$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/21efb472-100a-3c92-896d-aaf412da7d6b.roa File: 21efb472-100a-3c92-896d-aaf412da7d6b.roa (raw, json) Hash identifier: DI47Sn3qeQ86ssScPA7Qq5lX3ZeK+/wn2iOTRzbf5f0= Subject key identifier: 7A:8F:C9:A3:CB:DE:A7:87:2F:79:25:03:37:AE:11:F9:0E:59:77:6D Certificate issuer: /CN=9ae0873b-8541-4d6e-b91c-36dbbbe51043 Certificate serial: 010D0C9F4328584EC0A70B1D3668B35417665740 Authority key identifier: 5B:0A:B2:5C:5E:2C:E1:C1:17:9D:B5:E0:13:08:7A:DA:BB:CD:8B:6D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/21efb472-100a-3c92-896d-aaf412da7d6b.roa Signing time: Fri 07 Aug 2026 01:00:12 +0000 ROA not before: Fri 07 Aug 2026 01:00:12 +0000 ROA not after: Thu 05 Nov 2026 02:00:12 +0000 asID: 8796 IP address blocks: 192.6.120.0/24 maxlen: 24 192.6.121.0/24 maxlen: 24 192.25.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/9ae0873b-8541-4d6e-b91c-36dbbbe51043.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/9ae0873b-8541-4d6e-b91c-36dbbbe51043.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 15 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c0:a7:0b:1d:36:68:b3:54:17:66:57:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ae0873b-8541-4d6e-b91c-36dbbbe51043 Validity Not Before: Aug 7 01:00:12 2026 GMT Not After : Nov 5 02:00:12 2026 GMT Subject: CN=3062927e-6d66-44e4-9119-d85e2d333d2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:d9:ac:99:e5:26:e6:10:56:8b:41:9a:9f:b8: 75:c0:91:9a:91:57:d6:6d:d8:28:f0:42:e1:e9:f5: ef:91:38:00:e5:29:9f:e0:96:69:30:c1:41:3f:e3: e2:63:1c:39:d6:8d:3e:cd:e8:ec:c1:56:ba:7e:34: 9d:4a:e2:49:46:c2:86:92:95:8c:b6:9e:ef:10:63: c7:82:a4:8e:02:a9:7f:77:0d:c5:eb:c1:35:67:b0: bd:7d:35:14:51:d3:c5:72:7a:f7:70:16:fc:44:e8: cc:20:35:65:75:12:42:1d:2a:66:4c:79:7b:0e:5f: d3:64:be:ee:87:b9:b6:6d:71:f0:ef:ea:8a:41:90: 80:df:5e:75:b6:5b:a0:ea:12:d4:af:69:e3:78:5c: 90:35:bd:fb:ff:42:e5:08:48:3b:1c:51:91:00:69: 11:1b:1f:01:0d:a4:1d:99:e1:d9:6e:fd:1f:2c:92: 04:4f:95:93:ca:87:3b:6e:5e:5e:ac:49:a1:12:8f: 10:59:16:2e:17:1d:02:31:40:cd:ae:66:97:39:56: c9:0e:a0:1b:2f:bf:d4:5f:51:24:95:db:73:9a:04: 5b:62:98:9e:9f:a9:2b:16:61:e0:10:d4:a6:23:96: e5:bc:28:80:b1:7b:2a:ae:ee:16:e0:59:0b:8d:8e: b7:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:8F:C9:A3:CB:DE:A7:87:2F:79:25:03:37:AE:11:F9:0E:59:77:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/21efb472-100a-3c92-896d-aaf412da7d6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/9ae0873b-8541-4d6e-b91c-36dbbbe51043.crl X509v3 Authority Key Identifier: keyid:5B:0A:B2:5C:5E:2C:E1:C1:17:9D:B5:E0:13:08:7A:DA:BB:CD:8B:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043.cer sbgp-ipAddrBlock: critical IPv4: 192.6.120.0/23 192.25.102.