$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/b438ae95-00c7-3707-b6bf-9d6fb741a6d6.roa File: b438ae95-00c7-3707-b6bf-9d6fb741a6d6.roa (raw, json) Hash identifier: 8BjTLnOMiesjGIGUMihlQhwwEj8kdsV9X5BY+jdqod0= Subject key identifier: 5F:AC:8D:D4:13:D2:F9:E7:AA:35:BB:94:DC:0A:84:E0:B5:10:DF:6F Certificate issuer: /CN=5c19a246-d9fa-481a-a4d7-010af8c132b3 Certificate serial: 010D0C9F4328584EC371B604429F43EB124C0400 Authority key identifier: 18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/b438ae95-00c7-3707-b6bf-9d6fb741a6d6.roa Signing time: Sat 08 Aug 2026 01:00:11 +0000 ROA not before: Sat 08 Aug 2026 01:00:11 +0000 ROA not after: Fri 06 Nov 2026 02:00:11 +0000 asID: 398395 IP address blocks: 199.253.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c3:71:b6:04:42:9f:43:eb:12:4c:04:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c19a246-d9fa-481a-a4d7-010af8c132b3 Validity Not Before: Aug 8 01:00:11 2026 GMT Not After : Nov 6 02:00:11 2026 GMT Subject: CN=c38651ac-dd1c-47bb-b0f1-399d4fbf1851 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:6a:02:34:6c:0e:c5:88:b7:f5:5c:1a:03:b0: 4f:35:54:47:d0:e8:5a:7e:b2:83:51:c3:72:d0:77: 36:99:f1:e5:e3:c2:a4:d6:9d:73:c3:6b:58:51:60: 99:ab:3e:d7:a4:d3:7b:03:f2:4e:b5:9a:b6:03:74: 6a:14:08:3e:e2:12:9b:8f:59:3d:87:6d:e6:a6:61: 24:25:2d:a0:e9:1e:32:f4:05:89:b9:5f:91:7f:93: 62:6d:d8:a6:ab:11:49:f0:9f:b0:46:fc:5e:e9:da: 51:e8:79:51:8c:32:4e:23:1f:7d:f8:e1:d7:00:6f: 36:4b:8b:68:96:99:24:d2:44:74:95:49:68:1d:be: 0e:a1:bb:ff:2b:6b:6f:1d:29:66:1b:ac:ed:60:ce: e0:19:18:c7:da:e5:24:20:f1:08:99:21:df:41:ff: 84:8f:e4:0f:a2:b9:95:33:94:d5:12:b1:e3:cb:97: 83:36:1a:9e:17:57:58:b0:0c:6e:9e:97:49:ae:9e: 84:6f:3b:db:59:c4:c7:9c:25:ec:b4:86:07:73:0f: 03:58:d2:d2:ad:f9:53:8f:0e:cf:91:1a:e8:b4:bb: 54:66:e8:ee:e7:08:e6:e2:d5:78:3c:28:15:ea:ed: 65:c5:09:37:ed:ec:60:68:ce:aa:86:85:96:79:18: 59:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:AC:8D:D4:13:D2:F9:E7:AA:35:BB:94:DC:0A:84:E0:B5:10:DF:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/b438ae95-00c7-3707-b6bf-9d6fb741a6d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl X509v3 Authority Key Identifier: keyid:18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer sbgp-ipAddrBlock: critical IPv4: 199.253.