$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d4ad7b43-1236-33d1-8170-8b2d8b2d8f7b.roa File: d4ad7b43-1236-33d1-8170-8b2d8b2d8f7b.roa (raw, json) Hash identifier: WlXLq9taUuzEfLs4ibO++fPTnk5srDZnBRoOCxfQakw= Subject key identifier: 2F:90:89:D8:6A:8B:31:F7:BE:C8:AA:D4:86:2B:A1:0D:44:5A:B0:96 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584EE7BCD27061C31B58558F8580 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d4ad7b43-1236-33d1-8170-8b2d8b2d8f7b.roa Signing time: Fri 21 Aug 2026 01:00:12 +0000 ROA not before: Fri 21 Aug 2026 01:00:12 +0000 ROA not after: Thu 19 Nov 2026 02:00:12 +0000 asID: 5650 IP address blocks: 172.99.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e7:bc:d2:70:61:c3:1b:58:55:8f:85:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 21 01:00:12 2026 GMT Not After : Nov 19 02:00:12 2026 GMT Subject: CN=9927870b-2a86-4335-a82a-decfcb0d1c71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:11:eb:db:06:a8:dd:85:35:f1:9a:0d:01:d1: 62:8c:83:0f:24:80:8b:8d:d5:e7:14:75:be:3a:c7: 36:41:2f:b1:38:6f:9f:b9:28:86:79:3d:0c:12:79: fc:2f:a5:25:69:86:87:f6:50:da:9e:4b:93:81:64: 51:24:be:5a:21:ed:a3:34:11:4a:4e:14:a3:8e:ff: 9f:12:6f:b6:db:b4:8c:72:d3:f4:dc:cf:21:ab:b5: 04:14:bb:02:ce:32:1f:24:a3:5a:7e:b6:b4:e9:a9: f3:9b:90:0b:16:d6:e7:12:80:86:04:3a:1e:20:aa: 10:1e:0e:ae:78:bd:d8:ff:8e:47:32:b3:9a:80:e8: 79:07:3d:05:84:d0:29:00:9f:e6:db:db:83:75:fb: cc:08:33:bf:a5:b1:06:dd:d1:4a:8e:9a:3e:87:b3: b2:3d:66:f5:d1:cf:b8:21:75:87:1a:fe:ff:59:38: 31:61:ff:04:90:60:c2:3c:75:60:cc:83:0e:88:b0: 96:ad:af:3f:3a:c0:2c:87:dc:75:a3:ff:37:c0:94: b5:3f:a0:08:b5:d7:e9:3d:81:c7:2f:3b:fa:78:46: 06:93:b0:81:d4:83:9c:e6:ab:3f:45:45:59:16:01: 7a:60:dc:3f:84:10:64:61:35:ed:04:49:ff:7b:65: f1:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:90:89:D8:6A:8B:31:F7:BE:C8:AA:D4:86:2B:A1:0D:44:5A:B0:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d4ad7b43-1236-33d1-8170-8b2d8b2d8f7b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 172.99.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:82:a6:b3:94:f3:cb:6c:93:f3:72:ba:e6:3f:66:85:1a:46: 43:78:e0:f7:8b:83:57:a1:81:35:dc:3c:40:78:4c:fe:09:ca: 6a:af:13:0e:97:48:c3:12:75:ec:9c:6c:ec:2d:a0:eb:3c:a8: 24:4f:3c:1b:b2:d5:85:fd:11:06:15:02:3f:8b:91:c6:7c:d5: 6e:7c:51:1f:ab:12:22:fc:40:26:73:e8:c7:c3:93:8a:d5:c1: 24:98:ec:b7:2a:88:29:56:db:67:85:a8:77:c2:33:23:06:23: 40:2f:87:d6:da:8e:6c:40:d6:51:54:53:7b:1a:ed:83:87:5c: ed:b1:a4:27:b2:99:96:2c:bf:ae:10:fa:67:3a:b7:21:b8:91: 03:ac:00:ad:64:4b:e7:95:8b:b1:7d:21:b9:38:c3:fe:d6:54: ba:59:6b:9c:ab:7b:c7:e3:9d:93:ea:73:92:3c:e1:ec:48:6d: 5a:6f:bf:46:33:69:2b:d0:0c:ed:47:58:2f:7c:db:c3:e9:c1: aa:c9:96:24:fb:75:ca:3f:19:85:d1:9d:1b:1e:6a:44:aa:89: 92:21:43:51:b0:be:b7:e8:c3:68:e7:6b:29:34:51:75:08:17: b8:10:45:e4:c0:4b:45:9b:7d:a3:a9:ce:cf:0e:de:6f:5f:e0: e3:02:73:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7nvNJwYcMbWFWPhYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDgyMTAxMDAxMloXDTI2MTExOTAyMDAxMlowLzEtMCsGA1UEAxMk OTkyNzg3MGItMmE4Ni00MzM1LWE4MmEtZGVjZmNiMGQxYzcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxHr2wao3YU18ZoNAdFijIMPJICLjdXnFHW+ Osc2QS+xOG+fuSiGeT0MEnn8L6UlaYaH9lDankuTgWRRJL5aIe2jNBFKThSjjv+f Em+227SMctP03M8hq7UEFLsCzjIfJKNafra06anzm5ALFtbnEoCGBDoeIKoQHg6u eL3Y/45HMrOagOh5Bz0FhNApAJ/m29uDdfvMCDO/pbEG3dFKjpo+h7OyPWb10c+4 IXWHGv7/WTgxYf8EkGDCPHVgzIMOiLCWra8/OsAsh9x1o/83wJS1P6AItdfpPYHH Lzv6eEYGk7CB1IOc5qs/RUVZFgF6YNw/hBBkYTXtBEn/e2XxwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC+QidhqizH3vsiq1IYroQ1EWrCWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZDRhZDdiNDMtMTIzNi0z M2QxLTgxNzAtOGIyZDhiMmQ4ZjdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrGMoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALSCprOU88tsk/NyuuY/ZoUaRkN44PeLg1ehgTXcPEB4TP4JymqvEw6X SMMSdeycbOwtoOs8qCRPPBuy1YX9EQYVAj+LkcZ81W58UR+rEiL8QCZz6MfDk4rV wSSY7LcqiClW22eFqHfCMyMGI0Avh9bajmxA1lFUU3sa7YOHXO2xpCeymZYsv64Q +mc6tyG4kQOsAK1kS+eVi7F9Ibk4w/7WVLpZa5yre8fjnZPqc5I84exIbVpvv0Yz aSvQDO1HWC9828PpwarJliT7dco/GYXRnRseakSqiZIhQ1Gwvrfow2jnayk0UXUI F7gQReTAS0WbfaOpzs8O3m9f4OMCc98= -----END CERTIFICATE-----Generated at Thu Sep 24 22:39:56 2026 by rpki-client