$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/3d224895-501e-3aed-857c-97ee5700de82.roa File: 3d224895-501e-3aed-857c-97ee5700de82.roa (raw, json) Hash identifier: eErq2ywEZNYI4vTqeCGjw4DMOlt6BY6+ExbedHanaJI= Subject key identifier: 67:6A:B8:2E:B1:2F:25:2B:67:E5:26:29:6F:B5:DE:9D:83:7A:DC:4A Certificate issuer: /CN=21dd6860-719e-46c0-8b7c-89b9e8d88da6 Certificate serial: 010D0C9F4328584F2957B1951C6E09A85B92B880 Authority key identifier: 42:79:8D:AA:08:72:7C:74:A2:5D:C9:91:AD:DB:EA:CA:2E:FC:A5:28 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/3d224895-501e-3aed-857c-97ee5700de82.roa Signing time: Sun 13 Sep 2026 13:00:11 +0000 ROA not before: Sun 13 Sep 2026 13:00:11 +0000 ROA not after: Sat 12 Dec 2026 14:00:11 +0000 asID: 30242 IP address blocks: 199.167.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/21dd6860-719e-46c0-8b7c-89b9e8d88da6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/21dd6860-719e-46c0-8b7c-89b9e8d88da6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:29:57:b1:95:1c:6e:09:a8:5b:92:b8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21dd6860-719e-46c0-8b7c-89b9e8d88da6 Validity Not Before: Sep 13 13:00:11 2026 GMT Not After : Dec 12 14:00:11 2026 GMT Subject: CN=0474ce52-2ea9-4ea1-a2bd-2a42f57b3103 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:60:07:e3:76:34:3f:66:74:46:a9:ea:11:af: 43:55:24:6d:5a:47:32:6e:0f:73:be:2b:20:9e:54: 05:94:01:d1:91:42:84:47:dc:27:6e:02:26:12:a8: 5b:33:f9:99:39:77:cc:dc:0e:0c:ab:69:0a:c3:91: 22:8e:f1:54:b4:4e:27:fa:a3:65:cb:02:3a:fa:33: 77:ab:74:5f:38:8b:c3:06:f1:ec:a5:2e:af:e0:a9: 4c:4a:a4:3f:c3:df:78:90:fd:cf:e5:7e:00:bc:79: 96:64:b5:15:34:ef:58:3f:5d:5f:88:62:ef:b7:34: b6:ac:19:f4:3b:ea:fb:57:3c:21:5f:72:54:35:e3: 03:ab:c1:c4:27:90:e5:f9:67:ea:80:48:f1:15:bf: c4:9b:80:ad:ac:74:26:a1:13:28:a8:b4:d0:42:dd: d2:73:34:4b:fd:05:78:12:da:a9:a1:f0:f7:45:fe: 0e:70:ff:bb:01:eb:dd:ef:5b:0d:b3:ba:02:e1:41: 5a:bc:4a:03:3b:bc:a1:15:de:90:82:36:38:f0:1e: 21:24:7e:46:80:cc:3c:4b:14:49:e3:37:ef:b6:8e: 57:7c:ca:39:3c:0d:f8:32:c5:50:ea:59:16:a1:21: 2c:70:f2:83:43:26:6c:c1:8b:7c:c8:53:7d:f3:8b: a2:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:6A:B8:2E:B1:2F:25:2B:67:E5:26:29:6F:B5:DE:9D:83:7A:DC:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/3d224895-501e-3aed-857c-97ee5700de82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/21dd6860-719e-46c0-8b7c-89b9e8d88da6.crl X509v3 Authority Key Identifier: keyid:42:79:8D:AA:08:72:7C:74:A2:5D:C9:91:AD:DB:EA:CA:2E:FC:A5:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6.cer sbgp-ipAddrBlock: critical IPv4: 199.167.