$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/008dee23-d333-3f26-86fd-5b8c3cfb96e8.roa File: 008dee23-d333-3f26-86fd-5b8c3cfb96e8.roa (raw, json) Hash identifier: 1490tv5v+TVeD3R7AhO+unuYfbd6nZQW3i4ZwRght+k= Subject key identifier: 33:1D:80:98:B3:F8:EB:55:54:37:2F:6B:53:A8:9B:13:E3:AE:30:F0 Certificate issuer: /CN=99cd086f-b993-42d9-8f47-c65df74d693b Certificate serial: 010D0C9F4328584F30527736132F68CA6FB8EB74 Authority key identifier: C3:7C:6E:74:65:2F:44:92:72:76:3A:6D:8C:36:51:7C:69:F5:55:F7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/008dee23-d333-3f26-86fd-5b8c3cfb96e8.roa Signing time: Wed 16 Sep 2026 01:00:12 +0000 ROA not before: Wed 16 Sep 2026 01:00:12 +0000 ROA not after: Tue 15 Dec 2026 02:00:12 +0000 asID: 34689 IP address blocks: 162.254.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/99cd086f-b993-42d9-8f47-c65df74d693b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/99cd086f-b993-42d9-8f47-c65df74d693b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:30:52:77:36:13:2f:68:ca:6f:b8:eb:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99cd086f-b993-42d9-8f47-c65df74d693b Validity Not Before: Sep 16 01:00:12 2026 GMT Not After : Dec 15 02:00:12 2026 GMT Subject: CN=d74d352a-da88-4ad7-9089-e228265ca8c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:fc:62:a7:05:44:04:b8:86:6b:83:80:ab:7e: 2d:14:1d:38:e7:b4:0c:73:f2:c1:95:91:d5:d7:5d: 67:3f:52:a5:33:9b:2f:05:cb:9d:e6:9c:fa:4a:2e: ec:ae:5a:9e:a8:10:a1:8b:0b:7f:7b:a9:c9:d3:a7: 7a:3c:47:39:3a:f3:da:0b:0c:6b:60:5d:da:06:d3: 49:fb:c9:5f:3d:49:7c:57:ac:2b:da:d9:0b:df:ab: a7:80:84:10:14:d0:77:a2:22:90:f7:ad:92:8e:88: 95:9f:e6:4a:30:7b:5d:1c:13:13:79:a6:b9:81:cf: b5:e3:1d:43:f0:a3:7f:31:8a:5e:f9:39:02:21:f1: db:24:1f:c4:78:d0:3e:a8:16:2d:71:07:19:2d:be: 49:ac:f9:18:b2:57:47:d3:33:8f:fa:34:b0:e8:68: ed:f9:86:92:cd:88:48:cb:be:1d:c3:79:c6:df:5a: a1:b4:8d:9f:d5:c6:47:4d:4e:a0:4e:98:f6:d3:3c: 2d:80:4f:c2:76:20:da:0d:79:4d:d8:87:eb:f5:1d: c1:50:f0:67:89:25:74:38:1b:11:0e:47:64:8f:10: fc:0a:0c:b0:60:27:3f:02:bd:1a:0f:ad:17:bd:22: 8c:60:27:e0:fc:5c:08:2f:e6:c4:b2:0a:c2:d6:dd: 02:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:1D:80:98:B3:F8:EB:55:54:37:2F:6B:53:A8:9B:13:E3:AE:30:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/008dee23-d333-3f26-86fd-5b8c3cfb96e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/99cd086f-b993-42d9-8f47-c65df74d693b.crl X509v3 Authority Key Identifier: keyid:C3:7C:6E:74:65:2F:44:92:72:76:3A:6D:8C:36:51:7C:69:F5:55:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b.cer sbgp-ipAddrBlock: critical IPv4: 162.254.87.