$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/994e1943-4aa7-3acc-88b0-4257f34b6b16.roa File: 994e1943-4aa7-3acc-88b0-4257f34b6b16.roa (raw, json) Hash identifier: br/hH6HYCtkzPctXXPmrlEjdODUP6MnUK0S8UhnJbek= Subject key identifier: 54:DC:9E:F8:E6:4D:1E:07:7C:5B:18:2A:43:53:A1:53:54:63:20:38 Certificate issuer: /CN=99cd086f-b993-42d9-8f47-c65df74d693b Certificate serial: 010D0C9F4328584D95F01F7F02E14FECFF5F6270 Authority key identifier: C3:7C:6E:74:65:2F:44:92:72:76:3A:6D:8C:36:51:7C:69:F5:55:F7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/994e1943-4aa7-3acc-88b0-4257f34b6b16.roa Signing time: Wed 22 Apr 2026 01:00:23 +0000 ROA not before: Wed 22 Apr 2026 01:00:23 +0000 ROA not after: Tue 21 Jul 2026 01:00:23 +0000 asID: 34689 IP address blocks: 162.255.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/99cd086f-b993-42d9-8f47-c65df74d693b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/99cd086f-b993-42d9-8f47-c65df74d693b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:95:f0:1f:7f:02:e1:4f:ec:ff:5f:62:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99cd086f-b993-42d9-8f47-c65df74d693b Validity Not Before: Apr 22 01:00:23 2026 GMT Not After : Jul 21 01:00:23 2026 GMT Subject: CN=19afc34b-e05f-4859-bff4-53ce2398f52b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:69:01:d1:39:fe:31:36:30:0c:bf:9e:69:dd: a0:d3:ca:ec:02:2c:2f:61:60:ba:08:d7:c0:0e:10: 03:3d:ec:2c:dd:4c:25:2e:30:80:b0:f8:16:b3:6a: 6d:5d:56:2a:b0:63:7b:78:1e:05:aa:8c:df:b0:bf: 73:66:3a:a8:ea:a0:67:1c:92:46:70:ee:58:0f:92: bc:c1:9f:de:1d:36:34:58:1f:e6:81:b0:9a:9d:81: cc:e6:76:f3:28:63:05:bb:3d:a3:fd:04:64:38:be: de:14:90:95:32:59:74:f3:bf:c9:9f:10:d5:66:a6: e9:46:c6:28:4b:90:e8:0f:c4:80:d5:eb:5a:c2:95: 3c:39:00:3c:96:38:e3:20:a9:c5:fa:67:c1:b7:d8: 10:88:5d:60:7f:dc:dc:0d:0e:98:e1:89:1e:48:07: ff:9e:15:4a:ba:ef:e7:79:27:e2:6d:48:6c:8d:0b: db:ef:06:64:ba:41:61:65:40:8e:0a:02:9f:cd:cd: 6e:78:e4:42:20:27:bd:57:d4:e0:1e:00:d7:30:87: 93:59:93:81:b1:96:d7:66:6c:b7:f9:c7:07:d8:ee: d8:e0:9f:d3:06:51:9a:e3:64:f5:da:b5:b1:d4:46: b9:fd:0a:ba:cb:e8:07:9a:11:70:69:6f:93:21:86: 8d:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:DC:9E:F8:E6:4D:1E:07:7C:5B:18:2A:43:53:A1:53:54:63:20:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/994e1943-4aa7-3acc-88b0-4257f34b6b16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/99cd086f-b993-42d9-8f47-c65df74d693b.crl X509v3 Authority Key Identifier: keyid:C3:7C:6E:74:65:2F:44:92:72:76:3A:6D:8C:36:51:7C:69:F5:55:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b.cer sbgp-ipAddrBlock: critical IPv4: 162.255.