$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8/ff3090a6-0365-3319-a5db-b97f2065e36d.roa File: ff3090a6-0365-3319-a5db-b97f2065e36d.roa (raw, json) Hash identifier: QY7gABNAkVgMYgPE0Wn8bKSsX5HXGpBZfhC4q4dwN/A= Subject key identifier: 08:6A:B1:A8:F1:F2:43:25:9E:7B:2E:D7:DB:29:1D:48:2D:E9:0D:25 Certificate issuer: /CN=5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8 Certificate serial: 010D0C9F4328584F4975AD704528B0B23D976C80 Authority key identifier: 92:9F:B9:15:00:7A:DA:95:56:D3:15:81:73:8D:42:02:1C:CA:3A:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8/ff3090a6-0365-3319-a5db-b97f2065e36d.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 26677 IP address blocks: 172.99.134.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:ad:70:45:28:b0:b2:3d:97:6c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=17e5c5fe-e40d-47c0-9680-5e417cf71f28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:a6:7a:6a:2f:bd:94:a2:de:1a:8d:2e:80:9b: ed:fb:3a:e0:54:7e:51:29:92:78:49:a2:a5:6c:7f: 2f:3b:f5:d0:90:40:a5:3b:69:10:20:a0:92:db:bf: 7f:5f:74:54:82:35:a0:7c:36:01:7a:d8:05:bf:04: 87:b5:58:09:06:95:23:32:3a:00:d0:9d:48:61:8b: 77:77:b5:0f:e3:19:01:3e:a4:c3:b9:57:dc:6f:f3: 1b:7e:6d:53:64:7b:62:85:c1:37:ae:40:01:42:c5: 64:c0:63:5a:12:34:0f:5d:9d:a9:2e:8c:69:d7:f8: b4:94:71:ea:a1:a1:a4:57:38:9a:83:07:85:b0:36: 6a:8d:76:d9:e4:4c:a6:24:cd:43:e4:dc:51:6e:40: 48:07:2f:7e:f6:69:8d:54:c6:da:60:d9:f7:d8:7a: 05:91:c2:af:85:20:e0:ee:f6:b2:e8:2f:53:b4:84: 0b:c5:14:ce:c0:da:4e:02:f2:60:88:b7:8e:7d:3d: 08:b6:80:bf:04:82:9a:7f:e0:6a:d5:bf:0f:96:a3: 27:61:f2:cc:e5:bc:c5:8b:52:e0:f9:16:c2:90:66: 9a:d4:43:78:c5:d6:93:63:a9:ff:34:f9:e3:b0:c8: a9:1b:d5:8d:67:0a:50:67:16:0c:d2:29:9d:0d:60: 8a:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:6A:B1:A8:F1:F2:43:25:9E:7B:2E:D7:DB:29:1D:48:2D:E9:0D:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8/ff3090a6-0365-3319-a5db-b97f2065e36d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8.crl X509v3 Authority Key Identifier: keyid:92:9F:B9:15:00:7A:DA:95:56:D3:15:81:73:8D:42:02:1C:CA:3A:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8.cer sbgp-ipAddrBlock: critical IPv4: 172.99.134.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:ef:f9:d4:86:2e:80:29:76:4d:a5:25:d4:f0:72:30:d7:be: 91:2a:87:f9:2d:9a:34:aa:12:a5:38:98:ce:06:6b:77:c1:59: 29:93:85:db:e3:3b:99:d5:6b:46:9d:ef:3d:83:dd:7e:f2:0d: b0:38:eb:3f:92:f7:5e:ab:05:e0:79:85:d3:7a:4b:36:82:b8: 35:d0:63:2e:13:8b:55:b1:30:ef:ae:78:41:44:48:26:e3:7c: 80:14:84:9a:2c:94:c4:6f:db:e3:23:88:fc:99:d1:2e:57:93: 46:cb:b1:ce:89:ac:08:02:3b:45:31:5f:db:24:8f:5a:c9:76: f0:75:a6:21:c3:22:1b:1d:fe:d8:61:97:1e:02:6d:36:4a:c9: 5e:e7:a1:7c:9b:2b:dc:5c:2f:9d:88:88:92:73:fa:08:2e:24: 38:1b:48:51:1c:fd:82:1b:54:bb:8d:61:3b:57:f0:b4:97:92: df:d8:73:c7:00:75:0e:90:5b:da:6d:07:07:3c:78:b2:c8:f5: ab:ce:d7:da:94:b0:10:6c:ca:ad:a6:ef:0d:54:5c:4d:6e:24: b3:55:14:46:11:ce:ba:0d:6c:f7:6c:3e:2c:a9:7b:77:05:4a: 34:11:54:c6:26:e2:4a:e7:8d:ca:00:11:d1:20:b7:9d:d1:2a: 35:9b:71:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jda1wRSiwsj2XbIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWFkNmQ5YzItZDM4MC00ZjFmLThmNmMtZWJjMmU1MDNj NGE4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MTdlNWM1ZmUtZTQwZC00N2MwLTk2ODAtNWU0MTdjZjcxZjI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3aZ6ai+9lKLeGo0ugJvt+zrgVH5RKZJ4SaKl bH8vO/XQkEClO2kQIKCS279/X3RUgjWgfDYBetgFvwSHtVgJBpUjMjoA0J1IYYt3 d7UP4xkBPqTDuVfcb/Mbfm1TZHtihcE3rkABQsVkwGNaEjQPXZ2pLoxp1/i0lHHq oaGkVziagweFsDZqjXbZ5EymJM1D5NxRbkBIBy9+9mmNVMbaYNn32HoFkcKvhSDg 7vay6C9TtIQLxRTOwNpOAvJgiLeOfT0ItoC/BIKaf+Bq1b8PlqMnYfLM5bzFi1Lg +RbCkGaa1EN4xdaTY6n/NPnjsMipG9WNZwpQZxYM0imdDWCK5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAhqsajx8kMlnnsu19spHUgt6Q0lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81YWQ2 ZDljMi1kMzgwLTRmMWYtOGY2Yy1lYmMyZTUwM2M0YTgvZmYzMDkwYTYtMDM2NS0z MzE5LWE1ZGItYjk3ZjIwNjVlMzZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWFkNmQ5YzItZDM4MC00ZjFmLThm NmMtZWJjMmU1MDNjNGE4LzVhZDZkOWMyLWQzODAtNGYxZi04ZjZjLWViYzJlNTAz YzRhOC5jcmwwHwYDVR0jBBgwFoAUkp+5FQB62pVW0xWBc41CAhzKOocwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC81YWQ2ZDljMi1kMzgwLTRmMWYtOGY2Yy1lYmMy ZTUwM2M0YTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrGOGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACjv+dSGLoApdk2lJdTwcjDXvpEqh/ktmjSqEqU4mM4Ga3fBWSmThdvj O5nVa0ad7z2D3X7yDbA46z+S916rBeB5hdN6SzaCuDXQYy4Ti1WxMO+ueEFESCbj fIAUhJoslMRv2+MjiPyZ0S5Xk0bLsc6JrAgCO0UxX9skj1rJdvB1piHDIhsd/thh lx4CbTZKyV7noXybK9xcL52IiJJz+gguJDgbSFEc/YIbVLuNYTtX8LSXkt/Yc8cA dQ6QW9ptBwc8eLLI9avO19qUsBBsyq2m7w1UXE1uJLNVFEYRzroNbPdsPiype3cF SjQRVMYm4krnjcoAEdEgt53RKjWbcco= -----END CERTIFICATE-----Generated at Tue Oct 6 20:18:21 2026 by rpki-client