$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f1d5ecd-8770-46a2-b7c8-251b564b9e28/3aa72ed7-e889-35b8-9416-168e2eae8942.roa File: 3aa72ed7-e889-35b8-9416-168e2eae8942.roa (raw, json) Hash identifier: aYwmXl91an53U/Fr6t5HK3T24Jl13HIGZfcBrsu2rvg= Subject key identifier: 87:47:35:DF:20:55:BE:FE:DF:3A:E5:82:8B:95:60:66:61:FC:C8:6B Certificate issuer: /CN=8f1d5ecd-8770-46a2-b7c8-251b564b9e28 Certificate serial: 010D0C9F4328584D9B85499EB77DFE6F13253C00 Authority key identifier: 00:89:07:A1:F7:83:66:C2:B3:3D:1A:F9:DD:73:98:F6:9A:AC:51:46 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f1d5ecd-8770-46a2-b7c8-251b564b9e28.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f1d5ecd-8770-46a2-b7c8-251b564b9e28/3aa72ed7-e889-35b8-9416-168e2eae8942.roa Signing time: Fri 24 Apr 2026 01:00:23 +0000 ROA not before: Fri 24 Apr 2026 01:00:23 +0000 ROA not after: Thu 23 Jul 2026 01:00:23 +0000 asID: 63083 IP address blocks: 172.99.176.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f1d5ecd-8770-46a2-b7c8-251b564b9e28/8f1d5ecd-8770-46a2-b7c8-251b564b9e28.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f1d5ecd-8770-46a2-b7c8-251b564b9e28/8f1d5ecd-8770-46a2-b7c8-251b564b9e28.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f1d5ecd-8770-46a2-b7c8-251b564b9e28.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9b:85:49:9e:b7:7d:fe:6f:13:25:3c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f1d5ecd-8770-46a2-b7c8-251b564b9e28 Validity Not Before: Apr 24 01:00:23 2026 GMT Not After : Jul 23 01:00:23 2026 GMT Subject: CN=3a1c67af-06da-4d0f-81e7-4e4358a088eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:5b:61:a8:b6:ff:18:34:b0:e0:53:a0:f3:f4: d2:67:20:58:5b:21:f9:39:b2:5d:9c:0d:b4:34:99: 91:5d:54:2d:2c:8e:d3:f1:1f:10:74:11:87:55:3e: cf:6a:b2:95:f2:83:c4:93:7b:8f:c1:00:68:05:0b: 64:00:15:1b:8f:3d:6d:0d:f3:a9:d6:e7:56:a9:70: bb:80:83:d5:87:88:ae:d8:e4:cf:14:ec:93:57:37: c2:b5:b7:0f:f0:01:5e:6f:6f:aa:16:56:07:e2:c9: 7f:21:00:69:91:f3:23:65:1d:52:fc:af:d7:11:3d: 59:08:fa:b7:64:63:c2:00:27:f9:c5:1c:6a:df:2f: d7:f7:dc:4e:04:1b:35:58:2f:f9:4c:01:90:98:ed: b1:25:22:a7:08:35:b9:d8:bc:9f:6d:97:1c:b5:80: 2c:7d:6c:0d:b6:b6:d0:bb:6b:90:ec:a8:77:46:6c: 09:05:cd:67:b3:34:d0:28:4a:6c:cd:1a:79:87:77: b7:2d:76:79:de:e4:a6:6d:67:61:b3:11:af:12:be: 6d:34:8d:8e:5b:39:d1:aa:3c:86:26:25:2f:16:2d: c5:f0:75:5b:29:e7:02:2f:b6:da:67:17:70:a2:55: 1e:70:3a:95:0a:28:7e:74:7b:db:a8:84:d4:d2:5a: 44:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:47:35:DF:20:55:BE:FE:DF:3A:E5:82:8B:95:60:66:61:FC:C8:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f1d5ecd-8770-46a2-b7c8-251b564b9e28/3aa72ed7-e889-35b8-9416-168e2eae8942.