$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99642cf5-82f7-4be3-a68e-1d29c5c2d012/6daae254-fc4c-33f1-8526-b102f2c43e1b.roa File: 6daae254-fc4c-33f1-8526-b102f2c43e1b.roa (raw, json) Hash identifier: yb4e7PTm8dJQKMBqY36V+TDSw7GS3peIF1R/u+1RJOg= Subject key identifier: BB:36:96:98:48:57:26:55:F9:A8:7E:3D:C2:86:04:4F:14:0E:3E:20 Certificate issuer: /CN=99642cf5-82f7-4be3-a68e-1d29c5c2d012 Certificate serial: 010D0C9F4328584EEEB74BABF9ED4458EAA415C0 Authority key identifier: 06:57:24:AF:C5:CB:A1:55:D8:EA:78:14:9C:25:BA:61:5C:7C:5E:DF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99642cf5-82f7-4be3-a68e-1d29c5c2d012.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99642cf5-82f7-4be3-a68e-1d29c5c2d012/6daae254-fc4c-33f1-8526-b102f2c43e1b.roa Signing time: Sun 23 Aug 2026 13:00:12 +0000 ROA not before: Sun 23 Aug 2026 13:00:12 +0000 ROA not after: Sat 21 Nov 2026 14:00:12 +0000 asID: 133199 IP address blocks: 172.98.60.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99642cf5-82f7-4be3-a68e-1d29c5c2d012/99642cf5-82f7-4be3-a68e-1d29c5c2d012.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99642cf5-82f7-4be3-a68e-1d29c5c2d012/99642cf5-82f7-4be3-a68e-1d29c5c2d012.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99642cf5-82f7-4be3-a68e-1d29c5c2d012.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ee:b7:4b:ab:f9:ed:44:58:ea:a4:15:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99642cf5-82f7-4be3-a68e-1d29c5c2d012 Validity Not Before: Aug 23 13:00:12 2026 GMT Not After : Nov 21 14:00:12 2026 GMT Subject: CN=257eff56-d5cc-4604-a6d1-dc2a92758781 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:48:d0:63:19:84:d0:ed:d7:a5:0d:2d:2a:ee: 6c:f6:4d:53:56:33:ad:60:d3:ee:05:72:a6:b0:36: ed:f3:02:e1:4e:39:50:46:9e:a9:8a:b1:ea:1f:6e: a6:39:fa:08:c5:63:8a:7e:f8:0d:c9:cc:13:01:1a: c9:4f:38:b8:50:a2:ae:06:5f:08:a5:5b:88:45:8f: c6:16:ac:0e:a3:b6:70:21:d5:89:6f:1d:34:a5:14: e3:ca:5e:f9:48:a9:8e:6c:ae:50:70:e8:5b:78:6e: 8c:cc:aa:55:eb:70:58:61:fb:31:80:45:da:aa:0a: c7:e9:db:22:20:12:c9:86:76:6d:7e:b8:31:c1:d0: a3:28:d3:d7:4b:15:94:1c:ed:8f:c5:80:72:55:bf: e2:06:0f:9e:63:c3:43:aa:b6:bf:8f:d3:c6:e9:a0: df:b1:d6:da:97:26:05:d3:39:10:52:63:c4:1b:a5: 93:e5:25:a8:63:39:c7:79:8a:1b:cc:85:fe:8a:96: 5a:e6:df:c0:f9:7b:1f:5a:ab:0f:73:90:6a:aa:06: 5d:42:0a:62:9e:36:dd:9c:d1:86:7d:54:02:47:58: 28:8c:eb:d2:ab:2f:51:fc:08:1b:81:d7:e3:8d:72: aa:25:e2:3c:65:c7:01:8f:35:1e:0b:cd:ba:f1:c9: fd:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:36:96:98:48:57:26:55:F9:A8:7E:3D:C2:86:04:4F:14:0E:3E:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99642cf5-82f7-4be3-a68e-1d29c5c2d012/6daae254-fc4c-33f1-8526-b102f2c43e1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99642cf5-82f7-4be3-a68e-1d29c5c2d012/99642cf5-82f7-4be3-a68e-1d29c5c2d012.crl X509v3 Authority Key Identifier: keyid:06:57:24:AF:C5:CB:A1:55:D8:EA:78:14:9C:25:BA:61:5C:7C:5E:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99642cf5-82f7-4be3-a68e-1d29c5c2d012.cer sbgp-ipAddrBlock: critical IPv4: 172.98.60.