 ROA not after: Mon 18 Jan 2027 14:00:13 +0000 asID: 138997 IP address blocks: 199.58.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498/aae4f0de-2296-435c-b411-b16981804498.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498/aae4f0de-2296-435c-b411-b16981804498.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:90:a3:06:fa:84:54:4c:c4:90:e8:4b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aae4f0de-2296-435c-b411-b16981804498 Validity Not Before: Oct 20 13:00:13 2026 GMT Not After : Jan 18 14:00:13 2027 GMT Subject: CN=9764a8eb-736d-434a-8124-3dda653d30f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ec:87:c7:4a:e7:88:6d:82:b8:a2:95:28:8b: 42:e1:00:1d:01:21:44:62:cd:5f:d3:d8:e2:7a:b9: 88:b9:4a:88:26:4e:5b:3e:1a:0d:63:63:4d:10:1f: 58:32:59:72:89:fc:01:fd:94:19:12:a7:c5:17:7a: 2e:f6:57:18:62:d9:f3:e3:f4:7c:0e:5a:eb:f7:67: e3:b8:96:97:4b:23:69:dd:9b:55:d7:5a:81:ce:b6: 87:53:ce:9a:5a:0e:1e:14:cf:7a:bb:ac:29:9b:f2: 4a:34:1a:94:fa:3b:33:7d:7f:b6:0c:51:13:fc:59: 2b:d6:15:e6:67:d6:e2:af:2f:28:9b:f6:45:ba:cf: 1f:4d:19:f9:ac:42:30:aa:2d:fa:ad:e0:8c:83:88: 2c:62:3e:56:4e:d8:bf:1f:e6:07:4f:dd:c3:1d:a8: 92:20:f8:2d:53:3e:38:1f:41:7b:d9:55:a1:fd:37: d2:2f:ae:3c:f8:de:2a:88:d9:29:5c:89:ab:a6:00: 28:f9:94:fa:5c:b5:59:6e:e8:d2:09:56:81:a6:65: 2c:c8:3d:8d:31:95:52:f7:2c:f1:77:45:74:92:bf: c8:91:f9:10:80:d0:b6:86:a6:2f:52:68:0d:87:1a: 19:52:54:aa:bb:c1:77:96:15:5f:aa:30:60:a4:49: 4a:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:F6:E9:D4:0E:DC:C9:E0:E6:07:29:A0:2F:27:E7:B3:12:E0:CB:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498/515a67b5-2f6a-3154-891a-51ad1fa47cc0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498/aae4f0de-2296-435c-b411-b16981804498.crl X509v3 Authority Key Identifier: keyid:1F:D3:27:64:4D:58:B9:AF:C5:7F:44:82:4D:FB:8F:B7:1E:18:CF:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498.cer sbgp-ipAddrBlock: critical IPv4: 199.58.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:1c:06:c9:fc:32:64:26:61:0c:e0:79:19:e1:ba:c1:15:6c: 81:f7:71:42:62:04:f4:1e:a3:4e:db:4b:ed:c1:de:de:27:14: 68:23:fa:1f:7f:ab:ad:d2:47:5f:35:63:c7:73:46:91:94:fb: ce:20:83:6d:d1:96:2b:e3:7d:ec:13:a4:2b:5e:21:13:89:2c: 31:5c:a8:60:e6:4b:fb:99:a9:e5:3f:f9:3a:43:61:f1:e7:cb: 13:7c:93:b4:94:c9:2f:17:13:8d:4d:52:ec:48:bc:23:ce:3a: be:76:fd:27:63:12:05:bf:67:14:28:cf:92:d0:94:28:a4:cc: dd:d9:44:70:e9:10:79:14:d3:a5:c0:22:92:92:6b:97:f7:a5: 86:b1:54:36:81:92:3c:74:76:04:f0:10:cb:d5:f1:58:b3:ba: 22:bc:af:12:65:00:ff:82:89:83:68:6b:72:97:3a:d1:e5:09: b1:7c:8d:2a:c3:c3:b2:7c:52:4f:20:77:22:a3:01:30:99:ab: b6:ba:b1:81:89:3c:91:86:e4:2f:62:fd:ee:0b:1f:af:09:df: 18:14:50:11:fb:28:12:9d:36:90:30:35:b6:dd:5c:35:4e:5a: 71:9b:e9:a2:28:87:a4:e3:f8:e9:70:44:8c:38:60:b6:a0:71: 1e:c3:cf:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+Qowb6hFRMxJDoS8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFlNGYwZGUtMjI5Ni00MzVjLWI0MTEtYjE2OTgxODA0 NDk4MB4XDTI2MTAyMDEzMDAxM1oXDTI3MDExODE0MDAxM1owLzEtMCsGA1UEAxMk OTc2NGE4ZWItNzM2ZC00MzRhLTgxMjQtM2RkYTY1M2QzMGYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnuyHx0rniG2CuKKVKItC4QAdASFEYs1f09ji ermIuUqIJk5bPhoNY2NNEB9YMllyifwB/ZQZEqfFF3ou9lcYYtnz4/R8Dlrr92fj uJaXSyNp3ZtV11qBzraHU86aWg4eFM96u6wpm/JKNBqU+jszfX+2DFET/Fkr1hXm Z9biry8om/ZFus8fTRn5rEIwqi36reCMg4gsYj5WTti/H+YHT93DHaiSIPgtUz44 H0F72VWh/TfSL648+N4qiNkpXImrpgAo+ZT6XLVZbujSCVaBpmUsyD2NMZVS9yzx d0V0kr/IkfkQgNC2hqYvUmgNhxoZUlSqu8F3lhVfqjBgpElKawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDn26dQO3Mng5gcpoC8n57MS4MsjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hYWU0 ZjBkZS0yMjk2LTQzNWMtYjQxMS1iMTY5ODE4MDQ0OTgvNTE1YTY3YjUtMmY2YS0z MTU0LTg5MWEtNTFhZDFmYTQ3Y2MwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYWFlNGYwZGUtMjI5Ni00MzVjLWI0 MTEtYjE2OTgxODA0NDk4L2FhZTRmMGRlLTIyOTYtNDM1Yy1iNDExLWIxNjk4MTgw NDQ5OC5jcmwwHwYDVR0jBBgwFoAUH9MnZE1Yua/Ff0SCTfuPtx4Yz20wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hYWU0ZjBkZS0yMjk2LTQzNWMtYjQxMS1iMTY5 ODE4MDQ0OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxzpYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJUcBsn8MmQmYQzgeRnhusEVbIH3cUJiBPQeo07bS+3B3t4nFGgj+h9/ q63SR181Y8dzRpGU+84gg23RlivjfewTpCteIROJLDFcqGDmS/uZqeU/+TpDYfHn yxN8k7SUyS8XE41NUuxIvCPOOr52/SdjEgW/ZxQoz5LQlCikzN3ZRHDpEHkU06XA IpKSa5f3pYaxVDaBkjx0dgTwEMvV8VizuiK8rxJlAP+CiYNoa3KXOtHlCbF8jSrD w7J8Uk8gdyKjATCZq7a6sYGJPJGG5C9i/e4LH68J3xgUUBH7KBKdNpAwNbbdXDVO WnGb6aIoh6Tj+OlwRIw4YLagcR7DzwI= -----END CERTIFICATE-----Generated at Tue Oct 27 22:16:45 2026 by rpki-client