$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc/27eafd49-8a0f-35c3-b5d2-c8551421c50a.roa File: 27eafd49-8a0f-35c3-b5d2-c8551421c50a.roa (raw, json) Hash identifier: 73NCmbl6+8ARqyOlH1p0LS9PST2eBbND815ZywR9drY= Subject key identifier: BD:20:EE:C8:72:D9:C4:C3:4A:BF:35:FA:E3:1C:55:88:47:E9:83:82 Certificate issuer: /CN=c3636b71-fd09-4ee9-9f3e-552e5356a4fc Certificate serial: 010D0C9F4328584ED9C768DD069A7B0D0D6BD780 Authority key identifier: 79:6D:09:6B:34:46:E0:30:13:14:A7:0C:7E:66:B3:C3:4B:27:BC:D9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc/27eafd49-8a0f-35c3-b5d2-c8551421c50a.roa Signing time: Sun 16 Aug 2026 01:00:14 +0000 ROA not before: Sun 16 Aug 2026 01:00:14 +0000 ROA not after: Sat 14 Nov 2026 02:00:14 +0000 asID: 20016 IP address blocks: 199.58.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc/c3636b71-fd09-4ee9-9f3e-552e5356a4fc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc/c3636b71-fd09-4ee9-9f3e-552e5356a4fc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d9:c7:68:dd:06:9a:7b:0d:0d:6b:d7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3636b71-fd09-4ee9-9f3e-552e5356a4fc Validity Not Before: Aug 16 01:00:14 2026 GMT Not After : Nov 14 02:00:14 2026 GMT Subject: CN=90ab7309-a27a-4f50-b664-818cf4189070 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:53:31:b6:30:0c:f1:d9:29:44:f9:86:c7:2a: 74:de:28:b7:e8:bd:dc:f4:92:3c:3f:b0:f1:ab:6e: 0b:9a:2d:96:de:60:a0:db:7a:de:cb:8d:2c:60:b1: bf:af:bc:12:4d:90:ef:d4:67:64:e3:c0:72:c0:58: 3b:1c:70:7e:c0:d5:10:a4:d2:31:39:62:7f:32:26: dd:90:d2:fe:33:2d:89:f4:ff:be:73:cc:65:75:5f: 32:6f:28:3d:d9:36:7c:aa:d3:5c:51:6d:df:b2:0f: d6:62:f0:37:18:8a:31:05:83:74:cf:1d:52:f0:ca: 4a:d3:80:83:ca:61:64:cc:3c:df:9b:d2:be:e5:d1: 4a:b3:3b:03:38:f6:fc:6d:99:09:5d:4d:b7:81:94: 35:21:68:58:24:53:fc:12:22:75:79:3f:ab:eb:49: 5f:d9:38:b0:9a:be:d7:8f:31:51:3a:bc:f6:56:d1: d8:88:60:53:de:1e:cd:c0:ab:44:fc:2e:d1:41:d5: 8c:94:b6:0c:cc:9a:9e:26:42:66:4e:d4:38:cc:bd: 31:c8:d9:1f:fa:da:35:ba:9c:cd:70:f6:86:90:42: 31:21:a1:c0:90:15:43:fb:0b:51:06:bb:55:a8:34: a0:e9:75:ea:48:26:56:66:36:30:e0:f8:c8:18:8d: 44:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:20:EE:C8:72:D9:C4:C3:4A:BF:35:FA:E3:1C:55:88:47:E9:83:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc/27eafd49-8a0f-35c3-b5d2-c8551421c50a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc/c3636b71-fd09-4ee9-9f3e-552e5356a4fc.crl X509v3 Authority Key Identifier: keyid:79:6D:09:6B:34:46:E0:30:13:14:A7:0C:7E:66:B3:C3:4B:27:BC:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc.cer sbgp-ipAddrBlock: critical IPv4: 199.58.