$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/994e1943-4aa7-3acc-88b0-4257f34b6b16.roa File: 994e1943-4aa7-3acc-88b0-4257f34b6b16.roa (raw, json) Hash identifier: bj/Had9NbO931pQ4bGgVr1Z8+mAfcMUp9EXDL5C+Bys= Subject key identifier: B8:94:D2:14:C0:4B:EE:DA:A9:C0:8E:98:7B:C6:3A:86:D1:EC:FA:F8 Certificate issuer: /CN=99cd086f-b993-42d9-8f47-c65df74d693b Certificate serial: 010D0C9F4328584F1897C2262D39A4F2A1EDBC20 Authority key identifier: C3:7C:6E:74:65:2F:44:92:72:76:3A:6D:8C:36:51:7C:69:F5:55:F7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/994e1943-4aa7-3acc-88b0-4257f34b6b16.roa Signing time: Mon 07 Sep 2026 13:00:12 +0000 ROA not before: Mon 07 Sep 2026 13:00:12 +0000 ROA not after: Sun 06 Dec 2026 14:00:12 +0000 asID: 34689 IP address blocks: 162.255.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/99cd086f-b993-42d9-8f47-c65df74d693b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/99cd086f-b993-42d9-8f47-c65df74d693b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:18:97:c2:26:2d:39:a4:f2:a1:ed:bc:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99cd086f-b993-42d9-8f47-c65df74d693b Validity Not Before: Sep 7 13:00:12 2026 GMT Not After : Dec 6 14:00:12 2026 GMT Subject: CN=c5b2d6d9-acd5-4f4c-afe4-5d74ae94d4d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:8b:08:65:9a:36:ef:e2:72:b8:71:56:0d:9b: a1:81:25:49:dd:3d:9f:7d:8c:3b:5c:a3:97:3c:9e: cc:e5:f2:0d:f4:ad:0f:92:5c:d6:67:e4:be:ea:d6: c1:ec:f9:da:e6:0a:75:7e:5e:c2:fc:f6:58:68:46: 20:47:36:26:26:21:5f:8a:f1:a2:53:ce:6e:44:f8: 03:63:1f:ed:5f:0c:93:58:c7:c1:3f:30:e1:31:01: b6:26:86:06:3c:55:80:c2:02:a8:a2:9a:37:3e:12: cd:f5:e2:e2:da:50:33:97:5d:a2:6e:16:3d:01:03: 40:fd:a2:31:89:43:f6:a3:5c:31:b0:af:44:2c:2f: 6f:c0:f9:b7:06:01:87:c2:a6:cd:dc:21:0b:7d:5f: 60:40:ab:ca:48:28:0e:ce:e8:62:4d:43:b1:40:98: 32:d0:dd:45:d2:bb:ef:d5:70:6c:6b:ec:c1:5f:1e: 4d:9e:60:ed:7b:7e:29:a4:55:ba:eb:28:56:84:8d: cd:2f:b6:01:e0:82:55:0d:1c:b3:94:49:20:9c:39: 75:e8:10:ad:91:74:7d:0d:9c:84:be:11:50:b2:d1: 53:0e:7e:d6:95:73:ad:2e:69:56:d4:17:b0:2c:78: a1:39:63:a4:f6:02:bb:6a:a4:6d:9f:4e:cb:a8:ad: 2b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:94:D2:14:C0:4B:EE:DA:A9:C0:8E:98:7B:C6:3A:86:D1:EC:FA:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/994e1943-4aa7-3acc-88b0-4257f34b6b16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/99cd086f-b993-42d9-8f47-c65df74d693b.crl X509v3 Authority Key Identifier: keyid:C3:7C:6E:74:65:2F:44:92:72:76:3A:6D:8C:36:51:7C:69:F5:55:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b.cer sbgp-ipAddrBlock: critical IPv4: 162.255.