$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/21ab033e-43b4-38f5-92bd-9cc6081b6c22.roa File: 21ab033e-43b4-38f5-92bd-9cc6081b6c22.roa (raw, json) Hash identifier: Uv3EoLnFR4BozOM82Jdzn81VU5r1uRZPrh+pLIUr2i0= Subject key identifier: 79:78:FD:8B:D5:BF:9A:F6:80:ED:BA:F5:F6:99:B6:FC:99:EC:36:87 Certificate issuer: /CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa Certificate serial: 010D0C9F4328584F6F2312471D9DCBF99192B300 Authority key identifier: 91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/21ab033e-43b4-38f5-92bd-9cc6081b6c22.roa Signing time: Thu 08 Oct 2026 13:00:12 +0000 ROA not before: Thu 08 Oct 2026 13:00:12 +0000 ROA not after: Wed 06 Jan 2027 14:00:12 +0000 asID: 62240 IP address blocks: 209.107.192.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6f:23:12:47:1d:9d:cb:f9:91:92:b3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa Validity Not Before: Oct 8 13:00:12 2026 GMT Not After : Jan 6 14:00:12 2027 GMT Subject: CN=8d1e764d-7ae8-4c96-8055-861bd9712dfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:8e:e0:33:5d:fb:24:23:74:bd:62:bc:af:57: db:17:d2:97:e5:43:7b:d9:54:45:e1:1f:e2:de:a9: 28:05:bc:b0:ea:e6:65:55:c2:b2:91:d4:34:59:36: 1e:85:01:8a:62:ea:23:6d:9f:40:4e:8f:3d:93:6a: 31:f8:65:40:3a:60:87:e7:df:29:39:ac:9b:a2:44: 57:ed:29:bf:57:c3:f3:6a:58:49:67:3f:20:57:91: e2:5f:a0:f2:de:33:0b:c5:48:a0:71:c6:e1:55:10: 5d:b5:9f:8c:ea:0e:40:64:ce:b9:4f:34:b6:9f:8d: 25:19:d5:d0:42:4c:7d:bb:a5:ac:67:8d:45:24:eb: d5:fa:e8:0d:8a:a2:68:62:04:80:e4:59:94:81:8f: 26:3d:58:c9:e3:fb:ce:6a:64:8a:38:0f:b1:b5:a9: 16:4e:d1:3c:13:7e:5c:79:e4:50:a0:92:fe:5b:27: ca:8e:63:bf:10:96:26:b5:f4:6a:62:cd:87:23:83: 6e:0a:58:ae:71:4f:ef:a9:00:fd:b2:61:af:a3:b8: 13:7c:bd:40:c5:32:45:46:6b:6e:15:8b:28:41:b9: 6f:bc:a3:21:3c:5b:90:82:74:f2:49:55:d6:6f:4e: 28:f3:eb:e5:f1:d6:a9:ac:c1:46:20:80:a2:b0:27: 83:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:78:FD:8B:D5:BF:9A:F6:80:ED:BA:F5:F6:99:B6:FC:99:EC:36:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/21ab033e-43b4-38f5-92bd-9cc6081b6c22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl X509v3 Authority Key Identifier: keyid:91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer sbgp-ipAddrBlock: critical IPv4: 209.107.192.