$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/21790efa-5999-44a6-9c3e-1ce70307f8cc/2555f178-71cc-3474-9ddf-9a67c03604ca.roa File: 2555f178-71cc-3474-9ddf-9a67c03604ca.roa (raw, json) Hash identifier: HNMPxWmYOAtcplvNnYJXnbd4d/VWNiJPzToV9gmMH7U= Subject key identifier: A1:2B:7C:0C:4D:CB:A2:9F:33:3E:25:4E:2F:84:E0:22:93:90:1B:99 Certificate issuer: /CN=21790efa-5999-44a6-9c3e-1ce70307f8cc Certificate serial: 010D0C9F4328584F498A1E6904166E70A848F9C0 Authority key identifier: 32:94:FF:27:32:41:9D:3E:BE:2A:09:34:F3:26:D1:C1:AD:C0:87:15 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/21790efa-5999-44a6-9c3e-1ce70307f8cc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/21790efa-5999-44a6-9c3e-1ce70307f8cc/2555f178-71cc-3474-9ddf-9a67c03604ca.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 36658 IP address blocks: 172.87.96.0/19 maxlen: 19 172.87.96.0/21 maxlen: 21 172.87.104.0/21 maxlen: 21 172.87.112.0/21 maxlen: 21 172.87.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/21790efa-5999-44a6-9c3e-1ce70307f8cc/21790efa-5999-44a6-9c3e-1ce70307f8cc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/21790efa-5999-44a6-9c3e-1ce70307f8cc/21790efa-5999-44a6-9c3e-1ce70307f8cc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/21790efa-5999-44a6-9c3e-1ce70307f8cc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8a:1e:69:04:16:6e:70:a8:48:f9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21790efa-5999-44a6-9c3e-1ce70307f8cc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=c1a601db-f3ec-4f77-b085-33f6abda7f00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:5b:19:db:20:34:54:c3:2f:48:11:89:16:85: c8:53:93:82:b4:33:67:04:b7:98:2f:2b:17:03:09: 9e:39:29:6e:45:e2:6a:d9:b4:48:fd:e2:9a:73:be: e5:99:12:14:9c:09:4b:40:c8:d1:92:24:17:f3:e2: 09:ad:66:91:db:5e:67:6a:02:2d:b9:3b:13:9f:13: 37:94:b0:ca:f3:cf:50:95:60:e0:93:42:65:7e:7d: 71:c7:64:56:2e:0c:8b:18:7a:b2:86:96:0d:9f:4a: 01:07:9f:c6:83:37:b4:37:9a:3a:be:c2:56:e0:cb: f6:c4:f1:51:69:1b:f9:5f:4c:f5:02:69:c7:30:20: 46:87:98:97:53:90:b2:b9:1b:c0:24:98:07:f8:db: ea:16:dd:6a:75:a4:27:6d:f4:21:23:65:6f:bf:06: 11:25:13:61:74:c8:66:a5:13:08:16:95:19:d3:99: 62:cd:57:89:75:0f:fd:a5:60:8d:b8:1e:65:c7:8c: ab:08:fd:dd:9b:be:c2:a5:eb:56:e2:33:82:ce:97: 2a:30:d0:11:5c:12:6e:45:6e:c0:1a:c9:1e:d0:55: 20:17:ef:71:87:9c:5f:9d:71:6e:85:c1:35:0a:5f: 2c:17:b9:bd:06:0c:4e:dd:20:7f:61:80:6a:d7:a7: ea:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:2B:7C:0C:4D:CB:A2:9F:33:3E:25:4E:2F:84:E0:22:93:90:1B:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/21790efa-5999-44a6-9c3e-1ce70307f8cc/2555f178-71cc-3474-9ddf-9a67c03604ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/21790efa-5999-44a6-9c3e-1ce70307f8cc/21790efa-5999-44a6-9c3e-1ce70307f8cc.crl X509v3 Authority Key Identifier: keyid:32:94:FF:27:32:41:9D:3E:BE:2A:09:34:F3:26:D1:C1:AD:C0:87:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/21790efa-5999-44a6-9c3e-1ce70307f8cc.cer sbgp-ipAddrBlock: critical IPv4: 172.87.