$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/9deb75fd-d40d-3461-bd99-01696f038720.roa File: 9deb75fd-d40d-3461-bd99-01696f038720.roa (raw, json) Hash identifier: AyIClyI3UiM/pEWxxMiq5ltqjn35ul3BTKKA2QzFECM= Subject key identifier: 6A:B0:B3:D5:99:E2:C7:D5:DA:BA:DF:84:63:57:A8:68:2B:83:A1:88 Certificate issuer: /CN=99cd086f-b993-42d9-8f47-c65df74d693b Certificate serial: 010D0C9F4328584D06479D59133AC33DDFB27640 Authority key identifier: C3:7C:6E:74:65:2F:44:92:72:76:3A:6D:8C:36:51:7C:69:F5:55:F7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/9deb75fd-d40d-3461-bd99-01696f038720.roa Signing time: Sun 01 Mar 2026 14:00:41 +0000 ROA not before: Sun 01 Mar 2026 14:00:41 +0000 ROA not after: Sat 30 May 2026 13:00:41 +0000 asID: 34689 IP address blocks: 162.254.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/99cd086f-b993-42d9-8f47-c65df74d693b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/99cd086f-b993-42d9-8f47-c65df74d693b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:06:47:9d:59:13:3a:c3:3d:df:b2:76:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99cd086f-b993-42d9-8f47-c65df74d693b Validity Not Before: Mar 1 14:00:41 2026 GMT Not After : May 30 13:00:41 2026 GMT Subject: CN=a7228c8a-5b40-4d75-8f81-f21f385eeb62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:0e:d8:c6:cc:a0:f4:c1:f9:e1:a9:a2:7b:ef: 39:74:7e:00:a2:cb:c8:43:f3:ad:4d:e9:35:56:fa: c6:ee:18:e5:c6:55:d8:8a:21:05:c4:e8:f9:e5:5a: 24:84:91:2a:de:1a:f1:b6:3f:8b:ca:4d:84:3a:56: c6:fe:0f:a9:db:6d:a8:09:5f:f8:a2:32:53:87:0e: 01:ed:60:58:d1:26:ab:e2:0b:e4:58:03:1a:ac:f0: f0:85:d9:bc:f9:52:89:4e:be:2e:b5:22:64:4c:29: d1:81:45:44:f3:53:cd:d5:a7:e4:b2:f0:7f:76:e1: 0d:83:e9:46:c3:38:65:a5:24:2b:23:c4:bc:f1:23: 87:ce:bb:78:02:14:d6:3b:af:dc:5e:c2:8c:bc:95: 5b:a2:42:8a:ba:ee:e1:d6:a9:72:0c:55:6f:19:67: c8:67:4f:ae:fb:0a:b0:81:3e:5f:0b:55:15:80:dd: 78:a0:e5:da:f8:38:23:86:23:03:66:2a:34:c2:65: ae:f9:1a:7c:fa:3a:34:5e:2f:53:4c:02:48:b4:7b: 27:5f:7e:ef:eb:c8:a5:50:34:38:a2:9e:42:9b:73: 41:af:67:ca:33:05:0c:49:62:62:7b:82:a1:f4:bd: f2:0f:64:c4:e3:8e:2e:a7:68:82:87:89:b8:10:92: f5:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:B0:B3:D5:99:E2:C7:D5:DA:BA:DF:84:63:57:A8:68:2B:83:A1:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/9deb75fd-d40d-3461-bd99-01696f038720.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/99cd086f-b993-42d9-8f47-c65df74d693b.crl X509v3 Authority Key Identifier: keyid:C3:7C:6E:74:65:2F:44:92:72:76:3A:6D:8C:36:51:7C:69:F5:55:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b.cer sbgp-ipAddrBlock: critical IPv4: 162.254.