$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/cb483792-d161-3b71-b488-5c52bb929cc3.roa File: cb483792-d161-3b71-b488-5c52bb929cc3.roa (raw, json) Hash identifier: E9gd9pTiGkKoOx6WA1tS9QQW4GT4cO55OskKy53E560= Subject key identifier: 68:76:59:F9:02:5E:AE:C3:39:87:7B:D4:70:BF:73:12:3D:CB:0D:A9 Certificate issuer: /CN=21dd6860-719e-46c0-8b7c-89b9e8d88da6 Certificate serial: 010D0C9F4328584F4973EB649FCAC9AAA0070280 Authority key identifier: 42:79:8D:AA:08:72:7C:74:A2:5D:C9:91:AD:DB:EA:CA:2E:FC:A5:28 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/cb483792-d161-3b71-b488-5c52bb929cc3.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30242 IP address blocks: 199.167.252.0/24 maxlen: 24 199.167.253.0/24 maxlen: 24 199.167.254.0/24 maxlen: 24 199.167.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/21dd6860-719e-46c0-8b7c-89b9e8d88da6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/21dd6860-719e-46c0-8b7c-89b9e8d88da6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:eb:64:9f:ca:c9:aa:a0:07:02:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21dd6860-719e-46c0-8b7c-89b9e8d88da6 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=b8bb3cde-e6f8-4c4f-b895-66bd2d2fa883 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:71:ce:46:6a:49:96:e2:9a:68:7d:81:30:0e: 4d:06:a6:06:c1:1b:ca:22:ad:9c:8c:f9:2b:1b:bc: 76:9b:9d:85:a4:49:7f:c5:15:2b:38:d0:f9:7b:eb: 59:e6:29:e4:47:7e:6c:c9:f5:08:87:af:7a:93:c9: b6:07:1d:cc:20:65:57:5c:85:0a:af:22:e3:77:df: 04:09:ff:b0:e1:ba:b4:13:16:f3:6c:6a:9b:77:08: 37:b9:37:4f:6f:b3:af:04:a5:ac:fd:54:c1:0a:3a: 3e:03:91:06:5b:60:6c:ba:53:4c:1e:1e:67:e2:6a: b1:ed:ea:f0:4c:be:1e:1c:f3:cc:e1:a7:71:ca:1c: be:02:46:c9:3a:7c:a5:68:08:a0:ed:58:9e:5e:da: 38:2e:33:23:ea:a7:b7:3f:af:f8:60:ac:77:2a:16: 31:88:bb:b3:56:17:76:83:f8:fb:b9:19:0a:75:5d: b7:25:74:d7:68:fd:9f:01:94:2d:92:1f:15:d7:91: f7:14:d2:82:3e:f9:42:32:4d:ce:57:f5:92:99:2b: 2e:09:cc:0a:a1:34:ea:da:e2:7e:de:b1:a6:41:98: f4:c2:08:b2:cd:7f:b6:0c:4b:49:fb:b7:ed:88:e2: 23:3b:92:71:8a:96:e1:5b:8f:3f:2d:90:82:c4:b7: 14:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:76:59:F9:02:5E:AE:C3:39:87:7B:D4:70:BF:73:12:3D:CB:0D:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/cb483792-d161-3b71-b488-5c52bb929cc3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/21dd6860-719e-46c0-8b7c-89b9e8d88da6.crl X509v3 Authority Key Identifier: keyid:42:79:8D:AA:08:72:7C:74:A2:5D:C9:91:AD:DB:EA:CA:2E:FC:A5:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6.cer sbgp-ipAddrBlock: critical IPv4: 199.167.