$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/df50907a-5dd1-4ef7-a109-30ae99771030/21bf8664-e23c-3926-b096-516503e113ed.roa File: 21bf8664-e23c-3926-b096-516503e113ed.roa (raw, json) Hash identifier: AWwsnvpzZMwX9YBZYoEOFTZPOqKwv1CSnkyPxhjJWcQ= Subject key identifier: 5A:2A:4E:E3:8B:0D:BF:A8:23:B8:01:50:CB:38:97:9A:2D:94:45:A3 Certificate issuer: /CN=df50907a-5dd1-4ef7-a109-30ae99771030 Certificate serial: 010D0C9F4328584EE7279756B50006D8B4ACAD40 Authority key identifier: F9:A8:A6:35:B1:72:68:FC:EF:45:7F:77:C7:3E:38:EE:B7:11:85:6D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/df50907a-5dd1-4ef7-a109-30ae99771030.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/df50907a-5dd1-4ef7-a109-30ae99771030/21bf8664-e23c-3926-b096-516503e113ed.roa Signing time: Thu 20 Aug 2026 20:00:01 +0000 ROA not before: Thu 20 Aug 2026 20:00:01 +0000 ROA not after: Wed 18 Nov 2026 21:00:01 +0000 asID: 16509 IP address blocks: 199.202.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/df50907a-5dd1-4ef7-a109-30ae99771030/df50907a-5dd1-4ef7-a109-30ae99771030.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/df50907a-5dd1-4ef7-a109-30ae99771030/df50907a-5dd1-4ef7-a109-30ae99771030.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/df50907a-5dd1-4ef7-a109-30ae99771030.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e7:27:97:56:b5:00:06:d8:b4:ac:ad:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df50907a-5dd1-4ef7-a109-30ae99771030 Validity Not Before: Aug 20 20:00:01 2026 GMT Not After : Nov 18 21:00:01 2026 GMT Subject: CN=8cd2ea64-37c6-4e6e-9b9f-698cf8988245 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:2c:7f:83:88:90:05:58:e8:cd:a4:e3:0d:b2: 88:5c:de:7b:70:00:ec:e5:14:ac:7d:2a:e5:a8:ed: 0c:b6:79:25:12:2c:2c:66:3f:e7:a1:8d:2b:ae:ad: 12:ae:69:c5:68:86:89:2f:82:d9:58:09:7d:1d:55: 3f:c3:e3:82:fa:3c:43:e6:97:45:ff:a6:5c:ad:07: 0f:47:20:e1:1e:ea:d4:29:19:21:c6:31:38:e6:81: b8:19:22:d5:88:7d:53:7a:20:d1:e6:28:f0:ca:96: d6:94:a7:49:fa:e3:0c:a4:5b:58:59:9c:10:05:f2: 73:83:53:38:f5:cf:a1:19:eb:7a:62:af:80:03:37: 9e:b4:78:c7:c9:a1:03:97:45:ad:74:44:7a:73:29: 9b:e2:0e:4d:47:db:5b:0d:f5:2f:e5:10:c9:60:73: 00:41:a4:4a:05:cc:aa:52:b1:44:21:fc:74:b8:d9: 1c:a1:4c:df:21:42:38:93:62:19:86:fd:a9:93:99: 4e:19:8a:80:8d:83:29:6b:08:99:7e:be:1e:35:ef: cd:3f:c7:c4:3b:d1:ad:a2:e4:b4:8f:38:c3:c5:e9: de:19:29:9d:43:5d:f7:d6:f8:43:ba:a0:5f:8c:e3: bc:06:0b:04:d8:2a:ab:7a:e1:af:9d:ac:74:11:d6: 5a:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:2A:4E:E3:8B:0D:BF:A8:23:B8:01:50:CB:38:97:9A:2D:94:45:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/df50907a-5dd1-4ef7-a109-30ae99771030/21bf8664-e23c-3926-b096-516503e113ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/df50907a-5dd1-4ef7-a109-30ae99771030/df50907a-5dd1-4ef7-a109-30ae99771030.crl X509v3 Authority Key Identifier: keyid:F9:A8:A6:35:B1:72:68:FC:EF:45:7F:77:C7:3E:38:EE:B7:11:85:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/df50907a-5dd1-4ef7-a109-30ae99771030.cer sbgp-ipAddrBlock: critical IPv4: 199.202.