$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/bf0616b0-6cc9-3aba-bf45-5df0937bee6c.roa File: bf0616b0-6cc9-3aba-bf45-5df0937bee6c.roa (raw, json) Hash identifier: oE6VqPc5ygOzrgbN/NFSMn/r3pdiV/C4Ie4Wv4wS8uI= Subject key identifier: 33:04:2F:62:93:F5:A6:60:DC:74:CF:8F:32:A9:80:A6:ED:35:F0:B4 Certificate issuer: /CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4 Certificate serial: 010D0C9F4328584F497340DDC63EA380E3D2A280 Authority key identifier: 65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/bf0616b0-6cc9-3aba-bf45-5df0937bee6c.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 23280 IP address blocks: 198.73.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:40:dd:c6:3e:a3:80:e3:d2:a2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=3f933687-4a4a-4605-913b-62b4344f0f8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:84:8b:1f:cd:22:dc:c7:3c:b4:76:88:3a:9a: 1f:21:e9:15:e2:76:34:f7:b1:ba:9c:cc:2e:bd:92: ae:27:b8:d1:27:f7:9a:a9:da:4f:5b:c6:3f:fd:1a: 44:f1:7d:ac:7f:f4:8a:73:96:32:3d:43:60:de:42: a9:9f:fe:ba:41:c4:2d:0e:44:c7:ed:b5:48:60:2f: 55:17:1c:0f:7d:e9:3a:7f:73:ec:dc:25:70:13:37: a5:8b:5e:6e:fa:64:25:44:e0:6a:52:48:41:e4:ab: 1e:54:c3:25:7c:0e:58:a2:71:19:c2:81:7a:c9:1c: c5:44:07:00:2d:f7:58:83:62:80:ac:9d:c9:68:b2: 39:87:57:eb:70:f2:c4:2e:57:67:ce:df:c8:70:46: 20:3b:f5:50:21:e2:05:18:af:76:d6:6e:1c:7c:73: 7b:59:7d:7c:76:81:57:00:39:2a:2c:3f:8e:f0:2b: b7:9c:9d:29:e2:25:7e:2d:5d:16:0d:3b:66:8b:a6: 8b:a4:ed:33:96:d3:1f:c8:c3:63:ee:d6:44:7f:67: 9c:79:0a:93:31:1f:f9:95:2e:f9:4a:c0:21:dd:eb: 22:ad:0d:09:34:d4:fb:04:9c:a1:9b:cd:b7:1f:e3: af:94:e7:03:6f:34:e4:1e:bb:c0:15:57:50:65:81: 0b:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:04:2F:62:93:F5:A6:60:DC:74:CF:8F:32:A9:80:A6:ED:35:F0:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/bf0616b0-6cc9-3aba-bf45-5df0937bee6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl X509v3 Authority Key Identifier: keyid:65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer sbgp-ipAddrBlock: critical IPv4: 198.73.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:2e:84:d6:02:ce:14:79:38:cc:26:4a:6d:0a:3d:d8:fd:f0: d5:0f:aa:38:27:10:aa:17:e0:9c:61:82:a7:af:20:47:73:c4: fb:c5:55:b4:6e:2c:a3:01:f5:af:f4:3e:a5:00:87:d9:0e:86: 92:6e:a2:80:91:c7:2d:bb:d1:7e:37:4a:25:a5:71:91:0e:b6: ea:77:92:33:0c:32:0b:e0:1e:41:43:d6:8c:87:23:fd:28:87: 8e:f2:e8:f9:9f:1a:75:25:2e:a9:71:6c:03:1b:bc:64:d0:63: 36:96:e5:57:84:04:d4:9e:fa:26:14:46:ca:ac:17:33:58:01: c3:de:c0:e1:7c:22:46:d0:91:36:88:10:b6:4a:b1:aa:ce:2b: e5:6f:8c:b5:8e:23:2b:44:b4:dc:a1:37:9b:d0:11:16:1c:cf: aa:b8:49:68:b9:92:00:bc:ca:0b:8d:87:fc:a4:69:81:8d:15: f1:6f:2f:81:bf:f1:a2:b8:1e:eb:11:fb:e6:56:e5:13:5a:ad: 9e:8b:07:1a:b6:b9:b3:82:d5:e3:c8:91:ba:e1:fe:65:9c:fd: 79:0b:27:79:6a:d7:e7:de:65:6c:8e:70:66:98:8a:30:d8:c7: 0f:f6:87:a0:a4:54:2b:26:38:c5:93:64:0b:ff:5c:3a:ad:0c: c1:e9:83:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc0Ddxj6jgOPSooAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTlmYjZjOWEtY2UyOS00MWVlLWE0YWQtM2RlZTNmNzk3 MGE0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk M2Y5MzM2ODctNGE0YS00NjA1LTkxM2ItNjJiNDM0NGYwZjhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAooSLH80i3Mc8tHaIOpofIekV4nY097G6nMwu vZKuJ7jRJ/eaqdpPW8Y//RpE8X2sf/SKc5YyPUNg3kKpn/66QcQtDkTH7bVIYC9V FxwPfek6f3Ps3CVwEzeli15u+mQlROBqUkhB5KseVMMlfA5YonEZwoF6yRzFRAcA LfdYg2KArJ3JaLI5h1frcPLELldnzt/IcEYgO/VQIeIFGK921m4cfHN7WX18doFX ADkqLD+O8Cu3nJ0p4iV+LV0WDTtmi6aLpO0zltMfyMNj7tZEf2eceQqTMR/5lS75 SsAh3esirQ0JNNT7BJyhm823H+OvlOcDbzTkHrvAFVdQZYEL3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDMEL2KT9aZg3HTPjzKpgKbtNfC0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85OWZi NmM5YS1jZTI5LTQxZWUtYTRhZC0zZGVlM2Y3OTcwYTQvYmYwNjE2YjAtNmNjOS0z YWJhLWJmNDUtNWRmMDkzN2JlZTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOTlmYjZjOWEtY2UyOS00MWVlLWE0 YWQtM2RlZTNmNzk3MGE0Lzk5ZmI2YzlhLWNlMjktNDFlZS1hNGFkLTNkZWUzZjc5 NzBhNC5jcmwwHwYDVR0jBBgwFoAUZSJlk/hhOWSY4nrlbMI1s/Z+WzUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85OWZiNmM5YS1jZTI5LTQxZWUtYTRhZC0zZGVl M2Y3OTcwYTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxkk6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABYuhNYCzhR5OMwmSm0KPdj98NUPqjgnEKoX4JxhgqevIEdzxPvFVbRu LKMB9a/0PqUAh9kOhpJuooCRxy270X43SiWlcZEOtup3kjMMMgvgHkFD1oyHI/0o h47y6PmfGnUlLqlxbAMbvGTQYzaW5VeEBNSe+iYURsqsFzNYAcPewOF8IkbQkTaI ELZKsarOK+VvjLWOIytEtNyhN5vQERYcz6q4SWi5kgC8yguNh/ykaYGNFfFvL4G/ 8aK4HusR++ZW5RNarZ6LBxq2ubOC1ePIkbrh/mWc/XkLJ3lq1+feZWyOcGaYijDY xw/2h6CkVCsmOMWTZAv/XDqtDMHpg1s= -----END CERTIFICATE-----Generated at Fri Sep 25 20:08:02 2026 by rpki-client