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:85:eb:e3:e6:c9:91:fc:78:70:59:93:21:e2:89:9d:43:6b: 4b:4d:49:92:75:db:90:5c:36:8b:29:09:0b:63:1a:42:0b:c1: fc:c4:61:3c:91:8a:15:46:b5:a7:dc:04:37:99:16:f4:51:5e: 7c:f9:94:d7:c0:c2:46:38:23:0e:6b:14:25:43:91:1c:f1:0a: e7:3f:fe:cb:0b:ee:1c:f6:7b:92:73:62:f4:77:33:aa:0f:ba: 57:1a:e2:c4:4d:1d:dd:20:4a:e8:c8:1a:74:ed:d5:3c:81:c4: 83:dd:bc:32:9f:3e:08:e8:40:34:4b:2b:3c:05:9d:95:17:96: b9:13:dc:f6:88:9a:dd:87:a5:f5:fc:fe:a2:eb:60:ba:e2:fd: 85:1a:34:96:d0:09:7c:c6:46:39:ba:81:3b:a2:7f:92:84:0e: 97:19:bc:4c:e8:36:81:e4:90:e6:8c:cf:da:91:97:81:47:ec: ca:6e:41:7b:ca:49:32:91:c3:96:e0:7e:4c:f1:1c:59:4f:37: 02:bd:83:91:21:5e:61:7d:17:6f:27:14:d3:23:76:5f:51:7f: 7e:b2:af:85:a8:ef:bf:41:66:2a:a9:44:f0:c2:a1:8e:a0:3c: c1:5e:6a:2c:1d:48:ff:88:37:62:ca:95:42:db:b6:54:94:b9: 85:f0:29:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7Zx2jdBpp7DQ1r14AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzM2MzZiNzEtZmQwOS00ZWU5LTlmM2UtNTUyZTUzNTZh NGZjMB4XDTI2MDgxNjAxMDAxNFoXDTI2MTExNDAyMDAxNFowLzEtMCsGA1UEAxMk OTBhYjczMDktYTI3YS00ZjUwLWI2NjQtODE4Y2Y0MTg5MDcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFMxtjAM8dkpRPmGxyp03ii36L3c9JI8P7Dx q24Lmi2W3mCg23rey40sYLG/r7wSTZDv1Gdk48BywFg7HHB+wNUQpNIxOWJ/Mibd kNL+My2J9P++c8xldV8ybyg92TZ8qtNcUW3fsg/WYvA3GIoxBYN0zx1S8MpK04CD ymFkzDzfm9K+5dFKszsDOPb8bZkJXU23gZQ1IWhYJFP8EiJ1eT+r60lf2Tiwmr7X jzFROrz2VtHYiGBT3h7NwKtE/C7RQdWMlLYMzJqeJkJmTtQ4zL0xyNkf+to1upzN cPaGkEIxIaHAkBVD+wtRBrtVqDSg6XXqSCZWZjYw4PjIGI1EOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL0g7shy2cTDSr81+uMcVYhH6YOCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9jMzYz NmI3MS1mZDA5LTRlZTktOWYzZS01NTJlNTM1NmE0ZmMvMjdlYWZkNDktOGEwZi0z NWMzLWI1ZDItYzg1NTE0MjFjNTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYzM2MzZiNzEtZmQwOS00ZWU5LTlm M2UtNTUyZTUzNTZhNGZjL2MzNjM2YjcxLWZkMDktNGVlOS05ZjNlLTU1MmU1MzU2 YTRmYy5jcmwwHwYDVR0jBBgwFoAUeW0JazRG4DATFKcMfmazw0snvNkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9jMzYzNmI3MS1mZDA5LTRlZTktOWYzZS01NTJl NTM1NmE0ZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxzr/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF2F6+PmyZH8eHBZkyHiiZ1Da0tNSZJ125BcNospCQtjGkILwfzEYTyR ihVGtafcBDeZFvRRXnz5lNfAwkY4Iw5rFCVDkRzxCuc//ssL7hz2e5JzYvR3M6oP ulca4sRNHd0gSujIGnTt1TyBxIPdvDKfPgjoQDRLKzwFnZUXlrkT3PaImt2HpfX8 /qLrYLri/YUaNJbQCXzGRjm6gTuif5KEDpcZvEzoNoHkkOaMz9qRl4FH7MpuQXvK STKRw5bgfkzxHFlPNwK9g5EhXmF9F28nFNMjdl9Rf36yr4Wo779BZiqpRPDCoY6g PMFeaiwdSP+IN2LKlULbtlSUuYXwKeo= -----END CERTIFICATE-----Generated at Mon Sep 21 19:44:06 2026 by rpki-client