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:03:40:38:07:1c:ab:ae:35:42:fc:33:ae:c2:f8:31:ac:90: 80:93:de:57:6e:e2:7b:a9:5a:ad:07:e9:59:d2:13:e7:55:04: b5:d4:a0:6a:97:90:10:47:0f:b6:87:53:c9:ab:3b:2a:85:cb: ac:9a:e5:8c:24:fc:c3:08:98:4c:30:d3:ac:a6:45:c7:e3:39: 88:c7:be:e8:b9:37:b7:7f:ea:d0:e9:a8:aa:d2:4d:2b:e2:52: 23:28:bf:7d:b0:8e:73:e5:7f:1d:6e:aa:8d:17:fc:d8:90:a9: 56:48:9e:eb:3c:fe:59:c3:4c:6f:de:fb:ff:41:5d:a6:05:b7: 93:cc:48:a0:52:d1:42:cf:1b:0b:36:f7:73:99:44:4c:2a:45: ba:79:c4:04:4b:5b:4c:ef:e4:99:44:dd:b1:d0:3f:32:41:c7: 09:54:55:b8:15:12:f4:16:ac:1d:3e:68:21:51:af:4d:03:f4: bb:69:3f:81:07:66:81:a5:f3:3d:d4:44:0b:a8:c9:32:8f:30: ef:ce:e8:ad:f8:0b:70:45:d2:93:18:14:71:84:24:eb:b2:4a: 6c:de:a2:16:3f:30:3f:03:a9:15:03:e0:37:f8:49:0f:26:f1: eb:af:d8:87:af:c6:ff:5a:68:18:5f:2b:0b:35:7f:ec:7c:e0: 94:0b:b5:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7nJ5dWtQAG2LSsrUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGY1MDkwN2EtNWRkMS00ZWY3LWExMDktMzBhZTk5Nzcx MDMwMB4XDTI2MDgyMDIwMDAwMVoXDTI2MTExODIxMDAwMVowLzEtMCsGA1UEAxMk OGNkMmVhNjQtMzdjNi00ZTZlLTliOWYtNjk4Y2Y4OTg4MjQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCx/g4iQBVjozaTjDbKIXN57cADs5RSsfSrl qO0MtnklEiwsZj/noY0rrq0SrmnFaIaJL4LZWAl9HVU/w+OC+jxD5pdF/6ZcrQcP RyDhHurUKRkhxjE45oG4GSLViH1TeiDR5ijwypbWlKdJ+uMMpFtYWZwQBfJzg1M4 9c+hGet6Yq+AAzeetHjHyaEDl0WtdER6cymb4g5NR9tbDfUv5RDJYHMAQaRKBcyq UrFEIfx0uNkcoUzfIUI4k2IZhv2pk5lOGYqAjYMpawiZfr4eNe/NP8fEO9GtouS0 jzjDxeneGSmdQ1331vhDuqBfjOO8BgsE2CqreuGvnax0EdZauwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFoqTuOLDb+oI7gBUMs4l5otlEWjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9kZjUw OTA3YS01ZGQxLTRlZjctYTEwOS0zMGFlOTk3NzEwMzAvMjFiZjg2NjQtZTIzYy0z OTI2LWIwOTYtNTE2NTAzZTExM2VkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvZGY1MDkwN2EtNWRkMS00ZWY3LWEx MDktMzBhZTk5NzcxMDMwL2RmNTA5MDdhLTVkZDEtNGVmNy1hMTA5LTMwYWU5OTc3 MTAzMC5jcmwwHwYDVR0jBBgwFoAU+aimNbFyaPzvRX93xz447rcRhW0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9kZjUwOTA3YS01ZGQxLTRlZjctYTEwOS0zMGFl OTk3NzEwMzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx8qaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHYDQDgHHKuuNUL8M67C+DGskICT3ldu4nupWq0H6VnSE+dVBLXUoGqX kBBHD7aHU8mrOyqFy6ya5Ywk/MMImEww06ymRcfjOYjHvui5N7d/6tDpqKrSTSvi UiMov32wjnPlfx1uqo0X/NiQqVZInus8/lnDTG/e+/9BXaYFt5PMSKBS0ULPGws2 93OZREwqRbp5xARLW0zv5JlE3bHQPzJBxwlUVbgVEvQWrB0+aCFRr00D9LtpP4EH ZoGl8z3URAuoyTKPMO/O6K34C3BF0pMYFHGEJOuySmzeohY/MD8DqRUD4Df4SQ8m 8euv2Ievxv9aaBhfKws1f+x84JQLtY4= -----END CERTIFICATE-----Generated at Thu Aug 20 23:38:53 2026 by rpki-client