$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ebf567a0-4cf8-429d-82b3-3d284a246421/856820c0-94f0-388f-8125-843a0216e0bc.roa File: 856820c0-94f0-388f-8125-843a0216e0bc.roa (raw, json) Hash identifier: YKoV7AtC4qbi+2j7kwQz8c0wESgdW7JfXGZHCc26Owk= Subject key identifier: C8:54:5A:D0:4E:C0:32:62:AB:83:4C:6B:39:82:2C:4A:43:E6:62:89 Certificate issuer: /CN=ebf567a0-4cf8-429d-82b3-3d284a246421 Certificate serial: 010D0C9F4328584ED9C76A76DA72CD2721BA1600 Authority key identifier: BC:DC:60:56:34:F7:B9:03:E6:E5:5E:C5:FD:4D:EE:CC:69:95:41:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ebf567a0-4cf8-429d-82b3-3d284a246421.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ebf567a0-4cf8-429d-82b3-3d284a246421/856820c0-94f0-388f-8125-843a0216e0bc.roa Signing time: Sun 16 Aug 2026 01:00:14 +0000 ROA not before: Sun 16 Aug 2026 01:00:14 +0000 ROA not after: Sat 14 Nov 2026 02:00:14 +0000 asID: 1421 IP address blocks: 199.47.192.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ebf567a0-4cf8-429d-82b3-3d284a246421/ebf567a0-4cf8-429d-82b3-3d284a246421.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ebf567a0-4cf8-429d-82b3-3d284a246421/ebf567a0-4cf8-429d-82b3-3d284a246421.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ebf567a0-4cf8-429d-82b3-3d284a246421.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d9:c7:6a:76:da:72:cd:27:21:ba:16:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebf567a0-4cf8-429d-82b3-3d284a246421 Validity Not Before: Aug 16 01:00:14 2026 GMT Not After : Nov 14 02:00:14 2026 GMT Subject: CN=9a5eda71-def1-41a5-b1fa-4c0639db7a3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:fd:4e:47:4a:50:9c:0f:c2:99:62:a9:c3:f0: 28:e0:9e:3d:22:0b:f3:4c:5c:c0:85:47:a0:52:cd: 64:29:84:b9:91:17:27:b1:7b:b5:af:82:c2:89:16: f5:40:fb:4e:10:95:45:f9:d8:9e:18:b4:2a:9a:89: 7f:29:f2:64:82:1c:36:03:31:03:e7:b8:07:c2:0d: ef:81:a4:f8:ac:37:c5:89:6b:75:ce:b3:e4:45:48: 16:c9:d6:00:c6:93:1a:08:8d:8e:05:dc:eb:f0:c7: b9:b7:0a:d2:20:7c:65:2d:19:f3:33:88:e7:56:8b: 55:71:9b:0b:2a:ee:ae:54:fc:5a:44:34:d3:8a:b6: 29:1e:bc:0f:96:72:af:38:0b:1d:af:77:c6:6d:fa: f0:68:3e:aa:e9:00:3f:17:95:57:fa:54:90:cc:66: 8b:4e:97:bd:f4:c2:0a:ce:4c:65:5e:14:7c:05:e1: 43:73:dd:00:e0:5e:7e:92:f8:7c:ae:c3:ab:e7:dc: 21:ec:83:d0:1f:a4:bd:97:eb:7a:9b:71:04:b2:cf: db:43:17:76:b1:03:ef:97:ed:43:c3:a3:94:91:03: 55:02:bb:cd:ec:2f:e9:08:9d:23:4c:09:43:47:c4: 64:96:cf:fd:34:d8:81:1f:47:bc:90:a3:d4:0d:c1: 8f:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:54:5A:D0:4E:C0:32:62:AB:83:4C:6B:39:82:2C:4A:43:E6:62:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ebf567a0-4cf8-429d-82b3-3d284a246421/856820c0-94f0-388f-8125-843a0216e0bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ebf567a0-4cf8-429d-82b3-3d284a246421/ebf567a0-4cf8-429d-82b3-3d284a246421.crl X509v3 Authority Key Identifier: keyid:BC:DC:60:56:34:F7:B9:03:E6:E5:5E:C5:FD:4D:EE:CC:69:95:41:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ebf567a0-4cf8-429d-82b3-3d284a246421.cer sbgp-ipAddrBlock: critical IPv4: 199.47.