$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/e8d39bbe-cf52-3e2d-91c0-2b3b40420843.roa File: e8d39bbe-cf52-3e2d-91c0-2b3b40420843.roa (raw, json) Hash identifier: z+HBqH1RBIYDrdYI1ChcgnNcUG48v70irHy3SbLJ2ms= Subject key identifier: FC:28:4D:15:2F:C8:F9:DB:7E:69:E0:A9:D1:A2:8B:D6:0C:D4:23:B6 Certificate issuer: /CN=99cd086f-b993-42d9-8f47-c65df74d693b Certificate serial: 010D0C9F4328584F4976A21D50174468EC8C8A48 Authority key identifier: C3:7C:6E:74:65:2F:44:92:72:76:3A:6D:8C:36:51:7C:69:F5:55:F7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/e8d39bbe-cf52-3e2d-91c0-2b3b40420843.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 34689 IP address blocks: 162.254.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/99cd086f-b993-42d9-8f47-c65df74d693b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/99cd086f-b993-42d9-8f47-c65df74d693b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:a2:1d:50:17:44:68:ec:8c:8a:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99cd086f-b993-42d9-8f47-c65df74d693b Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=e747044c-c302-4b30-adad-64992ba4fcbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:66:db:58:74:f7:3e:79:1c:97:d6:65:89:7b: e4:9a:fc:05:61:0d:91:39:33:5d:52:b8:1d:cb:1a: e2:9b:38:91:5a:d4:01:49:d2:61:92:ea:d0:04:f0: 3d:2c:36:7b:4e:d7:eb:0e:b8:34:0a:b4:52:63:a6: 3c:3c:fe:3e:63:2c:d9:ca:23:ac:3d:4d:3b:a4:dd: bf:98:23:92:ae:37:1e:c5:14:a4:44:f7:30:e9:38: 5f:73:a7:4f:e2:69:3c:8b:b7:9c:48:8d:b5:2d:d5: 45:61:85:1e:7f:14:f2:92:de:a6:e5:e2:6d:a9:58: e6:64:c7:a1:b3:b1:bc:16:38:7e:34:34:21:13:2a: 54:4a:b5:8d:f9:41:a0:4e:87:f4:f2:e2:70:fa:22: bc:43:e9:85:ce:7e:69:3f:ed:5b:d6:3f:de:a2:19: a7:08:73:98:2e:68:bf:15:06:bf:6a:71:cd:b9:6c: 24:9e:69:c2:4c:fc:8f:c8:b9:f1:6a:ed:7e:3c:fb: 3e:de:2b:5c:31:bd:dd:45:bb:33:9d:36:95:e8:8b: 34:ea:1c:89:c1:54:9a:73:83:e8:f9:41:17:49:f1: f4:06:33:7b:03:32:ef:d3:3b:88:47:16:3f:ae:b3: 44:76:f8:90:5f:97:d1:02:7b:32:f1:73:0d:ce:46: d7:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:28:4D:15:2F:C8:F9:DB:7E:69:E0:A9:D1:A2:8B:D6:0C:D4:23:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/e8d39bbe-cf52-3e2d-91c0-2b3b40420843.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/99cd086f-b993-42d9-8f47-c65df74d693b.crl X509v3 Authority Key Identifier: keyid:C3:7C:6E:74:65:2F:44:92:72:76:3A:6D:8C:36:51:7C:69:F5:55:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b.cer sbgp-ipAddrBlock: critical IPv4: 162.254.