$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc/27eafd49-8a0f-35c3-b5d2-c8551421c50a.roa File: 27eafd49-8a0f-35c3-b5d2-c8551421c50a.roa (raw, json) Hash identifier: 9WbfWtN8qg4dJvr+N8ZCLgMh27Xxt8B1BPo/poD8hJI= Subject key identifier: 26:9F:A3:42:B8:58:A8:89:58:EB:0F:54:86:04:79:7A:6A:7F:F1:42 Certificate issuer: /CN=c3636b71-fd09-4ee9-9f3e-552e5356a4fc Certificate serial: 010D0C9F4328584F7BB3117EC07C8BAD8052B080 Authority key identifier: 79:6D:09:6B:34:46:E0:30:13:14:A7:0C:7E:66:B3:C3:4B:27:BC:D9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc/27eafd49-8a0f-35c3-b5d2-c8551421c50a.roa Signing time: Tue 13 Oct 2026 01:00:14 +0000 ROA not before: Tue 13 Oct 2026 01:00:14 +0000 ROA not after: Mon 11 Jan 2027 02:00:14 +0000 asID: 20016 IP address blocks: 199.58.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc/c3636b71-fd09-4ee9-9f3e-552e5356a4fc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc/c3636b71-fd09-4ee9-9f3e-552e5356a4fc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7b:b3:11:7e:c0:7c:8b:ad:80:52:b0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3636b71-fd09-4ee9-9f3e-552e5356a4fc Validity Not Before: Oct 13 01:00:14 2026 GMT Not After : Jan 11 02:00:14 2027 GMT Subject: CN=14de77fc-115e-4921-8179-3a9fc5c260cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:57:11:e0:27:fc:54:41:e6:35:0a:80:f6:a1: a2:4a:de:19:3b:59:3e:8e:1b:1e:40:01:99:8b:f8: a2:45:10:22:e2:c6:9d:b7:9e:20:62:86:fe:6f:9e: 3b:f2:03:56:90:89:71:25:cd:cb:0e:7d:7a:46:62: 47:03:0a:7c:fc:81:ab:e0:94:47:2e:be:d1:67:d4: bd:1b:01:0a:6d:56:4f:09:9e:1d:5b:36:13:2c:50: 08:17:c6:6b:3d:53:3d:69:d7:47:76:92:c2:2e:12: b2:78:ec:19:94:48:b0:06:0b:6a:21:b3:3e:2b:c3: 85:22:dc:f8:38:8c:57:79:b4:65:ae:26:c7:82:3a: 57:da:33:00:64:b4:e9:82:2a:8d:c5:bb:92:3d:60: b8:10:77:2d:78:3c:94:4f:c4:41:74:82:73:77:67: 09:3e:a4:51:dc:e4:24:88:d2:2a:33:b0:27:56:16: e6:1f:0a:ef:07:92:d4:52:c9:d1:e7:32:a2:99:e0: 9a:cf:aa:21:15:9a:f0:71:6d:41:27:62:e8:cd:d1: 99:7e:4f:a8:a7:64:b3:35:7a:2c:42:28:11:1a:6e: 56:89:46:7f:9d:01:23:cc:e5:dd:88:31:08:24:65: 85:5c:39:62:cb:b2:e4:16:e9:36:67:41:96:f3:13: 21:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:9F:A3:42:B8:58:A8:89:58:EB:0F:54:86:04:79:7A:6A:7F:F1:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc/27eafd49-8a0f-35c3-b5d2-c8551421c50a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc/c3636b71-fd09-4ee9-9f3e-552e5356a4fc.crl X509v3 Authority Key Identifier: keyid:79:6D:09:6B:34:46:E0:30:13:14:A7:0C:7E:66:B3:C3:4B:27:BC:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc.cer sbgp-ipAddrBlock: critical IPv4: 199.58.