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:00:62:b2:0e:a1:ee:3c:62:9b:59:9a:05:42:eb:ee:d4:bc: c3:7b:ca:94:b9:1c:6c:e8:f1:83:40:9e:e0:e7:59:d4:40:22: fd:36:2a:c3:0d:66:63:1c:ef:a6:4d:b6:55:7e:82:7f:83:75: 63:34:fe:42:9e:96:6c:d4:34:b4:5c:e4:1e:31:54:fb:02:47: 96:69:1a:b7:5d:6a:fa:9b:d7:f4:f7:7a:ab:6c:fe:4d:bb:42: ee:ab:ea:81:14:23:f1:3f:20:54:47:70:55:2f:14:7e:02:19: 4e:f0:eb:8e:b2:26:61:3e:c5:eb:fc:02:2b:36:19:3a:f0:03: 8f:85:cc:c3:86:25:01:93:b8:ac:78:58:d7:f5:b6:4d:c4:66: a1:93:51:c1:bf:e7:9b:b5:91:74:a3:0e:44:15:1c:3d:9e:a8: 99:ea:f6:8e:f3:2e:95:c3:bd:aa:14:3a:33:b0:10:fb:42:7a: 25:1a:5e:65:f6:b4:41:73:5e:c5:c3:07:dc:bb:ee:47:9c:6f: 99:66:47:00:57:e2:1a:6a:d0:05:5e:cd:84:bd:1b:15:a6:39: 7b:06:ef:02:9a:c5:54:b7:2f:f4:46:80:a1:2a:8f:6f:8f:a9: dc:92:5b:b9:4f:50:aa:b0:d1:58:9c:98:3a:77:63:73:61:5e: ac:d6:e3:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7ut0ur+e1EWOqkFcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk2NDJjZjUtODJmNy00YmUzLWE2OGUtMWQyOWM1YzJk MDEyMB4XDTI2MDgyMzEzMDAxMloXDTI2MTEyMTE0MDAxMlowLzEtMCsGA1UEAxMk MjU3ZWZmNTYtZDVjYy00NjA0LWE2ZDEtZGMyYTkyNzU4NzgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEjQYxmE0O3XpQ0tKu5s9k1TVjOtYNPuBXKm sDbt8wLhTjlQRp6pirHqH26mOfoIxWOKfvgNycwTARrJTzi4UKKuBl8IpVuIRY/G FqwOo7ZwIdWJbx00pRTjyl75SKmObK5QcOhbeG6MzKpV63BYYfsxgEXaqgrH6dsi IBLJhnZtfrgxwdCjKNPXSxWUHO2PxYByVb/iBg+eY8NDqra/j9PG6aDfsdbalyYF 0zkQUmPEG6WT5SWoYznHeYobzIX+ipZa5t/A+XsfWqsPc5BqqgZdQgpinjbdnNGG fVQCR1gojOvSqy9R/AgbgdfjjXKqJeI8ZccBjzUeC8268cn9ewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLs2lphIVyZV+ah+PcKGBE8UDj4gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85OTY0 MmNmNS04MmY3LTRiZTMtYTY4ZS0xZDI5YzVjMmQwMTIvNmRhYWUyNTQtZmM0Yy0z M2YxLTg1MjYtYjEwMmYyYzQzZTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTk2NDJjZjUtODJmNy00YmUzLWE2 OGUtMWQyOWM1YzJkMDEyLzk5NjQyY2Y1LTgyZjctNGJlMy1hNjhlLTFkMjljNWMy ZDAxMi5jcmwwHwYDVR0jBBgwFoAUBlckr8XLoVXY6ngUnCW6YVx8Xt8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85OTY0MmNmNS04MmY3LTRiZTMtYTY4ZS0xZDI5 YzVjMmQwMTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrGI8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHcAYrIOoe48YptZmgVC6+7UvMN7ypS5HGzo8YNAnuDnWdRAIv02KsMN ZmMc76ZNtlV+gn+DdWM0/kKelmzUNLRc5B4xVPsCR5ZpGrddavqb1/T3eqts/k27 Qu6r6oEUI/E/IFRHcFUvFH4CGU7w646yJmE+xev8Ais2GTrwA4+FzMOGJQGTuKx4 WNf1tk3EZqGTUcG/55u1kXSjDkQVHD2eqJnq9o7zLpXDvaoUOjOwEPtCeiUaXmX2 tEFzXsXDB9y77kecb5lmRwBX4hpq0AVezYS9GxWmOXsG7wKaxVS3L/RGgKEqj2+P qdySW7lPUKqw0VicmDp3Y3NhXqzW4xc= -----END CERTIFICATE-----Generated at Tue Sep 22 08:23:15 2026 by rpki-client