$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/c9253b4b-02ac-381d-891b-c6a9176dfdc5.roa File: c9253b4b-02ac-381d-891b-c6a9176dfdc5.roa (raw, json) Hash identifier: FawdH4zi4IHE75eF8j2hdgWkoHi3BxKi4ua3aeFt14U= Subject key identifier: 62:4D:6F:BF:DB:96:67:0B:EE:02:03:26:B3:42:1F:66:A8:D8:6C:9B Certificate issuer: /CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4 Certificate serial: 010D0C9F4328584F093CE7C35E544F11A1A1E780 Authority key identifier: 65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/c9253b4b-02ac-381d-891b-c6a9176dfdc5.roa Signing time: Wed 02 Sep 2026 01:00:12 +0000 ROA not before: Wed 02 Sep 2026 01:00:12 +0000 ROA not after: Tue 01 Dec 2026 02:00:12 +0000 asID: 16509 IP address blocks: 199.45.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:3c:e7:c3:5e:54:4f:11:a1:a1:e7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4 Validity Not Before: Sep 2 01:00:12 2026 GMT Not After : Dec 1 02:00:12 2026 GMT Subject: CN=e842b65f-7afb-4842-8d5d-93b40e4c7621 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:85:cb:20:57:e3:ce:9c:2a:b4:bf:0e:86:c3: 6c:5f:55:d9:6e:cd:5e:f4:31:4b:2a:59:10:ef:16: 53:e0:85:db:c7:ea:c3:48:3a:79:b6:e7:6c:7a:b2: d3:2c:c4:15:f4:9c:24:74:d4:2b:71:a0:13:c4:6c: 9d:54:51:be:c3:50:e6:eb:a3:5e:8a:33:89:06:f0: f3:ba:fa:ef:93:6c:ca:e0:95:0f:52:9d:e1:b6:d6: 36:6a:c4:d2:84:82:ec:fa:fa:10:cc:2f:71:d1:e9: 57:a1:a1:dc:e0:f3:91:5f:e0:9c:02:ce:a6:81:7e: 9c:ab:d3:ab:04:7c:4d:42:a4:2e:51:0f:51:d2:94: bc:2b:b3:4a:b6:70:58:7e:ee:20:b9:86:ca:5f:68: ff:39:7b:c7:e4:83:ec:fe:32:29:e6:ca:eb:f2:72: 38:6d:13:5a:ba:22:13:7a:74:ba:c0:1b:f8:f8:35: 45:25:94:8a:2d:cf:c1:a4:3e:60:17:53:d9:73:70: 92:02:7c:de:d6:8e:b7:1f:4e:58:b0:32:ee:b3:6b: 75:12:70:5c:ab:86:ce:9d:c1:06:8c:d8:f4:85:18: 70:ed:0d:95:18:28:fa:25:ad:b4:48:06:46:0b:73: d3:c8:5e:22:b8:35:6f:ca:fd:a1:17:88:5b:ab:3f: b7:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:4D:6F:BF:DB:96:67:0B:EE:02:03:26:B3:42:1F:66:A8:D8:6C:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/c9253b4b-02ac-381d-891b-c6a9176dfdc5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl X509v3 Authority Key Identifier: keyid:65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer sbgp-ipAddrBlock: critical IPv4: 199.45.