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:90:d2:1f:51:fb:90:d9:50:2d:31:a3:5a:68:29:23:30:f5: 46:1f:81:85:f7:c7:0b:8f:8b:6a:fe:0f:ca:63:79:45:20:71: 1a:6f:56:f9:4d:be:62:fb:51:bb:38:72:df:28:bd:09:3b:4e: 1e:79:15:a0:d5:29:0a:b6:90:fb:5e:b1:b4:46:d9:d9:e2:3e: 44:fb:56:1f:a7:35:c6:1a:9a:1d:54:a7:41:40:82:33:8a:58: c0:ab:37:d9:47:94:45:f3:93:55:da:62:32:56:bf:dd:43:31: 3c:c9:43:64:be:ce:f9:d0:eb:b8:e2:5a:ee:c6:ac:94:88:33: 4c:b2:07:a8:00:e4:d2:98:1b:71:dc:6a:32:f8:d6:5b:52:be: bd:11:7c:a9:04:fa:9e:e6:55:22:cd:82:12:c4:66:e4:8f:cf: 00:d3:74:4d:ab:ad:ef:84:d3:d6:9e:9c:e9:5c:df:d2:d6:ff: ed:3a:19:64:9b:7c:5e:a8:e7:08:94:9f:5b:4c:ec:1f:df:16: 7a:16:39:32:98:6d:ef:de:63:21:8f:0d:54:70:14:6d:69:0e: bb:15:73:c6:2b:04:cd:47:a0:14:4f:39:28:4f:10:80:5b:0d: 36:d7:50:d8:a6:d9:49:26:04:ef:db:9d:e4:a0:f9:c0:95:a8: 3f:08:4b:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jih5pBBZucKhI+cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjE3OTBlZmEtNTk5OS00NGE2LTljM2UtMWNlNzAzMDdm OGNjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YzFhNjAxZGItZjNlYy00Zjc3LWIwODUtMzNmNmFiZGE3ZjAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1lsZ2yA0VMMvSBGJFoXIU5OCtDNnBLeYLysX AwmeOSluReJq2bRI/eKac77lmRIUnAlLQMjRkiQX8+IJrWaR215nagItuTsTnxM3 lLDK889QlWDgk0Jlfn1xx2RWLgyLGHqyhpYNn0oBB5/Ggze0N5o6vsJW4Mv2xPFR aRv5X0z1AmnHMCBGh5iXU5CyuRvAJJgH+NvqFt1qdaQnbfQhI2VvvwYRJRNhdMhm pRMIFpUZ05lizVeJdQ/9pWCNuB5lx4yrCP3dm77CpetW4jOCzpcqMNARXBJuRW7A Gske0FUgF+9xh5xfnXFuhcE1Cl8sF7m9BgxO3SB/YYBq16fqIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKErfAxNy6KfMz4lTi+E4CKTkBuZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8yMTc5 MGVmYS01OTk5LTQ0YTYtOWMzZS0xY2U3MDMwN2Y4Y2MvMjU1NWYxNzgtNzFjYy0z NDc0LTlkZGYtOWE2N2MwMzYwNGNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvMjE3OTBlZmEtNTk5OS00NGE2LTlj M2UtMWNlNzAzMDdmOGNjLzIxNzkwZWZhLTU5OTktNDRhNi05YzNlLTFjZTcwMzA3 ZjhjYy5jcmwwHwYDVR0jBBgwFoAUMpT/JzJBnT6+Kgk08ybRwa3AhxUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS8yMTc5MGVmYS01OTk5LTQ0YTYtOWMzZS0xY2U3 MDMwN2Y4Y2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFrFdgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGyQ0h9R+5DZUC0xo1poKSMw9UYfgYX3xwuPi2r+D8pjeUUgcRpvVvlN vmL7Ubs4ct8ovQk7Th55FaDVKQq2kPtesbRG2dniPkT7Vh+nNcYamh1Up0FAgjOK WMCrN9lHlEXzk1XaYjJWv91DMTzJQ2S+zvnQ67jiWu7GrJSIM0yyB6gA5NKYG3Hc ajL41ltSvr0RfKkE+p7mVSLNghLEZuSPzwDTdE2rre+E09aenOlc39LW/+06GWSb fF6o5wiUn1tM7B/fFnoWOTKYbe/eYyGPDVRwFG1pDrsVc8YrBM1HoBRPOShPEIBb DTbXUNim2UkmBO/bneSg+cCVqD8IS0s= -----END CERTIFICATE-----Generated at Mon Sep 28 18:07:30 2026 by rpki-client