$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/21f073fb-b1c1-3945-a374-2db283254625.roa File: 21f073fb-b1c1-3945-a374-2db283254625.roa (raw, json) Hash identifier: Bx3Ki/e20CEUHPVEHVxCdC86GtmuHhZqaK956em4z0w= Subject key identifier: E5:23:36:1F:A7:D9:06:45:35:97:01:25:C1:54:EC:94:F8:04:CA:1C Certificate issuer: /CN=4e81a256-41ff-4f51-8092-c7fffa4d9221 Certificate serial: 010D0C9F4328584F46A7F2840B3924538B1F83C0 Authority key identifier: C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/21f073fb-b1c1-3945-a374-2db283254625.roa Signing time: Thu 24 Sep 2026 01:00:12 +0000 ROA not before: Thu 24 Sep 2026 01:00:12 +0000 ROA not after: Wed 23 Dec 2026 02:00:12 +0000 asID: 6922 IP address blocks: 204.158.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:46:a7:f2:84:0b:39:24:53:8b:1f:83:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e81a256-41ff-4f51-8092-c7fffa4d9221 Validity Not Before: Sep 24 01:00:12 2026 GMT Not After : Dec 23 02:00:12 2026 GMT Subject: CN=b793d363-953a-4283-85e2-7177c1c4a665 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:8c:49:fd:22:4c:2c:12:5e:fd:b1:02:fc:6e: af:2c:63:81:0a:05:3b:a7:d1:e2:e3:99:62:94:08: b7:f2:57:18:21:dc:d0:4e:c4:e1:d6:3c:89:4f:4c: e2:41:0f:d1:6e:94:26:86:f0:68:f4:d2:18:62:34: 8a:d3:50:82:71:cd:a5:90:52:81:28:0c:94:86:bd: 59:57:8d:e4:8e:29:bf:21:59:74:8d:c3:97:bc:9e: 12:13:b5:c7:42:a1:c2:47:5b:25:82:bb:11:60:ed: ca:3c:74:3b:26:91:25:de:63:19:d4:9f:a9:6c:d1: 5a:94:bb:75:4b:07:3b:e4:9b:1b:04:ef:0f:4c:a3: 67:f6:8a:af:4e:55:06:c3:66:f7:5a:c1:1a:68:93: 54:65:fa:c8:9e:e5:c2:f8:80:f8:33:cb:95:22:57: 6a:bd:60:e9:76:fb:1a:5d:e9:4f:cb:35:6d:11:3a: 64:7e:76:bd:25:e7:01:c1:2a:c5:15:2c:f7:e3:50: 94:de:c3:3a:36:7f:85:e6:d8:04:c3:64:cd:5e:59: 95:df:10:87:89:83:05:f9:0d:75:9f:8b:83:ba:57: e9:fc:5a:05:d0:6f:64:d7:1a:1a:76:3e:72:f6:68: 57:a5:19:68:ac:d6:35:7f:e7:dc:a6:a2:aa:93:a1: 84:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:23:36:1F:A7:D9:06:45:35:97:01:25:C1:54:EC:94:F8:04:CA:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/21f073fb-b1c1-3945-a374-2db283254625.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.crl X509v3 Authority Key Identifier: keyid:C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer sbgp-ipAddrBlock: critical IPv4: 204.158.