$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f/1c8fca22-3c93-3eac-8f91-cf7187bd2870.roa File: 1c8fca22-3c93-3eac-8f91-cf7187bd2870.roa (raw, json) Hash identifier: ZtO2X+DLgdAEvzqqABQ8NetEbgdrxioIMwx3wdW+2HA= Subject key identifier: EA:F1:93:D0:4B:71:53:F8:09:8C:51:CD:1A:D2:01:6E:03:2C:4F:F6 Certificate issuer: /CN=21a20ad9-a848-4d0d-a119-3df5d6dbcb1f Certificate serial: 010D0C9F4328584F5767F1991D0AB251D30D5900 Authority key identifier: 47:FE:E8:D0:1C:07:88:35:99:C5:C2:30:C7:72:08:87:D6:02:7E:28 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f/1c8fca22-3c93-3eac-8f91-cf7187bd2870.roa Signing time: Wed 30 Sep 2026 01:00:12 +0000 ROA not before: Wed 30 Sep 2026 01:00:12 +0000 ROA not after: Tue 29 Dec 2026 02:00:12 +0000 asID: 14965 IP address blocks: 158.51.216.0/22 maxlen: 24 199.241.44.0/22 maxlen: 24 2605:98c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:57:67:f1:99:1d:0a:b2:51:d3:0d:59:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21a20ad9-a848-4d0d-a119-3df5d6dbcb1f Validity Not Before: Sep 30 01:00:12 2026 GMT Not After : Dec 29 02:00:12 2026 GMT Subject: CN=40d71c71-3f58-4fd0-b4d4-fe81e05d306a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:c5:b5:6a:b0:06:a1:55:54:cd:f2:07:47:41: b0:05:8c:a3:7f:b7:f6:d8:7f:6f:32:41:b0:80:58: 3b:3f:f2:4c:c8:ff:5a:a6:c6:13:77:41:68:ed:7d: c4:20:28:25:7a:25:61:34:5c:20:60:41:a0:42:c6: 09:4e:e2:fc:b6:77:f2:02:a6:fb:57:47:2c:aa:e9: 6a:ef:a2:84:97:cb:1e:44:63:82:da:95:a3:77:2c: 97:fa:d7:7e:5c:0f:3b:ed:5d:ce:06:26:d5:8b:6b: c3:b2:c0:8f:14:b7:c1:17:1f:f1:bf:b1:05:8c:f7: b4:13:20:9e:1d:c5:c6:ff:36:a9:23:a0:5a:68:bb: 01:c9:9c:7f:53:69:d2:cf:78:5d:57:78:0b:c3:cb: fa:db:9c:35:a9:f4:9c:29:af:20:dc:d9:8d:2b:47: e3:e7:a3:5d:13:07:02:a4:e5:6d:21:c1:c5:f6:cd: fc:f1:60:5b:9b:96:5d:a2:1b:10:e8:4b:81:69:b2: 25:63:93:08:32:b6:46:4a:25:e8:b8:65:c2:eb:01: b9:c2:60:35:cc:71:63:ed:78:71:8f:09:10:af:e3: 93:e9:a3:dd:36:75:a1:c9:66:c8:de:38:32:02:82: 64:38:6f:3d:ef:d6:ff:cb:85:ac:c1:0e:6b:33:55: 94:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:F1:93:D0:4B:71:53:F8:09:8C:51:CD:1A:D2:01:6E:03:2C:4F:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f/1c8fca22-3c93-3eac-8f91-cf7187bd2870.