$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/7170ad85-ffe5-4a2c-9c34-5d21370de0c3/fc8f9943-2073-31a5-bcb2-5e976e7ba722.roa File: fc8f9943-2073-31a5-bcb2-5e976e7ba722.roa (raw, json) Hash identifier: NB57KDoEEWh++dBDl6nXdU6BvPB+erGhiaN0xonl4ZQ= Subject key identifier: 42:E8:C3:44:7F:93:AF:3E:09:D7:9E:04:15:5A:AD:C3:FE:F4:29:FB Certificate issuer: /CN=7170ad85-ffe5-4a2c-9c34-5d21370de0c3 Certificate serial: 010D0C9F4328584F5BF31FB2B8FA5B5BEEDF6700 Authority key identifier: AD:6D:23:47:C3:9A:E4:3A:C1:28:C2:1D:CD:B0:D9:D9:B8:10:CE:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/7170ad85-ffe5-4a2c-9c34-5d21370de0c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/7170ad85-ffe5-4a2c-9c34-5d21370de0c3/fc8f9943-2073-31a5-bcb2-5e976e7ba722.roa Signing time: Thu 01 Oct 2026 16:03:52 +0000 ROA not before: Thu 01 Oct 2026 16:03:52 +0000 ROA not after: Wed 30 Dec 2026 17:03:52 +0000 asID: 36406 IP address blocks: 192.238.21.0/24 maxlen: 24 198.199.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/7170ad85-ffe5-4a2c-9c34-5d21370de0c3/7170ad85-ffe5-4a2c-9c34-5d21370de0c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/7170ad85-ffe5-4a2c-9c34-5d21370de0c3/7170ad85-ffe5-4a2c-9c34-5d21370de0c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/7170ad85-ffe5-4a2c-9c34-5d21370de0c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5b:f3:1f:b2:b8:fa:5b:5b:ee:df:67:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7170ad85-ffe5-4a2c-9c34-5d21370de0c3 Validity Not Before: Oct 1 16:03:52 2026 GMT Not After : Dec 30 17:03:52 2026 GMT Subject: CN=d5faad81-b420-4047-a912-6d309ee27430 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:d6:04:6e:c6:5e:24:9d:f5:1b:79:fc:72:c3: e0:04:5e:c2:66:f1:4b:db:23:ca:aa:dc:e9:d9:84: 15:18:ee:05:bc:f4:73:ac:26:0d:42:98:b1:86:b7: 30:f2:1a:d7:6e:03:6b:02:32:e2:7a:7d:ac:5c:c8: b7:83:83:e3:73:6f:e0:63:43:61:e5:d1:fa:4b:b6: 67:b7:c7:29:33:44:ab:0f:45:f1:ea:a3:97:b0:ba: ea:9f:ac:26:a5:75:b9:11:de:31:4e:a6:cb:e4:a4: 8f:cc:67:f1:58:20:64:75:41:3a:1a:77:3a:68:fb: e1:a2:2e:cf:82:93:9f:8f:bf:61:1e:e1:37:ba:8c: 1d:0c:db:68:2e:5c:a3:ba:5d:d5:a1:41:a8:99:90: 75:2c:5a:f4:27:f5:4f:9a:d4:7b:09:2b:92:89:d7: 95:ae:d9:b8:b2:48:92:3b:7f:41:ad:4e:48:36:f8: 41:7e:6b:31:4c:7f:d4:f7:e0:4d:bc:be:54:ab:29: 42:e2:14:53:18:0a:01:64:1c:0b:4a:63:8f:80:91: 45:e4:ff:38:ad:0e:06:fa:52:8e:c6:c3:79:59:a5: c6:8d:47:40:ff:47:03:a7:9e:d2:f5:28:51:55:2f: 8f:5e:94:19:81:0b:5f:eb:7d:d0:09:22:f8:02:2c: 86:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:E8:C3:44:7F:93:AF:3E:09:D7:9E:04:15:5A:AD:C3:FE:F4:29:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/7170ad85-ffe5-4a2c-9c34-5d21370de0c3/fc8f9943-2073-31a5-bcb2-5e976e7ba722.