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:6c:f8:fd:b5:31:51:a5:74:6f:de:19:fb:e0:bf:a5:6d:65: 4a:8d:40:33:25:a6:44:84:81:3b:61:d7:4c:e6:27:e2:92:64: c2:46:fb:15:f1:ad:a8:19:83:be:a0:9c:04:d9:7f:da:be:c3: 0c:75:cc:19:1f:db:ef:db:8b:ea:53:00:9d:36:eb:85:ad:3e: 7d:2a:ef:70:85:7a:74:60:9c:67:b4:26:50:e7:f2:53:b0:28: c3:6b:a0:89:2f:2b:cc:65:b1:89:59:c2:e2:dd:ad:eb:f5:9b: 6f:85:2a:50:4e:e0:ca:72:5c:7c:ff:f5:49:7f:d6:37:bf:d0: fe:f1:f9:fa:de:84:f5:5d:9b:c3:3e:7f:4f:03:e5:d0:21:7b: 32:e0:e3:03:0e:e3:07:ae:03:7a:c9:c1:a0:3d:3a:fa:88:d5: 12:a3:74:a8:1a:d1:51:0c:e9:67:cb:7f:99:6f:6d:51:7a:f8: a0:9c:0c:e8:3a:40:83:cc:97:09:66:d2:41:87:9c:36:0b:fa: 49:a5:b1:25:17:dd:ca:f8:64:f9:de:d9:63:bd:e9:a5:11:1e: cd:86:19:8d:bf:58:a4:c6:95:50:93:d1:73:cf:e9:11:7b:a5: b6:67:d7:47:0a:b3:26:0d:b1:1a:e1:98:a0:89:df:6c:36:db: d2:c2:8a:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2V8B9/AuFP7P9fYnAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTljZDA4NmYtYjk5My00MmQ5LThmNDctYzY1ZGY3NGQ2 OTNiMB4XDTI2MDQyMjAxMDAyM1oXDTI2MDcyMTAxMDAyM1owLzEtMCsGA1UEAxMk MTlhZmMzNGItZTA1Zi00ODU5LWJmZjQtNTNjZTIzOThmNTJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2kB0Tn+MTYwDL+ead2g08rsAiwvYWC6CNfA DhADPews3UwlLjCAsPgWs2ptXVYqsGN7eB4FqozfsL9zZjqo6qBnHJJGcO5YD5K8 wZ/eHTY0WB/mgbCanYHM5nbzKGMFuz2j/QRkOL7eFJCVMll087/JnxDVZqbpRsYo S5DoD8SA1etawpU8OQA8ljjjIKnF+mfBt9gQiF1gf9zcDQ6Y4YkeSAf/nhVKuu/n eSfibUhsjQvb7wZkukFhZUCOCgKfzc1ueORCICe9V9TgHgDXMIeTWZOBsZbXZmy3 +ccH2O7Y4J/TBlGa42T12rWx1Ea5/Qq6y+gHmhFwaW+TIYaNnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFTcnvjmTR4HfFsYKkNToVNUYyA4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85OWNk MDg2Zi1iOTkzLTQyZDktOGY0Ny1jNjVkZjc0ZDY5M2IvOTk0ZTE5NDMtNGFhNy0z YWNjLTg4YjAtNDI1N2YzNGI2YjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTljZDA4NmYtYjk5My00MmQ5LThm NDctYzY1ZGY3NGQ2OTNiLzk5Y2QwODZmLWI5OTMtNDJkOS04ZjQ3LWM2NWRmNzRk NjkzYi5jcmwwHwYDVR0jBBgwFoAUw3xudGUvRJJydjptjDZRfGn1VfcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85OWNkMDg2Zi1iOTkzLTQyZDktOGY0Ny1jNjVk Zjc0ZDY5M2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAov+YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHRs+P21MVGldG/eGfvgv6VtZUqNQDMlpkSEgTth10zmJ+KSZMJG+xXx ragZg76gnATZf9q+wwx1zBkf2+/bi+pTAJ0264WtPn0q73CFenRgnGe0JlDn8lOw KMNroIkvK8xlsYlZwuLdrev1m2+FKlBO4MpyXHz/9Ul/1je/0P7x+frehPVdm8M+ f08D5dAhezLg4wMO4weuA3rJwaA9OvqI1RKjdKga0VEM6WfLf5lvbVF6+KCcDOg6 QIPMlwlm0kGHnDYL+kmlsSUX3cr4ZPne2WO96aURHs2GGY2/WKTGlVCT0XPP6RF7 pbZn10cKsyYNsRrhmKCJ32w229LCilY= -----END CERTIFICATE-----Generated at Wed May 13 14:50:54 2026 by rpki-client