$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/b923e55a-93cc-35be-bb9a-bf18235d65a9.roa File: b923e55a-93cc-35be-bb9a-bf18235d65a9.roa (raw, json) Hash identifier: JMAaMQ3Mr7RJpLLx0pVQU2O9YIXAD/w2VF28lbFUzqA= Subject key identifier: 97:21:03:2C:90:EB:E8:20:A0:27:93:2B:40:25:BD:9E:A2:2B:73:86 Certificate issuer: /CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4 Certificate serial: 010D0C9F4328584F497565B26FC946373FC46580 Authority key identifier: 65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/b923e55a-93cc-35be-bb9a-bf18235d65a9.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 14618 IP address blocks: 216.87.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:65:b2:6f:c9:46:37:3f:c4:65:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=cac702d2-6898-4ea7-806c-c69dcf602132 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:45:2e:ce:ba:3d:2a:33:a8:cf:21:64:a2:6f: d2:68:9e:f3:20:ba:e6:02:a7:14:b3:80:a8:19:0a: 70:bf:72:41:42:c3:34:8e:4c:de:ae:1b:99:a9:1a: 64:2b:28:28:0d:6a:44:0c:9a:aa:34:62:41:b6:3b: 7c:fb:84:b1:a1:e9:07:54:21:49:f7:36:46:ed:44: f3:54:fc:ae:e3:77:46:80:39:07:40:79:c2:77:5d: 79:dc:b4:1d:c1:8f:51:68:0a:f9:78:d2:37:2e:3b: 35:48:73:8f:e4:37:1e:4e:4d:48:3c:e2:9d:76:2c: 77:da:74:c1:48:29:7f:71:9d:95:b0:e0:5b:4f:bf: 45:b1:1d:4d:1f:81:c0:1a:fb:a1:35:91:b4:ce:8b: 44:8f:24:59:93:2e:bf:03:06:cf:1a:78:bc:e4:c8: 1c:53:b8:35:7f:e8:b3:39:73:d0:de:33:ff:d9:f7: 4f:da:f7:18:53:85:33:99:9f:4f:9f:97:61:e0:0c: 94:94:88:8c:24:5a:95:4c:e9:18:07:b8:f2:0f:45: 34:8a:a9:89:4f:8e:aa:a8:a1:35:85:26:e8:5e:85: 27:89:66:c0:62:c7:73:ab:aa:d0:64:7e:90:ef:19: 86:08:b3:0f:58:b0:59:20:7f:e8:43:bb:de:b4:8a: 99:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:21:03:2C:90:EB:E8:20:A0:27:93:2B:40:25:BD:9E:A2:2B:73:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/b923e55a-93cc-35be-bb9a-bf18235d65a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl X509v3 Authority Key Identifier: keyid:65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer sbgp-ipAddrBlock: critical IPv4: 216.87.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:4d:6a:43:5b:1e:51:d5:7c:4e:be:1a:b5:d3:eb:91:8e:e3: d1:a3:ce:a1:9a:ea:6b:c0:c9:7d:0c:09:6e:49:c5:1e:f8:40: 5f:15:5f:c7:07:8f:28:05:6d:26:7f:0d:31:36:13:6d:fe:4a: 35:e2:c1:8e:5b:7f:c1:0b:c5:ce:70:a1:da:e2:59:a1:01:19: 43:77:5c:02:69:7e:f4:1d:32:75:d9:ef:5b:71:72:3e:df:05: 18:bb:cf:11:a5:35:66:e2:55:3b:3e:ef:8f:e2:c6:51:4f:ce: 25:b4:7d:86:e5:bd:99:26:d1:d4:4e:a8:4e:50:16:44:de:1f: ff:31:87:77:56:3e:fe:29:4c:1c:c8:1b:25:17:14:b5:12:46: d4:0e:17:bb:62:42:15:e2:e6:97:ad:9c:5e:5d:9a:10:0e:c6: 8d:59:4a:b6:39:99:c4:f2:26:ab:2f:fe:0c:28:c2:40:49:80: b8:c8:1c:5a:c9:71:a7:18:9f:e7:34:0a:91:8d:57:4f:fc:22: 03:4e:9e:58:91:9f:d5:e9:ae:52:04:62:11:10:bf:7d:51:79: 70:f6:24:1f:30:0b:87:fd:fa:01:cb:aa:49:67:a3:79:af:1d: ae:4e:7b:65:5c:46:ba:f2:b7:73:c9:30:8b:06:a4:81:4d:5d: 40:6f:c7:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdWWyb8lGNz/EZYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTlmYjZjOWEtY2UyOS00MWVlLWE0YWQtM2RlZTNmNzk3 MGE0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Y2FjNzAyZDItNjg5OC00ZWE3LTgwNmMtYzY5ZGNmNjAyMTMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlUUuzro9KjOozyFkom/SaJ7zILrmAqcUs4Co GQpwv3JBQsM0jkzerhuZqRpkKygoDWpEDJqqNGJBtjt8+4SxoekHVCFJ9zZG7UTz VPyu43dGgDkHQHnCd1153LQdwY9RaAr5eNI3Ljs1SHOP5DceTk1IPOKddix32nTB SCl/cZ2VsOBbT79FsR1NH4HAGvuhNZG0zotEjyRZky6/AwbPGni85MgcU7g1f+iz OXPQ3jP/2fdP2vcYU4UzmZ9Pn5dh4AyUlIiMJFqVTOkYB7jyD0U0iqmJT46qqKE1 hSboXoUniWbAYsdzq6rQZH6Q7xmGCLMPWLBZIH/oQ7vetIqZEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJchAyyQ6+ggoCeTK0AlvZ6iK3OGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85OWZi NmM5YS1jZTI5LTQxZWUtYTRhZC0zZGVlM2Y3OTcwYTQvYjkyM2U1NWEtOTNjYy0z NWJlLWJiOWEtYmYxODIzNWQ2NWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOTlmYjZjOWEtY2UyOS00MWVlLWE0 YWQtM2RlZTNmNzk3MGE0Lzk5ZmI2YzlhLWNlMjktNDFlZS1hNGFkLTNkZWUzZjc5 NzBhNC5jcmwwHwYDVR0jBBgwFoAUZSJlk/hhOWSY4nrlbMI1s/Z+WzUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85OWZiNmM5YS1jZTI5LTQxZWUtYTRhZC0zZGVl M2Y3OTcwYTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2FcrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI1NakNbHlHVfE6+GrXT65GO49GjzqGa6mvAyX0MCW5JxR74QF8VX8cH jygFbSZ/DTE2E23+SjXiwY5bf8ELxc5wodriWaEBGUN3XAJpfvQdMnXZ71txcj7f BRi7zxGlNWbiVTs+74/ixlFPziW0fYblvZkm0dROqE5QFkTeH/8xh3dWPv4pTBzI GyUXFLUSRtQOF7tiQhXi5petnF5dmhAOxo1ZSrY5mcTyJqsv/gwowkBJgLjIHFrJ cacYn+c0CpGNV0/8IgNOnliRn9XprlIEYhEQv31ReXD2JB8wC4f9+gHLqklno3mv Ha5Oe2VcRrryt3PJMIsGpIFNXUBvxxg= -----END CERTIFICATE-----Generated at Sat Sep 26 18:44:39 2026 by rpki-client