$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5c2d3985-887b-4bd2-b6fc-0d18e1163b83/b6d8d258-09a1-3ea9-a3b0-d1a497ac6528.roa File: b6d8d258-09a1-3ea9-a3b0-d1a497ac6528.roa (raw, json) Hash identifier: Zyw5RobqKhFpeQgsISWQQcUMwHKqf+lFhz76Kbk4LFA= Subject key identifier: 95:AD:25:F4:25:95:CB:87:6F:1D:BF:3E:7A:15:5A:B0:7C:86:DB:6B Certificate issuer: /CN=5c2d3985-887b-4bd2-b6fc-0d18e1163b83 Certificate serial: 010D0C9F4328584F8F3DA621EC789D01E1453780 Authority key identifier: 02:7C:7C:C8:42:A2:EC:DF:74:7F:C2:4E:35:EE:B4:BB:EA:89:E9:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5c2d3985-887b-4bd2-b6fc-0d18e1163b83.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5c2d3985-887b-4bd2-b6fc-0d18e1163b83/b6d8d258-09a1-3ea9-a3b0-d1a497ac6528.roa Signing time: Tue 20 Oct 2026 01:00:12 +0000 ROA not before: Tue 20 Oct 2026 01:00:12 +0000 ROA not after: Mon 18 Jan 2027 02:00:12 +0000 asID: 402551 IP address blocks: 199.104.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5c2d3985-887b-4bd2-b6fc-0d18e1163b83/5c2d3985-887b-4bd2-b6fc-0d18e1163b83.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5c2d3985-887b-4bd2-b6fc-0d18e1163b83/5c2d3985-887b-4bd2-b6fc-0d18e1163b83.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5c2d3985-887b-4bd2-b6fc-0d18e1163b83.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Nov 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8f:3d:a6:21:ec:78:9d:01:e1:45:37:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c2d3985-887b-4bd2-b6fc-0d18e1163b83 Validity Not Before: Oct 20 01:00:12 2026 GMT Not After : Jan 18 02:00:12 2027 GMT Subject: CN=afd8cf24-612f-4391-be71-5867a0ce0218 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:7e:06:83:85:9a:76:b3:cd:46:d6:cd:43:58: 96:90:bf:c7:aa:d0:ab:09:44:df:4c:27:5e:3c:ea: f8:af:b3:63:34:c0:14:b4:2a:8b:3c:6e:bd:3d:26: 8f:7d:2b:d9:42:c5:ac:69:ee:27:b8:d7:af:5d:37: 40:82:95:bf:15:fe:c1:7d:6f:83:13:2f:1a:68:37: a9:4f:55:4c:97:53:4a:ea:5b:b5:8b:67:00:e4:85: bd:a6:37:7c:13:17:9e:f8:ca:95:65:a6:51:13:03: 99:35:3f:e5:9b:4c:81:36:92:5d:b3:1e:a9:f2:29: 2f:aa:35:5b:44:78:5c:a6:26:1d:c8:75:a2:87:b7: a4:c1:e4:b8:97:13:3f:1b:c1:cc:21:5d:e6:21:c4: db:42:3c:1b:6d:e4:46:0d:5e:57:da:cf:fd:2d:aa: b1:e8:6e:bd:e1:63:12:72:aa:27:b5:3c:f5:64:8b: de:90:cd:0a:f7:22:fc:b1:33:71:9b:74:b6:cb:c2: 12:47:ad:71:8b:20:4b:5c:39:6d:75:c1:75:ae:ca: 25:5e:c9:a6:87:0a:13:10:ab:23:b9:20:15:09:e4: dc:62:c6:f5:e0:7a:5a:df:2d:19:cf:29:b1:d6:3b: 2c:1c:7b:d7:aa:49:8b:9c:82:44:cc:e4:7b:5f:2e: c1:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:AD:25:F4:25:95:CB:87:6F:1D:BF:3E:7A:15:5A:B0:7C:86:DB:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5c2d3985-887b-4bd2-b6fc-0d18e1163b83/b6d8d258-09a1-3ea9-a3b0-d1a497ac6528.