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:66:89:69:5c:af:00:c1:f7:fd:77:82:95:7b:09:44:75:00: f0:6b:49:cb:be:89:13:e5:c9:11:5b:2f:9f:c3:94:6f:86:a9: 05:79:dc:e1:b9:a7:b1:dc:48:20:d7:88:65:28:7f:f2:8e:15: 79:ce:48:98:86:fa:64:b3:ef:1c:e9:cf:b2:4d:98:20:f5:48: 83:9b:93:f3:34:2f:71:c1:01:61:e3:df:31:bc:6e:20:65:cf: 4c:dc:a8:03:10:e1:60:0e:97:a9:2d:4f:33:b2:c9:85:26:2a: 6c:25:54:14:99:dc:68:3b:ae:f3:3e:bb:d6:09:d0:d3:5b:87: 19:b9:06:5f:58:cb:58:b7:36:dc:b1:70:ea:25:e5:d1:b1:7b: 8c:3f:f7:00:c2:06:49:6a:dd:8b:a0:bb:2d:ac:85:e6:45:7f: 58:a0:bc:84:97:0b:b6:89:6a:d6:e9:13:2c:11:a0:48:9e:41: 54:30:dd:a0:98:d5:71:15:5e:13:7b:a3:6b:31:29:e2:bf:e2: c1:91:25:30:19:a2:a7:00:11:c9:6f:27:b7:43:0b:ec:ae:d2: 4d:5e:f0:75:e6:0e:37:09:82:f2:53:ff:50:fb:87:27:9b:8a: b3:37:8a:65:93:27:ea:e0:fb:20:fd:5b:8e:0a:29:89:1c:db: ee:25:07:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE97sxF+wHyLrYBSsIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzM2MzZiNzEtZmQwOS00ZWU5LTlmM2UtNTUyZTUzNTZh NGZjMB4XDTI2MTAxMzAxMDAxNFoXDTI3MDExMTAyMDAxNFowLzEtMCsGA1UEAxMk MTRkZTc3ZmMtMTE1ZS00OTIxLTgxNzktM2E5ZmM1YzI2MGNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlcR4Cf8VEHmNQqA9qGiSt4ZO1k+jhseQAGZ i/iiRRAi4sadt54gYob+b5478gNWkIlxJc3LDn16RmJHAwp8/IGr4JRHLr7RZ9S9 GwEKbVZPCZ4dWzYTLFAIF8ZrPVM9addHdpLCLhKyeOwZlEiwBgtqIbM+K8OFItz4 OIxXebRlribHgjpX2jMAZLTpgiqNxbuSPWC4EHcteDyUT8RBdIJzd2cJPqRR3OQk iNIqM7AnVhbmHwrvB5LUUsnR5zKimeCaz6ohFZrwcW1BJ2LozdGZfk+op2SzNXos QigRGm5WiUZ/nQEjzOXdiDEIJGWFXDliy7LkFuk2Z0GW8xMhawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCafo0K4WKiJWOsPVIYEeXpqf/FCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9jMzYz NmI3MS1mZDA5LTRlZTktOWYzZS01NTJlNTM1NmE0ZmMvMjdlYWZkNDktOGEwZi0z NWMzLWI1ZDItYzg1NTE0MjFjNTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYzM2MzZiNzEtZmQwOS00ZWU5LTlm M2UtNTUyZTUzNTZhNGZjL2MzNjM2YjcxLWZkMDktNGVlOS05ZjNlLTU1MmU1MzU2 YTRmYy5jcmwwHwYDVR0jBBgwFoAUeW0JazRG4DATFKcMfmazw0snvNkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9jMzYzNmI3MS1mZDA5LTRlZTktOWYzZS01NTJl NTM1NmE0ZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxzr/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJtmiWlcrwDB9/13gpV7CUR1APBrScu+iRPlyRFbL5/DlG+GqQV53OG5 p7HcSCDXiGUof/KOFXnOSJiG+mSz7xzpz7JNmCD1SIObk/M0L3HBAWHj3zG8biBl z0zcqAMQ4WAOl6ktTzOyyYUmKmwlVBSZ3Gg7rvM+u9YJ0NNbhxm5Bl9Yy1i3Ntyx cOol5dGxe4w/9wDCBklq3Yuguy2sheZFf1igvISXC7aJatbpEywRoEieQVQw3aCY 1XEVXhN7o2sxKeK/4sGRJTAZoqcAEclvJ7dDC+yu0k1e8HXmDjcJgvJT/1D7hyeb irM3imWTJ+rg+yD9W44KKYkc2+4lB6w= -----END CERTIFICATE-----Generated at Sun Nov 15 11:21:26 2026 by rpki-client