$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/d9aff715-467a-358e-a765-6f5f138dd650.roa File: d9aff715-467a-358e-a765-6f5f138dd650.roa (raw, json) Hash identifier: NhrR+a6hGFCvLc80wv/O/caWUXlEgPqhVkHxx/vRqcs= Subject key identifier: CE:53:4C:B5:31:F7:E6:F6:B3:62:17:C7:FE:05:4A:14:5B:30:19:9D Certificate issuer: /CN=09c51633-340e-4eac-820c-a36b33746085 Certificate serial: 010D0C9F4328584EBDDC5FC81B2207DBD64B2800 Authority key identifier: 58:DB:44:5B:64:54:08:69:7A:39:63:68:B1:69:F1:A2:F8:8A:C1:34 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/d9aff715-467a-358e-a765-6f5f138dd650.roa Signing time: Thu 06 Aug 2026 01:00:12 +0000 ROA not before: Thu 06 Aug 2026 01:00:12 +0000 ROA not after: Wed 04 Nov 2026 02:00:12 +0000 asID: 8075 IP address blocks: 199.21.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/09c51633-340e-4eac-820c-a36b33746085.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/09c51633-340e-4eac-820c-a36b33746085.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:bd:dc:5f:c8:1b:22:07:db:d6:4b:28:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09c51633-340e-4eac-820c-a36b33746085 Validity Not Before: Aug 6 01:00:12 2026 GMT Not After : Nov 4 02:00:12 2026 GMT Subject: CN=7c7be98d-f44c-4f6b-809c-79cf1c8fc5ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:92:80:15:c0:41:85:fb:2f:44:56:0e:ad:45: f8:43:0a:01:42:09:48:12:30:43:23:4b:b7:af:bf: 4c:45:d2:f9:a1:4a:f3:e5:c1:93:4a:ca:f3:81:e2: d5:fd:3e:33:7e:8c:0b:0f:c8:a1:01:34:b6:35:b8: e0:ab:e0:49:f0:f0:9f:bf:db:3c:d6:3b:57:33:37: 98:63:55:8e:33:b6:c3:9a:21:ca:07:54:4b:f3:35: 35:b7:0f:81:8a:34:f4:5d:58:d7:ec:6c:bb:f4:0d: 33:c3:c1:1d:5a:fa:b6:d5:36:47:d8:be:83:17:3b: 0d:3d:ed:14:9d:f4:fe:ab:e1:90:41:b8:5f:e8:aa: 02:6b:16:cc:c8:bc:4f:80:0b:27:b5:4a:53:ee:cf: 11:c0:b5:32:d7:2d:e1:20:d9:bf:f1:b5:57:9c:6e: e1:2a:6e:ec:ab:cd:5c:e8:8f:dc:61:7c:d3:fc:35: ff:70:e3:fc:2a:b9:4a:f3:4e:00:f5:85:c5:94:5f: 36:f0:6c:07:94:cf:65:47:4f:c8:17:90:98:fb:1d: de:da:ca:2a:b4:71:1f:a8:06:55:d6:c8:17:72:b1: 3f:45:f8:c7:74:98:e3:a1:04:4a:64:29:c3:58:7e: 96:7a:98:27:21:00:82:83:99:32:df:c7:0c:07:e9: 2c:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:53:4C:B5:31:F7:E6:F6:B3:62:17:C7:FE:05:4A:14:5B:30:19:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/d9aff715-467a-358e-a765-6f5f138dd650.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/09c51633-340e-4eac-820c-a36b33746085.crl X509v3 Authority Key Identifier: keyid:58:DB:44:5B:64:54:08:69:7A:39:63:68:B1:69:F1:A2:F8:8A:C1:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085.cer sbgp-ipAddrBlock: critical IPv4: 199.21.