$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/21790efa-5999-44a6-9c3e-1ce70307f8cc/2555f178-71cc-3474-9ddf-9a67c03604ca.roa File: 2555f178-71cc-3474-9ddf-9a67c03604ca.roa (raw, json) Hash identifier: O+YIM/Shs1mw5pebDzG+gT3tIdivPXJ7Bkvo0/7zr08= Subject key identifier: 84:CC:C0:53:3B:57:AA:F0:66:E9:E8:EA:B8:CF:D2:F0:6E:DD:95:0C Certificate issuer: /CN=21790efa-5999-44a6-9c3e-1ce70307f8cc Certificate serial: 010D0C9F4328584EA7888D5C8D8C9AE1E8C65680 Authority key identifier: 32:94:FF:27:32:41:9D:3E:BE:2A:09:34:F3:26:D1:C1:AD:C0:87:15 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/21790efa-5999-44a6-9c3e-1ce70307f8cc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/21790efa-5999-44a6-9c3e-1ce70307f8cc/2555f178-71cc-3474-9ddf-9a67c03604ca.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 36658 IP address blocks: 172.87.96.0/19 maxlen: 19 172.87.96.0/21 maxlen: 21 172.87.104.0/21 maxlen: 21 172.87.112.0/21 maxlen: 21 172.87.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/21790efa-5999-44a6-9c3e-1ce70307f8cc/21790efa-5999-44a6-9c3e-1ce70307f8cc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/21790efa-5999-44a6-9c3e-1ce70307f8cc/21790efa-5999-44a6-9c3e-1ce70307f8cc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/21790efa-5999-44a6-9c3e-1ce70307f8cc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:8d:5c:8d:8c:9a:e1:e8:c6:56:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21790efa-5999-44a6-9c3e-1ce70307f8cc Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=e3b0909a-260d-4d97-8602-a0315ec6d855 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:3c:4d:15:40:f4:e2:52:ed:9f:12:67:6c:b5: be:b1:6c:91:4a:c1:bf:19:16:d9:8f:21:2e:69:a5: 7e:b2:3d:39:51:6d:71:5e:ff:d5:33:dc:a4:e3:15: e0:1e:d2:dd:3d:b5:25:0b:37:b5:f9:3c:9e:af:ce: 4c:a9:26:99:be:64:7e:44:23:cc:64:c0:2d:8b:75: 1e:08:0c:f9:49:a1:1e:59:bd:28:39:14:56:8a:fc: df:27:c6:6e:1c:b0:a1:95:2e:be:79:ba:ef:bd:9e: 32:e6:25:d0:ba:1d:94:00:e2:b5:35:38:07:ed:3b: d7:b6:65:68:96:a7:ca:40:ba:07:36:97:3e:35:83: 2e:99:29:28:1a:4f:f8:71:80:05:c1:71:86:aa:08: bb:39:d7:5b:48:73:30:d5:89:af:c3:cc:5a:23:43: 25:22:61:7d:96:35:7c:f3:21:b2:78:b2:cb:f0:f0: 46:10:c4:b0:e8:22:6a:27:6d:9d:64:80:f4:b8:9b: 7c:25:0e:46:d6:54:fd:ec:ad:a3:9b:72:b8:9a:47: 0a:8e:d6:82:37:25:b0:1f:b5:d0:4c:2f:79:79:f4: a9:a4:72:9b:c4:88:1b:aa:d0:0d:8c:10:29:bf:f6: 4a:51:05:44:3d:06:c8:e2:d8:4a:d8:df:cb:41:49: 0a:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:CC:C0:53:3B:57:AA:F0:66:E9:E8:EA:B8:CF:D2:F0:6E:DD:95:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/21790efa-5999-44a6-9c3e-1ce70307f8cc/2555f178-71cc-3474-9ddf-9a67c03604ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/21790efa-5999-44a6-9c3e-1ce70307f8cc/21790efa-5999-44a6-9c3e-1ce70307f8cc.crl X509v3 Authority Key Identifier: keyid:32:94:FF:27:32:41:9D:3E:BE:2A:09:34:F3:26:D1:C1:AD:C0:87:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/21790efa-5999-44a6-9c3e-1ce70307f8cc.cer sbgp-ipAddrBlock: critical IPv4: 172.87.