$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2bf8c74a-f8f0-42d3-84ee-d9a1e1b46fb1/21d57f9e-a771-3212-acb3-bda6cd0589e4.roa File: 21d57f9e-a771-3212-acb3-bda6cd0589e4.roa (raw, json) Hash identifier: IlHoAsB3W3M8kCWUDpqb4y5C+77zXw+BRgjEJL8Segs= Subject key identifier: D5:27:B7:49:FD:78:14:66:C4:EB:6A:D5:C8:43:B8:EE:70:32:C4:1D Certificate issuer: /CN=2bf8c74a-f8f0-42d3-84ee-d9a1e1b46fb1 Certificate serial: 010D0C9F4328584F374D13C50C6BFDC2386E3980 Authority key identifier: 08:D9:B1:28:83:75:D1:68:E2:43:7F:44:AD:9B:A9:76:06:4E:AD:FD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2bf8c74a-f8f0-42d3-84ee-d9a1e1b46fb1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2bf8c74a-f8f0-42d3-84ee-d9a1e1b46fb1/21d57f9e-a771-3212-acb3-bda6cd0589e4.roa Signing time: Fri 18 Sep 2026 13:00:12 +0000 ROA not before: Fri 18 Sep 2026 13:00:12 +0000 ROA not after: Thu 17 Dec 2026 14:00:12 +0000 asID: 33651 IP address blocks: 169.128.124.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2bf8c74a-f8f0-42d3-84ee-d9a1e1b46fb1/2bf8c74a-f8f0-42d3-84ee-d9a1e1b46fb1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2bf8c74a-f8f0-42d3-84ee-d9a1e1b46fb1/2bf8c74a-f8f0-42d3-84ee-d9a1e1b46fb1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2bf8c74a-f8f0-42d3-84ee-d9a1e1b46fb1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:37:4d:13:c5:0c:6b:fd:c2:38:6e:39:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bf8c74a-f8f0-42d3-84ee-d9a1e1b46fb1 Validity Not Before: Sep 18 13:00:12 2026 GMT Not After : Dec 17 14:00:12 2026 GMT Subject: CN=1afc4c93-8a3e-4cb4-8a90-dc0226f58e03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:eb:fe:56:50:fc:e7:3a:3b:f0:5a:45:c7:22: 7e:84:df:00:53:06:1b:e4:f8:90:27:74:84:6d:8e: b4:1e:07:4c:9f:aa:67:e3:a8:25:d7:fd:ad:49:fb: 28:c3:d7:b0:08:fb:b6:c5:97:8c:8f:73:7c:7e:d3: 68:08:3a:d7:53:8f:16:7a:da:4d:8f:91:9e:38:c1: 50:85:8f:d1:1c:1b:ff:25:f4:9d:2b:9c:c7:ea:ed: 13:fd:79:76:5d:18:3b:4f:c9:4d:da:5f:08:41:3d: 1d:d1:c0:30:80:b2:b2:09:85:a7:e9:a5:21:ef:b4: 6a:3b:d3:3b:5b:e0:44:7a:7b:d3:36:81:11:ff:e1: 33:25:60:ef:04:16:81:64:da:e0:c0:f3:7c:01:9f: 2c:9e:9b:e9:13:c5:91:29:4b:7e:07:27:82:7c:6e: 74:22:c1:00:1e:36:ec:1e:bf:18:18:06:63:24:fb: 3f:01:42:36:7a:22:14:02:17:b3:33:c0:db:72:e9: e2:0e:92:e9:63:49:8e:c4:f2:6e:40:12:44:55:4c: 87:e6:5f:8c:64:ab:b1:af:0c:45:c8:85:7c:aa:9d: 34:ab:23:11:a2:7e:c6:20:0a:d5:c8:32:1f:be:99: c0:eb:bb:51:ab:27:b7:61:a7:7a:af:b5:bd:f8:e2: 16:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:27:B7:49:FD:78:14:66:C4:EB:6A:D5:C8:43:B8:EE:70:32:C4:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2bf8c74a-f8f0-42d3-84ee-d9a1e1b46fb1/21d57f9e-a771-3212-acb3-bda6cd0589e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2bf8c74a-f8f0-42d3-84ee-d9a1e1b46fb1/2bf8c74a-f8f0-42d3-84ee-d9a1e1b46fb1.crl X509v3 Authority Key Identifier: keyid:08:D9:B1:28:83:75:D1:68:E2:43:7F:44:AD:9B:A9:76:06:4E:AD:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2bf8c74a-f8f0-42d3-84ee-d9a1e1b46fb1.cer sbgp-ipAddrBlock: critical IPv4: 169.128.