$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/dd7f374a-32f5-328b-a3f6-3ea8586a9438.roa File: dd7f374a-32f5-328b-a3f6-3ea8586a9438.roa (raw, json) Hash identifier: I1OfHYQ0i78MkKFQKEI9GIRDc/5YCvxdYwKUgqzn5u4= Subject key identifier: 63:B4:58:B6:DC:52:51:01:77:0F:F6:0B:A0:C9:AD:CA:48:E0:81:51 Certificate issuer: /CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4 Certificate serial: 010D0C9F4328584F093CE7B6E8CF5131EF8E8B80 Authority key identifier: 65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/dd7f374a-32f5-328b-a3f6-3ea8586a9438.roa Signing time: Wed 02 Sep 2026 01:00:12 +0000 ROA not before: Wed 02 Sep 2026 01:00:12 +0000 ROA not after: Tue 01 Dec 2026 02:00:12 +0000 asID: 14618 IP address blocks: 199.45.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:3c:e7:b6:e8:cf:51:31:ef:8e:8b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4 Validity Not Before: Sep 2 01:00:12 2026 GMT Not After : Dec 1 02:00:12 2026 GMT Subject: CN=fbb57b4f-fece-4a3b-bee0-d0e28f8ac7f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:6d:c7:cb:39:22:2f:9b:ef:f5:af:84:ad:57: bc:2e:e9:ed:01:80:97:3e:be:ab:f1:ed:cd:98:20: b0:04:9e:98:c6:d3:92:c4:fb:fc:18:0a:b8:a4:90: 7e:34:ec:3b:3b:ea:36:01:2e:9c:99:5d:86:13:67: 6b:b9:55:1c:7e:15:c1:50:c8:bd:56:e1:40:98:31: a9:cc:2d:a6:b1:15:99:66:8a:23:f1:20:a7:a2:d6: 4f:fb:05:72:a1:88:60:b8:72:b9:f5:43:31:b1:ba: c2:d9:99:80:0f:83:8e:c6:21:1c:28:2b:b7:bc:4b: d5:db:e3:e8:02:f8:c4:30:51:f3:e1:85:53:4c:71: 1b:0a:23:a2:fb:ee:d0:2b:a3:f1:be:e4:e6:aa:1a: 90:0c:4d:6a:e8:54:8b:05:5a:c9:4e:31:27:30:d1: 6d:87:69:2d:c5:2f:75:4f:e8:df:ba:47:b2:43:49: 0a:d5:0b:ae:5f:71:0a:de:24:18:be:b3:72:32:3c: 94:74:45:2e:c6:f0:1e:e5:53:1d:2c:26:31:f4:12: ea:ce:de:8c:d5:a8:81:12:4e:04:73:8f:9d:0b:f0: 8f:81:9c:30:70:bf:eb:df:e9:96:da:c3:33:b9:9e: d1:fa:85:2a:a5:8b:5d:d1:af:eb:6b:d2:f9:f7:1c: 77:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:B4:58:B6:DC:52:51:01:77:0F:F6:0B:A0:C9:AD:CA:48:E0:81:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/dd7f374a-32f5-328b-a3f6-3ea8586a9438.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl X509v3 Authority Key Identifier: keyid:65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer sbgp-ipAddrBlock: critical IPv4: 199.45.