$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792/0ce0c169-ef1f-32ec-967d-086703bd7584.roa File: 0ce0c169-ef1f-32ec-967d-086703bd7584.roa (raw, json) Hash identifier: BGcrcvJ+wZ+snbJQc4+OA5fZiHkJaKqu3mJxsS8kDds= Subject key identifier: 38:15:12:86:5F:A9:48:75:30:EC:A8:D1:F9:C4:A3:A4:D4:A3:3E:B1 Certificate issuer: /CN=e35c7007-7a33-480f-a32e-40481f8f1792 Certificate serial: 010D0C9F4328584F698D7687EA80562E3C595CC0 Authority key identifier: 69:C5:93:B3:CB:4A:4F:6B:F2:C7:1E:19:B2:7A:66:85:BA:C2:EA:EC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792/0ce0c169-ef1f-32ec-967d-086703bd7584.roa Signing time: Tue 06 Oct 2026 13:00:13 +0000 ROA not before: Tue 06 Oct 2026 13:00:13 +0000 ROA not after: Mon 04 Jan 2027 14:00:13 +0000 asID: 204631 IP address blocks: 199.47.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792/e35c7007-7a33-480f-a32e-40481f8f1792.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792/e35c7007-7a33-480f-a32e-40481f8f1792.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:69:8d:76:87:ea:80:56:2e:3c:59:5c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e35c7007-7a33-480f-a32e-40481f8f1792 Validity Not Before: Oct 6 13:00:13 2026 GMT Not After : Jan 4 14:00:13 2027 GMT Subject: CN=799bc975-8e80-4d35-a65a-0b3be611a9e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:43:04:64:c7:18:93:ff:ec:50:0e:15:24:32: 12:37:76:52:8b:94:de:81:2c:56:10:83:22:12:c8: e1:8a:11:27:25:2a:77:1a:eb:1e:54:49:4d:4f:54: 43:4a:af:1e:6b:e2:3d:e9:75:ad:e0:9e:42:a5:8c: e3:b0:09:99:9d:24:09:eb:3f:6c:d2:94:5a:7a:6a: d1:1d:d2:70:79:79:fe:96:72:13:65:45:b7:6e:94: 27:a1:a1:68:cd:55:9f:3d:6d:fc:7a:d0:28:f7:64: 17:5a:d0:0c:1f:52:b1:44:90:10:40:88:49:6d:84: 1d:25:e1:dc:33:b9:c9:26:e0:b9:93:8b:c9:01:1e: be:dd:8b:c5:e1:14:dc:64:93:e0:9b:f7:6a:d5:fb: 40:05:de:cb:53:46:63:e9:95:61:d3:e7:49:98:a3: 1c:ad:c1:d2:d7:35:f5:2c:8b:52:e1:d3:d3:ab:7c: 74:f1:39:06:90:79:ba:9d:e9:ce:aa:45:e3:b7:2c: e3:59:1e:98:7f:19:63:f5:cf:3f:08:60:ba:e8:8a: 63:78:73:66:7b:8d:94:2f:96:56:ec:24:b5:fa:11: 69:3e:0e:87:e6:67:f7:2b:8c:21:c7:45:bb:1b:83: c9:ad:83:a1:ea:56:60:98:d3:2e:f1:31:34:1c:00: 3b:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:15:12:86:5F:A9:48:75:30:EC:A8:D1:F9:C4:A3:A4:D4:A3:3E:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792/0ce0c169-ef1f-32ec-967d-086703bd7584.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792/e35c7007-7a33-480f-a32e-40481f8f1792.crl X509v3 Authority Key Identifier: keyid:69:C5:93:B3:CB:4A:4F:6B:F2:C7:1E:19:B2:7A:66:85:BA:C2:EA:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792.cer sbgp-ipAddrBlock: critical IPv4: 199.47.