$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/f6fac09e-6dfd-30ef-b8c0-2da92bc53a32.roa File: f6fac09e-6dfd-30ef-b8c0-2da92bc53a32.roa (raw, json) Hash identifier: NqRoQFivKGzuCGJAE0N6ND6XD/t0Gz9kTVBg8f/056A= Subject key identifier: 8F:DB:43:2C:66:3B:EA:D8:A1:5B:CB:27:D1:F3:33:FB:DA:29:ED:92 Certificate issuer: /CN=21dd6860-719e-46c0-8b7c-89b9e8d88da6 Certificate serial: 010D0C9F4328584F2957B5D2EDFD93F3C2696B00 Authority key identifier: 42:79:8D:AA:08:72:7C:74:A2:5D:C9:91:AD:DB:EA:CA:2E:FC:A5:28 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/f6fac09e-6dfd-30ef-b8c0-2da92bc53a32.roa Signing time: Sun 13 Sep 2026 13:00:11 +0000 ROA not before: Sun 13 Sep 2026 13:00:11 +0000 ROA not after: Sat 12 Dec 2026 14:00:11 +0000 asID: 12129 IP address blocks: 199.167.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/21dd6860-719e-46c0-8b7c-89b9e8d88da6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/21dd6860-719e-46c0-8b7c-89b9e8d88da6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:29:57:b5:d2:ed:fd:93:f3:c2:69:6b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21dd6860-719e-46c0-8b7c-89b9e8d88da6 Validity Not Before: Sep 13 13:00:11 2026 GMT Not After : Dec 12 14:00:11 2026 GMT Subject: CN=7ff4a639-54ef-435b-9c31-cee29b874fee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:aa:f9:b7:d7:72:b3:ba:9e:c6:9f:b7:dd:b6: d4:6a:07:f4:78:14:81:c2:c9:6e:ac:e4:ed:ba:c4: d9:96:95:d4:73:df:71:44:a1:0a:2e:9c:56:ed:7b: 1a:35:c7:4a:15:92:95:ef:75:9d:3b:78:57:4d:84: e3:f3:d5:42:9c:a7:b0:78:9e:47:dd:d0:4d:58:76: 80:95:af:ca:14:74:bb:a4:1a:43:7b:33:75:c5:b4: 11:12:03:ff:1e:ec:19:a0:b0:0f:5e:e5:52:83:5f: 49:1f:a6:3e:b9:bf:5b:8e:d8:ff:19:00:27:78:f7: ea:1b:5e:ec:6f:1e:e8:0b:e2:e4:37:37:67:d1:91: 4e:0a:7d:67:e0:01:7e:a9:bc:14:78:8e:82:27:a7: 14:2e:19:02:55:80:b8:c4:fc:90:74:55:fd:22:a0: 7c:87:22:d6:33:ee:bc:e1:0d:fa:16:0e:4d:44:f3: 55:4a:84:17:61:fa:d5:e7:d8:e6:1b:a2:47:fe:15: 4a:5c:4e:ea:44:ee:bf:c5:7f:7a:dd:e5:6b:97:c5: c2:64:70:68:94:1a:9f:df:31:56:24:fc:bc:e0:f2: ba:fd:d9:cd:42:22:60:c7:0f:08:c5:b3:26:89:0b: 02:b7:c0:86:e3:0c:cb:f2:c7:f0:aa:2a:2c:0e:61: 0f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:DB:43:2C:66:3B:EA:D8:A1:5B:CB:27:D1:F3:33:FB:DA:29:ED:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/f6fac09e-6dfd-30ef-b8c0-2da92bc53a32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/21dd6860-719e-46c0-8b7c-89b9e8d88da6.crl X509v3 Authority Key Identifier: keyid:42:79:8D:AA:08:72:7C:74:A2:5D:C9:91:AD:DB:EA:CA:2E:FC:A5:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6.cer sbgp-ipAddrBlock: critical IPv4: 199.167.