$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/893cd2a1-ffd7-42b2-af7a-45dc5cbce148/eb99a8e2-edda-3b36-a16c-3f6a60b9d8d2.roa File: eb99a8e2-edda-3b36-a16c-3f6a60b9d8d2.roa (raw, json) Hash identifier: BiqmUFW7dFDmduQFf+aM0TjanrSzk8+tcPJXjgsypOg= Subject key identifier: C3:A6:9F:71:AB:66:D9:AF:EF:E7:17:F1:CF:54:18:BC:53:C6:A9:5D Certificate issuer: /CN=893cd2a1-ffd7-42b2-af7a-45dc5cbce148 Certificate serial: 010D0C9F4328584F3FAD8A6CC3FB23D4BF742100 Authority key identifier: 70:69:53:F2:57:BB:7B:D0:57:53:9C:62:32:B1:F6:E6:00:55:83:EC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/893cd2a1-ffd7-42b2-af7a-45dc5cbce148.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/893cd2a1-ffd7-42b2-af7a-45dc5cbce148/eb99a8e2-edda-3b36-a16c-3f6a60b9d8d2.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 23486 IP address blocks: 199.58.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/893cd2a1-ffd7-42b2-af7a-45dc5cbce148/893cd2a1-ffd7-42b2-af7a-45dc5cbce148.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/893cd2a1-ffd7-42b2-af7a-45dc5cbce148/893cd2a1-ffd7-42b2-af7a-45dc5cbce148.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/893cd2a1-ffd7-42b2-af7a-45dc5cbce148.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:8a:6c:c3:fb:23:d4:bf:74:21:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=893cd2a1-ffd7-42b2-af7a-45dc5cbce148 Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=ac326937-bc78-40cc-9f1f-e8147f7d474b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:7b:25:f2:b0:4e:6d:96:ee:f5:25:14:a7:76: 92:b1:46:60:be:54:64:65:e7:16:2b:d3:d4:5e:c3: cd:ca:c3:b4:75:d4:d2:60:46:1c:44:75:f3:bc:9b: a9:72:48:e8:1f:3e:54:2e:92:d0:6d:23:2d:64:0b: 30:27:03:84:0f:c4:87:61:90:b6:12:64:07:34:0e: bb:b4:4f:c4:2d:86:45:e7:be:67:6e:d8:c9:a3:60: 08:0e:6c:e2:c2:4e:20:f4:4c:e7:20:f0:49:e5:50: f0:99:02:2e:cd:08:1e:05:c6:44:bf:f7:a8:1d:35: 06:a0:1d:a2:06:50:bd:9c:7f:94:67:bc:fa:08:37: 4e:a0:20:0d:4d:e8:f4:b8:d5:eb:01:20:b0:0c:18: 61:0b:6b:df:1d:da:d0:46:82:48:7b:5d:e0:fc:c4: 94:b0:6b:0c:c7:38:93:08:86:df:80:ea:91:22:de: 96:7e:c8:36:84:71:ff:4d:27:31:eb:8d:90:fc:64: 0c:90:0a:8e:8d:b3:d2:57:ca:c5:33:1c:ee:4a:9c: eb:39:e3:14:01:66:eb:9c:ed:48:ff:34:75:41:c7: 53:c8:7d:4f:67:64:19:ea:4a:f2:bd:42:72:06:5f: 1e:eb:02:d8:46:29:26:23:38:33:b1:69:bd:08:7d: f5:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:A6:9F:71:AB:66:D9:AF:EF:E7:17:F1:CF:54:18:BC:53:C6:A9:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/893cd2a1-ffd7-42b2-af7a-45dc5cbce148/eb99a8e2-edda-3b36-a16c-3f6a60b9d8d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/893cd2a1-ffd7-42b2-af7a-45dc5cbce148/893cd2a1-ffd7-42b2-af7a-45dc5cbce148.crl X509v3 Authority Key Identifier: keyid:70:69:53:F2:57:BB:7B:D0:57:53:9C:62:32:B1:F6:E6:00:55:83:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/893cd2a1-ffd7-42b2-af7a-45dc5cbce148.cer sbgp-ipAddrBlock: critical IPv4: 199.58.