$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3506dd4b-c904-4daa-9013-78c3d05bbcce/33886230-909a-3c78-8a7d-882d456f43a0.roa File: 33886230-909a-3c78-8a7d-882d456f43a0.roa (raw, json) Hash identifier: 7ydeL2wvfkWlbSjcQm1rfxFkXOHvoyEFd2/G/DdGe1E= Subject key identifier: 6C:79:2F:AE:D2:32:56:60:63:8F:24:42:BC:F7:1D:CE:E9:F3:E9:9B Certificate issuer: /CN=3506dd4b-c904-4daa-9013-78c3d05bbcce Certificate serial: 010D0C9F4328584F07D77815EACFC73162017980 Authority key identifier: 38:0F:6F:65:C3:DD:EB:FC:45:AC:6F:0A:2C:FB:47:BE:7C:E0:E0:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3506dd4b-c904-4daa-9013-78c3d05bbcce.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3506dd4b-c904-4daa-9013-78c3d05bbcce/33886230-909a-3c78-8a7d-882d456f43a0.roa Signing time: Tue 01 Sep 2026 13:00:12 +0000 ROA not before: Tue 01 Sep 2026 13:00:12 +0000 ROA not after: Mon 30 Nov 2026 14:00:12 +0000 asID: 399105 IP address blocks: 172.99.246.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3506dd4b-c904-4daa-9013-78c3d05bbcce/3506dd4b-c904-4daa-9013-78c3d05bbcce.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3506dd4b-c904-4daa-9013-78c3d05bbcce/3506dd4b-c904-4daa-9013-78c3d05bbcce.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3506dd4b-c904-4daa-9013-78c3d05bbcce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:07:d7:78:15:ea:cf:c7:31:62:01:79:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3506dd4b-c904-4daa-9013-78c3d05bbcce Validity Not Before: Sep 1 13:00:12 2026 GMT Not After : Nov 30 14:00:12 2026 GMT Subject: CN=390e8355-d1ac-4a61-8726-ab510b434d4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:a6:57:cf:25:70:38:50:7f:be:52:f7:77:7c: 2e:26:0c:85:c3:b4:7b:2f:2f:f8:9d:3b:a7:e6:31: 5a:11:c1:c2:14:08:07:31:70:37:b5:6b:b1:cc:ed: 06:96:c2:de:d2:25:56:ff:48:b1:9e:eb:cc:98:19: 1b:6f:4b:d0:7f:a4:16:53:28:9a:9d:41:06:d1:a1: 3b:9f:e9:9a:b8:d5:fe:f1:e0:0c:29:5d:3d:0e:1e: f4:d8:a9:a4:e3:94:66:8b:74:41:de:64:b8:f5:f4: 7d:4d:95:02:2c:05:96:8d:0c:69:d0:7c:f9:0b:86: a9:98:70:73:86:3e:fb:01:e3:27:0e:08:88:bf:2d: 11:3a:86:eb:d2:d5:54:ed:3f:59:5f:81:55:87:3c: c9:9c:15:3d:7b:11:03:73:f2:85:43:67:68:bc:67: 99:9e:ee:67:a2:f7:aa:88:a5:40:58:6b:01:ad:03: 37:13:0a:2b:ce:0b:01:b0:3c:90:b6:a8:dd:d0:f8: b3:c4:26:a1:55:ff:7d:45:96:76:f2:97:d0:30:cd: a4:70:50:ec:ad:5c:d3:38:88:8f:06:f1:cf:11:e0: 67:24:e7:26:81:f4:ce:21:19:be:bf:67:67:ba:8c: 98:56:34:d8:67:c6:bc:5a:2b:0f:ce:42:9a:79:92: 5b:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:79:2F:AE:D2:32:56:60:63:8F:24:42:BC:F7:1D:CE:E9:F3:E9:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3506dd4b-c904-4daa-9013-78c3d05bbcce/33886230-909a-3c78-8a7d-882d456f43a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3506dd4b-c904-4daa-9013-78c3d05bbcce/3506dd4b-c904-4daa-9013-78c3d05bbcce.crl X509v3 Authority Key Identifier: keyid:38:0F:6F:65:C3:DD:EB:FC:45:AC:6F:0A:2C:FB:47:BE:7C:E0:E0:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3506dd4b-c904-4daa-9013-78c3d05bbcce.cer sbgp-ipAddrBlock: critical IPv4: 172.99.246.