$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2a576405-6d12-4321-8aff-11069dafb9f1/d35bb410-8487-3fe4-9a47-3f99b93f89a2.roa File: d35bb410-8487-3fe4-9a47-3f99b93f89a2.roa (raw, json) Hash identifier: tHud14NTQbAQSFNim4rAhDAgh3zuzRIJwH0J7QhSVco= Subject key identifier: 3C:B8:E6:5E:DB:CD:61:04:82:0B:19:BB:35:04:C2:86:AA:70:D4:13 Certificate issuer: /CN=2a576405-6d12-4321-8aff-11069dafb9f1 Certificate serial: 010D0C9F4328584F7625F3C91435382A60C3DC00 Authority key identifier: BB:4D:83:61:A4:90:4F:28:37:18:5F:95:D5:B1:1A:01:1F:4B:15:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2a576405-6d12-4321-8aff-11069dafb9f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2a576405-6d12-4321-8aff-11069dafb9f1/d35bb410-8487-3fe4-9a47-3f99b93f89a2.roa Signing time: Sun 11 Oct 2026 01:17:18 +0000 ROA not before: Sun 11 Oct 2026 01:17:18 +0000 ROA not after: Sat 09 Jan 2027 02:17:18 +0000 asID: 210352 IP address blocks: 199.19.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2a576405-6d12-4321-8aff-11069dafb9f1/2a576405-6d12-4321-8aff-11069dafb9f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2a576405-6d12-4321-8aff-11069dafb9f1/2a576405-6d12-4321-8aff-11069dafb9f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2a576405-6d12-4321-8aff-11069dafb9f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:76:25:f3:c9:14:35:38:2a:60:c3:dc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a576405-6d12-4321-8aff-11069dafb9f1 Validity Not Before: Oct 11 01:17:18 2026 GMT Not After : Jan 9 02:17:18 2027 GMT Subject: CN=5b0f1b6e-b19a-487c-9d9a-3218f03fa827 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:4a:b0:f7:b0:21:f8:c9:6c:5a:62:70:8f:6f: ce:cc:5f:95:1a:1c:b9:ae:82:01:b7:48:1b:69:93: af:c0:96:68:95:a5:e9:c3:cc:7c:83:72:c3:05:f7: 65:db:1d:a4:64:c7:13:3e:f6:b8:73:d0:1d:1a:9c: 4f:c6:00:75:49:87:9c:24:43:e6:0e:1e:4d:ef:a4: 8d:5e:47:c1:b0:4e:49:80:75:56:89:20:6a:24:72: ea:df:2d:db:37:51:50:0e:db:3a:c8:15:52:50:b5: 39:6f:9d:71:94:a3:3d:00:3d:a0:fd:fe:4c:fa:2a: 7a:d5:c4:fd:f2:c3:14:22:f4:69:04:6c:40:c3:af: 46:bf:c8:d2:77:cd:04:43:f6:db:ed:47:f8:d6:45: fe:7a:9a:b8:c5:91:fb:21:24:7a:b2:d9:45:c0:f2: fe:81:91:41:e8:3b:37:31:7b:c3:f0:55:c9:e9:20: 04:72:2e:8e:b6:79:b3:28:6e:6f:32:63:c7:3a:57: d2:71:bb:71:91:97:70:12:74:8b:bd:65:4b:be:99: bd:03:f3:c1:46:a8:ce:3c:3d:ed:75:3b:7d:2b:77: c5:9f:53:fc:ee:1f:1c:47:2a:fb:7e:d8:30:8f:6a: 8e:ec:6a:2d:25:f5:b6:63:08:ef:d5:16:f5:0f:cc: 5e:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:B8:E6:5E:DB:CD:61:04:82:0B:19:BB:35:04:C2:86:AA:70:D4:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2a576405-6d12-4321-8aff-11069dafb9f1/d35bb410-8487-3fe4-9a47-3f99b93f89a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2a576405-6d12-4321-8aff-11069dafb9f1/2a576405-6d12-4321-8aff-11069dafb9f1.crl X509v3 Authority Key Identifier: keyid:BB:4D:83:61:A4:90:4F:28:37:18:5F:95:D5:B1:1A:01:1F:4B:15:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2a576405-6d12-4321-8aff-11069dafb9f1.cer sbgp-ipAddrBlock: critical IPv4: 199.19.