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:d8:d9:0c:83:7e:7f:ce:84:cf:54:29:62:30:49:49:ce:dc: 49:80:76:7b:55:1a:6c:e1:e4:d4:a3:c1:7f:0e:89:b5:a0:08: f9:40:58:c2:98:fb:17:91:5d:62:df:e9:88:3a:0e:78:bd:7f: 05:e6:58:b0:c9:08:03:6c:b8:d2:19:4d:39:34:bb:19:da:a3: 9e:bf:a3:ec:0a:c8:73:e1:57:ec:ef:f7:3c:bd:81:cf:43:2e: 1e:3a:c5:0c:50:8b:30:a2:b2:28:90:b1:b1:0a:6d:85:c1:6c: b0:7a:85:19:58:5e:35:aa:1f:be:90:2f:83:b1:29:c7:8c:05: be:96:11:82:fd:d8:84:c6:2d:ec:0e:b7:d1:0a:be:22:58:68: 8c:87:87:ca:aa:b7:ec:db:bc:d9:91:30:4e:52:51:eb:00:0a: 02:e0:5e:89:68:af:b7:5c:a2:27:89:27:42:15:df:3c:38:76: a7:26:eb:19:3d:26:be:c5:65:4a:ed:90:2f:5f:4d:c5:cc:12: a0:f2:ee:8c:c3:cc:6a:a7:5a:db:aa:a6:1b:04:cc:1a:01:93: ce:88:d2:1b:7a:fa:25:59:11:eb:a9:75:3a:ca:e3:7c:eb:83: a0:23:d4:87:c4:c4:9c:e5:46:9f:b9:21:2e:b4:ad:eb:35:b8: 54:d1:24:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9vIxJHHZ3L+ZGSswAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQyZDFiOTgtNTEyMi00ZDAzLTg2ZjUtMGRjOGQ2MzIz OGFhMB4XDTI2MTAwODEzMDAxMloXDTI3MDEwNjE0MDAxMlowLzEtMCsGA1UEAxMk OGQxZTc2NGQtN2FlOC00Yzk2LTgwNTUtODYxYmQ5NzEyZGZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz47gM137JCN0vWK8r1fbF9KX5UN72VRF4R/i 3qkoBbyw6uZlVcKykdQ0WTYehQGKYuojbZ9ATo89k2ox+GVAOmCH598pOaybokRX 7Sm/V8PzalhJZz8gV5HiX6Dy3jMLxUigccbhVRBdtZ+M6g5AZM65TzS2n40lGdXQ Qkx9u6WsZ41FJOvV+ugNiqJoYgSA5FmUgY8mPVjJ4/vOamSKOA+xtakWTtE8E35c eeRQoJL+WyfKjmO/EJYmtfRqYs2HI4NuCliucU/vqQD9smGvo7gTfL1AxTJFRmtu FYsoQblvvKMhPFuQgnTySVXWb04o8+vl8daprMFGIICisCeD1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHl4/YvVv5r2gO269faZtvyZ7DaHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJk MWI5OC01MTIyLTRkMDMtODZmNS0wZGM4ZDYzMjM4YWEvMjFhYjAzM2UtNDNiNC0z OGY1LTkyYmQtOWNjNjA4MWI2YzIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWQyZDFiOTgtNTEyMi00ZDAzLTg2 ZjUtMGRjOGQ2MzIzOGFhLzFkMmQxYjk4LTUxMjItNGQwMy04NmY1LTBkYzhkNjMy MzhhYS5jcmwwHwYDVR0jBBgwFoAUkS7TWanq9XfcNdgKY6T/wq3OaCMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJkMWI5OC01MTIyLTRkMDMtODZmNS0wZGM4 ZDYzMjM4YWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0WvAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFXY2QyDfn/OhM9UKWIwSUnO3EmAdntVGmzh5NSjwX8OibWgCPlAWMKY +xeRXWLf6Yg6Dni9fwXmWLDJCANsuNIZTTk0uxnao56/o+wKyHPhV+zv9zy9gc9D Lh46xQxQizCisiiQsbEKbYXBbLB6hRlYXjWqH76QL4OxKceMBb6WEYL92ITGLewO t9EKviJYaIyHh8qqt+zbvNmRME5SUesACgLgXolor7dcoieJJ0IV3zw4dqcm6xk9 Jr7FZUrtkC9fTcXMEqDy7ozDzGqnWtuqphsEzBoBk86I0ht6+iVZEeupdTrK43zr g6Aj1IfExJzlRp+5IS60res1uFTRJFk= -----END CERTIFICATE-----Generated at Sat Oct 10 16:43:32 2026 by rpki-client