$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5c2d3985-887b-4bd2-b6fc-0d18e1163b83/b6d8d258-09a1-3ea9-a3b0-d1a497ac6528.roa File: b6d8d258-09a1-3ea9-a3b0-d1a497ac6528.roa (raw, json) Hash identifier: XTU/sFIfo2gKBPuJ32hj69xlBnzRl8JExnquMN4mlU8= Subject key identifier: DA:C2:3C:83:8E:7B:09:DB:AC:BB:AC:8E:7A:CD:53:6D:16:9C:D0:13 Certificate issuer: /CN=5c2d3985-887b-4bd2-b6fc-0d18e1163b83 Certificate serial: 010D0C9F4328584E4A890D93E0E1C64C5CD3B700 Authority key identifier: 02:7C:7C:C8:42:A2:EC:DF:74:7F:C2:4E:35:EE:B4:BB:EA:89:E9:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5c2d3985-887b-4bd2-b6fc-0d18e1163b83.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5c2d3985-887b-4bd2-b6fc-0d18e1163b83/b6d8d258-09a1-3ea9-a3b0-d1a497ac6528.roa Signing time: Thu 25 Jun 2026 17:34:29 +0000 ROA not before: Thu 25 Jun 2026 17:34:29 +0000 ROA not after: Wed 23 Sep 2026 17:34:29 +0000 asID: 402551 IP address blocks: 199.104.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5c2d3985-887b-4bd2-b6fc-0d18e1163b83/5c2d3985-887b-4bd2-b6fc-0d18e1163b83.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5c2d3985-887b-4bd2-b6fc-0d18e1163b83/5c2d3985-887b-4bd2-b6fc-0d18e1163b83.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5c2d3985-887b-4bd2-b6fc-0d18e1163b83.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4a:89:0d:93:e0:e1:c6:4c:5c:d3:b7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c2d3985-887b-4bd2-b6fc-0d18e1163b83 Validity Not Before: Jun 25 17:34:29 2026 GMT Not After : Sep 23 17:34:29 2026 GMT Subject: CN=91cb044e-56a4-4476-908d-715ea4e2041e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:6c:50:4c:03:ac:3e:83:bc:57:50:a1:ad:40: 17:cb:d1:f7:23:21:b5:5f:c4:af:dd:00:6b:a9:5a: 9d:65:4b:1d:87:93:16:51:17:7b:dd:33:63:d7:ae: e6:41:af:ab:7b:4a:66:c1:ad:1a:74:2c:e7:27:3f: a0:ae:36:44:79:bb:14:35:48:84:5d:91:49:e5:d5: cc:bd:9b:b5:58:2c:96:ab:41:39:41:e2:44:90:9e: 4c:10:61:76:f1:b4:22:c1:19:ec:5d:6e:58:10:47: 71:96:83:4e:1b:4d:fc:fa:de:6c:17:a3:99:ef:d3: da:82:45:e4:91:a4:54:d5:ab:98:fa:02:37:c3:49: 15:d0:51:55:13:f5:03:4c:2b:c5:91:a8:24:03:32: 03:ae:4a:3b:aa:35:db:63:56:b8:44:03:fb:16:48: d6:b8:5a:83:70:19:2a:76:46:dd:2c:f7:b8:a7:8f: f4:e5:29:72:2c:1b:62:0a:0e:1d:8a:ef:c0:2a:77: a2:67:e0:80:15:fe:f5:38:e5:cc:e1:c5:76:f0:c3: 0f:0d:0f:f4:e8:37:8d:10:26:ea:5f:9d:32:54:98: 94:22:31:f7:f2:48:35:9b:ad:83:ff:ed:e1:65:61: 12:c0:72:61:7b:c3:ce:a7:41:dd:bd:11:1f:ba:ab: d0:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:C2:3C:83:8E:7B:09:DB:AC:BB:AC:8E:7A:CD:53:6D:16:9C:D0:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5c2d3985-887b-4bd2-b6fc-0d18e1163b83/b6d8d258-09a1-3ea9-a3b0-d1a497ac6528.