$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/35392e3135332e31322e302f32322d3232203d3e2030.roa File: 35392e3135332e31322e302f32322d3232203d3e2030.roa (raw, json) Hash identifier: 6NTZp2q/hPyxJQeFsLynqfaEn5lG/0MGdJcrSP6ln6E= Subject key identifier: 42:89:4A:2B:21:DB:33:4E:3B:93:C8:6D:62:9B:4B:D6:D8:0C:EF:4B Certificate issuer: /CN=A91D85A20000/serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186 Certificate serial: 3CDBE813E6DFF1AE41F22D100AF8E237442010FB Authority key identifier: 97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/35392e3135332e31322e302f32322d3232203d3e2030.roa Signing time: Mon 27 Jul 2026 23:29:13 +0000 ROA not before: Mon 27 Jul 2026 23:24:13 +0000 ROA not after: Mon 26 Jul 2027 23:29:13 +0000 asID: 0 IP address blocks: 59.153.12.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 02:41:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:db:e8:13:e6:df:f1:ae:41:f2:2d:10:0a:f8:e2:37:44:20:10:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D85A20000, serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186 Validity Not Before: Jul 27 23:24:13 2026 GMT Not After : Jul 26 23:29:13 2027 GMT Subject: CN=42894A2B21DB334E3B93C86D629B4BD6D80CEF4B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:69:da:ae:2f:ed:e9:f3:24:d1:8c:8c:d9:72: 7b:80:a2:fa:01:e5:06:7a:c6:8a:fb:9d:0b:db:05: b1:19:1d:98:2a:b3:ee:4a:16:ab:62:d1:d8:82:bc: d9:f6:f4:09:e6:55:d6:d9:58:24:9b:e0:68:72:8a: 41:3e:63:42:56:66:23:e6:0b:0d:68:c7:2a:7c:5e: c5:a5:19:5a:fd:8d:d1:39:be:96:5e:2c:0e:33:00: 55:0f:71:ae:27:fe:5a:76:80:9f:bd:cf:91:c4:4e: 1c:71:a1:ff:4f:16:62:b1:e7:ab:4c:80:28:67:de: 71:8f:6e:52:c4:00:ff:84:a4:65:07:30:33:e4:bd: 74:d9:5f:f5:78:d5:58:79:69:b5:35:a6:a8:36:f3: ad:c5:d8:f8:32:04:83:6a:89:d0:dc:8c:10:5c:4b: af:1e:20:2f:1f:8f:39:1f:c0:52:cd:bf:e7:a9:11: ac:f1:2f:ff:16:46:b1:af:8e:12:fa:b2:0c:69:f0: f1:2d:c5:40:d7:3e:9f:13:e6:f4:eb:bb:5f:12:13: 85:23:5a:2e:bc:88:72:2b:1f:cf:10:b8:43:50:ed: 67:3f:6f:01:e5:f6:4c:a3:cf:7a:ba:99:23:06:53: c9:77:d3:8b:e3:b8:38:da:ad:27:b3:d7:55:8c:33: 26:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:89:4A:2B:21:DB:33:4E:3B:93:C8:6D:62:9B:4B:D6:D8:0C:EF:4B X509v3 Authority Key Identifier: keyid:97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/35392e3135332e31322e302f32322d3232203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 59.153.12.0/22 Signature Algorithm: sha256WithRSAEncryption e5:58:ba:8a:97:aa:99:08:02:17:09:c9:00:59:79:3c:00:17: 07:4a:e5:f7:62:9e:c9:43:64:14:5e:3a:ce:7f:58:5f:68:6e: 79:f0:01:e0:90:54:cf:0d:4f:ca:e2:44:b9:22:f9:67:87:62: 