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:c0:b3:4a:93:64:42:1b:0f:e3:42:f0:53:42:46:50:25:fd: 9b:af:d5:0a:42:cf:b1:ba:f8:73:c6:f6:fa:5f:c2:38:74:7c: fc:80:64:4e:df:5f:34:8b:55:81:d1:5b:b2:5d:13:ca:fe:a7: 91:cb:a7:5c:7a:b4:bf:d3:9f:30:70:29:5c:53:6e:d4:24:8b: 46:d5:c7:88:c3:fd:54:ea:6f:70:c0:18:c2:47:dd:86:db:8c: ab:cd:11:c4:d1:ea:8f:20:d1:0f:87:ee:e4:ba:60:5f:30:b9: 37:33:9f:c0:d3:bc:48:f7:1c:50:b1:ee:ad:d9:5a:cd:35:76: ce:d0:09:95:70:22:cc:f2:2c:23:b9:b6:67:41:a7:88:ef:fe: 36:4f:e7:c0:27:91:b7:c9:bb:76:92:68:dc:b2:87:bb:2c:99: 3b:78:95:21:19:a6:0e:7c:c5:ea:7d:18:5b:86:d1:08:1d:0c: 9d:b5:30:4a:f9:84:3a:b1:47:1a:3e:3a:9b:d5:6e:99:c8:81: e5:65:f1:0d:b6:67:d6:f3:d1:98:ec:35:c7:16:69:a1:a3:64: b5:f6:8f:de:9f:e8:0d:de:48:1d:ba:1a:36:56:93:d4:bd:61: 9e:55:fd:66:e4:3b:53:9c:10:0a:60:5c:91:a3:1f:5b:5b:b4: 4f:96:19:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7DcbYEQp9D6xJMBAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWMxOWEyNDYtZDlmYS00ODFhLWE0ZDctMDEwYWY4YzEz MmIzMB4XDTI2MDgwODAxMDAxMVoXDTI2MTEwNjAyMDAxMVowLzEtMCsGA1UEAxMk YzM4NjUxYWMtZGQxYy00N2JiLWIwZjEtMzk5ZDRmYmYxODUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2oCNGwOxYi39VwaA7BPNVRH0OhafrKDUcNy 0Hc2mfHl48Kk1p1zw2tYUWCZqz7XpNN7A/JOtZq2A3RqFAg+4hKbj1k9h23mpmEk JS2g6R4y9AWJuV+Rf5NibdimqxFJ8J+wRvxe6dpR6HlRjDJOIx99+OHXAG82S4to lpkk0kR0lUloHb4Oobv/K2tvHSlmG6ztYM7gGRjH2uUkIPEImSHfQf+Ej+QPormV M5TVErHjy5eDNhqeF1dYsAxunpdJrp6EbzvbWcTHnCXstIYHcw8DWNLSrflTjw7P kRrotLtUZuju5wjm4tV4PCgV6u1lxQk37exgaM6qhoWWeRhZRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF+sjdQT0vnnqjW7lNwKhOC1EN9vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81YzE5 YTI0Ni1kOWZhLTQ4MWEtYTRkNy0wMTBhZjhjMTMyYjMvYjQzOGFlOTUtMDBjNy0z NzA3LWI2YmYtOWQ2ZmI3NDFhNmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNWMxOWEyNDYtZDlmYS00ODFhLWE0 ZDctMDEwYWY4YzEzMmIzLzVjMTlhMjQ2LWQ5ZmEtNDgxYS1hNGQ3LTAxMGFmOGMx MzJiMy5jcmwwHwYDVR0jBBgwFoAUGBmr0BGL/MK+/l1zc0BDuuWTrnAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81YzE5YTI0Ni1kOWZhLTQ4MWEtYTRkNy0wMTBh ZjhjMTMyYjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/0dMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAXAs0qTZEIbD+NC8FNCRlAl/Zuv1QpCz7G6+HPG9vpfwjh0fPyAZE7f XzSLVYHRW7JdE8r+p5HLp1x6tL/TnzBwKVxTbtQki0bVx4jD/VTqb3DAGMJH3Ybb jKvNEcTR6o8g0Q+H7uS6YF8wuTczn8DTvEj3HFCx7q3ZWs01ds7QCZVwIszyLCO5 tmdBp4jv/jZP58AnkbfJu3aSaNyyh7ssmTt4lSEZpg58xep9GFuG0QgdDJ21MEr5 hDqxRxo+OpvVbpnIgeVl8Q22Z9bz0ZjsNccWaaGjZLX2j96f6A3eSB26GjZWk9S9 YZ5V/WbkO1OcEApgXJGjH1tbtE+WGZA= -----END CERTIFICATE-----Generated at Fri Sep 4 23:41:00 2026 by rpki-client