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:9d:9d:63:11:2e:5b:e5:67:48:33:6a:77:51:d2:f9:d1:a2: 0d:bd:67:2d:6c:8f:8a:f7:f6:b0:e4:cd:1a:22:ec:4c:a5:a3: 69:a8:11:f5:89:d1:04:24:37:af:cc:52:c6:54:29:a1:4d:16: 9e:98:5f:5a:4a:62:03:bb:b6:b1:7b:05:ec:31:82:7a:cb:d3: d2:d8:fd:04:7e:b5:61:23:3a:6a:d7:91:6d:a7:bf:5a:f8:19: 6a:d2:92:dd:7d:07:81:0d:98:a2:a6:19:82:56:85:10:0f:6e: fa:1d:2b:67:21:5d:b5:1a:7e:b1:b8:1e:f5:49:27:d0:3f:7c: 0a:a5:13:d2:70:cc:29:8f:dd:18:f9:18:09:86:21:9d:b6:b8: f6:c6:64:0f:29:b7:b8:fc:9d:3d:69:b5:2c:2d:95:f8:1d:9d: 0f:46:9d:aa:62:10:db:17:d1:25:93:7c:2f:68:b6:74:ad:61: aa:76:4d:67:2b:ed:de:69:ed:3e:b8:03:a4:aa:44:14:d1:b5: db:90:8a:8e:6c:a8:ae:73:44:be:f0:da:fc:5e:05:16:cd:ef: 3d:35:ed:0b:9b:60:63:b2:c5:06:d4:b6:ee:3d:97:58:65:33: 57:5b:b3:f1:c8:ce:62:d4:14:ce:7f:ad:09:7c:31:b8:ce:bd: 06:49:bf:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niI1cjYya4ejGVoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjE3OTBlZmEtNTk5OS00NGE2LTljM2UtMWNlNzAzMDdm OGNjMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZTNiMDkwOWEtMjYwZC00ZDk3LTg2MDItYTAzMTVlYzZkODU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljxNFUD04lLtnxJnbLW+sWyRSsG/GRbZjyEu aaV+sj05UW1xXv/VM9yk4xXgHtLdPbUlCze1+Tyer85MqSaZvmR+RCPMZMAti3Ue CAz5SaEeWb0oORRWivzfJ8ZuHLChlS6+ebrvvZ4y5iXQuh2UAOK1NTgH7TvXtmVo lqfKQLoHNpc+NYMumSkoGk/4cYAFwXGGqgi7OddbSHMw1Ymvw8xaI0MlImF9ljV8 8yGyeLLL8PBGEMSw6CJqJ22dZID0uJt8JQ5G1lT97K2jm3K4mkcKjtaCNyWwH7XQ TC95efSppHKbxIgbqtANjBApv/ZKUQVEPQbI4thK2N/LQUkKswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFITMwFM7V6rwZuno6rjP0vBu3ZUMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8yMTc5 MGVmYS01OTk5LTQ0YTYtOWMzZS0xY2U3MDMwN2Y4Y2MvMjU1NWYxNzgtNzFjYy0z NDc0LTlkZGYtOWE2N2MwMzYwNGNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvMjE3OTBlZmEtNTk5OS00NGE2LTlj M2UtMWNlNzAzMDdmOGNjLzIxNzkwZWZhLTU5OTktNDRhNi05YzNlLTFjZTcwMzA3 ZjhjYy5jcmwwHwYDVR0jBBgwFoAUMpT/JzJBnT6+Kgk08ybRwa3AhxUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS8yMTc5MGVmYS01OTk5LTQ0YTYtOWMzZS0xY2U3 MDMwN2Y4Y2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFrFdgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEadnWMRLlvlZ0gzandR0vnRog29Zy1sj4r39rDkzRoi7Eylo2moEfWJ 0QQkN6/MUsZUKaFNFp6YX1pKYgO7trF7BewxgnrL09LY/QR+tWEjOmrXkW2nv1r4 GWrSkt19B4ENmKKmGYJWhRAPbvodK2chXbUafrG4HvVJJ9A/fAqlE9JwzCmP3Rj5 GAmGIZ22uPbGZA8pt7j8nT1ptSwtlfgdnQ9GnapiENsX0SWTfC9otnStYap2TWcr 7d5p7T64A6SqRBTRtduQio5sqK5zRL7w2vxeBRbN7z017QubYGOyxQbUtu49l1hl M1dbs/HIzmLUFM5/rQl8MbjOvQZJv10= -----END CERTIFICATE-----Generated at Mon Aug 31 10:44:41 2026 by rpki-client