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:73:11:b6:8b:ec:1d:b9:99:99:fb:e2:b6:d0:45:f7:9b:54: a7:fe:e5:c9:38:ea:4b:99:2d:99:83:cf:6b:21:cd:85:38:94: d7:4a:be:24:51:f5:d4:bb:01:1b:e2:cf:0c:75:e2:8a:20:dd: d0:aa:b9:b1:43:12:8e:55:e6:ef:47:25:0d:8e:23:dc:30:49: 62:b9:2d:1b:34:d3:1b:34:0c:0a:9c:57:2f:8e:61:46:ba:26: 83:ad:fb:79:76:dc:7c:81:36:1e:9d:59:34:c0:78:1f:fe:33: 20:96:ea:ef:13:7f:a8:e0:14:f1:88:1f:40:eb:20:b1:40:f5: b0:72:96:8e:ab:3d:a5:08:1f:f7:06:88:e0:d7:c2:fb:86:ae: 65:41:d0:4d:9c:a5:12:38:59:9e:aa:50:ca:56:8d:69:da:e6: b2:8c:1f:4f:3c:4d:b4:08:de:ac:c2:4a:f1:fa:c6:e4:7c:89: ee:c4:21:fb:ac:52:ef:83:ee:43:58:c3:21:e7:ac:db:6b:e7: 98:5e:6a:d1:88:1d:76:85:59:74:50:98:95:ee:94:c1:6e:83: 24:55:d4:05:4e:92:38:47:95:9f:bd:21:12:ca:64:73:60:f2: b7:5c:de:f6:a0:f6:23:72:ee:30:5b:8c:59:a5:08:06:02:52: 45:0d:03:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE83TRPFDGv9wjhuOYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJmOGM3NGEtZjhmMC00MmQzLTg0ZWUtZDlhMWUxYjQ2 ZmIxMB4XDTI2MDkxODEzMDAxMloXDTI2MTIxNzE0MDAxMlowLzEtMCsGA1UEAxMk MWFmYzRjOTMtOGEzZS00Y2I0LThhOTAtZGMwMjI2ZjU4ZTAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOv+VlD85zo78FpFxyJ+hN8AUwYb5PiQJ3SE bY60HgdMn6pn46gl1/2tSfsow9ewCPu2xZeMj3N8ftNoCDrXU48WetpNj5GeOMFQ hY/RHBv/JfSdK5zH6u0T/Xl2XRg7T8lN2l8IQT0d0cAwgLKyCYWn6aUh77RqO9M7 W+BEenvTNoER/+EzJWDvBBaBZNrgwPN8AZ8snpvpE8WRKUt+ByeCfG50IsEAHjbs Hr8YGAZjJPs/AUI2eiIUAhezM8DbcuniDpLpY0mOxPJuQBJEVUyH5l+MZKuxrwxF yIV8qp00qyMRon7GIArVyDIfvpnA67tRqye3Yad6r7W9+OIW9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNUnt0n9eBRmxOtq1chDuO5wMsQdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yYmY4 Yzc0YS1mOGYwLTQyZDMtODRlZS1kOWExZTFiNDZmYjEvMjFkNTdmOWUtYTc3MS0z MjEyLWFjYjMtYmRhNmNkMDU4OWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMmJmOGM3NGEtZjhmMC00MmQzLTg0 ZWUtZDlhMWUxYjQ2ZmIxLzJiZjhjNzRhLWY4ZjAtNDJkMy04NGVlLWQ5YTFlMWI0 NmZiMS5jcmwwHwYDVR0jBBgwFoAUCNmxKIN10WjiQ39ErZupdgZOrf0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yYmY4Yzc0YS1mOGYwLTQyZDMtODRlZS1kOWEx ZTFiNDZmYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqYB8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFhzEbaL7B25mZn74rbQRfebVKf+5ck46kuZLZmDz2shzYU4lNdKviRR 9dS7ARvizwx14oog3dCqubFDEo5V5u9HJQ2OI9wwSWK5LRs00xs0DAqcVy+OYUa6 JoOt+3l23HyBNh6dWTTAeB/+MyCW6u8Tf6jgFPGIH0DrILFA9bBylo6rPaUIH/cG iODXwvuGrmVB0E2cpRI4WZ6qUMpWjWna5rKMH088TbQI3qzCSvH6xuR8ie7EIfus Uu+D7kNYwyHnrNtr55heatGIHXaFWXRQmJXulMFugyRV1AVOkjhHlZ+9IRLKZHNg 8rdc3vag9iNy7jBbjFmlCAYCUkUNA+c= -----END CERTIFICATE-----Generated at Mon Sep 28 18:31:05 2026 by rpki-client