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:0f:c1:bb:51:16:5d:a5:f2:05:43:6d:dc:96:2e:f8:15:cf: ef:98:44:a4:4c:a8:27:f1:01:86:d1:bd:21:8c:b4:42:3f:c4: e0:cf:42:19:71:6f:31:80:b2:02:85:a4:01:da:d7:20:15:c2: c3:73:45:00:20:85:53:00:c3:db:8c:9e:f2:3a:e1:70:0b:8c: 4c:33:51:73:a2:e4:65:c0:57:ca:fb:02:61:c3:53:51:21:5a: d8:7b:81:38:1e:b2:b9:b3:c2:2e:58:db:fb:1f:8f:20:6b:c1: 3c:34:56:49:df:25:8d:ce:12:e3:73:f7:b9:e2:9c:1d:22:b3: 20:f4:a1:45:d7:81:9b:55:70:6c:0b:db:a1:4e:36:27:d0:d7: af:0b:3a:1d:c6:83:bd:48:67:a4:d2:63:2e:f5:33:4d:78:94: 04:f9:51:be:38:0a:7d:fc:2f:c9:53:72:8e:fc:89:96:7e:d7: aa:49:9f:67:f8:78:c8:3c:b3:be:c0:92:79:09:fa:24:24:4e: 90:32:03:f0:a0:92:07:1b:32:ae:a5:ef:80:d9:1b:d3:fe:53: 1e:0e:7c:e2:eb:3b:2d:03:26:28:90:13:db:86:00:e7:b9:2f: f7:fc:83:42:e4:4b:7a:75:e8:2b:68:50:97:5c:4c:92:d1:9c: ad:69:c0:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9pjXaH6oBWLjxZXMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTM1YzcwMDctN2EzMy00ODBmLWEzMmUtNDA0ODFmOGYx NzkyMB4XDTI2MTAwNjEzMDAxM1oXDTI3MDEwNDE0MDAxM1owLzEtMCsGA1UEAxMk Nzk5YmM5NzUtOGU4MC00ZDM1LWE2NWEtMGIzYmU2MTFhOWU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwEMEZMcYk//sUA4VJDISN3ZSi5TegSxWEIMi EsjhihEnJSp3GuseVElNT1RDSq8ea+I96XWt4J5CpYzjsAmZnSQJ6z9s0pRaemrR HdJweXn+lnITZUW3bpQnoaFozVWfPW38etAo92QXWtAMH1KxRJAQQIhJbYQdJeHc M7nJJuC5k4vJAR6+3YvF4RTcZJPgm/dq1ftABd7LU0Zj6ZVh0+dJmKMcrcHS1zX1 LItS4dPTq3x08TkGkHm6nenOqkXjtyzjWR6Yfxlj9c8/CGC66IpjeHNme42UL5ZW 7CS1+hFpPg6H5mf3K4whx0W7G4PJrYOh6lZgmNMu8TE0HAA7QwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDgVEoZfqUh1MOyo0fnEo6TUoz6xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lMzVj NzAwNy03YTMzLTQ4MGYtYTMyZS00MDQ4MWY4ZjE3OTIvMGNlMGMxNjktZWYxZi0z MmVjLTk2N2QtMDg2NzAzYmQ3NTg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTM1YzcwMDctN2EzMy00ODBmLWEz MmUtNDA0ODFmOGYxNzkyL2UzNWM3MDA3LTdhMzMtNDgwZi1hMzJlLTQwNDgxZjhm MTc5Mi5jcmwwHwYDVR0jBBgwFoAUacWTs8tKT2vyxx4ZsnpmhbrC6uwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lMzVjNzAwNy03YTMzLTQ4MGYtYTMyZS00MDQ4 MWY4ZjE3OTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxy+WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFUPwbtRFl2l8gVDbdyWLvgVz++YRKRMqCfxAYbRvSGMtEI/xODPQhlx bzGAsgKFpAHa1yAVwsNzRQAghVMAw9uMnvI64XALjEwzUXOi5GXAV8r7AmHDU1Eh Wth7gTgesrmzwi5Y2/sfjyBrwTw0VknfJY3OEuNz97ninB0isyD0oUXXgZtVcGwL 26FONifQ168LOh3Gg71IZ6TSYy71M014lAT5Ub44Cn38L8lTco78iZZ+16pJn2f4 eMg8s77AknkJ+iQkTpAyA/CgkgcbMq6l74DZG9P+Ux4OfOLrOy0DJiiQE9uGAOe5 L/f8g0LkS3p16CtoUJdcTJLRnK1pwKA= -----END CERTIFICATE-----Generated at Tue Oct 27 15:16:50 2026 by rpki-client