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:26:27:d0:e3:23:ff:8a:af:ab:8f:a3:28:98:94:5c:e3:91: 5e:ec:d2:1c:63:b1:32:68:17:64:a9:70:21:0a:0a:2e:96:0b: 85:5e:6d:39:dc:eb:dd:5c:22:c7:9d:eb:d0:d1:87:fa:e2:4d: e9:62:d3:4e:1e:4b:a7:70:88:2d:5f:bb:9d:4c:37:12:70:c2: 29:6b:e4:97:cb:7a:d7:70:de:12:e3:8d:c3:7e:81:45:0a:79: 13:cd:c5:d7:f1:a9:e8:13:a6:ec:9f:cc:06:fb:99:77:4f:59: 5d:a8:98:6f:b5:54:bd:38:8f:d2:a9:41:52:c9:ff:3b:b5:82: 7a:d3:83:f6:38:54:cd:bf:12:f5:7f:2e:b7:84:83:a1:00:07: 13:fc:1a:7f:34:20:20:9e:6c:dc:4e:28:b9:f6:c9:a3:e1:34: 40:21:df:0e:67:6f:1d:4a:37:31:c8:66:95:51:df:07:72:13: fe:60:80:98:ee:ba:2a:69:df:82:fc:8b:16:dd:e4:0f:1c:e0: 8c:ce:d7:5d:af:06:11:7d:d7:9c:b6:33:1f:48:1b:ea:4e:18: 15:56:ba:8e:c7:23:73:7b:1a:b7:40:fa:d6:ed:62:44:d5:64: 75:24:7a:e5:19:6a:45:23:6e:f2:0b:8b:d7:63:3c:3b:74:2a: 6d:63:93:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Yl8ImLTmk8qHtvCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTljZDA4NmYtYjk5My00MmQ5LThmNDctYzY1ZGY3NGQ2 OTNiMB4XDTI2MDkwNzEzMDAxMloXDTI2MTIwNjE0MDAxMlowLzEtMCsGA1UEAxMk YzViMmQ2ZDktYWNkNS00ZjRjLWFmZTQtNWQ3NGFlOTRkNGQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIsIZZo27+JyuHFWDZuhgSVJ3T2ffYw7XKOX PJ7M5fIN9K0PklzWZ+S+6tbB7Pna5gp1fl7C/PZYaEYgRzYmJiFfivGiU85uRPgD Yx/tXwyTWMfBPzDhMQG2JoYGPFWAwgKoopo3PhLN9eLi2lAzl12ibhY9AQNA/aIx iUP2o1wxsK9ELC9vwPm3BgGHwqbN3CELfV9gQKvKSCgOzuhiTUOxQJgy0N1F0rvv 1XBsa+zBXx5NnmDte34ppFW66yhWhI3NL7YB4IJVDRyzlEkgnDl16BCtkXR9DZyE vhFQstFTDn7WlXOtLmlW1BewLHihOWOk9gK7aqRtn07LqK0rLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLiU0hTAS+7aqcCOmHvGOobR7Pr4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85OWNk MDg2Zi1iOTkzLTQyZDktOGY0Ny1jNjVkZjc0ZDY5M2IvOTk0ZTE5NDMtNGFhNy0z YWNjLTg4YjAtNDI1N2YzNGI2YjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTljZDA4NmYtYjk5My00MmQ5LThm NDctYzY1ZGY3NGQ2OTNiLzk5Y2QwODZmLWI5OTMtNDJkOS04ZjQ3LWM2NWRmNzRk NjkzYi5jcmwwHwYDVR0jBBgwFoAUw3xudGUvRJJydjptjDZRfGn1VfcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85OWNkMDg2Zi1iOTkzLTQyZDktOGY0Ny1jNjVk Zjc0ZDY5M2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAov+YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEAmJ9DjI/+Kr6uPoyiYlFzjkV7s0hxjsTJoF2SpcCEKCi6WC4VebTnc 691cIsed69DRh/riTeli004eS6dwiC1fu51MNxJwwilr5JfLetdw3hLjjcN+gUUK eRPNxdfxqegTpuyfzAb7mXdPWV2omG+1VL04j9KpQVLJ/zu1gnrTg/Y4VM2/EvV/ LreEg6EABxP8Gn80ICCebNxOKLn2yaPhNEAh3w5nbx1KNzHIZpVR3wdyE/5ggJju uipp34L8ixbd5A8c4IzO112vBhF915y2Mx9IG+pOGBVWuo7HI3N7GrdA+tbtYkTV ZHUkeuUZakUjbvILi9djPDt0Km1jk6Q= -----END CERTIFICATE-----Generated at Sun Oct 4 00:09:23 2026 by rpki-client