$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/521c3d90-e8a5-3699-8987-db21e5cefb4e.roa File: 521c3d90-e8a5-3699-8987-db21e5cefb4e.roa (raw, json) Hash identifier: jWTNsOj2/XXBsap66rxhcsva8FDzHIWlel3pl5N5Xkg= Subject key identifier: 9A:EC:CF:7A:BD:B0:44:FD:46:6D:C4:34:41:E6:54:B6:90:42:62:E2 Certificate issuer: /CN=1773b91b-a601-4f0d-af4c-93b3f65e6404 Certificate serial: 010D0C9F4328584F49745183746EA9CC92169A80 Authority key identifier: E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/521c3d90-e8a5-3699-8987-db21e5cefb4e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 19165 IP address blocks: 199.87.80.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:51:83:74:6e:a9:cc:92:16:9a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1773b91b-a601-4f0d-af4c-93b3f65e6404 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=5b16bc63-2fdf-4526-b77c-7d68014edf0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:d0:7c:fc:b8:5f:d3:f5:5e:e6:75:9f:a7:61: c8:16:01:7c:a5:5a:69:ab:46:8c:bd:88:ec:23:f4: 94:ca:24:bc:88:cb:0f:a0:25:f4:58:ba:51:fa:f0: 43:98:06:1c:06:2e:13:de:92:a2:6d:7e:34:da:51: a0:19:5d:c4:55:97:e3:76:c1:62:49:1c:36:7c:6b: 56:67:43:75:26:be:30:c4:2c:80:8f:5c:90:ea:a6: 59:ea:0c:06:38:69:83:5c:46:72:18:3d:f6:fe:1c: e0:2e:7a:46:d5:b4:50:94:3c:5e:48:4e:4e:79:19: 27:05:20:41:f1:48:00:d4:cf:06:0f:ac:30:54:e9: 8a:85:52:2a:29:ad:ce:23:2f:3f:ac:3b:52:18:5e: 35:d9:d2:eb:a7:2b:0b:a7:db:25:8d:d2:3a:24:e5: 5c:2c:04:7b:f7:a6:85:69:bf:73:b4:e6:d8:f9:f5: fd:b6:66:60:bb:88:96:a7:87:8c:6a:b8:3b:55:78: 57:7b:ed:22:d4:7b:e8:54:af:d1:c9:03:38:fb:21: bf:94:f1:6a:48:11:ef:39:35:49:dd:47:6a:43:8e: 8a:b1:73:06:f2:24:1c:d1:b1:36:cb:da:2b:54:e0: d7:f6:7b:af:21:30:ba:1b:ea:f6:ca:47:69:46:a0: ba:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:EC:CF:7A:BD:B0:44:FD:46:6D:C4:34:41:E6:54:B6:90:42:62:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/521c3d90-e8a5-3699-8987-db21e5cefb4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl X509v3 Authority Key Identifier: keyid:E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer sbgp-ipAddrBlock: critical IPv4: 199.87.80.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:7e:33:f7:c4:67:c4:c2:19:9e:17:e5:62:75:c4:bf:0f:c6: 62:0b:de:e5:b6:65:3e:ed:61:ba:77:56:3a:19:1a:54:fc:03: 88:e9:5d:68:b5:c6:9f:6f:bf:ae:f5:09:fc:a6:58:7d:4e:44: 02:9b:ba:41:3b:69:a6:19:72:c9:65:04:3f:a0:d5:6d:18:16: 44:0b:a0:fc:03:cd:1f:f6:c5:dd:9a:bb:e0:fc:80:76:51:fb: bd:34:6f:51:5e:90:6c:b3:71:f8:32:a1:e1:99:ff:7e:9b:ae: 82:c4:ee:16:1b:f2:8b:d9:e2:73:30:b2:64:13:e7:5a:6c:17: 94:bf:fa:0b:9c:97:20:74:92:87:7f:37:68:e1:6a:84:e6:d7: e6:d3:67:08:fc:32:05:b9:84:69:91:51:8e:03:4b:e2:1b:f5: 2a:0f:d9:c3:cd:b3:93:82:69:21:ce:ce:62:a6:a2:78:15:e7: c7:ca:43:a2:c8:1d:21:1e:8d:6a:e9:67:f2:c3:07:8b:bb:a0: 79:4d:a7:c7:fc:76:0f:af:fa:76:93:49:0d:09:f5:71:d8:11: de:7a:5b:e6:92:0f:a3:d3:6e:07:ad:37:93:98:43:3c:f7:0c: 89:dd:7d:c5:c5:11:97:98:aa:ac:54:51:29:da:e7:51:9e:df: 38:79:27:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdFGDdG6pzJIWmoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTc3M2I5MWItYTYwMS00ZjBkLWFmNGMtOTNiM2Y2NWU2 NDA0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NWIxNmJjNjMtMmZkZi00NTI2LWI3N2MtN2Q2ODAxNGVkZjBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7NB8/Lhf0/Ve5nWfp2HIFgF8pVppq0aMvYjs I/SUyiS8iMsPoCX0WLpR+vBDmAYcBi4T3pKibX402lGgGV3EVZfjdsFiSRw2fGtW Z0N1Jr4wxCyAj1yQ6qZZ6gwGOGmDXEZyGD32/hzgLnpG1bRQlDxeSE5OeRknBSBB 8UgA1M8GD6wwVOmKhVIqKa3OIy8/rDtSGF412dLrpysLp9sljdI6JOVcLAR796aF ab9ztObY+fX9tmZgu4iWp4eMarg7VXhXe+0i1HvoVK/RyQM4+yG/lPFqSBHvOTVJ 3UdqQ46KsXMG8iQc0bE2y9orVODX9nuvITC6G+r2ykdpRqC6BwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJrsz3q9sET9Rm3ENEHmVLaQQmLiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xNzcz YjkxYi1hNjAxLTRmMGQtYWY0Yy05M2IzZjY1ZTY0MDQvNTIxYzNkOTAtZThhNS0z Njk5LTg5ODctZGIyMWU1Y2VmYjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMTc3M2I5MWItYTYwMS00ZjBkLWFm NGMtOTNiM2Y2NWU2NDA0LzE3NzNiOTFiLWE2MDEtNGYwZC1hZjRjLTkzYjNmNjVl NjQwNC5jcmwwHwYDVR0jBBgwFoAU5dhVH06yx92E7wMChlouzzki8a8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xNzczYjkxYi1hNjAxLTRmMGQtYWY0Yy05M2Iz ZjY1ZTY0MDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx1dQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA1+M/fEZ8TCGZ4X5WJ1xL8PxmIL3uW2ZT7tYbp3VjoZGlT8A4jpXWi1 xp9vv671CfymWH1ORAKbukE7aaYZcsllBD+g1W0YFkQLoPwDzR/2xd2au+D8gHZR +700b1FekGyzcfgyoeGZ/36broLE7hYb8ovZ4nMwsmQT51psF5S/+guclyB0kod/ N2jhaoTm1+bTZwj8MgW5hGmRUY4DS+Ib9SoP2cPNs5OCaSHOzmKmongV58fKQ6LI HSEejWrpZ/LDB4u7oHlNp8f8dg+v+naTSQ0J9XHYEd56W+aSD6PTbgetN5OYQzz3 DIndfcXFEZeYqqxUUSna51Ge3zh5J4Q= -----END CERTIFICATE-----Generated at Sat Sep 26 00:28:03 2026 by rpki-client