$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21bc3777-de7d-4aed-88bc-9c652ed17843/f2a8e2bd-ba4e-3209-b315-1823ebb403a4.roa File: f2a8e2bd-ba4e-3209-b315-1823ebb403a4.roa (raw, json) Hash identifier: iakbLqKIOmNsHfbb1JlrM2xffT72kUuQH+ITTx3t/Xg= Subject key identifier: FC:49:63:EB:16:5B:58:CA:3B:87:C3:0A:94:8F:D7:D0:C8:4C:75:9C Certificate issuer: /CN=21bc3777-de7d-4aed-88bc-9c652ed17843 Certificate serial: 010D0C9F4328584EAFE6F16973E8A5500DBB7800 Authority key identifier: 51:D1:4C:A5:50:D0:D0:72:00:46:BF:9C:5F:E7:45:08:7E:B4:58:51 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21bc3777-de7d-4aed-88bc-9c652ed17843.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21bc3777-de7d-4aed-88bc-9c652ed17843/f2a8e2bd-ba4e-3209-b315-1823ebb403a4.roa Signing time: Sat 01 Aug 2026 01:00:12 +0000 ROA not before: Sat 01 Aug 2026 01:00:12 +0000 ROA not after: Fri 30 Oct 2026 01:00:12 +0000 asID: 46188 IP address blocks: 199.21.176.0/22 maxlen: 22 199.45.28.0/22 maxlen: 22 208.93.12.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21bc3777-de7d-4aed-88bc-9c652ed17843/21bc3777-de7d-4aed-88bc-9c652ed17843.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21bc3777-de7d-4aed-88bc-9c652ed17843/21bc3777-de7d-4aed-88bc-9c652ed17843.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21bc3777-de7d-4aed-88bc-9c652ed17843.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:af:e6:f1:69:73:e8:a5:50:0d:bb:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21bc3777-de7d-4aed-88bc-9c652ed17843 Validity Not Before: Aug 1 01:00:12 2026 GMT Not After : Oct 30 01:00:12 2026 GMT Subject: CN=f18cd00a-1bd7-4f69-86cc-99b862243909 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:31:1a:42:17:76:6c:ae:74:db:8f:57:9f:b3: 2d:43:ce:1a:b9:95:71:74:b4:8e:55:e8:39:2b:5c: 67:12:bd:db:2b:69:f7:62:a6:8b:96:c3:63:e9:13: 3c:d8:b6:ee:b1:07:f1:f6:31:3b:45:85:99:9d:d3: 98:5c:04:cc:75:a0:eb:a8:9f:76:e5:e5:d6:91:5b: 5a:78:7b:e4:5d:f3:e4:1a:6a:e9:05:07:5b:c0:3e: b3:39:cb:fe:09:5b:c4:2d:e7:26:8b:72:71:63:8c: c2:16:b6:bc:16:1e:d7:32:2a:a9:a5:31:9d:f6:6a: 33:5a:ab:5b:7e:69:ba:ce:9e:6c:8d:b6:a5:e1:e3: 81:aa:c1:16:a7:3a:a9:68:0b:0e:5d:a9:4e:97:9c: cd:2d:6d:8b:45:48:c4:03:f9:b8:9b:4b:62:f3:b6: 7b:f6:97:00:e1:e3:b2:d3:20:44:6d:81:35:7f:48: a6:cf:43:99:37:60:b6:d7:63:2c:00:ec:01:69:8d: 7a:02:da:5c:b8:7a:9c:e3:88:5c:2e:4d:7a:0d:97: af:12:f7:52:9a:1e:13:3d:49:bf:6a:cc:ec:c5:cc: 3b:1f:d9:4d:20:76:f7:35:10:8b:15:ef:28:49:b0: bb:1c:db:0c:33:3e:e8:f0:f1:8d:94:ee:cd:e9:eb: 4c:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:49:63:EB:16:5B:58:CA:3B:87:C3:0A:94:8F:D7:D0:C8:4C:75:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21bc3777-de7d-4aed-88bc-9c652ed17843/f2a8e2bd-ba4e-3209-b315-1823ebb403a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21bc3777-de7d-4aed-88bc-9c652ed17843/21bc3777-de7d-4aed-88bc-9c652ed17843.crl X509v3 Authority Key Identifier: keyid:51:D1:4C:A5:50:D0:D0:72:00:46:BF:9C:5F:E7:45:08:7E:B4:58:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21bc3777-de7d-4aed-88bc-9c652ed17843.cer sbgp-ipAddrBlock: critical IPv4: 199.21.176.0/22 199.45.28.0/22 208.93.