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:83:84:a3:81:96:fb:7c:8d:53:c2:73:e3:b2:58:1b:1e:cd: 05:76:38:1b:57:07:55:05:ac:82:9f:a7:f1:6d:75:7d:e0:88: 9c:b5:95:a8:0d:99:53:85:a3:03:8b:ff:b8:e5:8f:4c:e6:f2: 49:29:f6:fe:dc:7c:b1:cf:dd:55:5f:53:13:62:bb:f9:c4:65: 89:ee:bb:82:06:2a:52:c9:21:01:75:f2:61:66:3c:73:ae:6c: ef:02:67:67:e7:ac:65:5e:87:78:0c:bf:b2:32:5a:b3:8a:e7: d7:40:01:3b:43:8f:a8:a5:cf:ce:53:84:12:c2:9b:3c:87:4e: c7:04:f8:af:29:c9:93:21:3a:59:97:90:41:b7:f5:5e:ae:66: 0d:6f:3f:5f:bc:47:78:2b:ff:ae:9b:14:7b:00:d7:96:39:39: a3:a9:eb:02:2d:ba:c3:35:f7:32:04:28:22:c2:a4:ff:83:bd: e2:45:d9:0e:0c:e3:7f:3d:27:ff:57:04:da:8a:48:78:d3:ed: 96:fd:90:1f:89:49:02:a4:28:6f:b9:9c:5c:f0:83:d8:4f:4d: 18:92:f5:21:f7:e0:4f:62:ed:61:44:84:d5:4c:11:ba:df:63: da:49:25:3c:ff:77:57:d9:de:f8:c7:4b:6f:26:48:91:4f:fa: 05:ee:1e:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7Zx2p22nLNJyG6FgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWJmNTY3YTAtNGNmOC00MjlkLTgyYjMtM2QyODRhMjQ2 NDIxMB4XDTI2MDgxNjAxMDAxNFoXDTI2MTExNDAyMDAxNFowLzEtMCsGA1UEAxMk OWE1ZWRhNzEtZGVmMS00MWE1LWIxZmEtNGMwNjM5ZGI3YTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjP1OR0pQnA/CmWKpw/Ao4J49IgvzTFzAhUeg Us1kKYS5kRcnsXu1r4LCiRb1QPtOEJVF+dieGLQqmol/KfJkghw2AzED57gHwg3v gaT4rDfFiWt1zrPkRUgWydYAxpMaCI2OBdzr8Me5twrSIHxlLRnzM4jnVotVcZsL Ku6uVPxaRDTTirYpHrwPlnKvOAsdr3fGbfrwaD6q6QA/F5VX+lSQzGaLTpe99MIK zkxlXhR8BeFDc90A4F5+kvh8rsOr59wh7IPQH6S9l+t6m3EEss/bQxd2sQPvl+1D w6OUkQNVArvN7C/pCJ0jTAlDR8Rkls/9NNiBH0e8kKPUDcGPZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMhUWtBOwDJiq4NMazmCLEpD5mKJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9lYmY1 NjdhMC00Y2Y4LTQyOWQtODJiMy0zZDI4NGEyNDY0MjEvODU2ODIwYzAtOTRmMC0z ODhmLTgxMjUtODQzYTAyMTZlMGJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZWJmNTY3YTAtNGNmOC00MjlkLTgy YjMtM2QyODRhMjQ2NDIxL2ViZjU2N2EwLTRjZjgtNDI5ZC04MmIzLTNkMjg0YTI0 NjQyMS5jcmwwHwYDVR0jBBgwFoAUvNxgVjT3uQPm5V7F/U3uzGmVQTcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9lYmY1NjdhMC00Y2Y4LTQyOWQtODJiMy0zZDI4 NGEyNDY0MjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxy/AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAWDhKOBlvt8jVPCc+OyWBsezQV2OBtXB1UFrIKfp/FtdX3giJy1lagN mVOFowOL/7jlj0zm8kkp9v7cfLHP3VVfUxNiu/nEZYnuu4IGKlLJIQF18mFmPHOu bO8CZ2fnrGVeh3gMv7IyWrOK59dAATtDj6ilz85ThBLCmzyHTscE+K8pyZMhOlmX kEG39V6uZg1vP1+8R3gr/66bFHsA15Y5OaOp6wItusM19zIEKCLCpP+DveJF2Q4M 4389J/9XBNqKSHjT7Zb9kB+JSQKkKG+5nFzwg9hPTRiS9SH34E9i7WFEhNVMEbrf Y9pJJTz/d1fZ3vjHS28mSJFP+gXuHp4= -----END CERTIFICATE-----Generated at Fri Sep 11 15:48:02 2026 by rpki-client