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:e0:b5:a7:74:b1:8a:ba:da:c5:a9:87:1b:45:20:a6:54:12: 7b:52:69:74:4f:24:f8:07:f5:79:27:06:aa:45:27:4d:a3:8e: 0f:02:20:fe:cf:ef:a7:c8:6b:72:6e:11:7b:61:ef:5c:97:57: 92:60:20:6f:0a:88:8b:37:85:b6:d6:c7:50:dc:c2:e4:59:f6: 29:75:b6:a7:53:e9:a5:81:df:7a:86:23:ef:20:aa:90:9f:78: 2d:51:86:59:ce:75:05:c2:6a:4e:e3:d1:0e:e3:c2:61:23:4c: ed:46:8f:61:e7:e1:6d:4f:57:c4:3c:87:9e:3a:ec:c2:59:7a: 15:d0:e8:c5:f9:49:8c:84:bd:8a:59:d7:e9:75:a4:16:9b:37: 3a:b2:89:dc:5b:ad:dc:0c:86:36:5a:30:49:1e:c6:d2:40:cc: ac:1f:8b:bc:48:fe:af:23:ba:d3:7f:05:e4:d4:a0:17:41:b2: b4:ce:b2:a1:08:5f:c6:fc:1e:06:0d:bb:cd:a6:b9:8e:9e:e1: a5:30:7a:60:9c:36:50:af:a7:d7:37:42:92:42:26:e8:15:26: 30:6d:0c:9b:ad:d5:9f:73:48:8f:97:dd:24:39:ce:67:9b:79: 1a:75:7d:f1:47:70:40:03:6b:1b:4a:3b:30:46:de:ea:55:57: e5:c1:29:e2 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE7ApwsdNmizVBdmV0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWFlMDg3M2ItODU0MS00ZDZlLWI5MWMtMzZkYmJiZTUx MDQzMB4XDTI2MDgwNzAxMDAxMloXDTI2MTEwNTAyMDAxMlowLzEtMCsGA1UEAxMk MzA2MjkyN2UtNmQ2Ni00NGU0LTkxMTktZDg1ZTJkMzMzZDJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9msmeUm5hBWi0Gan7h1wJGakVfWbdgo8ELh 6fXvkTgA5Smf4JZpMMFBP+PiYxw51o0+zejswVa6fjSdSuJJRsKGkpWMtp7vEGPH gqSOAql/dw3F68E1Z7C9fTUUUdPFcnr3cBb8ROjMIDVldRJCHSpmTHl7Dl/TZL7u h7m2bXHw7+qKQZCA3151tlug6hLUr2njeFyQNb37/0LlCEg7HFGRAGkRGx8BDaQd meHZbv0fLJIET5WTyoc7bl5erEmhEo8QWRYuFx0CMUDNrmaXOVbJDqAbL7/UX1Ek ldtzmgRbYpien6krFmHgENSmI5blvCiAsXsqru4W4FkLjY63zwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFHqPyaPL3qeHL3klAzeuEfkOWXdtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85YWUw ODczYi04NTQxLTRkNmUtYjkxYy0zNmRiYmJlNTEwNDMvMjFlZmI0NzItMTAwYS0z YzkyLTg5NmQtYWFmNDEyZGE3ZDZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWFlMDg3M2ItODU0MS00ZDZlLWI5 MWMtMzZkYmJiZTUxMDQzLzlhZTA4NzNiLTg1NDEtNGQ2ZS1iOTFjLTM2ZGJiYmU1 MTA0My5jcmwwHwYDVR0jBBgwFoAUWwqyXF4s4cEXnbXgEwh62rvNi20wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85YWUwODczYi04NTQxLTRkNmUtYjkxYy0zNmRi YmJlNTEwNDMuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBwAZ4AwQA wBlmMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAK/gtad0sYq62sWphxtFIKZUEntSaXRPJPgH9XknBqpFJ02j jg8CIP7P76fIa3JuEXth71yXV5JgIG8KiIs3hbbWx1DcwuRZ9il1tqdT6aWB33qG I+8gqpCfeC1RhlnOdQXCak7j0Q7jwmEjTO1Gj2Hn4W1PV8Q8h5467MJZehXQ6MX5 SYyEvYpZ1+l1pBabNzqyidxbrdwMhjZaMEkextJAzKwfi7xI/q8jutN/BeTUoBdB srTOsqEIX8b8HgYNu82muY6e4aUwemCcNlCvp9c3QpJCJugVJjBtDJut1Z9zSI+X 3SQ5zmebeRp1ffFHcEADaxtKOzBG3upVV+XBKeI= -----END CERTIFICATE-----Generated at Sun Sep 13 16:38:35 2026 by rpki-client