$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f1d5ecd-8770-46a2-b7c8-251b564b9e28/3aa72ed7-e889-35b8-9416-168e2eae8942.roa File: 3aa72ed7-e889-35b8-9416-168e2eae8942.roa (raw, json) Hash identifier: yHf97ZusBvNs13+kT0wTHJ6LjfmtVM+tsfub6iuMf4k= Subject key identifier: 70:22:7A:BD:53:E8:89:81:4F:E8:5B:AB:A1:1B:B9:52:65:B0:D9:62 Certificate issuer: /CN=8f1d5ecd-8770-46a2-b7c8-251b564b9e28 Certificate serial: 010D0C9F4328584E7BCA233B68089D0049C0CB60 Authority key identifier: 00:89:07:A1:F7:83:66:C2:B3:3D:1A:F9:DD:73:98:F6:9A:AC:51:46 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f1d5ecd-8770-46a2-b7c8-251b564b9e28.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f1d5ecd-8770-46a2-b7c8-251b564b9e28/3aa72ed7-e889-35b8-9416-168e2eae8942.roa Signing time: Mon 13 Jul 2026 09:00:12 +0000 ROA not before: Mon 13 Jul 2026 09:00:12 +0000 ROA not after: Sun 11 Oct 2026 09:00:12 +0000 asID: 63083 IP address blocks: 172.99.176.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f1d5ecd-8770-46a2-b7c8-251b564b9e28/8f1d5ecd-8770-46a2-b7c8-251b564b9e28.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f1d5ecd-8770-46a2-b7c8-251b564b9e28/8f1d5ecd-8770-46a2-b7c8-251b564b9e28.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f1d5ecd-8770-46a2-b7c8-251b564b9e28.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7b:ca:23:3b:68:08:9d:00:49:c0:cb:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f1d5ecd-8770-46a2-b7c8-251b564b9e28 Validity Not Before: Jul 13 09:00:12 2026 GMT Not After : Oct 11 09:00:12 2026 GMT Subject: CN=0407c1ff-31fe-4135-94ce-5608a61302a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:9b:1b:56:ef:8f:d3:a1:4f:98:78:57:3e:b4: 5d:cd:d7:1d:03:5b:d0:f3:47:85:75:99:0b:bc:23: 2c:33:55:2e:59:65:56:1a:9c:cc:f0:06:c1:cf:c9: 77:04:a0:7b:0a:df:a3:12:73:ed:91:0f:10:83:18: 59:1f:da:ca:cb:84:e3:d5:ff:38:2f:1f:8e:80:10: 77:37:b4:ca:0f:aa:00:61:97:fe:6e:ab:05:3f:0c: 84:cb:a4:72:f3:e0:bd:2f:8a:8d:fc:9c:7e:26:98: e2:a7:a3:89:5e:20:7d:2e:cc:40:06:fa:b3:bd:cf: 6f:8f:4f:89:8f:8a:c1:dc:ce:76:20:5d:5d:f3:72: 2e:72:cf:05:b9:5a:68:f0:05:bc:c0:3d:1e:bc:1d: db:f1:08:f6:f3:0d:5d:8d:ec:37:2a:31:a1:2e:76: 18:3b:a7:71:3a:de:f1:3b:e8:43:75:e6:02:89:cb: c9:c0:62:28:a1:1b:f7:f4:dc:0b:fc:e6:20:15:9b: 23:5b:27:2f:76:65:a8:90:74:1d:72:2a:c0:cd:5f: 4e:17:e2:39:8f:a4:f3:7d:68:f1:89:1d:fb:bf:b5: 03:4b:cd:f2:51:89:07:cb:f2:11:11:64:ff:9a:7e: ad:09:f5:9b:52:6d:cc:fc:b4:d0:6f:36:51:fb:82: 75:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:22:7A:BD:53:E8:89:81:4F:E8:5B:AB:A1:1B:B9:52:65:B0:D9:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f1d5ecd-8770-46a2-b7c8-251b564b9e28/3aa72ed7-e889-35b8-9416-168e2eae8942.