$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS399519.roa File: AS399519.roa (raw, json) Hash identifier: 3rGlooepA5Ior6NMWPXX3SC4ivrH3gHBIUG8iXdIBtc= Subject key identifier: FB:D0:88:53:79:CC:8A:D7:72:B6:38:15:C1:B7:49:84:15:17:56:C8 Certificate issuer: /CN=ec93568485034d6f590126278015e55786765323f329d6aa05 Certificate serial: 559ABA523C5E4C2A29E61B12061DD938900E94C3 Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS399519.roa Signing time: Fri 13 Nov 2026 13:36:22 +0000 ROA not before: Fri 13 Nov 2026 13:31:22 +0000 ROA not after: Fri 12 Nov 2027 13:36:22 +0000 asID: 399519 IP address blocks: 140.99.8.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 02:35:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:9a:ba:52:3c:5e:4c:2a:29:e6:1b:12:06:1d:d9:38:90:0e:94:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05 Validity Not Before: Nov 13 13:31:22 2026 GMT Not After : Nov 12 13:36:22 2027 GMT Subject: CN=FBD0885379CC8AD772B63815C1B74984151756C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:38:ae:bb:26:48:a9:89:37:49:25:b0:6d:3c: 99:9c:3c:1b:0d:7f:6f:a9:ac:8d:5f:ca:aa:84:bb: ed:5a:43:e5:91:e9:c8:0e:e6:7d:03:8f:32:64:e6: 0b:23:cf:11:f9:5a:af:3d:03:24:68:b0:f5:95:3b: 3f:70:42:b3:4a:a8:eb:65:cf:29:b8:e9:30:6a:50: bb:a7:53:4c:d1:d0:a5:f1:22:ee:b8:f2:19:1a:84: 12:c9:8d:de:fd:0f:d6:63:d2:18:d5:28:e5:d4:29: 1c:4a:9e:cb:64:e6:a5:9b:47:8d:a4:47:10:c0:25: 53:f5:78:e6:a9:63:60:ae:b3:a5:c2:db:1c:e6:4b: 30:c7:10:78:62:0d:9a:54:be:42:e0:62:66:cd:b9: 80:21:f0:8c:bd:48:dc:6b:cd:0d:30:7b:ae:a7:74: a9:48:bf:30:69:54:c6:77:b8:66:af:25:62:4b:a4: e1:fd:80:63:bb:83:f6:da:49:be:2e:a5:7f:82:32: 63:04:cb:da:9b:17:d2:17:75:4b:34:06:f0:05:bc: fc:a1:01:dc:c6:36:55:e0:41:89:e9:97:58:37:80: a8:3e:31:72:23:75:f1:5e:fb:29:19:16:9e:ec:fc: 12:59:45:ae:24:58:d4:85:ce:eb:2e:84:25:5e:21: 17:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:D0:88:53:79:CC:8A:D7:72:B6:38:15:C1:B7:49:84:15:17:56:C8 X509v3 Authority Key Identifier: keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS399519.