$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/35b5598c-6468-4a07-ba62-b390f60d1dde/603294ff-a71c-3783-96f0-44f0db60ce8a.roa File: 603294ff-a71c-3783-96f0-44f0db60ce8a.roa (raw, json) Hash identifier: UqPOVZDEU0pyBGD8ErLdFb/Im8G34jr6HzSEih2nBPc= Subject key identifier: 61:F0:85:CD:2E:B4:7F:41:E4:DC:9A:C5:37:F3:6E:6A:74:DA:2F:D4 Certificate issuer: /CN=35b5598c-6468-4a07-ba62-b390f60d1dde Certificate serial: 010D0C9F4328584F408E5D2A7A7E9277A7F5AE80 Authority key identifier: DD:5D:3B:CD:F9:81:21:7B:71:FC:0A:A5:9C:06:B7:F8:82:62:FD:C6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/35b5598c-6468-4a07-ba62-b390f60d1dde.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/35b5598c-6468-4a07-ba62-b390f60d1dde/603294ff-a71c-3783-96f0-44f0db60ce8a.roa Signing time: Mon 21 Sep 2026 20:34:02 +0000 ROA not before: Mon 21 Sep 2026 20:34:02 +0000 ROA not after: Sun 20 Dec 2026 21:34:02 +0000 asID: 19713 IP address blocks: 199.192.0.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/35b5598c-6468-4a07-ba62-b390f60d1dde/35b5598c-6468-4a07-ba62-b390f60d1dde.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/35b5598c-6468-4a07-ba62-b390f60d1dde/35b5598c-6468-4a07-ba62-b390f60d1dde.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/35b5598c-6468-4a07-ba62-b390f60d1dde.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:40:8e:5d:2a:7a:7e:92:77:a7:f5:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35b5598c-6468-4a07-ba62-b390f60d1dde Validity Not Before: Sep 21 20:34:02 2026 GMT Not After : Dec 20 21:34:02 2026 GMT Subject: CN=db3b6ead-100e-4914-a950-6efbc4588df7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:66:70:df:e4:04:d5:72:97:80:28:ea:92:c2: e3:70:e2:ec:d1:ca:db:e7:60:f8:1a:c1:97:ad:23: e6:65:04:04:b6:3a:f2:f7:aa:20:de:1d:f6:f1:31: b5:81:dd:d8:a2:24:04:75:f1:39:e0:15:ac:bb:cc: 0c:85:19:6a:7c:0a:8d:8b:3e:5d:2b:d7:11:03:e4: a2:74:8e:b7:91:47:90:fd:72:3f:5f:5f:a2:ff:a8: e1:96:0c:48:df:1e:96:5f:50:22:10:b5:60:7d:69: be:ac:94:90:cb:4e:33:c7:24:80:99:a6:03:62:7d: d4:35:8c:be:40:54:41:43:7b:4a:ac:ae:ec:79:9b: c4:a9:97:5d:d8:87:e7:4d:c7:3b:39:f0:cd:83:a4: 24:8d:73:7d:18:e6:26:07:26:68:88:e5:b1:4c:a5: 9d:32:3e:2d:dd:34:af:be:87:8b:71:60:35:80:a4: c3:43:cd:be:45:7c:8d:5d:8a:0b:df:c1:2a:fb:30: c8:94:5a:c1:80:07:1a:c0:74:2e:48:b5:30:c7:3c: 33:e0:bc:27:3f:3b:01:0a:df:21:b4:51:c2:eb:2c: ca:fe:25:de:f8:45:29:01:89:82:54:5f:5c:7d:2a: f4:69:f9:c2:76:8c:ea:62:31:0c:bf:09:da:55:38: da:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:F0:85:CD:2E:B4:7F:41:E4:DC:9A:C5:37:F3:6E:6A:74:DA:2F:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/35b5598c-6468-4a07-ba62-b390f60d1dde/603294ff-a71c-3783-96f0-44f0db60ce8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/35b5598c-6468-4a07-ba62-b390f60d1dde/35b5598c-6468-4a07-ba62-b390f60d1dde.crl X509v3 Authority Key Identifier: keyid:DD:5D:3B:CD:F9:81:21:7B:71:FC:0A:A5:9C:06:B7:F8:82:62:FD:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/35b5598c-6468-4a07-ba62-b390f60d1dde.cer sbgp-ipAddrBlock: critical IPv4: 199.192.