$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/21afabbe-bb2d-4271-9e05-6a8f5837e6b5/19972336-82ac-3772-a9e0-e4be4f6ae218.roa File: 19972336-82ac-3772-a9e0-e4be4f6ae218.roa (raw, json) Hash identifier: NKVMaPscP5tD0Bm3Ryk4NIVR1vE8zg2/l50LqZlcY3g= Subject key identifier: 13:7D:CC:68:66:BC:9A:F7:76:1E:D4:35:A3:CC:94:38:6A:E2:48:66 Certificate issuer: /CN=21afabbe-bb2d-4271-9e05-6a8f5837e6b5 Certificate serial: 010D0C9F4328584F9D1B4DA1E9DD09A95614B1C0 Authority key identifier: 79:0F:0A:4A:61:5B:C7:32:64:74:81:AF:AE:71:8A:22:8A:2A:51:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/21afabbe-bb2d-4271-9e05-6a8f5837e6b5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/21afabbe-bb2d-4271-9e05-6a8f5837e6b5/19972336-82ac-3772-a9e0-e4be4f6ae218.roa Signing time: Sun 25 Oct 2026 00:12:22 +0000 ROA not before: Sun 25 Oct 2026 00:12:22 +0000 ROA not after: Sat 23 Jan 2027 01:12:22 +0000 asID: 400768 IP address blocks: 198.179.184.0/23 maxlen: 24 2602:f2a4::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/21afabbe-bb2d-4271-9e05-6a8f5837e6b5/21afabbe-bb2d-4271-9e05-6a8f5837e6b5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/21afabbe-bb2d-4271-9e05-6a8f5837e6b5/21afabbe-bb2d-4271-9e05-6a8f5837e6b5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/21afabbe-bb2d-4271-9e05-6a8f5837e6b5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9d:1b:4d:a1:e9:dd:09:a9:56:14:b1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21afabbe-bb2d-4271-9e05-6a8f5837e6b5 Validity Not Before: Oct 25 00:12:22 2026 GMT Not After : Jan 23 01:12:22 2027 GMT Subject: CN=b908b4ea-83af-4738-9a08-d6f47f714958 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:a7:e7:ef:80:4d:3e:c0:21:46:a8:20:66:ec: ce:8e:a5:c5:3e:fe:17:ef:ce:fb:c6:84:f5:1a:25: 3e:f9:49:ed:88:59:10:07:17:5a:70:07:90:fe:17: a8:99:f4:99:4b:19:d2:1b:37:ed:72:47:08:29:06: 33:45:7e:9c:d2:8b:bf:e1:16:c7:44:7d:55:21:1e: f7:d5:9c:ab:a9:ca:76:bd:56:e3:2c:a8:1b:5b:a0: 6e:f3:41:ae:e3:dd:8a:c1:31:59:5b:e7:6e:f2:0e: 4c:4c:a4:9e:8d:3b:3a:39:89:78:9a:c5:26:a3:28: aa:eb:69:d0:7d:a4:0e:d7:1b:a8:52:e0:15:ef:1e: 0a:81:72:c0:53:71:82:84:36:18:99:32:38:f3:b9: 59:9a:cf:4d:70:27:32:38:fc:fd:d5:8e:3e:57:fe: b8:b8:dc:2e:a8:e5:d3:03:47:d3:76:a2:80:d1:5e: 02:86:27:61:cd:4c:f8:f8:65:c0:ae:3b:08:01:6c: ad:c3:4c:93:3f:46:4d:20:9c:ee:d4:38:c3:e7:8a: c2:0b:c0:12:1d:5d:eb:02:ff:2d:41:e9:c7:96:77: 16:0d:3c:d4:7b:2d:b6:e1:1a:7b:76:bc:6d:b2:4b: 04:9f:63:c5:29:bd:46:3e:26:0d:65:a8:f4:b4:88: ab:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:7D:CC:68:66:BC:9A:F7:76:1E:D4:35:A3:CC:94:38:6A:E2:48:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/21afabbe-bb2d-4271-9e05-6a8f5837e6b5/19972336-82ac-3772-a9e0-e4be4f6ae218.