$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/1d8885c5-ab8f-304a-9174-517de75c7bd8.roa File: 1d8885c5-ab8f-304a-9174-517de75c7bd8.roa (raw, json) Hash identifier: nhH4/0C55p5tFDgvQiEK3eJX7W+UXriw53Gr9j0ZGjU= Subject key identifier: 02:23:36:3F:61:93:61:C4:DC:FA:09:89:3A:15:CA:C3:C4:6E:4A:73 Certificate issuer: /CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4 Certificate serial: 010D0C9F4328584F093CE794C63178AD44F7C480 Authority key identifier: 65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/1d8885c5-ab8f-304a-9174-517de75c7bd8.roa Signing time: Wed 02 Sep 2026 01:00:12 +0000 ROA not before: Wed 02 Sep 2026 01:00:12 +0000 ROA not after: Tue 01 Dec 2026 02:00:12 +0000 asID: 14618 IP address blocks: 199.45.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:3c:e7:94:c6:31:78:ad:44:f7:c4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4 Validity Not Before: Sep 2 01:00:12 2026 GMT Not After : Dec 1 02:00:12 2026 GMT Subject: CN=7bcd3ea6-6a46-4df5-9cc2-16082807c7f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:03:b7:13:52:6f:47:d0:ea:1c:68:ef:b5:c6: 9a:66:bf:80:71:f0:86:99:4d:70:7e:7f:aa:0e:e7: 14:7d:5b:2f:83:65:5f:fc:94:51:41:70:c6:48:10: 86:e0:05:2e:98:b5:08:10:22:d6:6e:39:ae:59:73: a6:1f:06:28:bc:05:4f:35:7b:02:76:10:67:27:20: 4e:19:e7:80:e0:05:75:ac:aa:ba:13:11:56:36:65: c1:63:21:28:1e:a7:c8:ca:1c:c8:7d:a5:f1:ba:ad: 60:00:84:37:5e:69:ef:5b:02:29:24:7c:3d:3d:f8: 2d:88:e0:db:e7:62:3b:9b:7e:a4:80:ba:32:f0:b5: cb:20:a3:06:c0:2e:23:6c:05:86:9a:23:f8:b3:0c: 03:c9:8e:82:b2:16:8e:15:47:aa:f9:a5:63:a7:bc: 49:d4:74:7d:71:4c:09:a2:69:a7:f8:63:17:98:89: 7e:31:7f:9a:82:05:49:eb:c0:b7:c8:06:25:dc:69: e8:c7:db:01:d6:83:f3:bc:63:80:17:86:dd:52:9c: a9:c5:2e:26:4c:f6:68:94:38:e1:6e:43:45:b6:97: 81:ec:7a:2d:9c:a9:ee:d0:16:c9:72:54:cf:b1:38: 72:c5:e7:97:21:ac:b5:8e:7a:92:37:0e:0e:6c:94: d4:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:23:36:3F:61:93:61:C4:DC:FA:09:89:3A:15:CA:C3:C4:6E:4A:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/1d8885c5-ab8f-304a-9174-517de75c7bd8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl X509v3 Authority Key Identifier: keyid:65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer sbgp-ipAddrBlock: critical IPv4: 199.45.