$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/9deb75fd-d40d-3461-bd99-01696f038720.roa File: 9deb75fd-d40d-3461-bd99-01696f038720.roa (raw, json) Hash identifier: juoOATY3+o759qmxse3+qZL7U5khTWstkG+b+W2v9DM= Subject key identifier: B3:28:38:A7:4E:75:7C:B3:86:05:1D:F4:95:D0:CE:FB:93:05:D5:B9 Certificate issuer: /CN=99cd086f-b993-42d9-8f47-c65df74d693b Certificate serial: 010D0C9F4328584F4972A0D58E37AEA76AE76580 Authority key identifier: C3:7C:6E:74:65:2F:44:92:72:76:3A:6D:8C:36:51:7C:69:F5:55:F7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/9deb75fd-d40d-3461-bd99-01696f038720.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 34689 IP address blocks: 162.254.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/99cd086f-b993-42d9-8f47-c65df74d693b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/99cd086f-b993-42d9-8f47-c65df74d693b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:a0:d5:8e:37:ae:a7:6a:e7:65:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99cd086f-b993-42d9-8f47-c65df74d693b Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=86cb681b-654a-405e-83e8-3d47e75818b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:77:83:5b:4a:10:39:21:65:45:6a:97:91:30: a9:9d:a4:8b:b2:0c:45:c5:a1:70:ed:dd:6b:20:30: 72:cc:af:d1:ba:70:ae:f0:5a:00:09:2f:5d:9e:3d: 94:66:ce:be:56:a1:cc:9d:27:dd:d7:34:28:4e:2a: 9c:98:88:41:5b:c6:3f:46:71:8f:08:46:40:76:93: 1e:51:f5:94:1e:1c:c9:75:05:71:72:23:7a:f4:9f: b6:d1:06:ab:61:ff:22:a4:6b:9b:43:b1:67:e5:d1: b3:f1:f1:8d:a8:e0:f9:d5:88:69:68:d0:58:78:36: a8:9c:42:de:df:0e:da:0c:e2:21:ee:d7:a9:ba:92: 4f:04:8d:38:12:44:11:14:6e:c5:f9:90:c9:a4:65: 12:c6:27:fb:89:9c:42:73:ca:13:b3:eb:eb:9a:66: 15:78:8a:07:0d:7b:2c:8d:1e:a0:32:80:f8:08:3a: 09:05:ff:06:8a:c4:6a:db:9f:a9:75:a8:89:ea:2c: 24:59:b4:4a:c9:e5:67:98:25:c3:d9:9d:d9:50:e8: cb:d6:98:24:f0:2e:58:17:c6:b4:4d:e2:77:b5:74: 31:6f:da:92:60:d0:ce:d2:f6:fa:b0:f8:cd:a0:25: 3e:17:4d:d2:9c:0c:fd:f9:79:e4:77:bb:b1:0a:18: 9c:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:28:38:A7:4E:75:7C:B3:86:05:1D:F4:95:D0:CE:FB:93:05:D5:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/9deb75fd-d40d-3461-bd99-01696f038720.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/99cd086f-b993-42d9-8f47-c65df74d693b.crl X509v3 Authority Key Identifier: keyid:C3:7C:6E:74:65:2F:44:92:72:76:3A:6D:8C:36:51:7C:69:F5:55:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b.cer sbgp-ipAddrBlock: critical IPv4: 162.254.