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/7170ad85-ffe5-4a2c-9c34-5d21370de0c3/7170ad85-ffe5-4a2c-9c34-5d21370de0c3.crl X509v3 Authority Key Identifier: keyid:AD:6D:23:47:C3:9A:E4:3A:C1:28:C2:1D:CD:B0:D9:D9:B8:10:CE:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/7170ad85-ffe5-4a2c-9c34-5d21370de0c3.cer sbgp-ipAddrBlock: critical IPv4: 192.238.21.0/24 198.199.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:1f:76:bd:47:17:b7:7d:56:6a:3b:2a:f1:cd:86:ce:f3:4b: ae:81:9d:9d:e5:f2:81:e1:37:c0:0c:86:6c:9f:d5:cc:2f:17: a5:75:f9:a7:de:76:a2:ab:6f:79:d4:bb:eb:9f:21:89:c4:c1: ad:ac:b6:bd:77:0c:42:9a:56:4b:23:f2:b0:a0:84:1c:c8:39: 2e:65:8b:6e:ff:af:5c:bd:58:40:b6:6b:17:ae:14:91:64:8b: 9e:d8:1e:3d:bd:11:0a:77:2e:c5:6e:e8:29:d8:d7:92:07:6e: 0c:44:e9:d6:f3:20:35:34:48:c2:f1:41:25:b4:0b:4c:6d:68: cd:35:57:5c:b0:0f:2c:c0:44:f7:3d:cf:e5:58:a8:a7:74:9a: c3:bf:4d:b2:cd:4d:d3:d0:d0:27:52:12:dd:f0:95:4f:c1:94: 36:35:3b:91:60:39:25:2c:b7:95:57:7a:3a:d7:f2:95:16:80: bc:02:7a:6f:9b:5e:c6:51:95:13:62:a6:32:ba:8a:25:0f:55: ed:f2:12:1f:ff:23:1b:5a:f6:99:8f:80:77:8e:de:12:51:21: 8e:ab:88:ca:4b:16:9a:f4:b4:b1:09:1a:86:5b:04:0a:c1:d9: 18:81:7b:87:1a:df:b4:5c:e0:9f:26:05:9a:54:8a:32:1b:64: 52:b0:5f:8c -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE9b8x+yuPpbW+7fZwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzE3MGFkODUtZmZlNS00YTJjLTljMzQtNWQyMTM3MGRl MGMzMB4XDTI2MTAwMTE2MDM1MloXDTI2MTIzMDE3MDM1MlowLzEtMCsGA1UEAxMk ZDVmYWFkODEtYjQyMC00MDQ3LWE5MTItNmQzMDllZTI3NDMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2NYEbsZeJJ31G3n8csPgBF7CZvFL2yPKqtzp 2YQVGO4FvPRzrCYNQpixhrcw8hrXbgNrAjLien2sXMi3g4Pjc2/gY0Nh5dH6S7Zn t8cpM0SrD0Xx6qOXsLrqn6wmpXW5Ed4xTqbL5KSPzGfxWCBkdUE6Gnc6aPvhoi7P gpOfj79hHuE3uowdDNtoLlyjul3VoUGomZB1LFr0J/VPmtR7CSuSideVrtm4skiS O39BrU5INvhBfmsxTH/U9+BNvL5UqylC4hRTGAoBZBwLSmOPgJFF5P84rQ4G+lKO xsN5WaXGjUdA/0cDp57S9ShRVS+PXpQZgQtf633QCSL4AiyG8wIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFELow0R/k68+CdeeBBVarcP+9Cn7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS83MTcw YWQ4NS1mZmU1LTRhMmMtOWMzNC01ZDIxMzcwZGUwYzMvZmM4Zjk5NDMtMjA3My0z MWE1LWJjYjItNWU5NzZlN2JhNzIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvNzE3MGFkODUtZmZlNS00YTJjLTlj MzQtNWQyMTM3MGRlMGMzLzcxNzBhZDg1LWZmZTUtNGEyYy05YzM0LTVkMjEzNzBk ZTBjMy5jcmwwHwYDVR0jBBgwFoAUrW0jR8Oa5DrBKMIdzbDZ2bgQzoUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS83MTcwYWQ4NS1mZmU1LTRhMmMtOWMzNC01ZDIx MzcwZGUwYzMuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwO4VAwQA xsfhMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAFIfdr1HF7d9Vmo7KvHNhs7zS66BnZ3l8oHhN8AMhmyf1cwv F6V1+afedqKrb3nUu+ufIYnEwa2str13DEKaVksj8rCghBzIOS5li27/r1y9WEC2 axeuFJFki57YHj29EQp3LsVu6CnY15IHbgxE6dbzIDU0SMLxQSW0C0xtaM01V1yw DyzARPc9z+VYqKd0msO/TbLNTdPQ0CdSEt3wlU/BlDY1O5FgOSUst5VXejrX8pUW gLwCem+bXsZRlRNipjK6iiUPVe3yEh//Ixta9pmPgHeO3hJRIY6riMpLFpr0tLEJ GoZbBArB2RiBe4ca37Rc4J8mBZpUijIbZFKwX4w= -----END CERTIFICATE-----Generated at Mon Nov 2 12:22:38 2026 by rpki-client