$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/ae689f65-5df9-3697-9711-2fdf70b4ca5e.roa File: ae689f65-5df9-3697-9711-2fdf70b4ca5e.roa (raw, json) Hash identifier: +IXW74YW91bG+f6JiI4iPcBPSvcso0GNsWzjJv+8pCo= Subject key identifier: B1:B1:9F:D9:5B:CA:CE:56:B2:62:97:40:BF:D5:50:42:D2:31:54:29 Certificate issuer: /CN=3965685f-104b-41c9-9fe3-53d7fe4d141e Certificate serial: 010D0C9F4328584F1CC7AA0FDDE318D8E0059640 Authority key identifier: 2D:4E:EC:07:7D:05:74:F6:8E:93:8D:47:DD:E3:82:57:D4:0B:DF:DF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/ae689f65-5df9-3697-9711-2fdf70b4ca5e.roa Signing time: Wed 09 Sep 2026 01:00:11 +0000 ROA not before: Wed 09 Sep 2026 01:00:11 +0000 ROA not after: Tue 08 Dec 2026 02:00:11 +0000 asID: 6079 IP address blocks: 172.99.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/3965685f-104b-41c9-9fe3-53d7fe4d141e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/3965685f-104b-41c9-9fe3-53d7fe4d141e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1c:c7:aa:0f:dd:e3:18:d8:e0:05:96:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3965685f-104b-41c9-9fe3-53d7fe4d141e Validity Not Before: Sep 9 01:00:11 2026 GMT Not After : Dec 8 02:00:11 2026 GMT Subject: CN=eb0f00e0-e734-4a90-b346-a2065042ca17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:71:f2:61:c3:b2:22:b4:ea:52:fc:98:35:8a: f2:2d:49:c1:9a:ef:ee:11:26:b4:1f:ce:88:ec:c4: 53:a9:cf:82:3c:66:6d:f2:37:7d:3c:e5:48:0a:77: 45:b5:36:34:8c:df:73:03:05:8e:7e:fa:fa:ba:63: 14:b7:d6:48:b6:6d:ff:ac:0a:c7:47:5a:a2:a9:06: 7b:5f:01:d9:94:26:3e:86:a2:8f:94:30:f0:b3:bf: 03:9c:32:8b:cd:ed:f3:53:3d:66:55:57:85:9f:74: bb:ba:fd:a2:7e:2c:c9:1b:1b:48:a5:e8:fd:12:f0: c3:3e:52:21:c5:9f:6f:50:83:ae:d1:d0:05:d2:59: e4:da:36:71:65:54:98:22:60:9e:0b:3f:fe:bd:22: 39:09:54:dd:ed:6e:0e:dd:0d:ba:73:da:0d:b7:6e: ec:bf:ff:c0:a1:4f:23:39:64:62:62:c2:36:0d:cc: 5f:9c:52:5e:ca:64:4d:75:a7:26:83:d3:e1:e8:c1: 52:66:1b:7c:fa:a8:81:45:74:2f:a6:09:bd:ae:4a: c0:d2:40:73:96:92:a6:97:67:6c:5f:1c:f1:14:7f: d1:bc:b5:a0:ee:23:b0:28:55:84:1d:7a:a4:8e:6e: c0:27:8e:bc:58:69:52:ae:ad:5e:6d:f8:37:7a:3d: 3b:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:B1:9F:D9:5B:CA:CE:56:B2:62:97:40:BF:D5:50:42:D2:31:54:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/ae689f65-5df9-3697-9711-2fdf70b4ca5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/3965685f-104b-41c9-9fe3-53d7fe4d141e.crl X509v3 Authority Key Identifier: keyid:2D:4E:EC:07:7D:05:74:F6:8E:93:8D:47:DD:E3:82:57:D4:0B:DF:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e.cer sbgp-ipAddrBlock: critical IPv4: 172.99.