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:b9:ba:f1:85:a6:09:2d:69:c8:74:b6:1e:30:2f:30:b6:9b: e8:97:25:b1:47:5c:ac:c8:e1:71:48:73:19:90:fe:c4:bd:36: 56:1b:0e:b4:2b:e3:98:9a:07:69:74:69:39:26:67:3f:08:8f: d8:f4:45:da:9c:33:b4:93:b8:d8:29:a1:40:7d:bd:7e:b3:7f: 5a:2a:5e:ea:ab:5e:c1:43:3a:17:e8:3e:04:d5:dc:75:b8:bb: 5d:de:e9:b4:23:50:60:c0:a9:45:84:a3:fc:e5:67:e5:53:ed: 51:df:fd:64:12:f4:eb:d2:00:19:3e:e9:2e:3a:7e:e1:d5:f1: 69:2f:e7:f6:f2:fa:1a:74:82:db:15:47:8c:19:bd:fe:ef:57: e9:80:ff:6a:f4:9d:a9:78:4e:9e:97:a0:7f:e3:c5:52:06:c1: 23:e1:24:fc:7f:9d:69:ff:db:f6:dd:30:e8:ab:bd:dd:05:49: 2e:71:ef:07:0e:dc:e8:a2:59:72:b0:a6:53:ac:cb:21:8f:9c: b7:11:b6:f1:db:87:70:14:a0:5f:65:05:a2:48:34:2e:aa:9d: 53:13:fa:3f:2e:ca:34:cc:98:d3:48:94:01:7d:04:b2:19:0c: 52:96:fb:d6:23:ca:a4:a9:d1:1a:82:d7:01:b6:f5:d9:8c:e4: ff:91:ef:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JcqDVjjeup2rnZYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTljZDA4NmYtYjk5My00MmQ5LThmNDctYzY1ZGY3NGQ2 OTNiMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ODZjYjY4MWItNjU0YS00MDVlLTgzZTgtM2Q0N2U3NTgxOGI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXeDW0oQOSFlRWqXkTCpnaSLsgxFxaFw7d1r IDByzK/RunCu8FoACS9dnj2UZs6+VqHMnSfd1zQoTiqcmIhBW8Y/RnGPCEZAdpMe UfWUHhzJdQVxciN69J+20QarYf8ipGubQ7Fn5dGz8fGNqOD51YhpaNBYeDaonELe 3w7aDOIh7tepupJPBI04EkQRFG7F+ZDJpGUSxif7iZxCc8oTs+vrmmYVeIoHDXss jR6gMoD4CDoJBf8GisRq25+pdaiJ6iwkWbRKyeVnmCXD2Z3ZUOjL1pgk8C5YF8a0 TeJ3tXQxb9qSYNDO0vb6sPjNoCU+F03SnAz9+Xnkd7uxChic8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLMoOKdOdXyzhgUd9JXQzvuTBdW5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85OWNk MDg2Zi1iOTkzLTQyZDktOGY0Ny1jNjVkZjc0ZDY5M2IvOWRlYjc1ZmQtZDQwZC0z NDYxLWJkOTktMDE2OTZmMDM4NzIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTljZDA4NmYtYjk5My00MmQ5LThm NDctYzY1ZGY3NGQ2OTNiLzk5Y2QwODZmLWI5OTMtNDJkOS04ZjQ3LWM2NWRmNzRk NjkzYi5jcmwwHwYDVR0jBBgwFoAUw3xudGUvRJJydjptjDZRfGn1VfcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85OWNkMDg2Zi1iOTkzLTQyZDktOGY0Ny1jNjVk Zjc0ZDY5M2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAov5UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFK5uvGFpgktach0th4wLzC2m+iXJbFHXKzI4XFIcxmQ/sS9NlYbDrQr 45iaB2l0aTkmZz8Ij9j0RdqcM7STuNgpoUB9vX6zf1oqXuqrXsFDOhfoPgTV3HW4 u13e6bQjUGDAqUWEo/zlZ+VT7VHf/WQS9OvSABk+6S46fuHV8Wkv5/by+hp0gtsV R4wZvf7vV+mA/2r0nal4Tp6XoH/jxVIGwSPhJPx/nWn/2/bdMOirvd0FSS5x7wcO 3OiiWXKwplOsyyGPnLcRtvHbh3AUoF9lBaJINC6qnVMT+j8uyjTMmNNIlAF9BLIZ DFKW+9YjyqSp0RqC1wG29dmM5P+R76o= -----END CERTIFICATE-----Generated at Sat Sep 26 14:42:03 2026 by rpki-client