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 140.99.8.0/22 Signature Algorithm: sha256WithRSAEncryption 9a:ac:0c:78:64:82:d5:af:30:30:f1:98:42:5e:c5:65:5b:eb: 06:b7:00:1a:40:cf:ec:f8:79:4a:66:f5:fa:ae:81:bf:29:5a: 34:60:4f:e5:25:b2:67:e4:cb:78:4c:ff:10:72:64:b9:7a:00: 39:b2:90:79:fa:66:96:08:6d:68:79:49:7b:99:f3:74:d5:4c: e1:d9:3a:cc:61:eb:4e:44:86:67:de:ef:ab:84:ad:89:01:bc: 51:5f:67:7f:69:cd:55:15:4f:f7:fd:cb:b3:fd:da:6f:cb:42: d6:fd:fd:7c:6f:ae:15:43:30:9c:82:9b:0b:1d:f1:39:fd:07: 22:a8:c0:58:d5:f3:1f:3d:73:50:a3:e6:31:c7:17:2e:e7:5c: e6:12:c9:c6:3d:bb:1e:03:cd:80:bc:b8:9d:45:d3:fa:c9:2b: bb:a8:f8:24:10:fc:6f:5b:50:39:46:f2:ca:3e:7d:98:b1:67: 36:91:4a:83:a4:9c:2c:b0:07:33:2a:a6:eb:6d:b9:fb:4b:4c: d5:ca:8c:82:6e:af:6d:a3:15:61:a4:1c:03:01:77:5c:c0:f4: ce:0c:f2:cf:d4:3a:51:a5:2a:74:28:63:2b:98:97:e7:15:32: 6c:c5:cd:81:06:11:1b:10:1d:98:16:ff:55:13:c6:30:14:89: 5b:d4:2e:5c -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIUVZq6UjxeTCop5hsSBh3ZOJAOlMMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWM5MzU2ODQ4NTAzNGQ2ZjU5MDEyNjI3ODAxNWU1NTc4 Njc2NTMyM2YzMjlkNmFhMDUwHhcNMjYxMTEzMTMzMTIyWhcNMjcxMTEyMTMzNjIy WjAzMTEwLwYDVQQDEyhGQkQwODg1Mzc5Q0M4QUQ3NzJCNjM4MTVDMUI3NDk4NDE1 MTc1NkM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDiuuyZIqYk3 SSWwbTyZnDwbDX9vqayNX8qqhLvtWkPlkenIDuZ9A48yZOYLI88R+VqvPQMkaLD1 lTs/cEKzSqjrZc8puOkwalC7p1NM0dCl8SLuuPIZGoQSyY3e/Q/WY9IY1Sjl1Ckc Sp7LZOalm0eNpEcQwCVT9XjmqWNgrrOlwtsc5kswxxB4Yg2aVL5C4GJmzbmAIfCM vUjca80NMHuup3SpSL8waVTGd7hmryViS6Th/YBju4P22km+LqV/gjJjBMvamxfS F3VLNAbwBbz8oQHcxjZV4EGJ6ZdYN4CoPjFyI3XxXvspGRae7PwSWUWuJFjUhc7r LoQlXiEXzwIDAQABo4ICfzCCAnswHQYDVR0OBBYEFPvQiFN5zIrXcrY4FcG3SYQV F1bIMB8GA1UdIwQYMBaAFLsns3tY8FYG4V9SyiQuodT+trMEMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzN2ZkMGRmMGE3MGM4LzAv QkIyN0IzN0I1OEYwNTYwNkUxNUY1MkNBMjQyRUExRDRGRUI2QjMwNC5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3 ZTk3MWFjL2M1NTZiOTEwLWRjNmMtNDIyOC1hZGYzLTg4MjhhYzk2ZWU2MC9lYzkz NTY4NDg1MDM0ZDZmNTkwMTI2Mjc4MDE1ZTU1Nzg2NzY1MzIzZjMyOWQ2YWEwNS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODM3ZmQwZGYw YTcwYzgvMC9BUzM5OTUxOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAoxjCDANBgkqhkiG9w0BAQsFAAOC AQEAmqwMeGSC1a8wMPGYQl7FZVvrBrcAGkDP7Ph5Smb1+q6BvylaNGBP5SWyZ+TL eEz/EHJkuXoAObKQefpmlghtaHlJe5nzdNVM4dk6zGHrTkSGZ97vq4StiQG8UV9n f2nNVRVP9/3Ls/3ab8tC1v39fG+uFUMwnIKbCx3xOf0HIqjAWNXzHz1zUKPmMccX Ludc5hLJxj27HgPNgLy4nUXT+skru6j4JBD8b1tQOUbyyj59mLFnNpFKg6ScLLAH Myqm6225+0tM1cqMgm6vbaMVYaQcAwF3XMD0zgzyz9Q6UaUqdChjK5iX5xUybMXN gQYRGxAdmBb/VRPGMBSJW9QuXA== -----END CERTIFICATE-----Generated at Sun Nov 15 18:17:44 2026 by rpki-client