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:b7:81:78:fb:e4:e1:fb:86:e2:5e:b3:d3:63:57:48:10:38: 0e:cd:83:48:ed:44:68:72:5e:c4:d6:9e:6c:19:5a:e1:3a:f6: d7:42:48:18:38:28:31:ac:71:72:2d:84:6a:d7:3d:04:3d:34: 0e:b0:51:03:76:db:4d:de:b8:12:4e:d3:39:d2:af:09:26:e3: fa:e7:58:05:72:de:a3:1b:28:15:ca:15:2b:31:65:27:22:dc: 79:e8:c7:63:97:ba:29:78:4f:1f:10:f9:cb:a1:bd:48:8f:f2: 36:fb:bf:ff:2d:82:1f:83:65:bf:cf:be:7b:28:3c:27:40:c9: 35:1f:23:4a:ac:43:1b:67:53:4d:3e:5b:42:aa:c0:95:ec:03: 7d:09:2e:6f:3c:2e:3a:7e:a3:5b:88:54:0d:03:e7:16:7d:5c: f2:54:88:73:30:39:aa:b8:66:4c:e4:98:e0:40:ea:92:8d:d5: ff:e2:ba:3b:9b:b7:1d:4b:57:95:f8:54:97:c6:a0:1e:6f:0c: e7:4b:9f:a5:3b:30:22:9b:88:04:9d:d4:8e:d6:f7:05:de:6c: 61:5a:46:2c:07:95:0a:54:23:31:e1:9a:1a:db:6a:3e:68:ec: 6f:2b:f9:af:b7:e0:f4:fd:06:a0:e9:66:b3:3d:42:a9:7e:f7: ca:d9:a1:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Gp/KECzkkU4sfg8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU4MWEyNTYtNDFmZi00ZjUxLTgwOTItYzdmZmZhNGQ5 MjIxMB4XDTI2MDkyNDAxMDAxMloXDTI2MTIyMzAyMDAxMlowLzEtMCsGA1UEAxMk Yjc5M2QzNjMtOTUzYS00MjgzLTg1ZTItNzE3N2MxYzRhNjY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh4xJ/SJMLBJe/bEC/G6vLGOBCgU7p9Hi45li lAi38lcYIdzQTsTh1jyJT0ziQQ/RbpQmhvBo9NIYYjSK01CCcc2lkFKBKAyUhr1Z V43kjim/IVl0jcOXvJ4SE7XHQqHCR1slgrsRYO3KPHQ7JpEl3mMZ1J+pbNFalLt1 Swc75JsbBO8PTKNn9oqvTlUGw2b3WsEaaJNUZfrInuXC+ID4M8uVIldqvWDpdvsa XelPyzVtETpkfna9JecBwSrFFSz341CU3sM6Nn+F5tgEw2TNXlmV3xCHiYMF+Q11 n4uDulfp/FoF0G9k1xoadj5y9mhXpRlorNY1f+fcpqKqk6GEJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOUjNh+n2QZFNZcBJcFU7JT4BMocMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTgx YTI1Ni00MWZmLTRmNTEtODA5Mi1jN2ZmZmE0ZDkyMjEvMjFmMDczZmItYjFjMS0z OTQ1LWEzNzQtMmRiMjgzMjU0NjI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU4MWEyNTYtNDFmZi00ZjUxLTgw OTItYzdmZmZhNGQ5MjIxLzRlODFhMjU2LTQxZmYtNGY1MS04MDkyLWM3ZmZmYTRk OTIyMS5jcmwwHwYDVR0jBBgwFoAUwitnYdEerOUTJk8QRtL6zHxFiyowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTgxYTI1Ni00MWZmLTRmNTEtODA5Mi1jN2Zm ZmE0ZDkyMjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzJ4QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHa3gXj75OH7huJes9NjV0gQOA7Ng0jtRGhyXsTWnmwZWuE69tdCSBg4 KDGscXIthGrXPQQ9NA6wUQN2203euBJO0znSrwkm4/rnWAVy3qMbKBXKFSsxZSci 3Hnox2OXuil4Tx8Q+cuhvUiP8jb7v/8tgh+DZb/PvnsoPCdAyTUfI0qsQxtnU00+ W0KqwJXsA30JLm88Ljp+o1uIVA0D5xZ9XPJUiHMwOaq4ZkzkmOBA6pKN1f/iujub tx1LV5X4VJfGoB5vDOdLn6U7MCKbiASd1I7W9wXebGFaRiwHlQpUIzHhmhrbaj5o 7G8r+a+34PT9BqDpZrM9Qql+98rZoVg= -----END CERTIFICATE-----Generated at Sun Sep 27 14:58:24 2026 by rpki-client