$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ebf567a0-4cf8-429d-82b3-3d284a246421/856820c0-94f0-388f-8125-843a0216e0bc.roa File: 856820c0-94f0-388f-8125-843a0216e0bc.roa (raw, json) Hash identifier: IOLuysXL43cVdjqB/yukilwtVFt+qdXNeVsYdx8gJEk= Subject key identifier: F2:CB:40:F8:79:85:8A:A9:CA:99:3F:11:6F:8D:74:7F:CC:5A:45:40 Certificate issuer: /CN=ebf567a0-4cf8-429d-82b3-3d284a246421 Certificate serial: 010D0C9F4328584F7BB3143EED309AC5F4E06DA0 Authority key identifier: BC:DC:60:56:34:F7:B9:03:E6:E5:5E:C5:FD:4D:EE:CC:69:95:41:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ebf567a0-4cf8-429d-82b3-3d284a246421.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ebf567a0-4cf8-429d-82b3-3d284a246421/856820c0-94f0-388f-8125-843a0216e0bc.roa Signing time: Tue 13 Oct 2026 01:00:14 +0000 ROA not before: Tue 13 Oct 2026 01:00:14 +0000 ROA not after: Mon 11 Jan 2027 02:00:14 +0000 asID: 1421 IP address blocks: 199.47.192.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ebf567a0-4cf8-429d-82b3-3d284a246421/ebf567a0-4cf8-429d-82b3-3d284a246421.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ebf567a0-4cf8-429d-82b3-3d284a246421/ebf567a0-4cf8-429d-82b3-3d284a246421.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ebf567a0-4cf8-429d-82b3-3d284a246421.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 30 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7b:b3:14:3e:ed:30:9a:c5:f4:e0:6d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebf567a0-4cf8-429d-82b3-3d284a246421 Validity Not Before: Oct 13 01:00:14 2026 GMT Not After : Jan 11 02:00:14 2027 GMT Subject: CN=f5a40599-08a2-4014-b3a5-37c8e26097a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:39:ea:e1:a6:be:43:c3:1a:01:12:be:05:5a: 5f:09:df:30:58:1a:86:af:08:9d:a1:85:96:cf:63: a0:7c:e7:ba:b8:55:bb:50:cc:1c:d5:2c:50:a0:23: 65:f1:b2:db:ef:2d:5b:77:b2:fc:6b:6e:a3:d4:23: 5a:4b:62:db:80:c1:e0:cb:b2:b6:3b:2b:9e:9e:3d: 63:18:85:0a:a7:29:3f:ce:af:2e:79:22:e9:80:6e: 07:47:e1:86:fd:68:47:27:c9:58:4d:50:ef:5a:d7: a1:e9:2f:b3:82:e1:ee:80:78:4f:06:86:bb:32:1e: cb:e9:ec:bf:56:1a:3d:04:97:99:e5:2d:67:fa:6a: 67:9a:9a:4c:9d:0d:44:c9:ec:78:02:c4:bf:37:c1: a0:f2:63:5a:c0:02:c3:5e:66:99:13:dc:3b:c1:7c: f2:09:db:ba:9b:61:ad:fc:96:c7:1a:9b:ea:8d:80: 54:b6:42:f6:0e:25:2a:4e:c3:17:a7:8c:b1:8b:a2: fe:41:a8:5c:fd:9a:2b:43:ef:0e:66:99:ba:17:86: 6b:21:39:63:c1:10:53:5a:94:94:92:6f:0e:60:c4: 40:4f:b5:44:9e:1e:52:dc:cc:ff:69:ec:cb:50:ca: 03:d0:8d:d5:dd:23:6d:c8:16:3d:b5:b2:59:52:6a: f7:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:CB:40:F8:79:85:8A:A9:CA:99:3F:11:6F:8D:74:7F:CC:5A:45:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ebf567a0-4cf8-429d-82b3-3d284a246421/856820c0-94f0-388f-8125-843a0216e0bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ebf567a0-4cf8-429d-82b3-3d284a246421/ebf567a0-4cf8-429d-82b3-3d284a246421.crl X509v3 Authority Key Identifier: keyid:BC:DC:60:56:34:F7:B9:03:E6:E5:5E:C5:FD:4D:EE:CC:69:95:41:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ebf567a0-4cf8-429d-82b3-3d284a246421.cer sbgp-ipAddrBlock: critical IPv4: 199.47.