$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/2ab65280-fd1c-322e-bb70-8afda5598e79.roa File: 2ab65280-fd1c-322e-bb70-8afda5598e79.roa (raw, json) Hash identifier: xGeMoPGfMrWteI1Z1YsUNDRVDKjTfFcYt3MFCuHOnMc= Subject key identifier: 85:4C:3F:52:1F:D4:31:73:61:42:74:89:A8:1D:BA:1F:AE:06:17:E4 Certificate issuer: /CN=b386e256-2dc3-4d21-93b9-c253dcd37e4f Certificate serial: 010D0C9F4328584F0C0785EC99B894F3A378B730 Authority key identifier: F2:22:5C:07:C2:CC:A7:84:83:BD:D6:14:A6:AB:B3:79:EF:26:DE:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/2ab65280-fd1c-322e-bb70-8afda5598e79.roa Signing time: Thu 03 Sep 2026 01:00:12 +0000 ROA not before: Thu 03 Sep 2026 01:00:12 +0000 ROA not after: Wed 02 Dec 2026 02:00:12 +0000 asID: 402139 IP address blocks: 172.99.136.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0c:07:85:ec:99:b8:94:f3:a3:78:b7:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b386e256-2dc3-4d21-93b9-c253dcd37e4f Validity Not Before: Sep 3 01:00:12 2026 GMT Not After : Dec 2 02:00:12 2026 GMT Subject: CN=bb42a378-8caf-4f9a-9757-d56c93a8f9bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:58:d4:d6:00:a0:c9:a9:bd:f6:9f:22:17:f0: af:05:03:42:64:a8:b9:4a:1e:7d:8b:6b:f8:95:d9: 08:99:1d:b1:2c:5d:ec:a7:53:ad:54:92:55:b5:61: 6a:97:1f:87:60:d8:db:5a:2e:64:69:c1:68:5b:6e: df:44:a7:50:bb:39:7e:18:40:3e:b2:71:c6:7d:ab: c6:45:95:3a:ff:14:5c:98:f5:38:62:56:0b:13:8e: da:cc:1e:15:2e:62:c0:e0:2f:e5:01:17:85:0b:c0: d7:42:d7:dd:d9:cc:5b:83:f0:04:45:73:c2:a0:53: 0c:5b:ef:bc:95:1b:90:de:93:5c:a8:ed:ab:78:d0: f7:bb:3a:b7:db:d1:2c:f6:a0:00:06:bf:5d:23:81: f8:1e:91:18:94:ab:98:9f:d6:7f:59:a5:28:8a:a0: 7d:6f:6e:a5:06:59:14:fa:16:fc:ef:fd:95:e8:39: 08:2f:76:93:e8:c2:12:99:ae:2a:c3:9d:8c:5d:96: e1:8b:8b:be:cb:b4:17:9b:29:96:a3:a4:01:0a:54: 70:21:a4:89:55:9b:3d:a3:76:7e:83:74:47:c6:32: 1d:e8:6e:02:b8:2e:83:f7:01:cc:08:92:9c:81:bf: 18:73:c1:e5:d8:fd:a5:8b:04:9a:d2:e8:58:8c:65: 9b:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:4C:3F:52:1F:D4:31:73:61:42:74:89:A8:1D:BA:1F:AE:06:17:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/2ab65280-fd1c-322e-bb70-8afda5598e79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.crl X509v3 Authority Key Identifier: keyid:F2:22:5C:07:C2:CC:A7:84:83:BD:D6:14:A6:AB:B3:79:EF:26:DE:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer sbgp-ipAddrBlock: critical IPv4: 172.99.