$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/c038d6f1-52c4-353f-bf06-0895e4955e50.roa File: c038d6f1-52c4-353f-bf06-0895e4955e50.roa (raw, json) Hash identifier: dvCee3kJWB5vOt3KP5gpT4KzCHvSSr+1qXVy5yKdSlY= Subject key identifier: B4:C4:5F:68:05:15:75:D8:F6:28:F1:82:9A:A4:26:7E:6C:F4:BC:D0 Certificate issuer: /CN=35be4068-f7e5-404b-9693-dcff4b2e8f95 Certificate serial: 010D0C9F4328584D55BA43AD01379083F61DB400 Authority key identifier: C7:9B:4D:25:4A:8B:FB:52:4F:3B:6E:96:D2:D8:02:62:D1:A9:07:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/c038d6f1-52c4-353f-bf06-0895e4955e50.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 64236 IP address blocks: 199.193.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/35be4068-f7e5-404b-9693-dcff4b2e8f95.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/35be4068-f7e5-404b-9693-dcff4b2e8f95.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:ba:43:ad:01:37:90:83:f6:1d:b4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35be4068-f7e5-404b-9693-dcff4b2e8f95 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=2b675e2e-53e2-4123-a8da-b209845e1cc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:75:db:5f:11:b7:fd:e0:ac:e6:0e:e1:af:b5: 3b:36:ca:45:17:78:4d:6a:59:ba:a8:dd:02:3e:a8: 35:91:0e:98:e7:7a:05:e1:4b:2a:d9:da:22:60:a0: 88:d1:52:4f:79:fb:46:9b:6a:73:27:da:72:04:13: 54:1f:68:9f:3d:43:c9:fa:4b:80:bf:3c:cd:e1:16: 82:e7:fe:c5:40:39:46:61:65:64:bd:34:fd:1d:fe: 23:c8:2f:4d:33:46:f1:95:15:5f:27:e4:13:f1:ef: fc:79:65:23:75:60:a8:c8:08:6d:17:93:b4:42:31: af:1b:5b:49:af:6c:fe:ba:b4:71:d5:0e:aa:c3:98: 4a:65:fd:9a:1d:ff:b4:13:4a:74:76:1f:ab:ff:2c: 65:45:11:20:05:0a:4e:0c:80:49:38:83:d1:4f:e2: 06:a2:30:90:d4:8d:0f:dc:6b:76:c7:73:bc:79:80: 39:b0:2f:dc:d3:11:5c:58:d1:ba:d1:7a:8a:65:8c: 1a:3f:79:e2:f8:a3:e7:a8:a8:d5:9e:70:99:94:3a: ab:a8:9b:c7:46:18:8c:4b:28:74:4a:18:35:be:37: fa:17:42:e9:64:b0:b8:99:05:ee:d8:9e:8b:78:c6: 5b:4a:98:b1:61:3d:fd:d4:ad:99:84:95:60:7f:e9: 9a:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:C4:5F:68:05:15:75:D8:F6:28:F1:82:9A:A4:26:7E:6C:F4:BC:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/c038d6f1-52c4-353f-bf06-0895e4955e50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/35be4068-f7e5-404b-9693-dcff4b2e8f95.crl X509v3 Authority Key Identifier: keyid:C7:9B:4D:25:4A:8B:FB:52:4F:3B:6E:96:D2:D8:02:62:D1:A9:07:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95.cer sbgp-ipAddrBlock: critical IPv4: 199.193.