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f.crl X509v3 Authority Key Identifier: keyid:47:FE:E8:D0:1C:07:88:35:99:C5:C2:30:C7:72:08:87:D6:02:7E:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f.cer sbgp-ipAddrBlock: critical IPv4: 158.51.216.0/22 199.241.44.0/22 IPv6: 2605:98c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:6c:b8:c8:21:ee:76:43:37:e9:e4:43:be:62:da:ea:e7:b6: b6:81:cd:a3:90:2f:a7:2b:ff:05:7a:42:c6:97:62:ae:56:40: 30:d7:25:25:50:53:6c:a1:fc:d4:d0:71:a5:ee:8e:ce:6c:73: d9:b6:3b:13:e3:a8:f2:77:4b:1f:39:07:07:b2:a8:9b:37:bc: 76:44:e2:d0:d4:32:55:2e:1b:fd:94:fd:4f:35:a7:9b:b9:9d: 43:33:d5:cd:bb:7e:ff:e1:eb:47:d7:ea:43:e7:5b:f9:fa:ae: fe:ce:22:11:7d:03:de:6d:ea:7d:d2:8c:26:da:36:d3:db:b0: 1c:fb:5c:66:b8:f5:18:42:ee:31:2c:3c:d0:a3:d0:66:31:5f: 5c:8e:bb:92:76:9b:52:67:5f:95:d2:0f:78:07:a4:1b:37:35: ad:c7:3c:86:5b:d1:3b:a3:62:86:ee:3a:6b:97:e1:0d:ce:59: 4a:bd:66:0e:a7:ca:96:fd:c8:6c:c2:a8:8e:15:a1:5e:78:3d: a3:f5:3a:d9:b9:f9:ca:d1:bc:9e:61:22:ba:a7:62:83:f1:9a: 5a:0c:7c:b4:a4:51:3e:b6:0a:1c:6a:70:04:2e:ca:7c:39:25: dd:a9:fb:2b:f8:65:24:4d:67:85:c4:4c:3d:ef:03:42:0c:3d: e0:12:c9:be -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWE9XZ/GZHQqyUdMNWQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFhMjBhZDktYTg0OC00ZDBkLWExMTktM2RmNWQ2ZGJj YjFmMB4XDTI2MDkzMDAxMDAxMloXDTI2MTIyOTAyMDAxMlowLzEtMCsGA1UEAxMk NDBkNzFjNzEtM2Y1OC00ZmQwLWI0ZDQtZmU4MWUwNWQzMDZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8W1arAGoVVUzfIHR0GwBYyjf7f22H9vMkGw gFg7P/JMyP9apsYTd0Fo7X3EICgleiVhNFwgYEGgQsYJTuL8tnfyAqb7V0csqulq 76KEl8seRGOC2pWjdyyX+td+XA877V3OBibVi2vDssCPFLfBFx/xv7EFjPe0EyCe HcXG/zapI6BaaLsByZx/U2nSz3hdV3gLw8v625w1qfScKa8g3NmNK0fj56NdEwcC pOVtIcHF9s388WBbm5ZdohsQ6EuBabIlY5MIMrZGSiXouGXC6wG5wmA1zHFj7Xhx jwkQr+OT6aPdNnWhyWbI3jgyAoJkOG8979b/y4WswQ5rM1WUbwIDAQABo4IDajCC A2YwHQYDVR0OBBYEFOrxk9BLcVP4CYxRzRrSAW4DLE/2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yMWEy MGFkOS1hODQ4LTRkMGQtYTExOS0zZGY1ZDZkYmNiMWYvMWM4ZmNhMjItM2M5My0z ZWFjLThmOTEtY2Y3MTg3YmQyODcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMjFhMjBhZDktYTg0OC00ZDBkLWEx MTktM2RmNWQ2ZGJjYjFmLzIxYTIwYWQ5LWE4NDgtNGQwZC1hMTE5LTNkZjVkNmRi Y2IxZi5jcmwwHwYDVR0jBBgwFoAUR/7o0BwHiDWZxcIwx3IIh9YCfigwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8yMWEyMGFkOS1hODQ4LTRkMGQtYTExOS0zZGY1 ZDZkYmNiMWYuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCnjPYAwQC x/EsMA0EAgACMAcDBQAmBZjAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAJBsuMgh7nZDN+nkQ75i2urntraB zaOQL6cr/wV6QsaXYq5WQDDXJSVQU2yh/NTQcaXujs5sc9m2OxPjqPJ3Sx85Bwey qJs3vHZE4tDUMlUuG/2U/U81p5u5nUMz1c27fv/h60fX6kPnW/n6rv7OIhF9A95t 6n3SjCbaNtPbsBz7XGa49RhC7jEsPNCj0GYxX1yOu5J2m1JnX5XSD3gHpBs3Na3H PIZb0TujYobuOmuX4Q3OWUq9Zg6nypb9yGzCqI4VoV54PaP1Otm5+crRvJ5hIrqn YoPxmloMfLSkUT62ChxqcAQuynw5Jd2p+yv4ZSRNZ4XETD3vA0IMPeASyb4= -----END CERTIFICATE-----Generated at Tue Oct 6 03:31:01 2026 by rpki-client