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:e2:1d:81:b4:8f:02:50:f8:f5:03:5a:8e:dd:c4:57:fe:b1: c6:e8:33:73:96:57:23:e7:b8:8b:df:aa:80:5f:6a:97:bd:8d: 7c:09:d1:8d:f8:c1:b1:1a:f0:03:de:88:19:7d:72:23:9e:b6: bd:48:fb:95:1e:5e:f1:7c:2d:52:41:9f:10:70:79:aa:1b:39: e1:38:a8:d0:da:27:80:0e:b6:b9:74:82:2f:06:42:e9:ef:7d: f5:3c:39:51:71:d4:66:4d:33:85:b9:b0:62:2f:83:53:58:e6: 0f:26:37:f6:9e:5d:56:d3:bf:46:a3:98:fb:50:9a:49:cb:77: 55:67:44:85:f5:96:ba:57:7b:3e:68:99:ac:2f:e3:29:a6:c5: 1d:22:3f:35:14:07:84:4b:c2:ce:6b:38:0a:f7:de:29:eb:46: a7:19:c6:a8:f1:d0:05:27:8d:44:52:9c:37:55:db:9e:1a:0c: 09:b8:46:c1:b1:c3:4e:ca:53:f6:9b:4b:b4:60:9d:71:ba:56: 5e:eb:ff:e7:cc:1a:2c:4f:7c:67:77:18:0b:9a:e2:37:e9:b8: 87:c0:8b:ae:aa:81:14:56:77:cf:c4:d2:c4:c1:cd:5f:41:c6: 13:bb:40:58:36:12:6d:0a:6e:49:4d:46:1f:54:e1:9a:f4:bd: 30:35:0a:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0GR51ZEzrDPd+ydkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTljZDA4NmYtYjk5My00MmQ5LThmNDctYzY1ZGY3NGQ2 OTNiMB4XDTI2MDMwMTE0MDA0MVoXDTI2MDUzMDEzMDA0MVowLzEtMCsGA1UEAxMk YTcyMjhjOGEtNWI0MC00ZDc1LThmODEtZjIxZjM4NWVlYjYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoA7Yxsyg9MH54amie+85dH4AosvIQ/OtTek1 VvrG7hjlxlXYiiEFxOj55VokhJEq3hrxtj+Lyk2EOlbG/g+p222oCV/4ojJThw4B 7WBY0Sar4gvkWAMarPDwhdm8+VKJTr4utSJkTCnRgUVE81PN1afksvB/duENg+lG wzhlpSQrI8S88SOHzrt4AhTWO6/cXsKMvJVbokKKuu7h1qlyDFVvGWfIZ0+u+wqw gT5fC1UVgN14oOXa+DgjhiMDZio0wmWu+Rp8+jo0Xi9TTAJItHsnX37v68ilUDQ4 op5Cm3NBr2fKMwUMSWJie4Kh9L3yD2TE444up2iCh4m4EJL1GQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGqws9WZ4sfV2rrfhGNXqGgrg6GIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85OWNk MDg2Zi1iOTkzLTQyZDktOGY0Ny1jNjVkZjc0ZDY5M2IvOWRlYjc1ZmQtZDQwZC0z NDYxLWJkOTktMDE2OTZmMDM4NzIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTljZDA4NmYtYjk5My00MmQ5LThm NDctYzY1ZGY3NGQ2OTNiLzk5Y2QwODZmLWI5OTMtNDJkOS04ZjQ3LWM2NWRmNzRk NjkzYi5jcmwwHwYDVR0jBBgwFoAUw3xudGUvRJJydjptjDZRfGn1VfcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85OWNkMDg2Zi1iOTkzLTQyZDktOGY0Ny1jNjVk Zjc0ZDY5M2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAov5UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIDiHYG0jwJQ+PUDWo7dxFf+scboM3OWVyPnuIvfqoBfape9jXwJ0Y34 wbEa8APeiBl9ciOetr1I+5UeXvF8LVJBnxBweaobOeE4qNDaJ4AOtrl0gi8GQunv ffU8OVFx1GZNM4W5sGIvg1NY5g8mN/aeXVbTv0ajmPtQmknLd1VnRIX1lrpXez5o mawv4ymmxR0iPzUUB4RLws5rOAr33inrRqcZxqjx0AUnjURSnDdV254aDAm4RsGx w07KU/abS7RgnXG6Vl7r/+fMGixPfGd3GAua4jfpuIfAi66qgRRWd8/E0sTBzV9B xhO7QFg2Em0KbklNRh9U4Zr0vTA1CsA= -----END CERTIFICATE-----Generated at Mon Mar 2 17:09:36 2026 by rpki-client