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/21afabbe-bb2d-4271-9e05-6a8f5837e6b5/21afabbe-bb2d-4271-9e05-6a8f5837e6b5.crl X509v3 Authority Key Identifier: keyid:79:0F:0A:4A:61:5B:C7:32:64:74:81:AF:AE:71:8A:22:8A:2A:51:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/21afabbe-bb2d-4271-9e05-6a8f5837e6b5.cer sbgp-ipAddrBlock: critical IPv4: 198.179.184.0/23 IPv6: 2602:f2a4::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:f8:07:c1:8c:ab:39:40:d0:5a:5c:46:ca:89:43:63:06:ef: 7a:3b:75:71:9d:6a:bc:1a:12:81:7c:d5:70:10:f6:fb:ff:e9: 9a:ae:b9:81:b4:d6:8c:d1:4e:b6:70:b1:73:b9:5b:30:99:bf: 2a:4c:47:8e:ad:e0:3f:b1:8e:d9:d2:84:6a:85:e6:fe:4f:30: bd:f9:0c:78:f3:88:20:ee:b6:36:c5:db:8e:93:80:a1:c2:f9: 95:88:c7:0e:3c:27:b7:fc:6a:01:79:32:41:46:39:93:e0:35: 01:f4:92:3b:8d:b1:2e:8e:50:b6:9c:02:2a:c2:75:96:9f:3f: ea:03:97:3f:57:da:71:98:9d:26:5d:65:62:ec:07:d2:a3:1a: 75:69:a3:73:b8:4f:5e:f5:0f:00:bb:57:df:b7:3a:2d:3a:be: c3:39:62:e4:3c:ee:bd:a4:12:30:3f:3f:81:8c:6e:47:14:46: 1c:8f:cc:6b:72:2c:ba:98:48:f2:90:bb:a5:3c:cc:81:8f:db: 39:7b:c4:74:78:e6:9a:ec:d7:1a:4c:e4:04:4e:98:35:de:64: 99:5a:67:35:2e:76:42:e6:46:f6:37:6e:16:96:95:d8:96:0a: 6c:d1:4c:09:05:74:b0:2d:ff:04:ff:6d:28:4c:00:d9:15:bd: c9:70:d1:8c -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE+dG02h6d0JqVYUscAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFhZmFiYmUtYmIyZC00MjcxLTllMDUtNmE4ZjU4Mzdl NmI1MB4XDTI2MTAyNTAwMTIyMloXDTI3MDEyMzAxMTIyMlowLzEtMCsGA1UEAxMk YjkwOGI0ZWEtODNhZi00NzM4LTlhMDgtZDZmNDdmNzE0OTU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6fn74BNPsAhRqggZuzOjqXFPv4X7877xoT1 GiU++UntiFkQBxdacAeQ/heomfSZSxnSGzftckcIKQYzRX6c0ou/4RbHRH1VIR73 1Zyrqcp2vVbjLKgbW6Bu80Gu492KwTFZW+du8g5MTKSejTs6OYl4msUmoyiq62nQ faQO1xuoUuAV7x4KgXLAU3GChDYYmTI487lZms9NcCcyOPz91Y4+V/64uNwuqOXT A0fTdqKA0V4ChidhzUz4+GXArjsIAWytw0yTP0ZNIJzu1DjD54rCC8ASHV3rAv8t QenHlncWDTzUey224Rp7drxtsksEn2PFKb1GPiYNZaj0tIircQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFBN9zGhmvJr3dh7UNaPMlDhq4khmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8yMWFm YWJiZS1iYjJkLTQyNzEtOWUwNS02YThmNTgzN2U2YjUvMTk5NzIzMzYtODJhYy0z NzcyLWE5ZTAtZTRiZTRmNmFlMjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvMjFhZmFiYmUtYmIyZC00MjcxLTll MDUtNmE4ZjU4MzdlNmI1LzIxYWZhYmJlLWJiMmQtNDI3MS05ZTA1LTZhOGY1ODM3 ZTZiNS5jcmwwHwYDVR0jBBgwFoAUeQ8KSmFbxzJkdIGvrnGKIooqURMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS8yMWFmYWJiZS1iYjJkLTQyNzEtOWUwNS02YThm NTgzN2U2YjUuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQBxrO4MA4E AgACMAgDBgQmAvKkADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA2+AfBjKs5QNBaXEbKiUNjBu96O3VxnWq8 GhKBfNVwEPb7/+marrmBtNaM0U62cLFzuVswmb8qTEeOreA/sY7Z0oRqheb+TzC9 +Qx484gg7rY2xduOk4ChwvmViMcOPCe3/GoBeTJBRjmT4DUB9JI7jbEujlC2nAIq wnWWnz/qA5c/V9pxmJ0mXWVi7AfSoxp1aaNzuE9e9Q8Au1fftzotOr7DOWLkPO69 pBIwPz+BjG5HFEYcj8xrciy6mEjykLulPMyBj9s5e8R0eOaa7NcaTOQETpg13mSZ Wmc1LnZC5kb2N24WlpXYlgps0UwJBXSwLf8E/20oTADZFb3JcNGM -----END CERTIFICATE-----Generated at Tue Nov 3 09:06:11 2026 by rpki-client