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:58:0f:08:1a:cf:75:59:41:16:32:09:f3:ac:c2:d6:c5:d7: f0:be:dc:02:09:6b:6a:05:3d:a1:b4:84:f3:4b:c3:21:ab:8f: c6:12:48:7f:24:d3:bf:c5:e6:70:f4:47:f2:6c:99:84:13:19: 9a:ed:9e:60:70:1b:af:e3:f8:55:c3:c9:13:0a:7b:ae:08:a1: 33:29:85:ac:65:56:c0:39:1f:f1:4f:2b:ad:3f:74:02:e9:38: ac:9a:42:ea:6d:2d:c2:4e:8d:b6:43:8e:44:a1:bf:c0:f8:ff: 67:c1:c4:3b:f6:7d:f3:cd:8d:19:ee:50:4d:35:4e:80:da:86: f0:1c:38:bb:e7:c6:78:c0:4e:d8:e0:44:c3:51:93:05:b6:55: b5:19:76:22:e5:2c:53:02:fd:7e:b7:70:37:ee:8f:93:00:35: a2:7a:ea:8d:b6:72:c9:ad:26:e1:eb:96:d8:62:14:53:cf:5c: 55:50:ea:88:83:de:84:f2:16:ac:af:0c:9a:9c:20:2e:fa:e7: 7c:9e:02:44:ac:78:5a:69:23:5b:f2:37:d7:05:c1:4a:d8:2d: 2c:d5:9b:f9:14:73:41:1f:ac:62:68:8e:33:74:d3:fa:33:70: da:9a:d2:57:7b:a2:ec:d7:ff:27:5a:42:2e:48:b6:48:f1:98: 4f:02:3b:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8JPOeUxjF4rUT3xIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTlmYjZjOWEtY2UyOS00MWVlLWE0YWQtM2RlZTNmNzk3 MGE0MB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk N2JjZDNlYTYtNmE0Ni00ZGY1LTljYzItMTYwODI4MDdjN2Y5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwO3E1JvR9DqHGjvtcaaZr+AcfCGmU1wfn+q DucUfVsvg2Vf/JRRQXDGSBCG4AUumLUIECLWbjmuWXOmHwYovAVPNXsCdhBnJyBO GeeA4AV1rKq6ExFWNmXBYyEoHqfIyhzIfaXxuq1gAIQ3XmnvWwIpJHw9PfgtiODb 52I7m36kgLoy8LXLIKMGwC4jbAWGmiP4swwDyY6CshaOFUeq+aVjp7xJ1HR9cUwJ ommn+GMXmIl+MX+aggVJ68C3yAYl3Gnox9sB1oPzvGOAF4bdUpypxS4mTPZolDjh bkNFtpeB7HotnKnu0BbJclTPsThyxeeXIay1jnqSNw4ObJTU0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAIjNj9hk2HE3PoJiToVysPEbkpzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85OWZi NmM5YS1jZTI5LTQxZWUtYTRhZC0zZGVlM2Y3OTcwYTQvMWQ4ODg1YzUtYWI4Zi0z MDRhLTkxNzQtNTE3ZGU3NWM3YmQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOTlmYjZjOWEtY2UyOS00MWVlLWE0 YWQtM2RlZTNmNzk3MGE0Lzk5ZmI2YzlhLWNlMjktNDFlZS1hNGFkLTNkZWUzZjc5 NzBhNC5jcmwwHwYDVR0jBBgwFoAUZSJlk/hhOWSY4nrlbMI1s/Z+WzUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85OWZiNmM5YS1jZTI5LTQxZWUtYTRhZC0zZGVl M2Y3OTcwYTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxy3yMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABxYDwgaz3VZQRYyCfOswtbF1/C+3AIJa2oFPaG0hPNLwyGrj8YSSH8k 07/F5nD0R/JsmYQTGZrtnmBwG6/j+FXDyRMKe64IoTMphaxlVsA5H/FPK60/dALp OKyaQuptLcJOjbZDjkShv8D4/2fBxDv2ffPNjRnuUE01ToDahvAcOLvnxnjATtjg RMNRkwW2VbUZdiLlLFMC/X63cDfuj5MANaJ66o22csmtJuHrlthiFFPPXFVQ6oiD 3oTyFqyvDJqcIC7653yeAkSseFppI1vyN9cFwUrYLSzVm/kUc0EfrGJojjN00/oz cNqa0ld7ouzX/ydaQi5ItkjxmE8CO1Q= -----END CERTIFICATE-----Generated at Sun Sep 27 08:41:47 2026 by rpki-client