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:0b:3a:07:f7:ed:73:d8:bf:cd:eb:6f:f7:2d:e1:09:33:0b: 79:fd:fe:e2:65:09:cb:bf:34:2f:72:64:64:fd:93:8f:79:01: 69:81:90:ea:de:0e:73:af:ac:fe:b6:97:26:12:74:4d:35:00: bb:a8:8a:41:63:91:87:24:ea:db:b1:35:15:95:5e:f1:83:36: d7:33:8c:0b:ad:13:6a:f6:c0:d8:34:62:88:87:d6:f4:e7:60: a5:5a:48:77:2c:c7:fa:ef:f1:2f:f7:d0:b4:b2:5b:cf:9d:84: 79:d8:e8:c4:d8:62:f8:70:da:9d:59:16:26:d8:04:0c:59:26: c5:b7:ce:a1:45:97:f2:99:94:10:47:69:63:e8:71:87:4d:c4: 60:75:79:56:af:09:7f:86:61:c8:cc:4f:1b:16:b6:21:73:8e: 5b:41:6a:21:f8:e5:07:d2:5e:4a:bd:da:64:0b:2e:7e:04:2a: 95:8f:d4:49:c8:50:a1:89:49:d9:25:e4:14:23:61:1a:81:dc: b0:0b:01:b3:13:7f:80:c6:4f:13:a4:5b:30:48:fa:e5:c2:02: c0:61:b3:ed:9e:c1:8e:92:af:c0:95:58:57:e6:31:49:18:20: 89:a2:38:e2:83:28:9c:85:fe:63:21:34:da:41:f7:06:03:48: a3:51:94:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE97sxQ+7TCaxfTgbaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWJmNTY3YTAtNGNmOC00MjlkLTgyYjMtM2QyODRhMjQ2 NDIxMB4XDTI2MTAxMzAxMDAxNFoXDTI3MDExMTAyMDAxNFowLzEtMCsGA1UEAxMk ZjVhNDA1OTktMDhhMi00MDE0LWIzYTUtMzdjOGUyNjA5N2E5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjnq4aa+Q8MaARK+BVpfCd8wWBqGrwidoYWW z2OgfOe6uFW7UMwc1SxQoCNl8bLb7y1bd7L8a26j1CNaS2LbgMHgy7K2Oyuenj1j GIUKpyk/zq8ueSLpgG4HR+GG/WhHJ8lYTVDvWteh6S+zguHugHhPBoa7Mh7L6ey/ Vho9BJeZ5S1n+mpnmppMnQ1Eyex4AsS/N8Gg8mNawALDXmaZE9w7wXzyCdu6m2Gt /JbHGpvqjYBUtkL2DiUqTsMXp4yxi6L+Qahc/ZorQ+8OZpm6F4ZrITljwRBTWpSU km8OYMRAT7VEnh5S3Mz/aezLUMoD0I3V3SNtyBY9tbJZUmr3TwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPLLQPh5hYqpypk/EW+NdH/MWkVAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9lYmY1 NjdhMC00Y2Y4LTQyOWQtODJiMy0zZDI4NGEyNDY0MjEvODU2ODIwYzAtOTRmMC0z ODhmLTgxMjUtODQzYTAyMTZlMGJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZWJmNTY3YTAtNGNmOC00MjlkLTgy YjMtM2QyODRhMjQ2NDIxL2ViZjU2N2EwLTRjZjgtNDI5ZC04MmIzLTNkMjg0YTI0 NjQyMS5jcmwwHwYDVR0jBBgwFoAUvNxgVjT3uQPm5V7F/U3uzGmVQTcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9lYmY1NjdhMC00Y2Y4LTQyOWQtODJiMy0zZDI4 NGEyNDY0MjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxy/AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGsLOgf37XPYv83rb/ct4QkzC3n9/uJlCcu/NC9yZGT9k495AWmBkOre DnOvrP62lyYSdE01ALuoikFjkYck6tuxNRWVXvGDNtczjAutE2r2wNg0YoiH1vTn YKVaSHcsx/rv8S/30LSyW8+dhHnY6MTYYvhw2p1ZFibYBAxZJsW3zqFFl/KZlBBH aWPocYdNxGB1eVavCX+GYcjMTxsWtiFzjltBaiH45QfSXkq92mQLLn4EKpWP1EnI UKGJSdkl5BQjYRqB3LALAbMTf4DGTxOkWzBI+uXCAsBhs+2ewY6Sr8CVWFfmMUkY IImiOOKDKJyF/mMhNNpB9wYDSKNRlPI= -----END CERTIFICATE-----Generated at Wed Oct 28 00:44:59 2026 by rpki-client