$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5c2d3985-887b-4bd2-b6fc-0d18e1163b83/b6d8d258-09a1-3ea9-a3b0-d1a497ac6528.roa File: b6d8d258-09a1-3ea9-a3b0-d1a497ac6528.roa (raw, json) Hash identifier: QxgUGhZO/JGDddVl7N+BPjS4gX8hL3iKRr26xvGcUFI= Subject key identifier: D4:98:AB:38:5A:F7:8D:B8:67:75:32:78:29:73:EE:1D:CA:FD:BA:33 Certificate issuer: /CN=5c2d3985-887b-4bd2-b6fc-0d18e1163b83 Certificate serial: 010D0C9F4328584EED51F6833F891E6059B7D100 Authority key identifier: 02:7C:7C:C8:42:A2:EC:DF:74:7F:C2:4E:35:EE:B4:BB:EA:89:E9:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5c2d3985-887b-4bd2-b6fc-0d18e1163b83.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5c2d3985-887b-4bd2-b6fc-0d18e1163b83/b6d8d258-09a1-3ea9-a3b0-d1a497ac6528.roa Signing time: Sun 23 Aug 2026 01:00:12 +0000 ROA not before: Sun 23 Aug 2026 01:00:12 +0000 ROA not after: Sat 21 Nov 2026 02:00:12 +0000 asID: 402551 IP address blocks: 199.104.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5c2d3985-887b-4bd2-b6fc-0d18e1163b83/5c2d3985-887b-4bd2-b6fc-0d18e1163b83.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5c2d3985-887b-4bd2-b6fc-0d18e1163b83/5c2d3985-887b-4bd2-b6fc-0d18e1163b83.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5c2d3985-887b-4bd2-b6fc-0d18e1163b83.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ed:51:f6:83:3f:89:1e:60:59:b7:d1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c2d3985-887b-4bd2-b6fc-0d18e1163b83 Validity Not Before: Aug 23 01:00:12 2026 GMT Not After : Nov 21 02:00:12 2026 GMT Subject: CN=c91c45c4-2e8b-45d6-9c70-ccf861863be8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:60:fb:bd:de:a1:4a:4f:a9:ee:45:51:d2:12: 4f:5a:54:ea:c7:76:48:8f:b3:a8:ff:bb:d2:4b:5e: 65:e2:50:06:a0:b2:a6:a5:63:6e:a8:cb:29:cd:53: 31:bc:81:b8:9c:26:53:2c:c9:1f:a0:45:54:2d:4f: e4:97:bd:a6:ff:24:19:39:12:1f:0d:0d:0e:6d:40: 7e:9f:48:cc:d9:c8:f6:d7:97:ce:2e:0d:ed:9c:0a: 5d:ef:06:11:a5:16:7f:34:15:ad:b8:d9:8e:f9:ee: 85:ed:cd:29:c7:40:25:41:d8:45:2a:08:00:8b:a8: 7d:2f:e7:8c:7d:42:57:fd:69:0f:7d:9b:30:5b:ba: 5f:a3:df:a9:c7:a2:6f:73:3d:8e:db:45:18:28:a9: 9a:2e:87:77:e8:fa:a9:9a:03:70:b0:60:32:34:ed: 0f:33:96:b1:3e:4e:48:56:6f:21:7b:ae:25:0f:1b: 69:08:6d:7e:f0:3d:e3:f9:36:47:91:0f:b3:30:03: d7:89:f0:30:a3:86:32:e7:38:96:68:25:b2:28:3a: 4c:7b:a1:29:8f:a2:1f:d9:88:d9:e7:d7:85:44:cc: e6:fa:42:2c:78:72:16:04:75:e0:2c:a0:e0:f2:ae: ee:31:f6:57:58:d2:43:c4:d0:b0:9e:34:9c:38:79: f5:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:98:AB:38:5A:F7:8D:B8:67:75:32:78:29:73:EE:1D:CA:FD:BA:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5c2d3985-887b-4bd2-b6fc-0d18e1163b83/b6d8d258-09a1-3ea9-a3b0-d1a497ac6528.