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:50:9f:7b:d7:65:b1:b6:4a:02:ce:2f:19:6d:22:ce:b6:9e: 42:33:ff:e4:81:b4:f4:8f:57:a8:57:e8:a6:ad:59:a3:16:d5: 30:25:07:c8:9d:08:b5:3f:51:70:af:d6:b2:8e:d5:ba:e8:f1: 00:87:bb:c6:ee:c8:6a:57:e0:ca:e7:e9:16:84:53:a5:28:fa: c3:2d:d9:07:83:c6:7d:64:cc:7e:38:bd:24:80:19:21:a9:1f: 8f:75:e2:95:db:7d:53:be:49:24:2c:6c:b2:0d:5b:f1:d1:9b: 0f:fa:a7:75:2f:72:d9:d9:a4:15:7f:e8:7f:61:be:c7:52:21: ad:e0:f0:ad:24:eb:c4:46:71:61:e7:c7:9d:ab:cd:ee:c1:d9: f4:07:4c:a5:b8:ca:48:d3:1c:90:cc:d5:a6:bb:12:0c:a2:0c: 61:5c:c2:b9:3f:06:24:7b:e9:30:52:1b:3c:a6:ce:9d:a2:ec: 23:d2:79:2d:89:7a:a3:82:a3:16:69:5a:84:65:7f:eb:71:e6: 6d:be:41:e6:1f:6a:6c:dd:b7:ef:a9:78:d6:bb:c4:c5:fc:e0: e2:64:d9:27:c2:10:ae:c2:aa:42:41:ce:f6:a0:5c:b8:f4:dd: e9:98:b8:2f:d9:09:22:79:e5:2e:26:c6:3f:75:71:4a:0c:ed: 89:63:8a:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8wUnc2Ey9oym+463QwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTljZDA4NmYtYjk5My00MmQ5LThmNDctYzY1ZGY3NGQ2 OTNiMB4XDTI2MDkxNjAxMDAxMloXDTI2MTIxNTAyMDAxMlowLzEtMCsGA1UEAxMk ZDc0ZDM1MmEtZGE4OC00YWQ3LTkwODktZTIyODI2NWNhOGMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvxipwVEBLiGa4OAq34tFB0457QMc/LBlZHV 111nP1KlM5svBcud5pz6Si7srlqeqBChiwt/e6nJ06d6PEc5OvPaCwxrYF3aBtNJ +8lfPUl8V6wr2tkL36ungIQQFNB3oiKQ962SjoiVn+ZKMHtdHBMTeaa5gc+14x1D 8KN/MYpe+TkCIfHbJB/EeNA+qBYtcQcZLb5JrPkYsldH0zOP+jSw6Gjt+YaSzYhI y74dw3nG31qhtI2f1cZHTU6gTpj20zwtgE/CdiDaDXlN2Ifr9R3BUPBniSV0OBsR DkdkjxD8CgywYCc/Ar0aD60XvSKMYCfg/FwIL+bEsgrC1t0CNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDMdgJiz+OtVVDcva1OomxPjrjDwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85OWNk MDg2Zi1iOTkzLTQyZDktOGY0Ny1jNjVkZjc0ZDY5M2IvMDA4ZGVlMjMtZDMzMy0z ZjI2LTg2ZmQtNWI4YzNjZmI5NmU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTljZDA4NmYtYjk5My00MmQ5LThm NDctYzY1ZGY3NGQ2OTNiLzk5Y2QwODZmLWI5OTMtNDJkOS04ZjQ3LWM2NWRmNzRk NjkzYi5jcmwwHwYDVR0jBBgwFoAUw3xudGUvRJJydjptjDZRfGn1VfcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85OWNkMDg2Zi1iOTkzLTQyZDktOGY0Ny1jNjVk Zjc0ZDY5M2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAov5XMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEtQn3vXZbG2SgLOLxltIs62nkIz/+SBtPSPV6hX6KatWaMW1TAlB8id CLU/UXCv1rKO1bro8QCHu8buyGpX4Mrn6RaEU6Uo+sMt2QeDxn1kzH44vSSAGSGp H4914pXbfVO+SSQsbLINW/HRmw/6p3UvctnZpBV/6H9hvsdSIa3g8K0k68RGcWHn x52rze7B2fQHTKW4ykjTHJDM1aa7EgyiDGFcwrk/BiR76TBSGzymzp2i7CPSeS2J eqOCoxZpWoRlf+tx5m2+QeYfamzdt++peNa7xMX84OJk2SfCEK7CqkJBzvagXLj0 3emYuC/ZCSJ55S4mxj91cUoM7Yljiok= -----END CERTIFICATE-----Generated at Sun Sep 27 14:29:26 2026 by rpki-client