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:3f:83:c9:9c:63:77:9e:fa:17:63:44:73:a3:c7:e3:4b:5c: 3f:7b:3d:42:b9:e2:94:fc:8b:dc:e5:ee:4d:d5:95:b5:54:4f: 8e:2f:21:e9:7f:15:54:db:d7:28:44:6c:67:6b:fe:73:dd:42: 4b:5c:af:58:c5:46:54:3d:eb:05:9b:0f:cb:8e:4f:65:2f:f1: 52:bb:80:07:05:f6:64:4d:26:04:16:b9:98:58:e1:77:36:c7: 16:ad:a5:0a:8b:d8:e4:e4:fc:73:8c:d3:02:7e:0f:39:08:0c: a8:dd:0e:89:e4:31:29:b8:aa:8c:1a:49:a5:96:1c:8f:78:9a: 5c:31:75:88:a1:53:4d:6d:a2:c2:8e:73:81:24:83:17:bb:37: f8:e6:b9:d4:01:10:f9:64:7d:7f:51:38:49:e3:06:78:21:0f: f4:5f:23:68:97:8d:00:ad:48:5b:d8:1e:3c:2a:3f:c9:8e:56: 75:93:de:51:ad:65:84:e1:96:2c:f7:7f:04:57:aa:ad:30:92: 3c:e1:58:32:ab:56:4d:24:31:7d:65:08:e0:6f:78:f3:e0:a1: 80:46:57:e4:be:b3:7d:93:01:b7:a7:85:47:d6:3f:fb:aa:6a: cf:84:e1:1d:45:ee:aa:03:0f:bd:d3:08:25:51:81:d6:ff:1d: 56:c9:a5:a8 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE6v5vFpc+ilUA27eAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFiYzM3NzctZGU3ZC00YWVkLTg4YmMtOWM2NTJlZDE3 ODQzMB4XDTI2MDgwMTAxMDAxMloXDTI2MTAzMDAxMDAxMlowLzEtMCsGA1UEAxMk ZjE4Y2QwMGEtMWJkNy00ZjY5LTg2Y2MtOTliODYyMjQzOTA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhTEaQhd2bK50249Xn7MtQ84auZVxdLSOVeg5 K1xnEr3bK2n3YqaLlsNj6RM82LbusQfx9jE7RYWZndOYXATMdaDrqJ925eXWkVta eHvkXfPkGmrpBQdbwD6zOcv+CVvELecmi3JxY4zCFra8Fh7XMiqppTGd9mozWqtb fmm6zp5sjbal4eOBqsEWpzqpaAsOXalOl5zNLW2LRUjEA/m4m0ti87Z79pcA4eOy 0yBEbYE1f0imz0OZN2C212MsAOwBaY16AtpcuHqc44hcLk16DZevEvdSmh4TPUm/ aszsxcw7H9lNIHb3NRCLFe8oSbC7HNsMMz7o8PGNlO7N6etMXQIDAQABo4IDYTCC A10wHQYDVR0OBBYEFPxJY+sWW1jKO4fDCpSP19DITHWcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yMWJj Mzc3Ny1kZTdkLTRhZWQtODhiYy05YzY1MmVkMTc4NDMvZjJhOGUyYmQtYmE0ZS0z MjA5LWIzMTUtMTgyM2ViYjQwM2E0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMjFiYzM3NzctZGU3ZC00YWVkLTg4 YmMtOWM2NTJlZDE3ODQzLzIxYmMzNzc3LWRlN2QtNGFlZC04OGJjLTljNjUyZWQx Nzg0My5jcmwwHwYDVR0jBBgwFoAUUdFMpVDQ0HIARr+cX+dFCH60WFEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yMWJjMzc3Ny1kZTdkLTRhZWQtODhiYy05YzY1 MmVkMTc4NDMuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCxxWwAwQC xy0cAwQC0F0MMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAEE/g8mcY3ee+hdjRHOjx+NLXD97PUK54pT8i9zl 7k3VlbVUT44vIel/FVTb1yhEbGdr/nPdQktcr1jFRlQ96wWbD8uOT2Uv8VK7gAcF 9mRNJgQWuZhY4Xc2xxatpQqL2OTk/HOM0wJ+DzkIDKjdDonkMSm4qowaSaWWHI94 mlwxdYihU01tosKOc4Ekgxe7N/jmudQBEPlkfX9ROEnjBnghD/RfI2iXjQCtSFvY HjwqP8mOVnWT3lGtZYThliz3fwRXqq0wkjzhWDKrVk0kMX1lCOBvePPgoYBGV+S+ s32TAbenhUfWP/uqas+E4R1F7qoDD73TCCVRgdb/HVbJpag= -----END CERTIFICATE-----Generated at Fri Sep 11 17:14:03 2026 by rpki-client