$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/2a0d65f4-0bf8-3733-8250-200e7634a82c.roa File: 2a0d65f4-0bf8-3733-8250-200e7634a82c.roa (raw, json) Hash identifier: s+/aRlWV17p78xD41YEePLMO8YGbdxafbvkc+Ww7+R0= Subject key identifier: D3:89:7D:78:72:D7:CD:DC:5A:70:96:61:B1:51:50:12:0E:45:FD:1C Certificate issuer: /CN=c3399d97-64f6-4e12-8cbe-4d11491ad816 Certificate serial: 010D0C9F4328584F42781C1457DEC324D5F4A980 Authority key identifier: AE:9F:C4:18:27:7C:A7:FA:C1:3F:17:65:C6:D4:CC:82:0E:16:5E:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/2a0d65f4-0bf8-3733-8250-200e7634a82c.roa Signing time: Tue 22 Sep 2026 13:00:12 +0000 ROA not before: Tue 22 Sep 2026 13:00:12 +0000 ROA not after: Mon 21 Dec 2026 14:00:12 +0000 asID: 10430 IP address blocks: 168.99.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:78:1c:14:57:de:c3:24:d5:f4:a9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3399d97-64f6-4e12-8cbe-4d11491ad816 Validity Not Before: Sep 22 13:00:12 2026 GMT Not After : Dec 21 14:00:12 2026 GMT Subject: CN=7cdb2ca3-fae1-4a3c-b2fd-e2afb68469e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:d3:0f:6b:27:78:64:eb:db:c7:48:98:47:7a: de:42:08:bb:87:37:73:8f:67:3f:85:2f:85:71:df: 76:80:94:67:24:fa:8e:64:80:c0:01:01:30:ee:6a: 18:1e:e8:f9:0b:3f:c6:30:6d:74:5e:05:8c:f4:15: 16:da:d2:09:0e:bc:52:5b:9a:e3:78:85:7b:fb:9c: e2:54:6c:a8:e6:cf:76:2f:39:6b:fe:24:55:5e:b1: ef:d8:e5:2f:38:65:f1:55:9c:32:42:6f:6b:fb:0e: 6c:b4:6a:8f:45:d3:9a:ca:e5:ba:b6:2a:de:e8:ad: 26:b3:5d:91:a1:82:0c:61:98:a5:3d:67:88:63:e8: 6e:66:2f:a1:5b:2b:0e:64:d8:4b:68:e7:f6:73:90: d3:46:0e:e4:c6:4e:35:6a:e1:8c:59:a8:31:b6:bf: 79:6f:61:97:60:aa:3a:2b:a1:5b:83:2f:ba:78:b0: 92:a5:ba:e2:3b:46:24:2f:b7:d1:92:09:01:47:ea: 74:f1:33:86:72:fa:25:6b:52:69:3d:65:61:61:26: b7:27:98:0b:2c:8e:6f:02:15:78:b6:40:e7:45:09: 7e:5f:27:3d:a7:af:90:db:58:b9:81:cf:d5:10:10: 7c:01:98:53:c1:cc:20:2a:09:7f:e0:cf:e7:0e:71: 95:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:89:7D:78:72:D7:CD:DC:5A:70:96:61:B1:51:50:12:0E:45:FD:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/2a0d65f4-0bf8-3733-8250-200e7634a82c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.crl X509v3 Authority Key Identifier: keyid:AE:9F:C4:18:27:7C:A7:FA:C1:3F:17:65:C6:D4:CC:82:0E:16:5E:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer sbgp-ipAddrBlock: critical IPv4: 168.99.