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:18:59:97:2f:0d:31:39:c4:72:a0:d4:ec:46:51:13:35:60: 7f:19:22:d7:d1:cf:81:87:07:7a:a9:d0:64:65:b3:e5:d7:da: bc:15:05:c5:2c:57:5e:eb:a5:15:7b:8e:29:e6:0a:0d:8e:5a: 09:f4:11:89:11:d2:f4:af:a6:1e:e8:2b:9e:2c:e3:11:8f:ab: 4a:53:38:e5:5e:ca:df:f5:fa:1c:d5:4e:40:7e:c1:ba:ba:c3: 2e:b7:2b:55:cb:f6:bb:03:b5:ad:50:80:df:2a:15:56:6e:dc: df:09:53:41:a9:69:7e:1c:be:d6:6c:d4:02:6d:bb:2d:ec:35: 4a:a5:71:b8:e4:28:4f:56:21:9c:55:11:0e:e6:a0:dd:3f:2c: 92:b0:f0:46:63:91:75:13:4f:a8:a6:9f:9e:98:c3:cb:11:b5: 85:03:3e:b7:c7:8e:52:93:6a:50:3d:23:c1:03:72:c3:a2:ab: 43:db:7c:8a:54:7b:e1:d1:27:20:4b:c9:e5:2b:6b:89:20:1e: 8c:b1:94:dd:95:6a:18:8c:74:0b:55:a9:ce:63:99:98:22:eb: 6e:ba:e7:eb:81:97:27:35:65:3f:f9:c6:7f:c2:b9:a5:4c:3f: cc:a9:19:da:5e:2e:57:44:84:c8:a1:69:20:82:76:84:f6:bd: 92:d8:f2:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8H13gV6s/HMWIBeYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzUwNmRkNGItYzkwNC00ZGFhLTkwMTMtNzhjM2QwNWJi Y2NlMB4XDTI2MDkwMTEzMDAxMloXDTI2MTEzMDE0MDAxMlowLzEtMCsGA1UEAxMk MzkwZTgzNTUtZDFhYy00YTYxLTg3MjYtYWI1MTBiNDM0ZDRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqZXzyVwOFB/vlL3d3wuJgyFw7R7Ly/4nTun 5jFaEcHCFAgHMXA3tWuxzO0GlsLe0iVW/0ixnuvMmBkbb0vQf6QWUyianUEG0aE7 n+mauNX+8eAMKV09Dh702Kmk45Rmi3RB3mS49fR9TZUCLAWWjQxp0Hz5C4apmHBz hj77AeMnDgiIvy0ROobr0tVU7T9ZX4FVhzzJnBU9exEDc/KFQ2dovGeZnu5noveq iKVAWGsBrQM3EworzgsBsDyQtqjd0PizxCahVf99RZZ28pfQMM2kcFDsrVzTOIiP BvHPEeBnJOcmgfTOIRm+v2dnuoyYVjTYZ8a8WisPzkKaeZJbowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGx5L67SMlZgY48kQrz3Hc7p8+mbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zNTA2 ZGQ0Yi1jOTA0LTRkYWEtOTAxMy03OGMzZDA1YmJjY2UvMzM4ODYyMzAtOTA5YS0z Yzc4LThhN2QtODgyZDQ1NmY0M2EwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzUwNmRkNGItYzkwNC00ZGFhLTkw MTMtNzhjM2QwNWJiY2NlLzM1MDZkZDRiLWM5MDQtNGRhYS05MDEzLTc4YzNkMDVi YmNjZS5jcmwwHwYDVR0jBBgwFoAUOA9vZcPd6/xFrG8KLPtHvnzg4HgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zNTA2ZGQ0Yi1jOTA0LTRkYWEtOTAxMy03OGMz ZDA1YmJjY2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrGP2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFkYWZcvDTE5xHKg1OxGURM1YH8ZItfRz4GHB3qp0GRls+XX2rwVBcUs V17rpRV7jinmCg2OWgn0EYkR0vSvph7oK54s4xGPq0pTOOVeyt/1+hzVTkB+wbq6 wy63K1XL9rsDta1QgN8qFVZu3N8JU0GpaX4cvtZs1AJtuy3sNUqlcbjkKE9WIZxV EQ7moN0/LJKw8EZjkXUTT6imn56Yw8sRtYUDPrfHjlKTalA9I8EDcsOiq0PbfIpU e+HRJyBLyeUra4kgHoyxlN2VahiMdAtVqc5jmZgi62665+uBlyc1ZT/5xn/CuaVM P8ypGdpeLldEhMihaSCCdoT2vZLY8gQ= -----END CERTIFICATE-----Generated at Mon Oct 5 06:50:35 2026 by rpki-client