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5c2d3985-887b-4bd2-b6fc-0d18e1163b83/5c2d3985-887b-4bd2-b6fc-0d18e1163b83.crl X509v3 Authority Key Identifier: keyid:02:7C:7C:C8:42:A2:EC:DF:74:7F:C2:4E:35:EE:B4:BB:EA:89:E9:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5c2d3985-887b-4bd2-b6fc-0d18e1163b83.cer sbgp-ipAddrBlock: critical IPv4: 199.104.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:ff:ab:df:45:ac:e3:53:b4:91:a4:e0:77:b1:bd:09:e3:8d: 68:b4:bb:b9:43:84:c4:91:e3:9a:35:84:7e:44:63:69:f9:cf: 71:0e:21:05:30:e2:b7:f2:3b:d6:1c:9c:be:68:77:e6:97:50: 4f:68:6c:7e:07:82:26:87:bc:2a:8a:32:3a:3e:c4:43:6d:7b: 1d:d0:a4:78:c5:71:57:e0:c3:03:f1:a5:9c:49:f7:fb:4d:09: 1e:ec:40:62:9f:3a:15:06:4d:58:67:66:be:e4:b0:c7:ec:a3: fb:e7:2c:80:b0:08:86:d0:d3:ad:06:70:19:12:dc:d7:75:13: 89:e2:f1:53:3b:b4:ad:f0:c6:38:fb:14:5c:4a:c9:54:07:a8: ea:83:18:2b:4b:87:22:50:62:a3:10:04:ba:05:a9:bd:dd:b9: 30:a1:43:4b:c0:a6:af:b5:7d:b1:c7:3c:32:8d:0b:2a:0f:5b: 21:2e:2c:b5:1f:fb:86:70:ec:22:76:ae:2a:a3:ca:65:50:b4: 6d:2c:dd:a9:31:71:69:ff:e0:88:98:b3:d1:8e:eb:79:c7:8f: d7:3f:fe:c8:19:ac:a4:66:1b:7f:d2:87:48:94:d7:28:23:3f: ef:83:9a:ee:41:dc:df:25:0a:5c:17:25:1e:6e:b5:17:d0:00: 21:7b:b1:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+PPaYh7HidAeFFN4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWMyZDM5ODUtODg3Yi00YmQyLWI2ZmMtMGQxOGUxMTYz YjgzMB4XDTI2MTAyMDAxMDAxMloXDTI3MDExODAyMDAxMlowLzEtMCsGA1UEAxMk YWZkOGNmMjQtNjEyZi00MzkxLWJlNzEtNTg2N2EwY2UwMjE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq34Gg4WadrPNRtbNQ1iWkL/HqtCrCUTfTCde POr4r7NjNMAUtCqLPG69PSaPfSvZQsWsae4nuNevXTdAgpW/Ff7BfW+DEy8aaDep T1VMl1NK6lu1i2cA5IW9pjd8Exee+MqVZaZREwOZNT/lm0yBNpJdsx6p8ikvqjVb RHhcpiYdyHWih7ekweS4lxM/G8HMIV3mIcTbQjwbbeRGDV5X2s/9Laqx6G694WMS cqontTz1ZIvekM0K9yL8sTNxm3S2y8ISR61xiyBLXDltdcF1rsolXsmmhwoTEKsj uSAVCeTcYsb14Hpa3y0Zzymx1jssHHvXqkmLnIJEzOR7Xy7BxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJWtJfQllcuHbx2/PnoVWrB8httrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi81YzJk Mzk4NS04ODdiLTRiZDItYjZmYy0wZDE4ZTExNjNiODMvYjZkOGQyNTgtMDlhMS0z ZWE5LWEzYjAtZDFhNDk3YWM2NTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNWMyZDM5ODUtODg3Yi00YmQyLWI2 ZmMtMGQxOGUxMTYzYjgzLzVjMmQzOTg1LTg4N2ItNGJkMi1iNmZjLTBkMThlMTE2 M2I4My5jcmwwHwYDVR0jBBgwFoAUAnx8yEKi7N90f8JONe60u+qJ6SswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi81YzJkMzk4NS04ODdiLTRiZDItYjZmYy0wZDE4 ZTExNjNiODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx2gVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAr/q99FrONTtJGk4HexvQnjjWi0u7lDhMSR45o1hH5EY2n5z3EOIQUw 4rfyO9YcnL5od+aXUE9obH4HgiaHvCqKMjo+xENtex3QpHjFcVfgwwPxpZxJ9/tN CR7sQGKfOhUGTVhnZr7ksMfso/vnLICwCIbQ060GcBkS3Nd1E4ni8VM7tK3wxjj7 FFxKyVQHqOqDGCtLhyJQYqMQBLoFqb3duTChQ0vApq+1fbHHPDKNCyoPWyEuLLUf +4Zw7CJ2riqjymVQtG0s3akxcWn/4IiYs9GO63nHj9c//sgZrKRmG3/Sh0iU1ygj P++Dmu5B3N8lClwXJR5utRfQACF7sZE= -----END CERTIFICATE-----Generated at Sun Nov 1 13:11:06 2026 by rpki-client