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f1d5ecd-8770-46a2-b7c8-251b564b9e28/8f1d5ecd-8770-46a2-b7c8-251b564b9e28.crl X509v3 Authority Key Identifier: keyid:00:89:07:A1:F7:83:66:C2:B3:3D:1A:F9:DD:73:98:F6:9A:AC:51:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f1d5ecd-8770-46a2-b7c8-251b564b9e28.cer sbgp-ipAddrBlock: critical IPv4: 172.99.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:6a:0c:46:e9:7b:16:7c:6a:b7:c1:a8:82:3e:ab:82:61:bd: 63:c2:17:e2:ff:22:cb:f2:29:0a:cb:0e:0b:e6:16:7e:96:07: 5b:8e:bd:aa:68:4c:29:bf:9c:14:20:de:72:91:6e:32:fd:72: 2a:5c:3d:73:68:f2:16:fc:d5:a5:8b:73:c2:1f:c6:b5:ed:96: dd:80:52:d5:78:71:5d:37:ba:f7:71:93:2e:e4:a7:08:87:4d: 3a:33:17:08:91:ee:fc:60:71:38:8e:db:f1:bb:e0:0e:76:fe: 2f:29:33:5b:d3:46:18:a0:09:f8:11:b6:71:1e:ce:2e:86:4f: 9c:36:76:51:99:8f:20:fb:91:f4:9b:bd:66:5b:fd:91:05:87: 67:3a:6d:86:7a:a9:83:7a:44:20:f8:21:a7:7f:43:61:b3:a7: 68:68:5d:e7:08:65:01:9e:41:e7:96:70:a8:4b:67:42:67:0f: cc:03:37:d2:16:61:7c:62:ab:1d:9f:8b:7d:e2:0a:39:38:06: 4d:a7:09:62:e1:12:0c:e0:ed:d0:72:17:a2:0c:1d:74:d8:b2: b8:e2:b7:69:cf:6e:b8:58:0e:28:74:42:1c:98:88:0c:2e:5f: 82:3d:40:cf:6e:c2:76:f2:91:8e:2e:cc:e0:85:64:df:9e:1f: dd:86:cb:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2bhUmet33+bxMlPAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGYxZDVlY2QtODc3MC00NmEyLWI3YzgtMjUxYjU2NGI5 ZTI4MB4XDTI2MDQyNDAxMDAyM1oXDTI2MDcyMzAxMDAyM1owLzEtMCsGA1UEAxMk M2ExYzY3YWYtMDZkYS00ZDBmLTgxZTctNGU0MzU4YTA4OGViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhFthqLb/GDSw4FOg8/TSZyBYWyH5ObJdnA20 NJmRXVQtLI7T8R8QdBGHVT7ParKV8oPEk3uPwQBoBQtkABUbjz1tDfOp1udWqXC7 gIPVh4iu2OTPFOyTVzfCtbcP8AFeb2+qFlYH4sl/IQBpkfMjZR1S/K/XET1ZCPq3 ZGPCACf5xRxq3y/X99xOBBs1WC/5TAGQmO2xJSKnCDW52LyfbZcctYAsfWwNtrbQ u2uQ7Kh3RmwJBc1nszTQKEpszRp5h3e3LXZ53uSmbWdhsxGvEr5tNI2OWznRqjyG JiUvFi3F8HVbKecCL7baZxdwolUecDqVCih+dHvbqITU0lpEMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIdHNd8gVb7+3zrlgouVYGZh/MhrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy84ZjFk NWVjZC04NzcwLTQ2YTItYjdjOC0yNTFiNTY0YjllMjgvM2FhNzJlZDctZTg4OS0z NWI4LTk0MTYtMTY4ZTJlYWU4OTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvOGYxZDVlY2QtODc3MC00NmEyLWI3 YzgtMjUxYjU2NGI5ZTI4LzhmMWQ1ZWNkLTg3NzAtNDZhMi1iN2M4LTI1MWI1NjRi OWUyOC5jcmwwHwYDVR0jBBgwFoAUAIkHofeDZsKzPRr53XOY9pqsUUYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy84ZjFkNWVjZC04NzcwLTQ2YTItYjdjOC0yNTFi NTY0YjllMjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrGOwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH5qDEbpexZ8arfBqII+q4JhvWPCF+L/IsvyKQrLDgvmFn6WB1uOvapo TCm/nBQg3nKRbjL9cipcPXNo8hb81aWLc8IfxrXtlt2AUtV4cV03uvdxky7kpwiH TTozFwiR7vxgcTiO2/G74A52/i8pM1vTRhigCfgRtnEezi6GT5w2dlGZjyD7kfSb vWZb/ZEFh2c6bYZ6qYN6RCD4Iad/Q2Gzp2hoXecIZQGeQeeWcKhLZ0JnD8wDN9IW YXxiqx2fi33iCjk4Bk2nCWLhEgzg7dByF6IMHXTYsrjit2nPbrhYDih0QhyYiAwu X4I9QM9uwnbykY4uzOCFZN+eH92Gy4I= -----END CERTIFICATE-----Generated at Wed May 13 09:10:28 2026 by rpki-client