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:f8:d0:71:16:b9:6d:28:99:7a:52:48:0a:c3:4b:cb:38:33: 4d:96:46:3b:b3:c0:2e:d7:fb:77:d1:c4:cc:17:8c:4d:a6:2a: 79:cb:62:e1:fd:c7:89:d3:92:5e:e8:28:51:cf:8b:2c:a9:ec: c8:44:a7:5a:53:50:86:c6:9c:b1:f4:bf:03:8d:33:f8:fc:59: 38:72:e4:52:ab:ac:f7:c1:f7:9d:14:94:f8:18:a4:02:b2:62: 26:ab:f2:27:66:87:2d:6b:72:9d:7d:4c:bd:ad:b7:04:2a:67: 5a:84:d9:26:14:e4:82:f5:d2:b5:16:cf:62:3b:e8:2a:35:e0: 2d:ed:b9:34:3f:8a:50:ad:c6:68:ae:89:d2:52:18:fc:65:da: 2b:f0:3b:04:21:d3:0e:9b:87:f1:40:11:f6:66:1c:7a:d8:22: 71:85:1b:08:ee:3b:b6:e1:59:52:8d:b1:92:65:9c:2d:50:33: 7a:03:23:ce:4b:1a:f2:f6:33:04:e4:26:78:24:02:8e:ba:0d: f9:31:1c:98:a6:7f:37:be:81:d4:3d:6f:59:cd:73:52:a1:8b: 18:11:42:d3:c6:f3:bd:65:c6:39:25:9d:e9:19:80:4b:c1:bc: bf:0f:51:a7:0e:74:61:1f:2d:b7:a8:1e:6a:ea:ec:50:8c:14: b1:78:ef:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8JPOe26M9RMe+Oi4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTlmYjZjOWEtY2UyOS00MWVlLWE0YWQtM2RlZTNmNzk3 MGE0MB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk ZmJiNTdiNGYtZmVjZS00YTNiLWJlZTAtZDBlMjhmOGFjN2Y5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjm3HyzkiL5vv9a+ErVe8LuntAYCXPr6r8e3N mCCwBJ6YxtOSxPv8GAq4pJB+NOw7O+o2AS6cmV2GE2druVUcfhXBUMi9VuFAmDGp zC2msRWZZooj8SCnotZP+wVyoYhguHK59UMxsbrC2ZmAD4OOxiEcKCu3vEvV2+Po AvjEMFHz4YVTTHEbCiOi++7QK6PxvuTmqhqQDE1q6FSLBVrJTjEnMNFth2ktxS91 T+jfukeyQ0kK1QuuX3EK3iQYvrNyMjyUdEUuxvAe5VMdLCYx9BLqzt6M1aiBEk4E c4+dC/CPgZwwcL/r3+mW2sMzuZ7R+oUqpYtd0a/ra9L59xx3cQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGO0WLbcUlEBdw/2C6DJrcpI4IFRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85OWZi NmM5YS1jZTI5LTQxZWUtYTRhZC0zZGVlM2Y3OTcwYTQvZGQ3ZjM3NGEtMzJmNS0z MjhiLWEzZjYtM2VhODU4NmE5NDM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOTlmYjZjOWEtY2UyOS00MWVlLWE0 YWQtM2RlZTNmNzk3MGE0Lzk5ZmI2YzlhLWNlMjktNDFlZS1hNGFkLTNkZWUzZjc5 NzBhNC5jcmwwHwYDVR0jBBgwFoAUZSJlk/hhOWSY4nrlbMI1s/Z+WzUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85OWZiNmM5YS1jZTI5LTQxZWUtYTRhZC0zZGVl M2Y3OTcwYTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxy3zMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAf40HEWuW0omXpSSArDS8s4M02WRjuzwC7X+3fRxMwXjE2mKnnLYuH9 x4nTkl7oKFHPiyyp7MhEp1pTUIbGnLH0vwONM/j8WThy5FKrrPfB950UlPgYpAKy Yiar8idmhy1rcp19TL2ttwQqZ1qE2SYU5IL10rUWz2I76Co14C3tuTQ/ilCtxmiu idJSGPxl2ivwOwQh0w6bh/FAEfZmHHrYInGFGwjuO7bhWVKNsZJlnC1QM3oDI85L GvL2MwTkJngkAo66DfkxHJimfze+gdQ9b1nNc1KhixgRQtPG871lxjklnekZgEvB vL8PUacOdGEfLbeoHmrq7FCMFLF4730= -----END CERTIFICATE-----Generated at Tue Sep 22 15:10:58 2026 by rpki-client