$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/643177f7-12a4-4138-aa72-1b5beaada59f/c87a5cfc-fe40-3889-94da-f7c9b6159f54.roa File: c87a5cfc-fe40-3889-94da-f7c9b6159f54.roa (raw, json) Hash identifier: qlhW4TJnz+ku6rOdaJskqbBIX/rzLLNyzsINKY03/us= Subject key identifier: E0:79:C5:32:C5:0D:47:F3:BD:F9:89:44:CC:AF:ED:4E:80:59:5F:E8 Certificate issuer: /CN=643177f7-12a4-4138-aa72-1b5beaada59f Certificate serial: 010D0C9F4328584EE9692D5BF1A83218477ABB54 Authority key identifier: E0:81:C9:F2:5C:4F:5E:48:25:37:49:E0:5D:7D:6D:F8:EE:CF:36:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/643177f7-12a4-4138-aa72-1b5beaada59f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/643177f7-12a4-4138-aa72-1b5beaada59f/c87a5cfc-fe40-3889-94da-f7c9b6159f54.roa Signing time: Fri 21 Aug 2026 15:23:47 +0000 ROA not before: Fri 21 Aug 2026 15:23:47 +0000 ROA not after: Thu 19 Nov 2026 16:23:47 +0000 asID: 46309 IP address blocks: 199.21.200.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/643177f7-12a4-4138-aa72-1b5beaada59f/643177f7-12a4-4138-aa72-1b5beaada59f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/643177f7-12a4-4138-aa72-1b5beaada59f/643177f7-12a4-4138-aa72-1b5beaada59f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/643177f7-12a4-4138-aa72-1b5beaada59f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e9:69:2d:5b:f1:a8:32:18:47:7a:bb:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=643177f7-12a4-4138-aa72-1b5beaada59f Validity Not Before: Aug 21 15:23:47 2026 GMT Not After : Nov 19 16:23:47 2026 GMT Subject: CN=4bf11c2a-1dbb-4a34-a7a7-340837339182 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:52:d6:fc:cb:c4:d3:94:fc:42:e2:b1:ce:c1: 0f:f2:cb:87:0d:a4:28:03:56:40:5e:1b:0c:35:42: 89:b4:11:22:db:cf:63:07:cb:e5:f9:9c:50:0d:5e: 5b:bb:52:c0:cd:2c:ac:c6:1f:15:92:0e:ff:4f:1f: e2:45:ee:db:0d:d1:ed:63:20:4b:2f:2d:b7:6d:db: 31:c8:5d:b5:0b:c9:e9:0b:d3:c0:5f:e4:b2:bf:57: e1:72:cf:4a:46:b8:05:02:18:b4:53:a9:a9:b2:66: 9b:df:52:37:9b:80:26:7b:83:1e:0e:b1:b9:33:5c: d2:fc:c6:da:25:c2:ed:dd:18:f3:a2:1a:a1:f2:0d: 6d:db:4e:0c:af:1b:f4:c8:89:46:23:f9:2c:03:35: 31:26:bb:64:2b:5e:13:98:4c:7f:6b:ad:fd:ac:ef: 3d:95:a6:db:0a:d1:f5:69:ad:8f:cf:4c:0a:14:0c: da:d8:68:da:70:2e:11:d1:1a:e4:d6:e0:a7:25:f0: 47:42:4f:26:ca:90:8e:1e:89:e3:e8:02:0b:46:ba: ca:63:73:6d:c4:5e:94:a4:36:37:3b:50:67:05:4f: ff:05:82:5c:34:66:1d:6f:61:2e:8b:ef:74:ab:59: 08:e9:f0:f1:1f:17:72:5f:27:10:39:9f:55:78:6f: ae:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:79:C5:32:C5:0D:47:F3:BD:F9:89:44:CC:AF:ED:4E:80:59:5F:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/643177f7-12a4-4138-aa72-1b5beaada59f/c87a5cfc-fe40-3889-94da-f7c9b6159f54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/643177f7-12a4-4138-aa72-1b5beaada59f/643177f7-12a4-4138-aa72-1b5beaada59f.crl X509v3 Authority Key Identifier: keyid:E0:81:C9:F2:5C:4F:5E:48:25:37:49:E0:5D:7D:6D:F8:EE:CF:36:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/643177f7-12a4-4138-aa72-1b5beaada59f.cer sbgp-ipAddrBlock: critical IPv4: 199.21.