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:54:90:61:c3:4a:bb:3e:7f:fc:69:74:2a:43:2f:cd:9f:04: a6:9a:41:6f:cf:de:f5:ee:5f:68:9c:4a:35:c9:04:20:34:1c: 4c:84:0a:1c:55:d7:c6:04:29:9b:b5:24:d3:eb:45:33:fe:9e: e2:f4:40:fb:45:02:f0:f4:d0:89:4c:05:f8:c4:92:3c:c1:96: 72:cc:80:81:19:d6:0d:bb:db:1b:38:62:68:23:ce:e2:0b:bd: 24:dc:e7:86:2a:f5:28:b8:53:df:97:c4:90:12:d4:2f:26:32: 26:ef:0c:08:57:1a:8d:ab:ff:ee:44:57:4c:34:96:16:36:b4: 5c:f1:d3:15:ae:17:f2:74:4f:ee:89:05:de:30:9e:c5:79:88: c7:ee:84:60:48:0f:d0:7c:d9:6b:da:57:0e:a5:06:7f:58:6e: 8f:4f:cc:c6:c9:5f:e4:7a:bb:80:1d:ba:dd:8a:52:34:a6:d4: 7d:21:ee:2d:ca:77:de:06:9c:3f:e5:9f:54:ae:04:7a:3a:09: f9:ad:f7:87:ca:da:14:b5:af:df:d4:58:6d:e5:51:35:cf:1c: 09:6b:1f:21:23:01:57:f0:e3:8b:c8:44:35:74:b2:bf:9f:49: 28:3e:aa:0b:c3:ba:af:90:ae:06:16:66:a8:99:0e:ac:46:1f: 31:da:a2:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8/rYpsw/sj1L90IQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODkzY2QyYTEtZmZkNy00MmIyLWFmN2EtNDVkYzVjYmNl MTQ4MB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk YWMzMjY5MzctYmM3OC00MGNjLTlmMWYtZTgxNDdmN2Q0NzRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknsl8rBObZbu9SUUp3aSsUZgvlRkZecWK9PU XsPNysO0ddTSYEYcRHXzvJupckjoHz5ULpLQbSMtZAswJwOED8SHYZC2EmQHNA67 tE/ELYZF575nbtjJo2AIDmziwk4g9EznIPBJ5VDwmQIuzQgeBcZEv/eoHTUGoB2i BlC9nH+UZ7z6CDdOoCANTej0uNXrASCwDBhhC2vfHdrQRoJIe13g/MSUsGsMxziT CIbfgOqRIt6Wfsg2hHH/TScx642Q/GQMkAqOjbPSV8rFMxzuSpzrOeMUAWbrnO1I /zR1QcdTyH1PZ2QZ6kryvUJyBl8e6wLYRikmIzgzsWm9CH31xQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMOmn3GrZtmv7+cX8c9UGLxTxqldMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84OTNj ZDJhMS1mZmQ3LTQyYjItYWY3YS00NWRjNWNiY2UxNDgvZWI5OWE4ZTItZWRkYS0z YjM2LWExNmMtM2Y2YTYwYjlkOGQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvODkzY2QyYTEtZmZkNy00MmIyLWFm N2EtNDVkYzVjYmNlMTQ4Lzg5M2NkMmExLWZmZDctNDJiMi1hZjdhLTQ1ZGM1Y2Jj ZTE0OC5jcmwwHwYDVR0jBBgwFoAUcGlT8le7e9BXU5xiMrH25gBVg+wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi84OTNjZDJhMS1mZmQ3LTQyYjItYWY3YS00NWRj NWNiY2UxNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxzqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ5UkGHDSrs+f/xpdCpDL82fBKaaQW/P3vXuX2icSjXJBCA0HEyEChxV 18YEKZu1JNPrRTP+nuL0QPtFAvD00IlMBfjEkjzBlnLMgIEZ1g272xs4YmgjzuIL vSTc54Yq9Si4U9+XxJAS1C8mMibvDAhXGo2r/+5EV0w0lhY2tFzx0xWuF/J0T+6J Bd4wnsV5iMfuhGBID9B82WvaVw6lBn9Ybo9PzMbJX+R6u4Adut2KUjSm1H0h7i3K d94GnD/ln1SuBHo6Cfmt94fK2hS1r9/UWG3lUTXPHAlrHyEjAVfw44vIRDV0sr+f SSg+qgvDuq+QrgYWZqiZDqxGHzHaoq8= -----END CERTIFICATE-----Generated at Tue Sep 22 02:48:48 2026 by rpki-client