$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792/5388bc64-7e00-3aef-b50b-4426eee59515.roa File: 5388bc64-7e00-3aef-b50b-4426eee59515.roa (raw, json) Hash identifier: jp767eK1jmwoHXRdkoayME/Ac9mXXLwdGTPpWd8X1ds= Subject key identifier: 2D:50:9F:C4:64:BB:65:22:D7:28:33:55:4D:CF:66:7F:00:F4:7E:E4 Certificate issuer: /CN=e35c7007-7a33-480f-a32e-40481f8f1792 Certificate serial: 010D0C9F4328584F06722F9A364762A5BF0D1400 Authority key identifier: 69:C5:93:B3:CB:4A:4F:6B:F2:C7:1E:19:B2:7A:66:85:BA:C2:EA:EC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792/5388bc64-7e00-3aef-b50b-4426eee59515.roa Signing time: Tue 01 Sep 2026 01:00:12 +0000 ROA not before: Tue 01 Sep 2026 01:00:12 +0000 ROA not after: Mon 30 Nov 2026 02:00:12 +0000 asID: 53636 IP address blocks: 199.59.144.0/24 maxlen: 24 199.59.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792/e35c7007-7a33-480f-a32e-40481f8f1792.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792/e35c7007-7a33-480f-a32e-40481f8f1792.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:06:72:2f:9a:36:47:62:a5:bf:0d:14:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e35c7007-7a33-480f-a32e-40481f8f1792 Validity Not Before: Sep 1 01:00:12 2026 GMT Not After : Nov 30 02:00:12 2026 GMT Subject: CN=bd1eec44-496d-45fc-9efe-a95eb53ece59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:e1:b5:f8:be:d6:1c:4d:c1:e7:72:41:fa:6d: bf:e4:4e:f5:88:2f:51:8e:bf:2d:c7:94:b8:08:b9: 77:73:f3:68:69:a6:3a:cc:f8:f4:1e:f7:a1:25:a0: b2:7c:25:58:f5:90:7b:40:7f:24:4b:ec:09:96:c2: 05:b5:aa:6e:d0:c5:6d:a3:e8:6a:89:54:76:cd:1a: 6b:6b:47:d8:f1:05:59:1f:d8:65:e9:c9:51:71:7a: a9:43:5a:48:70:af:c2:57:c0:ea:92:59:cb:4e:a7: 46:ad:84:46:ce:a7:5a:48:8c:9e:bb:1e:67:54:1e: 84:5d:5d:f2:a7:06:9b:58:ca:aa:86:7c:aa:ee:c2: 75:51:db:25:e7:d3:8b:20:a7:d8:03:b4:ef:01:8d: 30:89:83:3a:b2:0e:1e:e1:7d:16:05:23:13:e9:5c: f1:c0:43:fe:48:d7:fa:5b:a6:5a:27:ed:61:e0:02: 29:68:c1:cd:bc:47:67:c3:ab:62:ca:e5:8c:cd:17: 98:50:94:c8:5a:86:1e:36:73:09:ec:35:fb:11:8d: 38:dc:c4:48:23:7c:35:22:65:be:a2:7b:43:4a:30: 53:ef:07:a2:25:a1:7c:7c:64:d0:76:e8:62:ed:ed: 6b:bf:7b:12:ba:10:36:4f:cf:21:cd:d8:c1:2e:9e: c0:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:50:9F:C4:64:BB:65:22:D7:28:33:55:4D:CF:66:7F:00:F4:7E:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792/5388bc64-7e00-3aef-b50b-4426eee59515.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792/e35c7007-7a33-480f-a32e-40481f8f1792.crl X509v3 Authority Key Identifier: keyid:69:C5:93:B3:CB:4A:4F:6B:F2:C7:1E:19:B2:7A:66:85:BA:C2:EA:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792.cer sbgp-ipAddrBlock: critical IPv4: 199.59.144.0/24 199.59.146.