$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9179e4ff-328d-4753-b8f9-9149f799cfec/a8ea7227-453a-3848-bd2c-0630b771e232.roa File: a8ea7227-453a-3848-bd2c-0630b771e232.roa (raw, json) Hash identifier: mSVhuAq6IoLaAKwtWg0jleWD3Aw7uxnlq3FPRHOmoEU= Subject key identifier: 64:DB:6C:C2:CA:90:A6:76:68:E0:EE:B4:6E:52:0B:5A:BD:B6:DF:8B Certificate issuer: /CN=9179e4ff-328d-4753-b8f9-9149f799cfec Certificate serial: 010D0C9F4328584E89BF8DCCFCBCAA354C1CD520 Authority key identifier: 65:75:5C:AB:1B:D8:C1:B4:32:0D:B7:E7:BE:2B:40:A9:D7:97:B7:1C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9179e4ff-328d-4753-b8f9-9149f799cfec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9179e4ff-328d-4753-b8f9-9149f799cfec/a8ea7227-453a-3848-bd2c-0630b771e232.roa Signing time: Sat 18 Jul 2026 09:00:12 +0000 ROA not before: Sat 18 Jul 2026 09:00:12 +0000 ROA not after: Fri 16 Oct 2026 09:00:12 +0000 asID: 400298 IP address blocks: 172.99.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9179e4ff-328d-4753-b8f9-9149f799cfec/9179e4ff-328d-4753-b8f9-9149f799cfec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9179e4ff-328d-4753-b8f9-9149f799cfec/9179e4ff-328d-4753-b8f9-9149f799cfec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9179e4ff-328d-4753-b8f9-9149f799cfec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:89:bf:8d:cc:fc:bc:aa:35:4c:1c:d5:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9179e4ff-328d-4753-b8f9-9149f799cfec Validity Not Before: Jul 18 09:00:12 2026 GMT Not After : Oct 16 09:00:12 2026 GMT Subject: CN=ba878e1b-27c2-4af2-9af4-aa8eed3f82df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:d0:39:35:7c:00:81:f8:b1:0e:2e:33:0a:45: e7:83:46:18:b7:10:c9:78:14:56:66:35:7a:c3:98: fb:2b:72:01:6e:85:fe:95:5a:89:d3:72:7b:1f:8b: ef:9c:ea:17:07:d2:2a:28:7a:df:80:12:f1:f6:dd: 9f:13:4f:39:bc:af:01:b2:f6:28:83:aa:39:01:72: 66:73:da:17:1e:35:63:73:80:ac:54:98:65:04:47: d2:87:30:92:06:6e:ce:e3:4c:a4:1c:cd:99:12:44: d3:c7:e4:1b:dc:20:86:37:9f:2a:4c:72:a4:b9:fe: e1:cb:78:07:3a:c0:28:44:27:17:b6:f6:1d:11:81: 81:34:3d:1d:53:88:8d:2d:ec:28:bb:d9:a3:8e:b3: df:0e:b7:95:e3:d1:44:77:fa:ff:15:c9:11:aa:bb: 69:4a:31:d3:e3:c3:ac:e7:d4:7e:45:95:d6:83:41: c2:db:36:5e:52:5e:ab:fa:c9:1c:fe:cb:81:d2:76: db:d4:24:db:a8:1c:1e:1b:d4:6b:41:fd:c9:09:ba: 3d:0d:54:81:e1:1a:3f:24:96:87:6d:79:41:f4:51: 6b:e1:bd:92:eb:fb:34:f1:4e:69:02:ad:9a:c8:b9: 5b:8c:76:01:25:62:cd:33:02:cf:c7:27:b3:6f:78: 76:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:DB:6C:C2:CA:90:A6:76:68:E0:EE:B4:6E:52:0B:5A:BD:B6:DF:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9179e4ff-328d-4753-b8f9-9149f799cfec/a8ea7227-453a-3848-bd2c-0630b771e232.