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:f2:b0:86:66:60:c2:4f:88:2c:b3:ed:05:c2:d3:3e:15:e8: 22:66:f5:ed:d3:82:26:e4:1a:86:af:56:b3:a5:0a:a0:a8:be: 26:4f:80:ff:00:f1:d6:56:8c:46:f0:fb:29:17:3c:ff:a5:0f: df:e4:0f:4a:53:d2:ce:8c:5a:a5:e8:d0:40:46:ea:f3:de:6b: f4:a5:94:fa:46:f1:ba:1b:e2:a5:08:33:73:46:c4:87:58:fe: 6e:05:4c:ba:0a:fe:5e:bf:d1:0f:cf:2b:24:50:bb:7b:40:da: b1:8d:23:8b:80:bd:e4:71:8b:88:26:53:9a:e6:12:f4:81:86: 57:51:13:f7:c1:43:8d:df:30:e4:96:9d:79:5d:8d:d0:95:a4: bb:6a:22:b9:a6:83:9e:24:9c:89:18:44:41:43:fd:a7:72:0c: 9b:a9:91:87:a6:99:36:db:a2:b3:ad:83:08:3d:75:c8:ab:86: 68:15:7a:ec:42:df:3e:19:e7:95:9f:82:35:9d:b4:34:db:ed: eb:be:8a:3d:db:af:e5:52:59:de:c6:d1:9a:af:68:06:d6:65: 27:ba:57:a1:55:c1:8a:63:9c:9c:51:94:56:d0:ae:33:10:5f: 38:73:5b:fe:c4:0f:d9:2c:d1:52:1c:07:8d:a5:6e:94:19:24: b8:18:c2:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdqIdUBdEaOyMikgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTljZDA4NmYtYjk5My00MmQ5LThmNDctYzY1ZGY3NGQ2 OTNiMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZTc0NzA0NGMtYzMwMi00YjMwLWFkYWQtNjQ5OTJiYTRmY2JkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWbbWHT3Pnkcl9ZliXvkmvwFYQ2ROTNdUrgd yxrimziRWtQBSdJhkurQBPA9LDZ7TtfrDrg0CrRSY6Y8PP4+YyzZyiOsPU07pN2/ mCOSrjcexRSkRPcw6Thfc6dP4mk8i7ecSI21LdVFYYUefxTykt6m5eJtqVjmZMeh s7G8Fjh+NDQhEypUSrWN+UGgTof08uJw+iK8Q+mFzn5pP+1b1j/eohmnCHOYLmi/ FQa/anHNuWwknmnCTPyPyLnxau1+PPs+3itcMb3dRbsznTaV6Is06hyJwVSac4Po +UEXSfH0BjN7AzLv0zuIRxY/rrNEdviQX5fRAnsy8XMNzkbXMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPwoTRUvyPnbfmngqdGii9YM1CO2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85OWNk MDg2Zi1iOTkzLTQyZDktOGY0Ny1jNjVkZjc0ZDY5M2IvZThkMzliYmUtY2Y1Mi0z ZTJkLTkxYzAtMmIzYjQwNDIwODQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTljZDA4NmYtYjk5My00MmQ5LThm NDctYzY1ZGY3NGQ2OTNiLzk5Y2QwODZmLWI5OTMtNDJkOS04ZjQ3LWM2NWRmNzRk NjkzYi5jcmwwHwYDVR0jBBgwFoAUw3xudGUvRJJydjptjDZRfGn1VfcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85OWNkMDg2Zi1iOTkzLTQyZDktOGY0Ny1jNjVk Zjc0ZDY5M2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAov5WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABnysIZmYMJPiCyz7QXC0z4V6CJm9e3TgibkGoavVrOlCqCoviZPgP8A 8dZWjEbw+ykXPP+lD9/kD0pT0s6MWqXo0EBG6vPea/SllPpG8bob4qUIM3NGxIdY /m4FTLoK/l6/0Q/PKyRQu3tA2rGNI4uAveRxi4gmU5rmEvSBhldRE/fBQ43fMOSW nXldjdCVpLtqIrmmg54knIkYREFD/adyDJupkYemmTbborOtgwg9dcirhmgVeuxC 3z4Z55WfgjWdtDTb7eu+ij3br+VSWd7G0ZqvaAbWZSe6V6FVwYpjnJxRlFbQrjMQ XzhzW/7ED9ks0VIcB42lbpQZJLgYwrY= -----END CERTIFICATE-----Generated at Sat Sep 26 00:01:36 2026 by rpki-client