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:34:70:21:b7:9f:56:0e:40:09:49:c9:cd:95:b3:55:82:2c: fe:6a:02:b4:5d:d8:51:68:47:fc:40:a4:44:af:81:6a:9c:ad: 62:94:23:10:6e:48:ef:49:c5:de:33:1b:88:3a:5f:66:a5:49: b1:9c:4e:c4:49:70:53:17:93:1e:cb:b8:8b:d5:dd:27:cd:85: e4:34:d8:9e:75:d2:e9:ac:34:f1:d3:a7:a9:1e:63:25:bf:be: 0c:37:94:de:d5:9c:19:27:87:fb:5a:05:29:19:5e:e5:85:03: a3:9a:7a:2c:ae:8a:55:5b:37:fb:3f:60:2d:0d:d8:50:08:ff: 08:40:ac:dd:58:c4:24:cc:5d:0c:21:37:0b:ba:54:85:a2:05: 11:0e:be:19:22:df:38:a2:00:fe:b7:49:49:77:82:a0:b0:b6: f5:87:0b:26:25:58:78:fb:80:80:64:b2:ad:ad:df:6d:2e:21: 5d:bc:40:fa:60:a6:79:c9:4c:12:2b:e1:f4:1a:b2:b7:95:70: 86:98:0b:a4:13:78:da:75:1e:45:ee:43:95:0d:ca:1e:82:c7: 46:55:26:87:a1:ce:30:d5:bd:06:41:79:fc:d1:cc:1c:00:30: 4d:7a:5c:f3:aa:d6:aa:a2:d6:f2:07:56:19:c9:7b:20:d2:6a: 65:86:69:4f -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE9CeBwUV97DJNX0qYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzMzOTlkOTctNjRmNi00ZTEyLThjYmUtNGQxMTQ5MWFk ODE2MB4XDTI2MDkyMjEzMDAxMloXDTI2MTIyMTE0MDAxMlowLzEtMCsGA1UEAxMk N2NkYjJjYTMtZmFlMS00YTNjLWIyZmQtZTJhZmI2ODQ2OWU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1NMPayd4ZOvbx0iYR3reQgi7hzdzj2c/hS+F cd92gJRnJPqOZIDAAQEw7moYHuj5Cz/GMG10XgWM9BUW2tIJDrxSW5rjeIV7+5zi VGyo5s92Lzlr/iRVXrHv2OUvOGXxVZwyQm9r+w5stGqPRdOayuW6tire6K0ms12R oYIMYZilPWeIY+huZi+hWysOZNhLaOf2c5DTRg7kxk41auGMWagxtr95b2GXYKo6 K6Fbgy+6eLCSpbriO0YkL7fRkgkBR+p08TOGcvola1JpPWVhYSa3J5gLLI5vAhV4 tkDnRQl+Xyc9p6+Q21i5gc/VEBB8AZhTwcwgKgl/4M/nDnGVTwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFNOJfXhy183cWnCWYbFRUBIORf0cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jMzM5 OWQ5Ny02NGY2LTRlMTItOGNiZS00ZDExNDkxYWQ4MTYvMmEwZDY1ZjQtMGJmOC0z NzMzLTgyNTAtMjAwZTc2MzRhODJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzMzOTlkOTctNjRmNi00ZTEyLThj YmUtNGQxMTQ5MWFkODE2L2MzMzk5ZDk3LTY0ZjYtNGUxMi04Y2JlLTRkMTE0OTFh ZDgxNi5jcmwwHwYDVR0jBBgwFoAUrp/EGCd8p/rBPxdlxtTMgg4WXiMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jMzM5OWQ5Ny02NGY2LTRlMTItOGNiZS00ZDEx NDkxYWQ4MTYuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAqGMwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEADTRwIbefVg5ACUnJzZWzVYIs/moCtF3YUWhH/ECkRK+BapytYpQjEG5I 70nF3jMbiDpfZqVJsZxOxElwUxeTHsu4i9XdJ82F5DTYnnXS6aw08dOnqR5jJb++ DDeU3tWcGSeH+1oFKRle5YUDo5p6LK6KVVs3+z9gLQ3YUAj/CECs3VjEJMxdDCE3 C7pUhaIFEQ6+GSLfOKIA/rdJSXeCoLC29YcLJiVYePuAgGSyra3fbS4hXbxA+mCm eclMEivh9Bqyt5VwhpgLpBN42nUeRe5DlQ3KHoLHRlUmh6HOMNW9BkF5/NHMHAAw TXpc86rWqqLW8gdWGcl7INJqZYZpTw== -----END CERTIFICATE-----Generated at Thu Sep 24 19:49:40 2026 by rpki-client