$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/295134ba-eab9-38c0-8b27-86d75d1254f1.roa File: 295134ba-eab9-38c0-8b27-86d75d1254f1.roa (raw, json) Hash identifier: G6ZC+GeNThwa68n7qR7uhMskCp0gb9XlJCOeCXR7B9k= Subject key identifier: 3B:D4:BC:9E:92:37:78:E3:65:FD:C4:BC:DE:60:3B:11:1B:B7:01:C5 Certificate issuer: /CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4 Certificate serial: 010D0C9F4328584F0D6CFE87955D8C7476B67800 Authority key identifier: 65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/295134ba-eab9-38c0-8b27-86d75d1254f1.roa Signing time: Thu 03 Sep 2026 13:00:12 +0000 ROA not before: Thu 03 Sep 2026 13:00:12 +0000 ROA not after: Wed 02 Dec 2026 14:00:12 +0000 asID: 16509 IP address blocks: 134.49.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0d:6c:fe:87:95:5d:8c:74:76:b6:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4 Validity Not Before: Sep 3 13:00:12 2026 GMT Not After : Dec 2 14:00:12 2026 GMT Subject: CN=a75b2203-8c65-4a6c-8f06-f1644c389ac1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:62:64:c0:2c:38:e8:79:ba:e6:87:8d:1e:02: c6:30:ce:18:c9:21:cb:97:37:6b:d4:b2:9b:e2:4f: 88:56:22:c5:a2:44:9a:aa:21:91:1f:9d:46:44:62: 8d:1f:ef:85:71:20:5b:75:ad:d3:36:ea:41:54:7b: 9b:67:10:27:b6:f0:4e:ed:f2:57:55:6a:68:06:7e: 6f:65:e9:5a:3c:98:cd:8c:2d:4f:d9:80:7b:94:27: 48:72:db:fe:f8:12:2f:a3:74:18:1d:db:96:b9:61: 7a:de:ab:6d:e2:fb:e1:9d:51:49:25:bd:5f:93:27: 56:56:f6:bf:e6:ac:92:40:f8:1d:3a:31:f8:31:12: 97:43:6f:73:d4:24:f8:6e:81:3f:54:04:ed:58:78: 7b:35:47:73:eb:23:bd:26:c9:85:54:fd:0a:7c:9c: d2:a3:de:18:57:98:de:38:0b:66:17:5a:e2:f0:7b: 1f:9e:d4:9a:ad:9a:00:7b:c1:24:ea:34:37:32:21: d8:03:ea:b0:dc:12:3f:a0:1f:64:df:58:02:7a:84: f7:7d:fc:7b:37:85:fd:8f:73:f1:fe:6a:29:6b:a1: 8a:83:6d:1f:24:78:04:ff:ef:b6:05:47:93:77:5f: dc:de:49:70:40:db:9c:fe:35:74:2a:64:c9:58:24: 72:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:D4:BC:9E:92:37:78:E3:65:FD:C4:BC:DE:60:3B:11:1B:B7:01:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/295134ba-eab9-38c0-8b27-86d75d1254f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl X509v3 Authority Key Identifier: keyid:65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer sbgp-ipAddrBlock: critical IPv4: 134.49.