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9179e4ff-328d-4753-b8f9-9149f799cfec/9179e4ff-328d-4753-b8f9-9149f799cfec.crl X509v3 Authority Key Identifier: keyid:65:75:5C:AB:1B:D8:C1:B4:32:0D:B7:E7:BE:2B:40:A9:D7:97:B7:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9179e4ff-328d-4753-b8f9-9149f799cfec.cer sbgp-ipAddrBlock: critical IPv4: 172.99.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:f9:ff:02:73:e4:30:dc:36:47:24:cc:73:b6:c7:f4:bf:be: fa:ea:72:cf:83:21:df:66:bd:10:25:b3:76:fd:32:3d:aa:27: 25:d3:ee:37:a9:c4:81:ff:44:b3:65:86:84:3d:73:90:ad:9c: 84:b0:5e:ad:91:cd:5c:d7:42:06:d7:d7:24:84:e4:0d:d2:8a: 4e:2d:0a:bb:d6:59:c6:82:1d:8f:d0:a0:f2:ed:25:a2:4c:f3: 21:6b:64:e0:3b:f7:37:66:1d:22:a9:a6:20:65:8c:a4:d1:4a: 36:e3:b8:b5:bf:d2:60:4f:f1:8c:bc:5f:a0:c5:24:f5:ab:c0: 5a:09:e4:86:95:c1:46:65:02:0f:3f:d5:05:7f:c8:2a:ad:8d: ec:59:01:53:61:c3:46:6f:bc:f8:9e:49:42:8d:30:97:24:08: 7a:ab:b2:4e:26:e3:31:f7:95:b4:d2:1b:73:78:4e:ac:32:11: 92:6d:28:3e:bf:7f:ac:d7:a1:44:62:78:8a:3d:c9:ac:ef:2b: 82:2e:b9:3c:aa:50:30:1a:5f:0b:61:9a:4c:eb:86:77:5d:c2: 65:1e:a5:62:ff:0d:f3:21:d7:d2:46:c6:9f:25:f3:4d:40:35: 87:f7:58:c7:8f:90:c6:cb:2d:81:9a:62:81:86:a2:4b:f6:2c: 1f:5a:ef:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6Jv43M/LyqNUwc1SAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE3OWU0ZmYtMzI4ZC00NzUzLWI4ZjktOTE0OWY3OTlj ZmVjMB4XDTI2MDcxODA5MDAxMloXDTI2MTAxNjA5MDAxMlowLzEtMCsGA1UEAxMk YmE4NzhlMWItMjdjMi00YWYyLTlhZjQtYWE4ZWVkM2Y4MmRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldA5NXwAgfixDi4zCkXng0YYtxDJeBRWZjV6 w5j7K3IBboX+lVqJ03J7H4vvnOoXB9IqKHrfgBLx9t2fE085vK8BsvYog6o5AXJm c9oXHjVjc4CsVJhlBEfShzCSBm7O40ykHM2ZEkTTx+Qb3CCGN58qTHKkuf7hy3gH OsAoRCcXtvYdEYGBND0dU4iNLewou9mjjrPfDreV49FEd/r/FckRqrtpSjHT48Os 59R+RZXWg0HC2zZeUl6r+skc/suB0nbb1CTbqBweG9RrQf3JCbo9DVSB4Ro/JJaH bXlB9FFr4b2S6/s08U5pAq2ayLlbjHYBJWLNMwLPxyezb3h25wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGTbbMLKkKZ2aODutG5SC1q9tt+LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85MTc5 ZTRmZi0zMjhkLTQ3NTMtYjhmOS05MTQ5Zjc5OWNmZWMvYThlYTcyMjctNDUzYS0z ODQ4LWJkMmMtMDYzMGI3NzFlMjMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTE3OWU0ZmYtMzI4ZC00NzUzLWI4 ZjktOTE0OWY3OTljZmVjLzkxNzllNGZmLTMyOGQtNDc1My1iOGY5LTkxNDlmNzk5 Y2ZlYy5jcmwwHwYDVR0jBBgwFoAUZXVcqxvYwbQyDbfnvitAqdeXtxwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85MTc5ZTRmZi0zMjhkLTQ3NTMtYjhmOS05MTQ5 Zjc5OWNmZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGP5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJL5/wJz5DDcNkckzHO2x/S/vvrqcs+DId9mvRAls3b9Mj2qJyXT7jep xIH/RLNlhoQ9c5CtnISwXq2RzVzXQgbX1ySE5A3Sik4tCrvWWcaCHY/QoPLtJaJM 8yFrZOA79zdmHSKppiBljKTRSjbjuLW/0mBP8Yy8X6DFJPWrwFoJ5IaVwUZlAg8/ 1QV/yCqtjexZAVNhw0ZvvPieSUKNMJckCHqrsk4m4zH3lbTSG3N4TqwyEZJtKD6/ f6zXoURieIo9yazvK4IuuTyqUDAaXwthmkzrhnddwmUepWL/DfMh19JGxp8l801A NYf3WMePkMbLLYGaYoGGokv2LB9a70k= -----END CERTIFICATE-----Generated at Fri Jul 24 04:52:33 2026 by rpki-client