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:c5:41:ab:7f:1d:bb:50:5a:0e:2b:a7:50:d1:0c:08:02:18: ce:57:fd:ba:a2:b2:46:d9:d4:73:f4:87:a3:bc:ad:cd:fb:83: a0:c4:42:56:c4:d5:4c:5a:13:6b:92:0b:9f:8f:65:05:de:59: a7:42:ed:f0:53:a2:87:23:01:62:40:31:1f:87:2a:1d:9e:c1: 21:55:b4:53:de:40:dd:c0:04:ef:fd:e6:d5:5e:74:c4:a7:c5: e4:12:3d:25:c4:7f:95:46:35:d7:40:bf:a4:74:29:e7:6f:23: 69:e8:5d:66:ce:e5:3e:19:1d:04:ad:19:a7:f9:7a:7b:b0:a8: 3f:02:ad:93:53:89:3c:58:fb:a8:99:dd:b7:4f:5b:f4:ec:67: 3b:61:d1:06:29:14:35:ab:9b:8f:c2:24:06:b6:99:9c:0a:39: bc:52:ca:db:0b:4f:5d:9c:34:e6:93:d3:19:93:b9:53:ef:fe: f2:61:bc:bd:94:03:1b:7b:f0:f7:ff:3c:78:55:a6:52:73:85: 40:5d:4a:75:06:c2:d0:ae:e3:6f:b1:22:fa:8b:69:0b:1c:be: 59:89:fb:23:3b:63:64:aa:9b:e7:0f:02:d0:4c:f8:08:93:a4: 76:a8:e2:f3:17:16:c4:e3:2d:8a:af:94:3e:da:1f:c2:67:c6: 92:45:87:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VukOtATeQg/YdtAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZTQwNjgtZjdlNS00MDRiLTk2OTMtZGNmZjRiMmU4 Zjk1MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk MmI2NzVlMmUtNTNlMi00MTIzLWE4ZGEtYjIwOTg0NWUxY2M2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4XXbXxG3/eCs5g7hr7U7NspFF3hNalm6qN0C Pqg1kQ6Y53oF4Usq2doiYKCI0VJPeftGm2pzJ9pyBBNUH2ifPUPJ+kuAvzzN4RaC 5/7FQDlGYWVkvTT9Hf4jyC9NM0bxlRVfJ+QT8e/8eWUjdWCoyAhtF5O0QjGvG1tJ r2z+urRx1Q6qw5hKZf2aHf+0E0p0dh+r/yxlRREgBQpODIBJOIPRT+IGojCQ1I0P 3Gt2x3O8eYA5sC/c0xFcWNG60XqKZYwaP3ni+KPnqKjVnnCZlDqrqJvHRhiMSyh0 Shg1vjf6F0LpZLC4mQXu2J6LeMZbSpixYT391K2ZhJVgf+ma8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLTEX2gFFXXY9ijxgpqkJn5s9LzQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zNWJl NDA2OC1mN2U1LTQwNGItOTY5My1kY2ZmNGIyZThmOTUvYzAzOGQ2ZjEtNTJjNC0z NTNmLWJmMDYtMDg5NWU0OTU1ZTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzViZTQwNjgtZjdlNS00MDRiLTk2 OTMtZGNmZjRiMmU4Zjk1LzM1YmU0MDY4LWY3ZTUtNDA0Yi05NjkzLWRjZmY0YjJl OGY5NS5jcmwwHwYDVR0jBBgwFoAUx5tNJUqL+1JPO26W0tgCYtGpB88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zNWJlNDA2OC1mN2U1LTQwNGItOTY5My1kY2Zm NGIyZThmOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx8GYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIjFQat/HbtQWg4rp1DRDAgCGM5X/bqiskbZ1HP0h6O8rc37g6DEQlbE 1UxaE2uSC5+PZQXeWadC7fBToocjAWJAMR+HKh2ewSFVtFPeQN3ABO/95tVedMSn xeQSPSXEf5VGNddAv6R0KedvI2noXWbO5T4ZHQStGaf5enuwqD8CrZNTiTxY+6iZ 3bdPW/TsZzth0QYpFDWrm4/CJAa2mZwKObxSytsLT12cNOaT0xmTuVPv/vJhvL2U Axt78Pf/PHhVplJzhUBdSnUGwtCu42+xIvqLaQscvlmJ+yM7Y2Sqm+cPAtBM+AiT pHao4vMXFsTjLYqvlD7aH8JnxpJFh4k= -----END CERTIFICATE-----Generated at Sat Apr 18 02:40:38 2026 by rpki-client