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:84:48:99:a7:b2:01:a1:5d:be:c6:bf:66:5b:f8:86:95:e0: 40:98:05:fb:55:a2:44:24:17:e9:37:68:30:bb:75:2c:e7:b8: 97:28:90:8d:10:97:49:8b:bb:b1:3d:82:ee:14:8d:6d:8e:6b: 2c:74:f7:8b:5a:cd:58:30:f1:74:d7:3e:6d:e8:63:ee:02:de: 67:f9:d7:35:ae:d7:1f:06:9d:32:65:2a:68:ac:64:d9:c9:11: a6:de:4d:78:79:85:23:c9:1e:9a:41:ef:21:89:6c:26:2e:58: 8e:fe:43:32:9a:81:e5:56:38:c1:1a:14:95:60:0b:7d:4b:ec: 8a:24:b0:b1:21:e1:b5:56:b6:f0:bc:2f:34:f0:99:63:cb:53: 2f:cd:42:6a:d9:8f:83:fb:5b:fb:29:ad:af:c0:2b:fb:b7:4d: 47:3c:df:a7:31:69:b1:41:92:51:d4:ad:60:35:b4:8f:e4:7f: b7:5d:67:74:4c:32:b6:e4:66:03:ce:35:98:8b:8a:ed:08:af: 0e:d3:fb:13:65:7b:9c:6c:6d:38:c5:ab:25:8d:b1:7c:e4:9a: 6f:2a:5c:43:c6:f2:54:41:63:5d:50:a8:f5:d4:0c:b6:84:34: 76:fd:37:16:dd:15:17:7c:42:4b:2d:46:f2:5d:a8:f4:27:66: 61:b7:cb:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Ajl0qen6Sd6f1roAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViNTU5OGMtNjQ2OC00YTA3LWJhNjItYjM5MGY2MGQx ZGRlMB4XDTI2MDkyMTIwMzQwMloXDTI2MTIyMDIxMzQwMlowLzEtMCsGA1UEAxMk ZGIzYjZlYWQtMTAwZS00OTE0LWE5NTAtNmVmYmM0NTg4ZGY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGZw3+QE1XKXgCjqksLjcOLs0crb52D4GsGX rSPmZQQEtjry96og3h328TG1gd3YoiQEdfE54BWsu8wMhRlqfAqNiz5dK9cRA+Si dI63kUeQ/XI/X1+i/6jhlgxI3x6WX1AiELVgfWm+rJSQy04zxySAmaYDYn3UNYy+ QFRBQ3tKrK7seZvEqZdd2IfnTcc7OfDNg6QkjXN9GOYmByZoiOWxTKWdMj4t3TSv voeLcWA1gKTDQ82+RXyNXYoL38Eq+zDIlFrBgAcawHQuSLUwxzwz4LwnPzsBCt8h tFHC6yzK/iXe+EUpAYmCVF9cfSr0afnCdozqYjEMvwnaVTjaPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGHwhc0utH9B5NyaxTfzbmp02i/UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi8zNWI1 NTk4Yy02NDY4LTRhMDctYmE2Mi1iMzkwZjYwZDFkZGUvNjAzMjk0ZmYtYTcxYy0z NzgzLTk2ZjAtNDRmMGRiNjBjZThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvMzViNTU5OGMtNjQ2OC00YTA3LWJh NjItYjM5MGY2MGQxZGRlLzM1YjU1OThjLTY0NjgtNGEwNy1iYTYyLWIzOTBmNjBk MWRkZS5jcmwwHwYDVR0jBBgwFoAU3V07zfmBIXtx/AqlnAa3+IJi/cYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4 Ny1iMmNjLTU2ODkzODFhM2M0Mi8zNWI1NTk4Yy02NDY4LTRhMDctYmE2Mi1iMzkw ZjYwZDFkZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx8AAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJeESJmnsgGhXb7Gv2Zb+IaV4ECYBftVokQkF+k3aDC7dSznuJcokI0Q l0mLu7E9gu4UjW2Oayx094tazVgw8XTXPm3oY+4C3mf51zWu1x8GnTJlKmisZNnJ EabeTXh5hSPJHppB7yGJbCYuWI7+QzKageVWOMEaFJVgC31L7IoksLEh4bVWtvC8 LzTwmWPLUy/NQmrZj4P7W/spra/AK/u3TUc836cxabFBklHUrWA1tI/kf7ddZ3RM MrbkZgPONZiLiu0Irw7T+xNle5xsbTjFqyWNsXzkmm8qXEPG8lRBY11QqPXUDLaE NHb9NxbdFRd8QkstRvJdqPQnZmG3y3g= -----END CERTIFICATE-----Generated at Mon Sep 28 18:55:18 2026 by rpki-client