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:41:ee:65:ac:b0:1e:c3:23:1d:ed:51:c1:66:64:bf:14:f9: 8a:c0:9a:c6:c4:2c:fe:86:1c:c1:65:d9:98:f0:d2:b2:02:18: be:60:11:e1:51:b0:6a:79:d6:4a:af:c8:a2:f6:c2:5d:ed:0a: 71:0d:8b:df:2d:4c:fa:d4:d6:55:5a:29:7b:65:07:fd:0a:0f: b7:37:a0:6c:05:67:0c:b4:25:6f:fa:96:b8:55:10:e0:dd:04: fb:06:d1:ad:a7:f1:f2:4f:4e:d2:8b:b3:14:2f:00:46:48:ce: 8f:f9:0b:b4:a8:70:78:7c:3c:be:3d:bd:e6:8a:8c:a3:cd:ae: 38:83:16:de:f2:81:ef:4d:89:93:03:b5:b4:e3:05:77:5a:b0: fd:a0:0e:3c:95:f3:1c:3b:bc:30:42:74:4e:cc:a5:16:50:99: 2d:7a:dd:67:85:73:72:d2:e4:db:7b:d9:11:81:e6:65:8c:57: fe:2f:29:ab:b8:b5:57:55:a9:a3:be:12:22:7e:b4:f8:c2:24: 97:e0:92:7f:93:b2:4c:35:83:88:9a:4e:fd:b5:9b:79:89:31: 6e:e1:ba:53:11:a5:6a:11:aa:95:91:fc:b5:7f:64:78:8f:0d: 3d:56:36:33:66:62:07:64:fa:56:ed:e4:6b:4d:1f:e5:18:2c: 57:7c:ca:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7paS1b8agyGEd6u1QwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjQzMTc3ZjctMTJhNC00MTM4LWFhNzItMWI1YmVhYWRh NTlmMB4XDTI2MDgyMTE1MjM0N1oXDTI2MTExOTE2MjM0N1owLzEtMCsGA1UEAxMk NGJmMTFjMmEtMWRiYi00YTM0LWE3YTctMzQwODM3MzM5MTgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkFLW/MvE05T8QuKxzsEP8suHDaQoA1ZAXhsM NUKJtBEi289jB8vl+ZxQDV5bu1LAzSysxh8Vkg7/Tx/iRe7bDdHtYyBLLy23bdsx yF21C8npC9PAX+Syv1fhcs9KRrgFAhi0U6mpsmab31I3m4Ame4MeDrG5M1zS/Mba JcLt3Rjzohqh8g1t204Mrxv0yIlGI/ksAzUxJrtkK14TmEx/a639rO89labbCtH1 aa2Pz0wKFAza2GjacC4R0Rrk1uCnJfBHQk8mypCOHonj6AILRrrKY3NtxF6UpDY3 O1BnBU//BYJcNGYdb2Eui+90q1kI6fDxHxdyXycQOZ9VeG+uVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOB5xTLFDUfzvfmJRMyv7U6AWV/oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC82NDMx NzdmNy0xMmE0LTQxMzgtYWE3Mi0xYjViZWFhZGE1OWYvYzg3YTVjZmMtZmU0MC0z ODg5LTk0ZGEtZjdjOWI2MTU5ZjU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNjQzMTc3ZjctMTJhNC00MTM4LWFh NzItMWI1YmVhYWRhNTlmLzY0MzE3N2Y3LTEyYTQtNDEzOC1hYTcyLTFiNWJlYWFk YTU5Zi5jcmwwHwYDVR0jBBgwFoAU4IHJ8lxPXkglN0ngXX1t+O7PNiMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC82NDMxNzdmNy0xMmE0LTQxMzgtYWE3Mi0xYjVi ZWFhZGE1OWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxxXIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACpB7mWssB7DIx3tUcFmZL8U+YrAmsbELP6GHMFl2Zjw0rICGL5gEeFR sGp51kqvyKL2wl3tCnENi98tTPrU1lVaKXtlB/0KD7c3oGwFZwy0JW/6lrhVEODd BPsG0a2n8fJPTtKLsxQvAEZIzo/5C7SocHh8PL49veaKjKPNrjiDFt7yge9NiZMD tbTjBXdasP2gDjyV8xw7vDBCdE7MpRZQmS163WeFc3LS5Nt72RGB5mWMV/4vKau4 tVdVqaO+EiJ+tPjCJJfgkn+Tskw1g4iaTv21m3mJMW7hulMRpWoRqpWR/LV/ZHiP DT1WNjNmYgdk+lbt5GtNH+UYLFd8yrA= -----END CERTIFICATE-----Generated at Mon Sep 28 06:48:50 2026 by rpki-client