43:a3:d7:f9:9c:89:67:ca:91:83:4b:ba:4e:95:89:60:f6:83: f7:06:61:ce:55:ef:f0:72:92:a0:d8:e0:ce:fa:e0:e9:af:81: f3:0e:cd:1d:db:a9:c8:34:22:92:f4:2d:e7:48:a8:63:98:d0: 6d:5c:f6:5f:d5:1a:69:ea:4c:c5:ab:dd:85:52:20:5a:18:7a: c0:33:49:50:26:fc:6b:81:2a:d3:5d:6c:a8:76:fc:c7:d5:c2: 32:72:90:ec:74:85:5e:03:ba:1a:15:f5:d0:17:d7:48:4d:62: ef:d2:21:5c:d2:e8:80:89:13:2c:61:5f:5f:ac:b1:97:c7:35: fc:db:2e:3c:e6:d4:b0:ac:bf:2c:a6:f3:c2:51:9d:95:4d:0d: de:e1:e5:75:0c:ec:71:ff:f6:9c:f4:9a:59:21:a9:fc:eb:71: 28:18:70:75:a9:1a:60:4c:40:98:57:6b:72:21:2e:39:8a:e2: b4:f2:a9:46:5b:7f:bd:38:f1:8a:09:64:11:5e:79:55:db:8b: 98:53:79:be -----BEGIN CERTIFICATE----- MIIFPjCCBCagAwIBAgIUPNvoE+bf8a5B8i0QCvjiN0QgEPswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRDg1QTIwMDAwMTEwLwYDVQQFEyg5N0U5QkRGNTk0 QUM3Njg3QkE0QTE2Q0E1QzE5MjMxMzVDREY3MTg2MB4XDTI2MDcyNzIzMjQxM1oX DTI3MDcyNjIzMjkxM1owMzExMC8GA1UEAxMoNDI4OTRBMkIyMURCMzM0RTNCOTND ODZENjI5QjRCRDZEODBDRUY0QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKdp2q4v7enzJNGMjNlye4Ci+gHlBnrGivudC9sFsRkdmCqz7koWq2LR2IK8 2fb0CeZV1tlYJJvgaHKKQT5jQlZmI+YLDWjHKnxexaUZWv2N0Tm+ll4sDjMAVQ9x rif+WnaAn73PkcROHHGh/08WYrHnq0yAKGfecY9uUsQA/4SkZQcwM+S9dNlf9XjV WHlptTWmqDbzrcXY+DIEg2qJ0NyMEFxLrx4gLx+POR/AUs2/56kRrPEv/xZGsa+O EvqyDGnw8S3FQNc+nxPm9Ou7XxIThSNaLryIcisfzxC4Q1DtZz9vAeX2TKPPerqZ IwZTyXfTi+O4ONqtJ7PXVYwzJlUCAwEAAaOCAjEwggItMB0GA1UdDgQWBBRCiUor IdszTjuTyG1im0vW2AzvSzAfBgNVHSMEGDAWgBSX6b31lKx2h7pKFspcGSMTXN9x hjAOBgNVHQ8BAf8EBAMCB4AwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBr aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgyZDVkZTQxMDE4M2Y2 ODY2MTA4NGI4Ni8zLzk3RTlCREY1OTRBQzc2ODdCQTRBMTZDQTVDMTkyMzEzNUNE RjcxODYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9y cGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3 QzcyRkQxRkYyL2wtbTk5WlNzZG9lNlNoYktYQmtqRTF6ZmNZWS5jZXIwgZcGCCsG AQUFBwELBIGKMIGHMIGEBggrBgEFBQcwC4Z4cnN5bmM6Ly9ycGtpLXJwcy5hcmlu Lm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzZjY4NjYxMDg0Yjg2 LzMvMzUzOTJlMzEzNTMzMmUzMTMyMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzAu cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAO MAwEAgABMAYDBAI7mQwwDQYJKoZIhvcNAQELBQADggEBAOVYuoqXqpkIAhcJyQBZ eTwAFwdK5fdinslDZBReOs5/WF9obnnwAeCQVM8NT8riRLki+WeHYkOj1/mciWfK kYNLuk6ViWD2g/cGYc5V7/BykqDY4M764OmvgfMOzR3bqcg0IpL0LedIqGOY0G1c 9l/VGmnqTMWr3YVSIFoYesAzSVAm/GuBKtNdbKh2/MfVwjJykOx0hV4DuhoV9dAX 10hNYu/SIVzS6ICJEyxhX1+ssZfHNfzbLjzm1LCsvyym88JRnZVNDd7h5XUM7HH/ 9pz0mlkhqfzrcSgYcHWpGmBMQJhXa3IhLjmK4rTyqUZbf7048YoJZBFeeVXbi5hT eb4= -----END CERTIFICATE-----Generated at Tue Jul 28 19:28:56 2026 by rpki-client