$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/ae689f65-5df9-3697-9711-2fdf70b4ca5e.roa File: ae689f65-5df9-3697-9711-2fdf70b4ca5e.roa (raw, json) Hash identifier: LPPbNBNbNbq77OorQZ2BfJ8hNi/0vFfignM0+vBhznc= Subject key identifier: EC:98:D4:CF:5D:6D:41:94:02:01:78:5F:0F:F1:88:DC:95:6F:45:FB Certificate issuer: /CN=3965685f-104b-41c9-9fe3-53d7fe4d141e Certificate serial: 010D0C9F4328584E7A64DF321B36EBEEDB7F5400 Authority key identifier: 2D:4E:EC:07:7D:05:74:F6:8E:93:8D:47:DD:E3:82:57:D4:0B:DF:DF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/ae689f65-5df9-3697-9711-2fdf70b4ca5e.roa Signing time: Sun 12 Jul 2026 21:00:13 +0000 ROA not before: Sun 12 Jul 2026 21:00:13 +0000 ROA not after: Sat 10 Oct 2026 21:00:13 +0000 asID: 6079 IP address blocks: 172.99.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/3965685f-104b-41c9-9fe3-53d7fe4d141e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/3965685f-104b-41c9-9fe3-53d7fe4d141e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7a:64:df:32:1b:36:eb:ee:db:7f:54:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3965685f-104b-41c9-9fe3-53d7fe4d141e Validity Not Before: Jul 12 21:00:13 2026 GMT Not After : Oct 10 21:00:13 2026 GMT Subject: CN=9bafb36e-9fd7-46b1-86b1-a8dd04e734d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a9:75:22:91:61:b0:cf:82:dd:dc:9e:5f:e5: f7:8d:57:4a:eb:21:fb:58:15:a9:da:33:7a:44:d4: 1d:53:9c:e9:f4:d9:ce:2b:79:b7:82:55:6f:e5:a9: fd:6a:fe:5d:c4:81:32:dc:51:52:22:ce:89:2f:f9: e4:ab:b9:c0:78:61:5d:0a:60:14:24:99:eb:a2:84: 97:6f:25:39:e1:da:95:6e:f8:b4:e0:99:68:14:21: c9:77:83:5c:2b:8e:1f:f4:5c:06:43:e9:db:3d:56: b4:09:68:75:a7:71:1b:83:bb:9d:da:d0:f9:78:61: ae:89:76:14:f2:52:66:6a:a6:b5:c1:f2:9a:4a:8c: c8:26:c7:25:cd:54:ae:6d:01:37:b3:71:ef:e8:20: 52:96:72:e2:e8:de:be:b2:4c:8e:90:3a:fd:a2:1b: 45:c5:94:2a:81:48:f9:ed:63:a3:35:1e:ef:eb:0d: 73:19:f8:11:8c:a1:e7:68:61:df:00:93:c6:f7:3c: 11:fa:b6:89:3b:1f:1b:2c:d3:a9:3c:31:29:e0:e7: 89:9e:33:5a:41:ff:c3:15:55:a6:4d:98:82:be:8c: f9:3d:4d:0e:79:10:8a:d0:f1:72:f9:fe:64:57:67: 3f:93:1d:cf:1b:af:9a:9a:f8:bf:6b:31:36:94:5c: 61:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:98:D4:CF:5D:6D:41:94:02:01:78:5F:0F:F1:88:DC:95:6F:45:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/ae689f65-5df9-3697-9711-2fdf70b4ca5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/3965685f-104b-41c9-9fe3-53d7fe4d141e.crl X509v3 Authority Key Identifier: keyid:2D:4E:EC:07:7D:05:74:F6:8E:93:8D:47:DD:E3:82:57:D4:0B:DF:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e.cer sbgp-ipAddrBlock: critical IPv4: 172.99.