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:e8:59:6f:92:7e:25:ea:e3:6f:29:53:35:a5:d6:ad:a1:f6: ee:5d:74:6b:b6:24:cc:06:3c:08:d7:c9:f0:5e:ff:79:64:10: 25:ca:7b:2e:70:31:5a:e2:84:38:3b:ff:d3:a0:74:22:6f:e8: f3:fd:29:9e:62:4d:05:d1:04:6b:23:18:e9:b0:7a:81:ee:a4: ea:2f:6d:50:c9:a3:6e:7f:69:8a:af:92:2c:7b:60:d8:be:8f: e6:bd:dc:fa:5a:c3:90:2e:4c:04:97:a0:0d:ec:7a:4f:61:91: 77:55:02:6f:31:db:42:cf:bc:82:19:62:ed:43:aa:f5:a6:cc: 25:94:ed:40:5d:c6:d3:bd:12:b9:79:e1:be:59:9f:43:73:63: c0:61:23:ed:5e:4c:e0:ec:9b:98:76:de:27:49:1e:73:26:84: ba:0d:cb:12:e3:a6:cf:68:90:9e:98:ed:44:3e:01:9d:72:64: 4e:2e:74:d3:0b:d7:62:57:b4:f2:e6:4a:52:14:92:a6:ea:d2: 05:3d:4c:00:d0:3d:4b:ea:94:7a:17:ba:50:fb:84:b2:1a:0e: df:c4:eb:d6:3c:d4:41:71:df:83:fd:29:c7:28:38:48:1e:d9: 84:c2:28:83:d6:0a:45:a3:1a:bf:78:43:9f:a5:5b:af:35:ad: cc:e5:14:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc+tkn8rJqqAHAoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFkZDY4NjAtNzE5ZS00NmMwLThiN2MtODliOWU4ZDg4 ZGE2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YjhiYjNjZGUtZTZmOC00YzRmLWI4OTUtNjZiZDJkMmZhODgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnHORmpJluKaaH2BMA5NBqYGwRvKIq2cjPkr G7x2m52FpEl/xRUrOND5e+tZ5inkR35syfUIh696k8m2Bx3MIGVXXIUKryLjd98E Cf+w4bq0ExbzbGqbdwg3uTdPb7OvBKWs/VTBCjo+A5EGW2BsulNMHh5n4mqx7erw TL4eHPPM4adxyhy+AkbJOnylaAig7VieXto4LjMj6qe3P6/4YKx3KhYxiLuzVhd2 g/j7uRkKdV23JXTXaP2fAZQtkh8V15H3FNKCPvlCMk3OV/WSmSsuCcwKoTTq2uJ+ 3rGmQZj0wgiyzX+2DEtJ+7ftiOIjO5JxipbhW48/LZCCxLcUWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGh2WfkCXq7DOYd71HC/cxI9yw2pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yMWRk Njg2MC03MTllLTQ2YzAtOGI3Yy04OWI5ZThkODhkYTYvY2I0ODM3OTItZDE2MS0z YjcxLWI0ODgtNWM1MmJiOTI5Y2MzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjFkZDY4NjAtNzE5ZS00NmMwLThi N2MtODliOWU4ZDg4ZGE2LzIxZGQ2ODYwLTcxOWUtNDZjMC04YjdjLTg5YjllOGQ4 OGRhNi5jcmwwHwYDVR0jBBgwFoAUQnmNqghyfHSiXcmRrdvqyi78pSgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yMWRkNjg2MC03MTllLTQ2YzAtOGI3Yy04OWI5 ZThkODhkYTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx6f8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACfoWW+SfiXq428pUzWl1q2h9u5ddGu2JMwGPAjXyfBe/3lkECXKey5w MVrihDg7/9OgdCJv6PP9KZ5iTQXRBGsjGOmweoHupOovbVDJo25/aYqvkix7YNi+ j+a93Ppaw5AuTASXoA3sek9hkXdVAm8x20LPvIIZYu1DqvWmzCWU7UBdxtO9Erl5 4b5Zn0NzY8BhI+1eTODsm5h23idJHnMmhLoNyxLjps9okJ6Y7UQ+AZ1yZE4udNML 12JXtPLmSlIUkqbq0gU9TADQPUvqlHoXulD7hLIaDt/E69Y81EFx34P9KccoOEge 2YTCKIPWCkWjGr94Q5+lW681rczlFJg= -----END CERTIFICATE-----Generated at Sat Oct 10 16:28:10 2026 by rpki-client