$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/12594156-95f0-4221-848a-fb9102de4926/fd2788b6-982a-3487-aeac-c152692fac6a.roa File: fd2788b6-982a-3487-aeac-c152692fac6a.roa (raw, json) Hash identifier: hOrQLiq2p4aA1EJMIAYQx11AqXVmRwGZnPGWq8f+P/Y= Subject key identifier: 15:DA:46:24:03:CF:7D:6F:51:AD:68:BC:54:62:D5:F2:8A:4D:E3:A2 Certificate issuer: /CN=12594156-95f0-4221-848a-fb9102de4926 Certificate serial: 010D0C9F4328584F79C7387029CB646FAB6E6740 Authority key identifier: 31:48:E7:4D:6A:BB:0E:32:3C:21:98:DF:21:F2:63:D2:3B:E2:8F:41 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/12594156-95f0-4221-848a-fb9102de4926.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/12594156-95f0-4221-848a-fb9102de4926/fd2788b6-982a-3487-aeac-c152692fac6a.roa Signing time: Mon 12 Oct 2026 08:29:40 +0000 ROA not before: Mon 12 Oct 2026 08:29:40 +0000 ROA not after: Wed 25 Nov 2026 02:00:12 +0000 asID: 54144 IP address blocks: 199.21.116.0/24 maxlen: 24 199.21.117.0/24 maxlen: 24 199.21.118.0/24 maxlen: 24 199.21.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/12594156-95f0-4221-848a-fb9102de4926/12594156-95f0-4221-848a-fb9102de4926.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/12594156-95f0-4221-848a-fb9102de4926/12594156-95f0-4221-848a-fb9102de4926.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/12594156-95f0-4221-848a-fb9102de4926.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:79:c7:38:70:29:cb:64:6f:ab:6e:67:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12594156-95f0-4221-848a-fb9102de4926 Validity Not Before: Oct 12 08:29:40 2026 GMT Not After : Nov 25 02:00:12 2026 GMT Subject: CN=23a62a08-b227-4d79-911a-bf62e0bb3c4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:b5:f9:8c:74:07:6b:2a:63:81:1f:b0:20:43: 4f:10:6f:a0:6c:b4:5c:33:85:fc:7d:b7:14:58:ca: c4:4b:dd:26:8f:01:6b:d4:20:f4:6f:d9:09:ec:42: 73:5d:94:f7:5c:28:a7:7c:6b:d0:1d:5d:6a:bc:1b: 08:64:3e:e6:d2:38:36:15:4e:b7:17:8b:96:a1:7e: f8:e1:18:26:d7:40:9d:b4:04:a1:ac:88:5f:43:e8: 5f:1e:04:55:b6:65:1f:41:8f:82:ee:e8:75:06:31: 6b:5e:db:e2:3c:4e:38:e5:95:36:47:55:d2:04:6d: 76:5d:dd:70:ee:f2:e2:9b:dc:09:32:43:54:8e:91: fd:61:13:2c:39:40:d5:ed:33:09:c0:db:03:e9:19: e0:72:2f:1b:b0:57:d5:e0:f9:6c:d7:24:37:1e:a2: 22:2a:41:25:78:dc:dc:2a:df:ac:92:3f:50:77:d7: 27:09:59:03:0b:d2:80:db:ea:43:c0:37:52:9d:9d: 28:ed:62:37:0c:43:86:21:49:e0:54:d5:45:d8:d3: 0e:15:d0:30:dd:8b:fa:30:4b:6f:c3:38:90:fc:da: 1b:2b:e2:22:d5:0a:b4:32:e1:0a:5e:5e:c4:df:d5: 7f:2d:95:79:17:b5:6f:11:8d:a5:46:58:fb:16:b5: 0c:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:DA:46:24:03:CF:7D:6F:51:AD:68:BC:54:62:D5:F2:8A:4D:E3:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/12594156-95f0-4221-848a-fb9102de4926/fd2788b6-982a-3487-aeac-c152692fac6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/12594156-95f0-4221-848a-fb9102de4926/12594156-95f0-4221-848a-fb9102de4926.crl X509v3 Authority Key Identifier: keyid:31:48:E7:4D:6A:BB:0E:32:3C:21:98:DF:21:F2:63:D2:3B:E2:8F:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/12594156-95f0-4221-848a-fb9102de4926.cer sbgp-ipAddrBlock: critical IPv4: 199.21.116.