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5c2d3985-887b-4bd2-b6fc-0d18e1163b83/5c2d3985-887b-4bd2-b6fc-0d18e1163b83.crl X509v3 Authority Key Identifier: keyid:02:7C:7C:C8:42:A2:EC:DF:74:7F:C2:4E:35:EE:B4:BB:EA:89:E9:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5c2d3985-887b-4bd2-b6fc-0d18e1163b83.cer sbgp-ipAddrBlock: critical IPv4: 199.104.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:f5:82:e5:43:df:fd:43:3a:f0:40:97:2f:d4:b3:19:91:7e: d4:cf:99:1f:5f:e7:03:f4:3c:09:a3:71:ed:f8:65:fd:c3:b3: 28:49:01:d9:58:a3:6d:da:fe:07:9d:e7:5d:9f:d5:42:43:5c: bb:d7:80:23:1f:14:fd:81:14:5a:85:8f:c5:4c:02:94:de:a9: f9:eb:69:c5:1f:5b:b9:25:56:f0:69:a8:e9:ad:dd:7e:34:a7: 6b:70:51:d8:6b:f5:a0:e3:67:cd:a2:57:6f:6c:0e:05:a9:64: b6:2c:85:23:d8:c8:43:7d:17:a8:b4:8b:74:f1:74:0d:a8:40: 25:cd:06:0a:61:b4:a5:10:67:4c:c0:4b:92:1c:77:9a:77:49: da:ab:d2:bc:63:3f:de:8c:50:2a:0b:a8:e9:f4:fa:2b:55:e2: 5d:55:93:88:15:3f:c2:2d:66:2d:29:fe:6c:4d:de:d3:27:40: 5e:6d:a3:1a:43:64:ae:fc:12:4b:90:7b:c8:93:37:f5:52:08: 13:a6:c0:72:c8:03:a9:0f:8d:1d:ea:79:2d:bb:ff:40:fb:c9: 27:c8:79:d6:3b:cb:29:46:97:d0:db:33:8f:6d:00:75:2e:fb: 35:9d:48:78:07:e2:24:a2:a2:30:d7:fc:18:a1:fb:62:2a:4e: 0b:49:24:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5KiQ2T4OHGTFzTtwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWMyZDM5ODUtODg3Yi00YmQyLWI2ZmMtMGQxOGUxMTYz YjgzMB4XDTI2MDYyNTE3MzQyOVoXDTI2MDkyMzE3MzQyOVowLzEtMCsGA1UEAxMk OTFjYjA0NGUtNTZhNC00NDc2LTkwOGQtNzE1ZWE0ZTIwNDFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWxQTAOsPoO8V1ChrUAXy9H3IyG1X8Sv3QBr qVqdZUsdh5MWURd73TNj167mQa+re0pmwa0adCznJz+grjZEebsUNUiEXZFJ5dXM vZu1WCyWq0E5QeJEkJ5MEGF28bQiwRnsXW5YEEdxloNOG038+t5sF6OZ79PagkXk kaRU1auY+gI3w0kV0FFVE/UDTCvFkagkAzIDrko7qjXbY1a4RAP7FkjWuFqDcBkq dkbdLPe4p4/05SlyLBtiCg4diu/AKneiZ+CAFf71OOXM4cV28MMPDQ/06DeNECbq X50yVJiUIjH38kg1m62D/+3hZWESwHJhe8POp0HdvREfuqvQTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNrCPIOOewnbrLusjnrNU20WnNATMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi81YzJk Mzk4NS04ODdiLTRiZDItYjZmYy0wZDE4ZTExNjNiODMvYjZkOGQyNTgtMDlhMS0z ZWE5LWEzYjAtZDFhNDk3YWM2NTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNWMyZDM5ODUtODg3Yi00YmQyLWI2 ZmMtMGQxOGUxMTYzYjgzLzVjMmQzOTg1LTg4N2ItNGJkMi1iNmZjLTBkMThlMTE2 M2I4My5jcmwwHwYDVR0jBBgwFoAUAnx8yEKi7N90f8JONe60u+qJ6SswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi81YzJkMzk4NS04ODdiLTRiZDItYjZmYy0wZDE4 ZTExNjNiODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx2gVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC71guVD3/1DOvBAly/UsxmRftTPmR9f5wP0PAmjce34Zf3DsyhJAdlY o23a/ged512f1UJDXLvXgCMfFP2BFFqFj8VMApTeqfnracUfW7klVvBpqOmt3X40 p2twUdhr9aDjZ82iV29sDgWpZLYshSPYyEN9F6i0i3TxdA2oQCXNBgphtKUQZ0zA S5Icd5p3Sdqr0rxjP96MUCoLqOn0+itV4l1Vk4gVP8ItZi0p/mxN3tMnQF5toxpD ZK78EkuQe8iTN/VSCBOmwHLIA6kPjR3qeS27/0D7ySfIedY7yylGl9DbM49tAHUu +zWdSHgH4iSiojDX/Bih+2IqTgtJJJU= -----END CERTIFICATE-----Generated at Tue Jul 21 20:56:54 2026 by rpki-client