$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/aa5922ce-6574-311d-bc01-e66125efb577.roa File: aa5922ce-6574-311d-bc01-e66125efb577.roa (raw, json) Hash identifier: uqkDuh3HaT6rb+Rp4TG5JIGYPTexLVVlejq0wI6apgw= Subject key identifier: 1E:70:D2:CB:B7:70:F9:AD:CF:DB:20:7E:0C:51:A0:C3:6D:D1:4E:5C Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584EAD1C55584CF85AF626FAD9A8 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/aa5922ce-6574-311d-bc01-e66125efb577.roa Signing time: Fri 31 Jul 2026 01:00:11 +0000 ROA not before: Fri 31 Jul 2026 01:00:11 +0000 ROA not after: Thu 29 Oct 2026 01:00:11 +0000 asID: 31898 IP address blocks: 199.87.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 30 Aug 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ad:1c:55:58:4c:f8:5a:f6:26:fa:d9:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Jul 31 01:00:11 2026 GMT Not After : Oct 29 01:00:11 2026 GMT Subject: CN=01432524-7629-48b9-b40d-4a4519d7186a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:2d:75:d2:83:29:b3:90:59:6a:73:04:5d:43: f5:7e:78:29:c1:d4:e8:19:9d:61:61:77:55:72:41: bf:9d:6b:7f:34:c8:a3:a8:ab:4b:26:a5:6f:53:8c: c2:90:5b:32:1e:4e:8a:43:55:01:0d:b5:e6:fd:b5: 17:20:1c:05:d8:93:a8:fa:92:c3:eb:78:f5:8e:35: 89:bc:47:2d:a1:db:96:e8:41:e9:e8:d3:06:f0:1d: 61:09:93:1d:a8:71:85:19:bd:d5:91:90:64:6d:06: 8b:78:30:45:f1:f7:3b:1c:29:58:34:47:29:a9:41: e4:e8:7e:4f:36:c5:58:34:c0:23:8e:c6:8d:52:34: 10:d5:19:5c:06:40:29:91:18:a5:34:9d:8a:8a:23: a4:b0:f9:2c:be:6f:42:7f:ad:c4:d8:44:d1:85:a2: 50:1d:d2:4c:20:f1:58:41:62:88:6e:40:25:c6:35: 2b:21:56:17:61:70:eb:94:cf:03:d7:d7:e9:e8:56: 3f:55:26:86:7d:a4:78:05:b6:d6:87:d7:21:8d:21: d9:47:82:34:2a:62:39:31:9d:57:84:d1:5c:41:f3: f8:32:be:3a:b6:cd:81:73:fc:53:12:56:37:fe:8f: 40:a4:f1:27:f2:e3:b4:f5:2c:f9:d2:02:77:67:96: 46:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:70:D2:CB:B7:70:F9:AD:CF:DB:20:7E:0C:51:A0:C3:6D:D1:4E:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/aa5922ce-6574-311d-bc01-e66125efb577.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 199.87.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:9d:d4:44:eb:63:c8:4e:b1:4b:ea:a9:b2:1e:d2:37:94:af: 6c:66:23:4c:73:4f:67:f1:b4:4b:45:44:77:5d:7d:38:1c:9a: 08:50:98:c0:54:27:f3:14:21:61:ed:b5:f6:98:07:42:7f:35: 32:6e:bc:13:62:35:0a:b3:e8:ee:96:f4:dc:f6:f9:1c:33:4e: 40:13:df:f0:5c:00:4f:54:12:4f:12:f5:41:e3:96:6c:20:51: ce:31:e4:fe:07:0c:46:10:81:c4:ae:d6:bb:b2:8a:b6:c0:ab: f0:9e:ac:31:54:36:1e:5c:d0:7a:f0:b8:1d:01:70:1a:ec:15: 5f:19:54:fe:d1:74:58:50:03:71:90:d7:ca:43:04:11:38:87: f7:a0:3f:21:89:31:4a:11:b6:35:ff:de:92:9f:4e:b8:26:c3: 34:ed:3b:1c:bf:86:7d:c3:35:e1:78:c7:d0:3d:8c:3c:a7:25: 4b:ed:4e:6e:7a:93:48:fd:f4:71:14:9a:30:77:6b:c8:e1:24: 99:cd:f7:12:42:fb:56:9d:07:3c:1d:ed:78:ce:48:5f:60:37: 12:04:eb:be:d9:dd:0c:ff:a9:db:8a:b9:33:3d:11:b2:19:9f: 76:ea:3a:23:0d:5c:13:89:2b:0a:ab:b2:bf:bb:ba:46:2d:37: 68:13:bf:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6tHFVYTPha9ib62agwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI2MDczMTAxMDAxMVoXDTI2MTAyOTAxMDAxMVowLzEtMCsGA1UEAxMk MDE0MzI1MjQtNzYyOS00OGI5LWI0MGQtNGE0NTE5ZDcxODZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAli110oMps5BZanMEXUP1fngpwdToGZ1hYXdV ckG/nWt/NMijqKtLJqVvU4zCkFsyHk6KQ1UBDbXm/bUXIBwF2JOo+pLD63j1jjWJ vEctoduW6EHp6NMG8B1hCZMdqHGFGb3VkZBkbQaLeDBF8fc7HClYNEcpqUHk6H5P NsVYNMAjjsaNUjQQ1RlcBkApkRilNJ2KiiOksPksvm9Cf63E2ETRhaJQHdJMIPFY QWKIbkAlxjUrIVYXYXDrlM8D19fp6FY/VSaGfaR4BbbWh9chjSHZR4I0KmI5MZ1X hNFcQfP4Mr46ts2Bc/xTElY3/o9ApPEn8uO09Sz50gJ3Z5ZGPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB5w0su3cPmtz9sgfgxRoMNt0U5cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvYWE1OTIyY2UtNjU3NC0z MTFkLWJjMDEtZTY2MTI1ZWZiNTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1d4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHOd1ETrY8hOsUvqqbIe0jeUr2xmI0xzT2fxtEtFRHddfTgcmghQmMBU J/MUIWHttfaYB0J/NTJuvBNiNQqz6O6W9Nz2+RwzTkAT3/BcAE9UEk8S9UHjlmwg Uc4x5P4HDEYQgcSu1ruyirbAq/CerDFUNh5c0HrwuB0BcBrsFV8ZVP7RdFhQA3GQ 18pDBBE4h/egPyGJMUoRtjX/3pKfTrgmwzTtOxy/hn3DNeF4x9A9jDynJUvtTm56 k0j99HEUmjB3a8jhJJnN9xJC+1adBzwd7XjOSF9gNxIE677Z3Qz/qduKuTM9EbIZ n3bqOiMNXBOJKwqrsr+7ukYtN2gTv6w= -----END CERTIFICATE-----Generated at Sat Aug 29 09:05:17 2026 by rpki-client