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:f1:bb:5e:c6:a1:f8:68:d4:a9:81:66:a2:17:61:03:81:80: f1:e5:02:68:6d:2b:f6:be:5b:ff:4b:ea:e8:02:a3:03:ac:73: 25:e9:8c:a2:cd:78:3f:56:80:dd:ab:52:96:59:6c:69:09:3e: 5d:2e:e3:b8:84:dc:f1:f3:ac:65:72:c7:ac:ea:90:9f:70:51: 38:4e:f5:2d:04:3e:d7:3b:e7:e6:cf:da:ef:ed:63:af:cc:c2: 32:94:e7:07:35:0d:72:af:f0:82:bc:94:6a:6b:c7:3c:c0:cf: 11:6f:73:92:5e:3f:0b:3f:24:01:85:73:0c:78:6b:ea:27:09: cc:c8:ae:0e:e4:f8:c3:f2:dd:e4:73:36:a1:dc:b7:e1:6a:9c: a5:94:44:b8:d5:ae:b7:37:a4:2a:2d:88:25:76:5e:2a:8d:6f: cd:73:12:53:67:98:f0:ab:eb:c7:b0:93:f8:20:fa:19:c1:49: 20:bf:d1:f7:97:ae:ad:72:fe:f1:c7:d1:a0:c5:49:b8:f6:e7: 8e:67:ef:07:62:1e:d9:05:99:08:86:0e:d1:17:a8:77:18:85: 22:0c:cf:26:3a:7b:ac:f4:f7:09:c1:98:a9:b3:a2:d4:02:58: 72:56:1a:22:cb:b4:f8:69:fc:cd:80:ec:eb:f4:91:fd:e6:08: d4:f2:e7:f9 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE8Gci+aNkdipb8NFAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTM1YzcwMDctN2EzMy00ODBmLWEzMmUtNDA0ODFmOGYx NzkyMB4XDTI2MDkwMTAxMDAxMloXDTI2MTEzMDAyMDAxMlowLzEtMCsGA1UEAxMk YmQxZWVjNDQtNDk2ZC00NWZjLTllZmUtYTk1ZWI1M2VjZTU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAneG1+L7WHE3B53JB+m2/5E71iC9Rjr8tx5S4 CLl3c/NoaaY6zPj0HvehJaCyfCVY9ZB7QH8kS+wJlsIFtapu0MVto+hqiVR2zRpr a0fY8QVZH9hl6clRcXqpQ1pIcK/CV8DqklnLTqdGrYRGzqdaSIyeux5nVB6EXV3y pwabWMqqhnyq7sJ1Udsl59OLIKfYA7TvAY0wiYM6sg4e4X0WBSMT6VzxwEP+SNf6 W6ZaJ+1h4AIpaMHNvEdnw6tiyuWMzReYUJTIWoYeNnMJ7DX7EY043MRII3w1ImW+ ontDSjBT7weiJaF8fGTQduhi7e1rv3sSuhA2T88hzdjBLp7A5wIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFC1Qn8Rku2Ui1ygzVU3PZn8A9H7kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lMzVj NzAwNy03YTMzLTQ4MGYtYTMyZS00MDQ4MWY4ZjE3OTIvNTM4OGJjNjQtN2UwMC0z YWVmLWI1MGItNDQyNmVlZTU5NTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTM1YzcwMDctN2EzMy00ODBmLWEz MmUtNDA0ODFmOGYxNzkyL2UzNWM3MDA3LTdhMzMtNDgwZi1hMzJlLTQwNDgxZjhm MTc5Mi5jcmwwHwYDVR0jBBgwFoAUacWTs8tKT2vyxx4ZsnpmhbrC6uwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lMzVjNzAwNy03YTMzLTQ4MGYtYTMyZS00MDQ4 MWY4ZjE3OTIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAxzuQAwQA xzuSMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAFXxu17Gofho1KmBZqIXYQOBgPHlAmhtK/a+W/9L6ugCowOs cyXpjKLNeD9WgN2rUpZZbGkJPl0u47iE3PHzrGVyx6zqkJ9wUThO9S0EPtc75+bP 2u/tY6/MwjKU5wc1DXKv8IK8lGprxzzAzxFvc5JePws/JAGFcwx4a+onCczIrg7k +MPy3eRzNqHct+FqnKWURLjVrrc3pCotiCV2XiqNb81zElNnmPCr68ewk/gg+hnB SSC/0feXrq1y/vHH0aDFSbj2545n7wdiHtkFmQiGDtEXqHcYhSIMzyY6e6z09wnB mKmzotQCWHJWGiLLtPhp/M2A7Ov0kf3mCNTy5/k= -----END CERTIFICATE-----Generated at Fri Sep 11 06:02:17 2026 by rpki-client