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:24:69:d0:3d:6b:54:1d:2e:51:51:32:7d:66:12:8b:1d:f3: b4:9d:e4:f7:2d:ad:47:61:50:66:7f:48:1c:49:ee:49:16:da: 3d:49:5e:0c:e9:3d:06:77:c9:4d:05:43:9f:ad:25:35:29:87: f1:79:96:a0:c3:19:77:6f:cc:1f:fd:15:3e:d4:b6:a7:7e:b7: e8:9c:fa:cf:35:a6:53:f2:67:f4:e8:e9:08:c9:8b:4f:ce:d6: 24:28:79:61:20:0e:58:f7:f9:20:30:f2:e2:7e:d9:cc:fb:15: 9f:fd:37:ff:45:52:21:56:b3:e3:d8:e9:a2:38:46:80:1c:99: ea:3e:bd:39:33:27:1b:5f:19:8e:61:18:54:e6:1b:71:80:72: 30:de:01:f6:23:ab:58:02:5d:3e:8b:79:52:c4:ae:79:7f:b0: 38:3e:c3:44:01:2a:5c:b0:c0:0e:63:97:ed:5b:e8:1f:f9:d7: e9:cd:5e:63:f6:9a:4d:3e:63:34:aa:45:f1:79:98:b9:6a:cd: 30:de:86:87:d1:e4:a6:5d:6c:55:50:5a:92:c5:5f:78:f7:d3: 8b:57:aa:a1:29:63:60:38:4f:b9:79:aa:f8:1b:83:47:64:cc: 0d:86:e2:3b:97:f5:8b:c7:fa:a1:4d:73:a1:93:41:79:b2:fe: a3:0d:2b:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8MB4XsmbiU86N4tzAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjM4NmUyNTYtMmRjMy00ZDIxLTkzYjktYzI1M2RjZDM3 ZTRmMB4XDTI2MDkwMzAxMDAxMloXDTI2MTIwMjAyMDAxMlowLzEtMCsGA1UEAxMk YmI0MmEzNzgtOGNhZi00ZjlhLTk3NTctZDU2YzkzYThmOWJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArljU1gCgyam99p8iF/CvBQNCZKi5Sh59i2v4 ldkImR2xLF3sp1OtVJJVtWFqlx+HYNjbWi5kacFoW27fRKdQuzl+GEA+snHGfavG RZU6/xRcmPU4YlYLE47azB4VLmLA4C/lAReFC8DXQtfd2cxbg/AERXPCoFMMW++8 lRuQ3pNcqO2reND3uzq329Es9qAABr9dI4H4HpEYlKuYn9Z/WaUoiqB9b26lBlkU +hb87/2V6DkIL3aT6MISma4qw52MXZbhi4u+y7QXmymWo6QBClRwIaSJVZs9o3Z+ g3RHxjId6G4CuC6D9wHMCJKcgb8Yc8Hl2P2liwSa0uhYjGWbswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIVMP1If1DFzYUJ0iagduh+uBhfkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iMzg2 ZTI1Ni0yZGMzLTRkMjEtOTNiOS1jMjUzZGNkMzdlNGYvMmFiNjUyODAtZmQxYy0z MjJlLWJiNzAtOGFmZGE1NTk4ZTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjM4NmUyNTYtMmRjMy00ZDIxLTkz YjktYzI1M2RjZDM3ZTRmL2IzODZlMjU2LTJkYzMtNGQyMS05M2I5LWMyNTNkY2Qz N2U0Zi5jcmwwHwYDVR0jBBgwFoAU8iJcB8LMp4SDvdYUpquzee8m3jwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iMzg2ZTI1Ni0yZGMzLTRkMjEtOTNiOS1jMjUz ZGNkMzdlNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrGOIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAskadA9a1QdLlFRMn1mEosd87Sd5PctrUdhUGZ/SBxJ7kkW2j1JXgzp PQZ3yU0FQ5+tJTUph/F5lqDDGXdvzB/9FT7Utqd+t+ic+s81plPyZ/To6QjJi0/O 1iQoeWEgDlj3+SAw8uJ+2cz7FZ/9N/9FUiFWs+PY6aI4RoAcmeo+vTkzJxtfGY5h GFTmG3GAcjDeAfYjq1gCXT6LeVLErnl/sDg+w0QBKlywwA5jl+1b6B/51+nNXmP2 mk0+YzSqRfF5mLlqzTDehofR5KZdbFVQWpLFX3j304tXqqEpY2A4T7l5qvgbg0dk zA2G4juX9YvH+qFNc6GTQXmy/qMNKws= -----END CERTIFICATE-----Generated at Thu Sep 24 13:10:34 2026 by rpki-client