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:49:03:1a:cf:cf:99:50:73:44:fb:cc:48:4b:56:c3:ec:14: 14:fb:ec:4b:e7:15:ae:ad:69:5c:2b:20:2b:96:42:ea:cc:af: 1e:c9:0b:43:e4:ab:a4:8b:d4:24:8c:44:4f:b9:6d:81:b4:b6: 1d:19:03:72:c6:47:1f:d6:86:b0:4f:a9:84:b0:51:2a:6b:b8: 62:ab:69:aa:2e:67:04:3c:47:fc:2c:42:d0:3a:7d:50:f4:f3: 3a:c0:b9:2a:09:48:b6:13:0b:27:df:b3:36:33:67:db:34:52: 6a:d5:cc:87:12:9a:40:fc:57:cc:63:6a:d4:97:75:65:61:3d: 54:fb:72:ef:24:12:26:9d:b0:68:c8:ae:cf:f4:0d:d8:de:d2: ac:de:7e:1e:00:90:ee:b2:38:be:7e:1c:29:5c:ab:e4:05:94: de:19:5a:a5:0d:6d:73:6a:80:ff:fd:32:a8:82:41:e2:eb:04: ba:3b:2d:0a:b4:bf:64:13:4d:88:70:35:43:42:9c:37:02:74: bf:d6:0c:f1:2b:fa:35:de:47:ca:df:34:9f:2a:3c:e7:b7:6b: c4:03:00:80:84:3c:ff:c0:88:9c:07:a0:74:ac:b1:a2:a3:ea: 7e:9f:40:d5:ab:a5:d8:f9:bc:ac:4b:ef:80:3c:78:cf:9d:c3: 58:e3:4c:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE56ZN8yGzbr7tt/VAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzk2NTY4NWYtMTA0Yi00MWM5LTlmZTMtNTNkN2ZlNGQx NDFlMB4XDTI2MDcxMjIxMDAxM1oXDTI2MTAxMDIxMDAxM1owLzEtMCsGA1UEAxMk OWJhZmIzNmUtOWZkNy00NmIxLTg2YjEtYThkZDA0ZTczNGQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6l1IpFhsM+C3dyeX+X3jVdK6yH7WBWp2jN6 RNQdU5zp9NnOK3m3glVv5an9av5dxIEy3FFSIs6JL/nkq7nAeGFdCmAUJJnrooSX byU54dqVbvi04JloFCHJd4NcK44f9FwGQ+nbPVa0CWh1p3Ebg7ud2tD5eGGuiXYU 8lJmaqa1wfKaSozIJsclzVSubQE3s3Hv6CBSlnLi6N6+skyOkDr9ohtFxZQqgUj5 7WOjNR7v6w1zGfgRjKHnaGHfAJPG9zwR+raJOx8bLNOpPDEp4OeJnjNaQf/DFVWm TZiCvoz5PU0OeRCK0PFy+f5kV2c/kx3PG6+amvi/azE2lFxhUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOyY1M9dbUGUAgF4Xw/xiNyVb0X7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zOTY1 Njg1Zi0xMDRiLTQxYzktOWZlMy01M2Q3ZmU0ZDE0MWUvYWU2ODlmNjUtNWRmOS0z Njk3LTk3MTEtMmZkZjcwYjRjYTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzk2NTY4NWYtMTA0Yi00MWM5LTlm ZTMtNTNkN2ZlNGQxNDFlLzM5NjU2ODVmLTEwNGItNDFjOS05ZmUzLTUzZDdmZTRk MTQxZS5jcmwwHwYDVR0jBBgwFoAULU7sB30FdPaOk41H3eOCV9QL398wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zOTY1Njg1Zi0xMDRiLTQxYzktOWZlMy01M2Q3 ZmU0ZDE0MWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrGPwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADdJAxrPz5lQc0T7zEhLVsPsFBT77EvnFa6taVwrICuWQurMrx7JC0Pk q6SL1CSMRE+5bYG0th0ZA3LGRx/WhrBPqYSwUSpruGKraaouZwQ8R/wsQtA6fVD0 8zrAuSoJSLYTCyffszYzZ9s0UmrVzIcSmkD8V8xjatSXdWVhPVT7cu8kEiadsGjI rs/0Ddje0qzefh4AkO6yOL5+HClcq+QFlN4ZWqUNbXNqgP/9MqiCQeLrBLo7LQq0 v2QTTYhwNUNCnDcCdL/WDPEr+jXeR8rfNJ8qPOe3a8QDAICEPP/AiJwHoHSssaKj 6n6fQNWrpdj5vKxL74A8eM+dw1jjTDU= -----END CERTIFICATE-----Generated at Fri Jul 24 07:52:22 2026 by rpki-client