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:20:7f:f1:db:5f:b3:84:73:4d:18:2e:e0:5a:b0:40:e7:d1: d9:4d:b1:4f:0e:f1:9a:f7:05:b7:3c:be:5f:bd:0f:a1:c4:95: d7:62:27:5b:cb:71:92:47:d7:09:98:12:31:7c:f9:e8:7f:df: f5:8c:23:e0:b0:fe:60:ea:07:67:8c:61:45:21:e0:3d:8a:7a: cf:05:be:fb:02:53:7e:91:49:de:12:bc:45:aa:d4:70:2a:3e: b0:16:a1:26:e2:c3:93:b7:44:19:0f:ba:2d:75:c4:62:5c:fe: 7f:e4:7a:ed:ac:a7:31:23:aa:ee:a0:c5:b6:e0:bf:4b:02:85: 1a:e9:21:90:a9:cc:4a:7b:fb:60:6f:f1:ce:4b:10:6e:3a:b8: 01:f4:fb:09:38:af:79:16:8a:ef:3c:a9:07:b1:5a:d5:3f:f6: 3f:30:94:b9:5f:4d:d8:6f:18:3c:0d:b1:3b:56:59:b9:e1:bc: d5:0a:95:96:49:28:8a:44:fc:fd:7c:c6:59:73:ea:39:1a:f7: 46:ae:3f:3b:25:f5:7e:e2:6d:e2:6f:bf:77:b6:60:fe:74:ad: ea:62:98:33:64:5c:84:f1:5e:54:6d:3a:5e:83:41:c2:fe:f0: 0d:20:bf:0d:98:e0:11:2f:f3:eb:8b:1e:18:66:30:60:d0:18: 5b:fc:49:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8pV7GVHG4JqFuSuIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFkZDY4NjAtNzE5ZS00NmMwLThiN2MtODliOWU4ZDg4 ZGE2MB4XDTI2MDkxMzEzMDAxMVoXDTI2MTIxMjE0MDAxMVowLzEtMCsGA1UEAxMk MDQ3NGNlNTItMmVhOS00ZWExLWEyYmQtMmE0MmY1N2IzMTAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg2AH43Y0P2Z0RqnqEa9DVSRtWkcybg9zvisg nlQFlAHRkUKER9wnbgImEqhbM/mZOXfM3A4Mq2kKw5EijvFUtE4n+qNlywI6+jN3 q3RfOIvDBvHspS6v4KlMSqQ/w994kP3P5X4AvHmWZLUVNO9YP11fiGLvtzS2rBn0 O+r7VzwhX3JUNeMDq8HEJ5Dl+WfqgEjxFb/Em4CtrHQmoRMoqLTQQt3SczRL/QV4 EtqpofD3Rf4OcP+7Aevd71sNs7oC4UFavEoDO7yhFd6QgjY48B4hJH5GgMw8SxRJ 4zfvto5XfMo5PA34MsVQ6lkWoSEscPKDQyZswYt8yFN984uioQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGdquC6xLyUrZ+UmKW+13p2DetxKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yMWRk Njg2MC03MTllLTQ2YzAtOGI3Yy04OWI5ZThkODhkYTYvM2QyMjQ4OTUtNTAxZS0z YWVkLTg1N2MtOTdlZTU3MDBkZTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjFkZDY4NjAtNzE5ZS00NmMwLThi N2MtODliOWU4ZDg4ZGE2LzIxZGQ2ODYwLTcxOWUtNDZjMC04YjdjLTg5YjllOGQ4 OGRhNi5jcmwwHwYDVR0jBBgwFoAUQnmNqghyfHSiXcmRrdvqyi78pSgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yMWRkNjg2MC03MTllLTQ2YzAtOGI3Yy04OWI5 ZThkODhkYTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx6f8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ4gf/HbX7OEc00YLuBasEDn0dlNsU8O8Zr3Bbc8vl+9D6HElddiJ1vL cZJH1wmYEjF8+eh/3/WMI+Cw/mDqB2eMYUUh4D2Kes8FvvsCU36RSd4SvEWq1HAq PrAWoSbiw5O3RBkPui11xGJc/n/keu2spzEjqu6gxbbgv0sChRrpIZCpzEp7+2Bv 8c5LEG46uAH0+wk4r3kWiu88qQexWtU/9j8wlLlfTdhvGDwNsTtWWbnhvNUKlZZJ KIpE/P18xllz6jka90auPzsl9X7ibeJvv3e2YP50repimDNkXITxXlRtOl6DQcL+ 8A0gvw2Y4BEv8+uLHhhmMGDQGFv8SWE= -----END CERTIFICATE-----Generated at Mon Oct 12 04:54:26 2026 by rpki-client