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:8c:26:e1:ec:c2:8c:d5:8b:97:58:9c:a1:a4:1e:03:9a:1c: 4b:e5:73:1c:66:0b:5c:19:39:98:4b:de:e0:c0:3c:88:29:5e: 63:da:90:c0:6a:c3:bb:30:23:9f:d6:b0:23:c2:e1:ed:42:c0: 3c:56:b2:27:02:60:be:b5:c5:ba:32:67:7c:bc:88:07:ca:4d: db:32:a1:e5:d6:3b:86:68:6f:2b:7e:6a:eb:28:68:28:b5:2d: 11:98:76:e3:7b:41:cb:e2:9d:ae:2a:f7:4a:6b:60:ff:7c:eb: 7a:ca:a8:ed:11:b2:cc:08:74:9c:87:30:ae:91:74:5c:1d:e4: 51:0d:11:1b:08:71:db:5c:2b:7b:3c:98:e7:99:34:e5:35:a9: 25:3b:78:5c:d9:9b:cf:ac:e6:1d:d0:62:fd:4c:93:ad:5a:57: 6c:a3:2a:c4:d7:13:e6:22:78:29:bf:0f:4c:b3:e0:6d:17:6c: aa:f4:10:55:b9:e2:e5:ec:2b:a2:aa:b4:17:44:71:c6:6a:31: 6b:79:f7:0c:7a:d6:8e:64:d9:3c:ff:4f:2a:ce:2c:01:37:85: f9:f9:f7:75:eb:9b:59:97:64:35:31:69:9c:ff:42:43:9a:66: 24:1c:61:fb:fb:1e:75:8f:ee:69:7c:f2:bb:5d:d0:27:6f:9c: cc:10:dc:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE95xzhwKctkb6tuZ0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTI1OTQxNTYtOTVmMC00MjIxLTg0OGEtZmI5MTAyZGU0 OTI2MB4XDTI2MTAxMjA4Mjk0MFoXDTI2MTEyNTAyMDAxMlowLzEtMCsGA1UEAxMk MjNhNjJhMDgtYjIyNy00ZDc5LTkxMWEtYmY2MmUwYmIzYzRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbX5jHQHaypjgR+wIENPEG+gbLRcM4X8fbcU WMrES90mjwFr1CD0b9kJ7EJzXZT3XCinfGvQHV1qvBsIZD7m0jg2FU63F4uWoX74 4Rgm10CdtAShrIhfQ+hfHgRVtmUfQY+C7uh1BjFrXtviPE445ZU2R1XSBG12Xd1w 7vLim9wJMkNUjpH9YRMsOUDV7TMJwNsD6Rngci8bsFfV4Pls1yQ3HqIiKkEleNzc Kt+skj9Qd9cnCVkDC9KA2+pDwDdSnZ0o7WI3DEOGIUngVNVF2NMOFdAw3Yv6MEtv wziQ/NobK+Ii1Qq0MuEKXl7E39V/LZV5F7VvEY2lRlj7FrUMvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBXaRiQDz31vUa1ovFRi1fKKTeOiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xMjU5 NDE1Ni05NWYwLTQyMjEtODQ4YS1mYjkxMDJkZTQ5MjYvZmQyNzg4YjYtOTgyYS0z NDg3LWFlYWMtYzE1MjY5MmZhYzZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMTI1OTQxNTYtOTVmMC00MjIxLTg0 OGEtZmI5MTAyZGU0OTI2LzEyNTk0MTU2LTk1ZjAtNDIyMS04NDhhLWZiOTEwMmRl NDkyNi5jcmwwHwYDVR0jBBgwFoAUMUjnTWq7DjI8IZjfIfJj0jvij0EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xMjU5NDE1Ni05NWYwLTQyMjEtODQ4YS1mYjkx MDJkZTQ5MjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxxV0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIeMJuHswozVi5dYnKGkHgOaHEvlcxxmC1wZOZhL3uDAPIgpXmPakMBq w7swI5/WsCPC4e1CwDxWsicCYL61xboyZ3y8iAfKTdsyoeXWO4Zobyt+ausoaCi1 LRGYduN7Qcvina4q90prYP9863rKqO0RsswIdJyHMK6RdFwd5FENERsIcdtcK3s8 mOeZNOU1qSU7eFzZm8+s5h3QYv1Mk61aV2yjKsTXE+YieCm/D0yz4G0XbKr0EFW5 4uXsK6KqtBdEccZqMWt59wx61o5k2Tz/TyrOLAE3hfn593Xrm1mXZDUxaZz/QkOa ZiQcYfv7HnWP7ml88rtd0CdvnMwQ3PQ= -----END CERTIFICATE-----Generated at Tue Oct 13 11:20:30 2026 by rpki-client