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:20:9c:93:65:8d:11:6c:a7:cb:2c:ee:9b:fc:9e:e6:57:1e: 8e:6b:05:0f:b0:45:ad:49:ec:2c:61:b0:d7:95:20:b7:86:5d: 82:b5:5a:ba:25:03:af:c4:aa:9c:af:df:89:36:db:aa:fa:af: 5b:6c:47:9e:fc:d5:88:40:37:6e:2c:0c:dd:a6:f0:b3:98:4b: c6:76:d7:22:39:b1:88:c1:ed:d1:a5:21:d5:39:6c:74:f7:f3: 0d:9c:50:39:32:70:5e:81:fc:d5:74:07:70:68:64:7c:e4:29: eb:2b:80:ea:4d:4f:87:e5:ef:85:01:1e:bf:f4:c4:17:b9:b9: 22:46:51:e9:47:ea:1d:6e:fa:5a:d3:57:b8:f6:00:91:2f:a2: a3:87:92:aa:6e:6c:cb:41:9e:c1:63:33:2c:15:7a:92:99:24: f1:d9:32:7a:a8:65:8c:ec:d1:7b:5a:26:93:fb:8f:df:ae:35: e9:fe:1f:88:d9:be:f0:4b:9e:15:d2:30:bd:13:17:a2:ee:53: b5:6c:72:14:94:c8:3a:77:79:49:3a:42:eb:04:28:a1:28:c1: d8:4e:a8:a9:3b:1c:aa:e6:10:79:c0:34:5c:48:98:1e:0b:0e: 47:ea:47:05:69:31:c7:6f:23:f6:e9:42:e9:ec:d8:4c:3b:92: a5:9a:63:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8pV7XS7f2T88JpawAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFkZDY4NjAtNzE5ZS00NmMwLThiN2MtODliOWU4ZDg4 ZGE2MB4XDTI2MDkxMzEzMDAxMVoXDTI2MTIxMjE0MDAxMVowLzEtMCsGA1UEAxMk N2ZmNGE2MzktNTRlZi00MzViLTljMzEtY2VlMjliODc0ZmVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6r5t9dys7qexp+33bbUagf0eBSBwslurOTt usTZlpXUc99xRKEKLpxW7XsaNcdKFZKV73WdO3hXTYTj89VCnKeweJ5H3dBNWHaA la/KFHS7pBpDezN1xbQREgP/HuwZoLAPXuVSg19JH6Y+ub9bjtj/GQAnePfqG17s bx7oC+LkNzdn0ZFOCn1n4AF+qbwUeI6CJ6cULhkCVYC4xPyQdFX9IqB8hyLWM+68 4Q36Fg5NRPNVSoQXYfrV59jmG6JH/hVKXE7qRO6/xX963eVrl8XCZHBolBqf3zFW JPy84PK6/dnNQiJgxw8IxbMmiQsCt8CG4wzL8sfwqiosDmEP7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI/bQyxmO+rYoVvLJ9HzM/vaKe2SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yMWRk Njg2MC03MTllLTQ2YzAtOGI3Yy04OWI5ZThkODhkYTYvZjZmYWMwOWUtNmRmZC0z MGVmLWI4YzAtMmRhOTJiYzUzYTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjFkZDY4NjAtNzE5ZS00NmMwLThi N2MtODliOWU4ZDg4ZGE2LzIxZGQ2ODYwLTcxOWUtNDZjMC04YjdjLTg5YjllOGQ4 OGRhNi5jcmwwHwYDVR0jBBgwFoAUQnmNqghyfHSiXcmRrdvqyi78pSgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yMWRkNjg2MC03MTllLTQ2YzAtOGI3Yy04OWI5 ZThkODhkYTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx6f8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEYgnJNljRFsp8ss7pv8nuZXHo5rBQ+wRa1J7CxhsNeVILeGXYK1Wrol A6/Eqpyv34k226r6r1tsR5781YhAN24sDN2m8LOYS8Z21yI5sYjB7dGlIdU5bHT3 8w2cUDkycF6B/NV0B3BoZHzkKesrgOpNT4fl74UBHr/0xBe5uSJGUelH6h1u+lrT V7j2AJEvoqOHkqpubMtBnsFjMywVepKZJPHZMnqoZYzs0XtaJpP7j9+uNen+H4jZ vvBLnhXSML0TF6LuU7VschSUyDp3eUk6QusEKKEowdhOqKk7HKrmEHnANFxImB4L DkfqRwVpMcdvI/bpQuns2Ew7kqWaY0Y= -----END CERTIFICATE-----Generated at Tue Sep 22 07:16:25 2026 by rpki-client