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:53:c3:8e:69:28:76:1a:43:21:5a:6d:fb:64:a3:67:1c:06: 66:5a:18:cb:61:26:6c:1a:82:d8:b9:5e:cc:0c:94:17:bf:99: 10:0a:a9:16:72:1b:98:89:2c:21:83:22:a2:14:47:cc:74:7c: 1d:cf:f9:be:c9:0b:9d:93:f3:e2:ec:12:9b:40:82:b9:21:87: d1:74:e5:b3:7a:0a:7c:14:9d:3b:5f:a4:68:51:b5:28:ee:4d: b3:0a:90:f0:98:36:d2:02:3c:13:f3:f3:0f:56:d6:a4:fb:ff: 0a:de:cf:d6:5d:fc:bc:69:7d:aa:fa:d7:b9:ec:a9:5e:82:3f: ba:3f:d9:c3:a0:77:fe:09:12:06:96:87:6a:d7:2d:34:ce:7b: c7:04:43:03:db:54:38:45:6f:d1:ee:ca:48:10:22:c9:16:e4: af:8f:19:c7:42:b4:ce:30:32:d3:a5:14:77:9e:f0:6f:1c:ca: e5:84:9a:ed:a6:e7:09:06:85:c3:bf:62:ca:44:87:a4:5d:1c: 77:b4:32:86:d2:5d:c2:ba:5f:4a:d4:0e:de:37:84:0d:cb:79: 38:df:10:84:be:29:89:44:f0:0a:fe:c4:50:6c:dd:c6:f9:55: e4:66:99:17:66:4d:e8:d8:d7:cf:b2:bf:b6:72:f7:ef:7e:84: 28:ad:b0:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE693F/IGyIH29ZLKAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDljNTE2MzMtMzQwZS00ZWFjLTgyMGMtYTM2YjMzNzQ2 MDg1MB4XDTI2MDgwNjAxMDAxMloXDTI2MTEwNDAyMDAxMlowLzEtMCsGA1UEAxMk N2M3YmU5OGQtZjQ0Yy00ZjZiLTgwOWMtNzljZjFjOGZjNWFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJKAFcBBhfsvRFYOrUX4QwoBQglIEjBDI0u3 r79MRdL5oUrz5cGTSsrzgeLV/T4zfowLD8ihATS2Nbjgq+BJ8PCfv9s81jtXMzeY Y1WOM7bDmiHKB1RL8zU1tw+BijT0XVjX7Gy79A0zw8EdWvq21TZH2L6DFzsNPe0U nfT+q+GQQbhf6KoCaxbMyLxPgAsntUpT7s8RwLUy1y3hINm/8bVXnG7hKm7sq81c 6I/cYXzT/DX/cOP8KrlK804A9YXFlF828GwHlM9lR0/IF5CY+x3e2soqtHEfqAZV 1sgXcrE/RfjHdJjjoQRKZCnDWH6WepgnIQCCg5ky38cMB+ks+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM5TTLUx9+b2s2IXx/4FShRbMBmdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8wOWM1 MTYzMy0zNDBlLTRlYWMtODIwYy1hMzZiMzM3NDYwODUvZDlhZmY3MTUtNDY3YS0z NThlLWE3NjUtNmY1ZjEzOGRkNjUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMDljNTE2MzMtMzQwZS00ZWFjLTgy MGMtYTM2YjMzNzQ2MDg1LzA5YzUxNjMzLTM0MGUtNGVhYy04MjBjLWEzNmIzMzc0 NjA4NS5jcmwwHwYDVR0jBBgwFoAUWNtEW2RUCGl6OWNosWnxoviKwTQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8wOWM1MTYzMy0zNDBlLTRlYWMtODIwYy1hMzZi MzM3NDYwODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxxWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFZTw45pKHYaQyFabftko2ccBmZaGMthJmwagti5XswMlBe/mRAKqRZy G5iJLCGDIqIUR8x0fB3P+b7JC52T8+LsEptAgrkhh9F05bN6CnwUnTtfpGhRtSju TbMKkPCYNtICPBPz8w9W1qT7/wrez9Zd/Lxpfar617nsqV6CP7o/2cOgd/4JEgaW h2rXLTTOe8cEQwPbVDhFb9HuykgQIskW5K+PGcdCtM4wMtOlFHee8G8cyuWEmu2m 5wkGhcO/YspEh6RdHHe0MobSXcK6X0rUDt43hA3LeTjfEIS+KYlE8Ar+xFBs3cb5 VeRmmRdmTejY18+yv7Zy9+9+hCitsNE= -----END CERTIFICATE-----Generated at Fri Sep 4 23:33:37 2026 by rpki-client