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:bd:7e:c5:c2:41:38:65:f8:30:31:45:65:dc:53:fd:9d:35: 46:fc:93:15:63:ed:f9:66:01:c5:f6:2d:ab:df:56:32:8b:ee: 64:b1:df:35:ca:a7:5f:2b:fd:b2:34:ec:b1:97:ed:48:d6:5c: 23:5a:95:72:49:11:8b:66:dd:a0:53:8d:9a:46:84:6b:cf:7a: 86:e6:4a:01:59:5f:a3:4f:ce:5d:0c:3c:e0:ab:43:0d:8f:e5: 4e:14:fa:e3:c7:d8:49:ac:d3:49:2b:1b:6f:83:f9:8d:9d:88: b8:60:38:35:56:7c:55:15:18:7e:52:db:bb:0f:7a:27:52:26: 3b:00:94:2d:67:11:8a:fa:21:fe:2e:d3:76:ac:dc:c4:cc:40: b4:19:d1:3a:04:27:1c:89:f4:41:de:92:dd:b0:52:07:b7:39: 06:15:66:cb:8d:0c:74:b2:c0:9a:f5:91:dd:56:b6:0e:0d:40: c1:fb:9a:6c:fc:51:3c:2d:b8:a3:fa:aa:6a:6b:34:3b:af:98: 3b:26:50:14:b0:7e:d3:5e:a3:4d:27:69:37:9a:4f:aa:b1:09: b0:6d:0e:86:91:c0:b9:c6:bb:4a:16:43:07:3d:9f:74:5f:ae: 44:87:83:97:4c:a4:09:12:a8:39:a2:57:68:cd:dd:26:c1:76: f8:32:fe:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8cx6oP3eMY2OAFlkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzk2NTY4NWYtMTA0Yi00MWM5LTlmZTMtNTNkN2ZlNGQx NDFlMB4XDTI2MDkwOTAxMDAxMVoXDTI2MTIwODAyMDAxMVowLzEtMCsGA1UEAxMk ZWIwZjAwZTAtZTczNC00YTkwLWIzNDYtYTIwNjUwNDJjYTE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXHyYcOyIrTqUvyYNYryLUnBmu/uESa0H86I 7MRTqc+CPGZt8jd9POVICndFtTY0jN9zAwWOfvr6umMUt9ZItm3/rArHR1qiqQZ7 XwHZlCY+hqKPlDDws78DnDKLze3zUz1mVVeFn3S7uv2ifizJGxtIpej9EvDDPlIh xZ9vUIOu0dAF0lnk2jZxZVSYImCeCz/+vSI5CVTd7W4O3Q26c9oNt27sv//AoU8j OWRiYsI2DcxfnFJeymRNdacmg9Ph6MFSZht8+qiBRXQvpgm9rkrA0kBzlpKml2ds XxzxFH/RvLWg7iOwKFWEHXqkjm7AJ468WGlSrq1ebfg3ej07twIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLGxn9lbys5WsmKXQL/VUELSMVQpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zOTY1 Njg1Zi0xMDRiLTQxYzktOWZlMy01M2Q3ZmU0ZDE0MWUvYWU2ODlmNjUtNWRmOS0z Njk3LTk3MTEtMmZkZjcwYjRjYTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzk2NTY4NWYtMTA0Yi00MWM5LTlm ZTMtNTNkN2ZlNGQxNDFlLzM5NjU2ODVmLTEwNGItNDFjOS05ZmUzLTUzZDdmZTRk MTQxZS5jcmwwHwYDVR0jBBgwFoAULU7sB30FdPaOk41H3eOCV9QL398wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zOTY1Njg1Zi0xMDRiLTQxYzktOWZlMy01M2Q3 ZmU0ZDE0MWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrGPwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACi9fsXCQThl+DAxRWXcU/2dNUb8kxVj7flmAcX2LavfVjKL7mSx3zXK p18r/bI07LGX7UjWXCNalXJJEYtm3aBTjZpGhGvPeobmSgFZX6NPzl0MPOCrQw2P 5U4U+uPH2Ems00krG2+D+Y2diLhgODVWfFUVGH5S27sPeidSJjsAlC1nEYr6If4u 03as3MTMQLQZ0ToEJxyJ9EHekt2wUge3OQYVZsuNDHSywJr1kd1Wtg4NQMH7mmz8 UTwtuKP6qmprNDuvmDsmUBSwftNeo00naTeaT6qxCbBtDoaRwLnGu0oWQwc9n3Rf rkSHg5dMpAkSqDmiV2jN3SbBdvgy/i4= -----END CERTIFICATE-----Generated at Wed Sep 23 23:58:04 2026 by rpki-client