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:c4:94:3e:1b:ec:30:e6:36:80:e2:94:1f:17:25:cf:84:ab: 41:0d:9d:a5:3b:7c:27:b5:6b:d8:e1:d6:0b:51:9f:1f:96:af: 76:d7:cc:e9:94:02:9e:ce:58:e0:e4:1e:6c:5b:83:55:ac:2c: cb:27:60:4f:0d:f6:62:b4:47:54:a2:2b:5d:ee:80:c6:9a:a3: 87:32:2a:8f:49:92:60:d0:70:85:b6:81:91:39:3d:6a:f1:8f: 88:3d:a3:bb:30:73:bf:16:ba:e7:6a:4b:3d:1b:b4:45:a5:bf: a6:23:ab:bd:01:8e:4f:c7:2a:99:0b:a8:b9:21:47:34:53:8c: 8d:99:d2:fc:52:d1:b6:a9:02:01:8f:b9:74:cc:14:cb:09:ee: a3:51:07:76:fa:e9:0b:8c:45:72:ad:99:2b:56:9f:25:8f:16: 8c:f4:7a:0e:2b:c0:8e:65:ce:66:de:04:d0:e3:6e:4d:85:c6: 62:59:ba:83:b5:91:b5:ce:16:7a:43:8f:d1:22:78:c1:6e:cd: 70:0d:ce:e1:e4:6e:26:6c:b0:3a:4f:54:39:78:dd:d0:bf:1a: 51:17:3a:4e:22:36:80:7a:b7:e2:a8:d4:4e:3c:7a:db:00:dd: ba:9c:c8:1e:fb:94:77:da:da:28:a2:23:ad:9a:d0:60:e1:27: 60:0a:63:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8NbP6HlV2MdHa2eAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTlmYjZjOWEtY2UyOS00MWVlLWE0YWQtM2RlZTNmNzk3 MGE0MB4XDTI2MDkwMzEzMDAxMloXDTI2MTIwMjE0MDAxMlowLzEtMCsGA1UEAxMk YTc1YjIyMDMtOGM2NS00YTZjLThmMDYtZjE2NDRjMzg5YWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmJkwCw46Hm65oeNHgLGMM4YySHLlzdr1LKb 4k+IViLFokSaqiGRH51GRGKNH++FcSBbda3TNupBVHubZxAntvBO7fJXVWpoBn5v ZelaPJjNjC1P2YB7lCdIctv++BIvo3QYHduWuWF63qtt4vvhnVFJJb1fkydWVva/ 5qySQPgdOjH4MRKXQ29z1CT4boE/VATtWHh7NUdz6yO9JsmFVP0KfJzSo94YV5je OAtmF1ri8HsfntSarZoAe8Ek6jQ3MiHYA+qw3BI/oB9k31gCeoT3ffx7N4X9j3Px /mopa6GKg20fJHgE/++2BUeTd1/c3klwQNuc/jV0KmTJWCRyNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDvUvJ6SN3jjZf3EvN5gOxEbtwHFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85OWZi NmM5YS1jZTI5LTQxZWUtYTRhZC0zZGVlM2Y3OTcwYTQvMjk1MTM0YmEtZWFiOS0z OGMwLThiMjctODZkNzVkMTI1NGYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOTlmYjZjOWEtY2UyOS00MWVlLWE0 YWQtM2RlZTNmNzk3MGE0Lzk5ZmI2YzlhLWNlMjktNDFlZS1hNGFkLTNkZWUzZjc5 NzBhNC5jcmwwHwYDVR0jBBgwFoAUZSJlk/hhOWSY4nrlbMI1s/Z+WzUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85OWZiNmM5YS1jZTI5LTQxZWUtYTRhZC0zZGVl M2Y3OTcwYTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAhjGPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHLElD4b7DDmNoDilB8XJc+Eq0ENnaU7fCe1a9jh1gtRnx+Wr3bXzOmU Ap7OWODkHmxbg1WsLMsnYE8N9mK0R1SiK13ugMaao4cyKo9JkmDQcIW2gZE5PWrx j4g9o7swc78WuudqSz0btEWlv6Yjq70Bjk/HKpkLqLkhRzRTjI2Z0vxS0bapAgGP uXTMFMsJ7qNRB3b66QuMRXKtmStWnyWPFoz0eg4rwI5lzmbeBNDjbk2FxmJZuoO1 kbXOFnpDj9EieMFuzXANzuHkbiZssDpPVDl43dC/GlEXOk4iNoB6t+Ko1E48etsA 3bqcyB77lHfa2iiiI62a0GDhJ2AKY+k= -----END CERTIFICATE-----Generated at Fri Sep 25 06:39:22 2026 by rpki-client