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5c2d3985-887b-4bd2-b6fc-0d18e1163b83/5c2d3985-887b-4bd2-b6fc-0d18e1163b83.crl X509v3 Authority Key Identifier: keyid:02:7C:7C:C8:42:A2:EC:DF:74:7F:C2:4E:35:EE:B4:BB:EA:89:E9:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5c2d3985-887b-4bd2-b6fc-0d18e1163b83.cer sbgp-ipAddrBlock: critical IPv4: 199.104.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:8f:29:0a:0c:a9:a5:fd:85:99:12:7d:35:fb:50:49:7c:32: 92:3a:7e:be:d2:df:90:95:1e:70:4e:a4:05:d9:84:8d:94:76: 81:07:60:d6:89:ad:b3:a6:65:cb:ef:52:e8:2d:43:77:a9:5b: 1c:ba:ea:f7:cf:1a:4a:93:10:96:bf:6f:ac:4b:53:db:45:75: f8:37:78:8b:3a:40:5c:90:df:c0:fa:fe:68:68:7f:8d:b6:f8: 9d:17:5b:e3:64:1a:0c:3d:b8:01:3a:ee:15:6f:cf:0f:78:60: cf:55:72:f8:82:76:b3:b0:9a:bb:a6:88:f7:0a:b7:3f:37:0d: 14:3c:76:03:5f:6b:0f:b2:61:bd:b1:1b:78:79:67:9c:a4:23: 15:be:6d:7e:9e:f2:c1:02:87:ce:f5:0a:66:21:47:97:59:fb: 99:47:49:65:bc:7f:55:08:c9:c9:00:7e:3d:12:fb:c6:a9:24: 16:6d:0c:9e:7c:96:ea:48:f9:24:06:ef:49:6d:f0:31:f6:0e: 4e:c4:25:7a:8b:fe:d3:0f:53:f7:08:c2:75:ac:f7:00:c9:cd: 3a:84:61:7b:9e:c9:9f:38:d5:9b:27:99:6b:cd:ae:51:b0:0b: d7:64:ca:cd:6f:ef:98:68:89:a6:5f:5b:a3:97:76:dc:c3:bf: e9:a4:68:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7tUfaDP4keYFm30QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWMyZDM5ODUtODg3Yi00YmQyLWI2ZmMtMGQxOGUxMTYz YjgzMB4XDTI2MDgyMzAxMDAxMloXDTI2MTEyMTAyMDAxMlowLzEtMCsGA1UEAxMk YzkxYzQ1YzQtMmU4Yi00NWQ2LTljNzAtY2NmODYxODYzYmU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGD7vd6hSk+p7kVR0hJPWlTqx3ZIj7Oo/7vS S15l4lAGoLKmpWNuqMspzVMxvIG4nCZTLMkfoEVULU/kl72m/yQZORIfDQ0ObUB+ n0jM2cj215fOLg3tnApd7wYRpRZ/NBWtuNmO+e6F7c0px0AlQdhFKggAi6h9L+eM fUJX/WkPfZswW7pfo9+px6Jvcz2O20UYKKmaLod36PqpmgNwsGAyNO0PM5axPk5I Vm8he64lDxtpCG1+8D3j+TZHkQ+zMAPXifAwo4Yy5ziWaCWyKDpMe6Epj6If2YjZ 59eFRMzm+kIseHIWBHXgLKDg8q7uMfZXWNJDxNCwnjScOHn1SwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNSYqzha9424Z3UyeClz7h3K/bozMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi81YzJk Mzk4NS04ODdiLTRiZDItYjZmYy0wZDE4ZTExNjNiODMvYjZkOGQyNTgtMDlhMS0z ZWE5LWEzYjAtZDFhNDk3YWM2NTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNWMyZDM5ODUtODg3Yi00YmQyLWI2 ZmMtMGQxOGUxMTYzYjgzLzVjMmQzOTg1LTg4N2ItNGJkMi1iNmZjLTBkMThlMTE2 M2I4My5jcmwwHwYDVR0jBBgwFoAUAnx8yEKi7N90f8JONe60u+qJ6SswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi81YzJkMzk4NS04ODdiLTRiZDItYjZmYy0wZDE4 ZTExNjNiODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx2gVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEmPKQoMqaX9hZkSfTX7UEl8MpI6fr7S35CVHnBOpAXZhI2UdoEHYNaJ rbOmZcvvUugtQ3epWxy66vfPGkqTEJa/b6xLU9tFdfg3eIs6QFyQ38D6/mhof422 +J0XW+NkGgw9uAE67hVvzw94YM9VcviCdrOwmrumiPcKtz83DRQ8dgNfaw+yYb2x G3h5Z5ykIxW+bX6e8sECh871CmYhR5dZ+5lHSWW8f1UIyckAfj0S+8apJBZtDJ58 lupI+SQG70lt8DH2Dk7EJXqL/tMPU/cIwnWs9wDJzTqEYXueyZ841ZsnmWvNrlGw C9dkys1v75hoiaZfW6OXdtzDv+mkaHs= -----END CERTIFICATE-----Generated at Sat Sep 5 02:32:31 2026 by rpki-client