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f1d5ecd-8770-46a2-b7c8-251b564b9e28/8f1d5ecd-8770-46a2-b7c8-251b564b9e28.crl X509v3 Authority Key Identifier: keyid:00:89:07:A1:F7:83:66:C2:B3:3D:1A:F9:DD:73:98:F6:9A:AC:51:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f1d5ecd-8770-46a2-b7c8-251b564b9e28.cer sbgp-ipAddrBlock: critical IPv4: 172.99.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:d9:42:8e:03:43:de:38:f1:4a:74:9e:3c:09:5a:b8:91:b1: ac:64:ad:31:3c:37:ad:5b:ee:3b:01:44:8c:48:13:9b:b3:d5: aa:f3:4f:44:34:c9:36:e4:67:df:e6:fe:55:4c:91:d5:ac:18: e2:51:d7:c2:41:98:7d:3a:db:6c:05:96:c1:55:fc:9d:f2:8a: 7b:b0:8a:b2:2e:59:8b:c7:8d:cb:fc:33:7e:81:86:02:74:49: 97:6e:a2:86:98:d3:ae:11:b0:f8:72:45:94:ba:00:1d:44:63: a4:4d:74:b4:9e:73:3c:58:6a:a3:61:a2:b0:4e:5b:1e:af:de: 95:9f:d4:fb:21:ec:0b:af:be:e8:68:2f:51:57:a5:c2:71:c0: 5d:82:03:0c:5a:01:a8:19:ee:35:98:cc:17:c6:b5:8c:68:42: a0:3f:4d:67:7b:68:a4:1b:0b:55:18:d4:07:bd:1d:e4:85:4f: 67:97:14:e4:4d:71:68:49:94:63:29:00:64:85:e5:36:36:30: b8:d1:2f:bb:59:97:98:5f:35:fc:cf:44:27:6d:83:95:cb:41: 82:21:24:f0:7f:09:8b:aa:1f:0b:75:c7:7d:a5:d6:44:77:7d: d2:12:12:35:19:1f:bc:57:b1:4e:3b:b9:fb:b1:b6:c1:4f:47: 22:73:e0:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE57yiM7aAidAEnAy2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGYxZDVlY2QtODc3MC00NmEyLWI3YzgtMjUxYjU2NGI5 ZTI4MB4XDTI2MDcxMzA5MDAxMloXDTI2MTAxMTA5MDAxMlowLzEtMCsGA1UEAxMk MDQwN2MxZmYtMzFmZS00MTM1LTk0Y2UtNTYwOGE2MTMwMmE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJsbVu+P06FPmHhXPrRdzdcdA1vQ80eFdZkL vCMsM1UuWWVWGpzM8AbBz8l3BKB7Ct+jEnPtkQ8QgxhZH9rKy4Tj1f84Lx+OgBB3 N7TKD6oAYZf+bqsFPwyEy6Ry8+C9L4qN/Jx+Jpjip6OJXiB9LsxABvqzvc9vj0+J j4rB3M52IF1d83Iucs8FuVpo8AW8wD0evB3b8Qj28w1djew3KjGhLnYYO6dxOt7x O+hDdeYCicvJwGIooRv39NwL/OYgFZsjWycvdmWokHQdcirAzV9OF+I5j6TzfWjx iR37v7UDS83yUYkHy/IREWT/mn6tCfWbUm3M/LTQbzZR+4J16wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHAier1T6ImBT+hbq6EbuVJlsNliMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy84ZjFk NWVjZC04NzcwLTQ2YTItYjdjOC0yNTFiNTY0YjllMjgvM2FhNzJlZDctZTg4OS0z NWI4LTk0MTYtMTY4ZTJlYWU4OTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvOGYxZDVlY2QtODc3MC00NmEyLWI3 YzgtMjUxYjU2NGI5ZTI4LzhmMWQ1ZWNkLTg3NzAtNDZhMi1iN2M4LTI1MWI1NjRi OWUyOC5jcmwwHwYDVR0jBBgwFoAUAIkHofeDZsKzPRr53XOY9pqsUUYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy84ZjFkNWVjZC04NzcwLTQ2YTItYjdjOC0yNTFi NTY0YjllMjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrGOwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEPZQo4DQ9448Up0njwJWriRsaxkrTE8N61b7jsBRIxIE5uz1arzT0Q0 yTbkZ9/m/lVMkdWsGOJR18JBmH0622wFlsFV/J3yinuwirIuWYvHjcv8M36BhgJ0 SZduooaY064RsPhyRZS6AB1EY6RNdLSeczxYaqNhorBOWx6v3pWf1Psh7Auvvuho L1FXpcJxwF2CAwxaAagZ7jWYzBfGtYxoQqA/TWd7aKQbC1UY1Ae9HeSFT2eXFORN cWhJlGMpAGSF5TY2MLjRL7tZl5hfNfzPRCdtg5XLQYIhJPB/CYuqHwt1x32l1kR3 fdISEjUZH7xXsU47ufuxtsFPRyJz4Bw= -----END CERTIFICATE-----Generated at Fri Jul 24 09:00:35 2026 by rpki-client