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:90:c7:5f:63:15:03:da:55:d8:65:4f:dc:b8:eb:52:6b:a1: 9f:fd:dc:dd:a4:b9:c8:10:3c:ae:7f:d3:ba:0e:9a:09:41:ce: 67:47:63:ac:2c:29:83:6d:fa:e2:7e:5f:61:8a:29:63:a0:1a: 67:44:78:a9:ed:81:00:0b:41:ce:98:e0:20:d6:95:78:f4:82: 82:d1:19:0a:cb:9e:5c:1b:17:e1:2d:28:92:6b:01:0c:b1:96: 8d:ec:68:ba:b6:a3:90:d3:40:52:d2:c6:f7:9f:6e:42:fc:92: ba:3c:a8:d7:8d:83:a0:bc:c3:05:a4:5d:39:9a:02:da:0c:af: d9:1b:23:8f:5c:a7:01:27:04:12:0a:b7:31:7f:58:6e:34:81: a9:9e:cf:df:74:cf:3d:c2:d6:73:81:eb:5d:1a:81:46:b0:c8: b4:1f:57:60:ba:b4:f9:83:e2:92:e6:f5:1a:0f:77:0b:a2:93: fa:62:85:a2:c8:53:84:d4:73:01:30:16:6f:d0:bb:fe:f8:63: 48:bc:18:10:84:54:1c:36:4b:1e:d1:fc:ac:a6:05:a8:a5:e7: 58:d3:68:b5:39:ba:54:8a:97:7e:a9:58:90:a0:8d:8f:5c:ed: 73:28:6f:13:4b:59:9c:73:c7:60:bd:21:bd:9a:45:2e:9e:d1: 84:d2:10:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8JPOfDXlRPEaGh54AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTlmYjZjOWEtY2UyOS00MWVlLWE0YWQtM2RlZTNmNzk3 MGE0MB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk ZTg0MmI2NWYtN2FmYi00ODQyLThkNWQtOTNiNDBlNGM3NjIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYXLIFfjzpwqtL8OhsNsX1XZbs1e9DFLKlkQ 7xZT4IXbx+rDSDp5tudserLTLMQV9JwkdNQrcaATxGydVFG+w1Dm66NeijOJBvDz uvrvk2zK4JUPUp3httY2asTShILs+voQzC9x0elXoaHc4PORX+CcAs6mgX6cq9Or BHxNQqQuUQ9R0pS8K7NKtnBYfu4guYbKX2j/OXvH5IPs/jIp5srr8nI4bRNauiIT enS6wBv4+DVFJZSKLc/BpD5gF1PZc3CSAnze1o63H05YsDLus2t1EnBcq4bOncEG jNj0hRhw7Q2VGCj6Ja20SAZGC3PTyF4iuDVvyv2hF4hbqz+3PwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGJNb7/blmcL7gIDJrNCH2ao2GybMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85OWZi NmM5YS1jZTI5LTQxZWUtYTRhZC0zZGVlM2Y3OTcwYTQvYzkyNTNiNGItMDJhYy0z ODFkLTg5MWItYzZhOTE3NmRmZGM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOTlmYjZjOWEtY2UyOS00MWVlLWE0 YWQtM2RlZTNmNzk3MGE0Lzk5ZmI2YzlhLWNlMjktNDFlZS1hNGFkLTNkZWUzZjc5 NzBhNC5jcmwwHwYDVR0jBBgwFoAUZSJlk/hhOWSY4nrlbMI1s/Z+WzUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85OWZiNmM5YS1jZTI5LTQxZWUtYTRhZC0zZGVl M2Y3OTcwYTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxy3zMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE6Qx19jFQPaVdhlT9y461JroZ/93N2kucgQPK5/07oOmglBzmdHY6ws KYNt+uJ+X2GKKWOgGmdEeKntgQALQc6Y4CDWlXj0goLRGQrLnlwbF+EtKJJrAQyx lo3saLq2o5DTQFLSxvefbkL8kro8qNeNg6C8wwWkXTmaAtoMr9kbI49cpwEnBBIK tzF/WG40gamez990zz3C1nOB610agUawyLQfV2C6tPmD4pLm9RoPdwuik/pihaLI U4TUcwEwFm/Qu/74Y0i8GBCEVBw2Sx7R/KymBail51jTaLU5ulSKl36pWJCgjY9c 7XMobxNLWZxzx2C9Ib2aRS6e0YTSEIQ= -----END CERTIFICATE-----Generated at Tue Sep 22 00:53:27 2026 by rpki-client