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:05:51:6c:37:fd:0f:ae:a1:1d:80:c8:b0:c0:e5:17:c5:8b: c3:be:e4:95:80:2c:9c:1f:d1:19:e5:8f:05:05:70:97:e3:40: 2a:47:60:04:4a:39:8b:63:34:cd:17:37:5b:df:81:4f:dc:a6: dd:00:45:ea:0b:80:7c:c7:f2:fd:cf:5b:ef:96:16:46:85:90: ea:50:1c:18:86:ab:99:57:39:66:94:92:18:86:a8:8c:9a:1f: 56:d6:b2:4a:40:8a:22:94:c0:28:54:a0:0e:44:25:25:35:ed: 47:9f:15:60:ac:f6:ec:9c:f7:69:e3:73:3a:3a:01:fe:ba:2f: 1a:92:ee:3f:1c:c5:f3:7b:5b:d1:b9:9d:bd:f5:42:85:9e:36: 42:d0:e2:8a:3f:cd:0c:a9:fa:bd:4c:fe:b4:92:96:b3:78:2b: fe:0f:4d:10:c5:b3:d8:40:77:1a:26:66:e0:23:69:ee:ce:4d: 24:ef:43:1f:fe:ff:d6:30:7c:24:6a:04:d7:9d:06:7a:ae:2a: 44:76:9a:f3:c4:b9:a0:9e:ef:33:e2:1c:22:25:66:5f:6a:de: 80:be:90:f9:ad:8d:d3:90:0a:e9:f0:8b:c8:e4:fb:ae:46:cd: 24:8f:a0:a7:3e:72:bf:9f:c1:20:b8:a0:e3:e1:b9:1f:aa:c0: 62:13:da:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE92JfPJFDU4KmDD3AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmE1NzY0MDUtNmQxMi00MzIxLThhZmYtMTEwNjlkYWZi OWYxMB4XDTI2MTAxMTAxMTcxOFoXDTI3MDEwOTAyMTcxOFowLzEtMCsGA1UEAxMk NWIwZjFiNmUtYjE5YS00ODdjLTlkOWEtMzIxOGYwM2ZhODI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0qw97Ah+MlsWmJwj2/OzF+VGhy5roIBt0gb aZOvwJZolaXpw8x8g3LDBfdl2x2kZMcTPva4c9AdGpxPxgB1SYecJEPmDh5N76SN XkfBsE5JgHVWiSBqJHLq3y3bN1FQDts6yBVSULU5b51xlKM9AD2g/f5M+ip61cT9 8sMUIvRpBGxAw69Gv8jSd80EQ/bb7Uf41kX+epq4xZH7ISR6stlFwPL+gZFB6Ds3 MXvD8FXJ6SAEci6OtnmzKG5vMmPHOlfScbtxkZdwEnSLvWVLvpm9A/PBRqjOPD3t dTt9K3fFn1P87h8cRyr7ftgwj2qO7GotJfW2Ywjv1Rb1D8xeQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDy45l7bzWEEggsZuzUEwoaqcNQTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yYTU3 NjQwNS02ZDEyLTQzMjEtOGFmZi0xMTA2OWRhZmI5ZjEvZDM1YmI0MTAtODQ4Ny0z ZmU0LTlhNDctM2Y5OWI5M2Y4OWEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMmE1NzY0MDUtNmQxMi00MzIxLThh ZmYtMTEwNjlkYWZiOWYxLzJhNTc2NDA1LTZkMTItNDMyMS04YWZmLTExMDY5ZGFm YjlmMS5jcmwwHwYDVR0jBBgwFoAUu02DYaSQTyg3GF+V1bEaAR9LFUgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yYTU3NjQwNS02ZDEyLTQzMjEtOGFmZi0xMTA2 OWRhZmI5ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxxMUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHwFUWw3/Q+uoR2AyLDA5RfFi8O+5JWALJwf0RnljwUFcJfjQCpHYARK OYtjNM0XN1vfgU/cpt0AReoLgHzH8v3PW++WFkaFkOpQHBiGq5lXOWaUkhiGqIya H1bWskpAiiKUwChUoA5EJSU17UefFWCs9uyc92njczo6Af66LxqS7j8cxfN7W9G5 nb31QoWeNkLQ4oo/zQyp+r1M/rSSlrN4K/4PTRDFs9hAdxomZuAjae7OTSTvQx/+ /9YwfCRqBNedBnquKkR2mvPEuaCe7zPiHCIlZl9q3oC+kPmtjdOQCunwi8jk+65G zSSPoKc+cr+fwSC4oOPhuR+qwGIT2kQ= -----END CERTIFICATE-----Generated at Wed Oct 14 07:54:15 2026 by rpki-client