$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd9ab029-fead-4e1c-b7cc-3aedf23a797f/5c321eb2-77c0-3367-a9c5-6d1e9f4412a8.roa File: 5c321eb2-77c0-3367-a9c5-6d1e9f4412a8.roa (raw, json) Hash identifier: Qf2IJYzOVKtxdMx6OZjb6ByKdsCw2LWLWxtnX4ZgBH8= Subject key identifier: 66:08:FF:D1:EC:D0:E7:C6:7B:D6:E6:80:1A:F8:5F:DE:AC:AE:9A:DF Certificate issuer: /CN=fd9ab029-fead-4e1c-b7cc-3aedf23a797f Certificate serial: 010D0C9F4328584F4974A4E64B1C742F2E17A9C0 Authority key identifier: 91:C7:D6:BD:DC:41:CD:1D:2A:AE:C6:8E:26:AF:B6:FA:74:7E:B0:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd9ab029-fead-4e1c-b7cc-3aedf23a797f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd9ab029-fead-4e1c-b7cc-3aedf23a797f/5c321eb2-77c0-3367-a9c5-6d1e9f4412a8.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 398395 IP address blocks: 172.99.148.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd9ab029-fead-4e1c-b7cc-3aedf23a797f/fd9ab029-fead-4e1c-b7cc-3aedf23a797f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd9ab029-fead-4e1c-b7cc-3aedf23a797f/fd9ab029-fead-4e1c-b7cc-3aedf23a797f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd9ab029-fead-4e1c-b7cc-3aedf23a797f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:a4:e6:4b:1c:74:2f:2e:17:a9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd9ab029-fead-4e1c-b7cc-3aedf23a797f Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=0d3831d1-de8c-4f0b-bb2f-89531cc287e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:73:80:f3:3c:58:c4:aa:37:c8:9e:18:58:44: e1:cb:15:b3:ba:00:10:57:5b:25:03:59:5c:e5:b6: 45:67:5f:34:24:ef:ba:a4:59:d8:b1:b8:d9:6d:88: e3:dc:30:5a:3f:16:29:5b:1b:a1:37:e7:84:da:68: c0:8e:01:10:43:f5:37:65:df:26:e8:d3:ed:2e:73: 00:e9:bc:63:eb:da:c2:2e:e0:cd:3a:40:31:f6:63: 12:2d:94:a0:80:9e:ee:67:fa:25:1d:0f:4b:56:d9: 0c:9e:03:34:3f:62:bd:02:64:3d:07:ad:e3:d1:18: 63:77:a3:b1:a9:50:18:3e:a3:ab:a3:83:f5:c4:33: 5c:3b:42:00:f0:65:e5:d5:e3:5d:23:01:11:cd:19: 77:5d:2e:e2:af:b1:d6:e2:e0:1c:99:5c:a1:7c:e3: 6c:42:05:01:74:29:18:1b:9c:cc:0f:c7:61:56:09: 30:09:7a:6a:19:16:cc:97:df:39:a6:93:3c:6d:23: c8:c5:36:ea:dc:34:82:dd:2e:08:9e:f7:8e:2f:f1: b3:20:b2:fe:ff:93:8d:06:30:99:4a:dd:e1:d9:91: b3:21:e3:c9:91:00:bf:d4:e6:89:ae:28:8d:19:ba: bd:63:a2:46:22:95:c7:87:87:21:76:0f:a1:5c:47: 7d:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:08:FF:D1:EC:D0:E7:C6:7B:D6:E6:80:1A:F8:5F:DE:AC:AE:9A:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd9ab029-fead-4e1c-b7cc-3aedf23a797f/5c321eb2-77c0-3367-a9c5-6d1e9f4412a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd9ab029-fead-4e1c-b7cc-3aedf23a797f/fd9ab029-fead-4e1c-b7cc-3aedf23a797f.crl X509v3 Authority Key Identifier: keyid:91:C7:D6:BD:DC:41:CD:1D:2A:AE:C6:8E:26:AF:B6:FA:74:7E:B0:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd9ab029-fead-4e1c-b7cc-3aedf23a797f.cer sbgp-ipAddrBlock: critical IPv4: 172.99.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:f4:83:cd:e5:e4:82:84:0e:9a:72:79:71:2e:3a:24:3c:79: 1f:28:82:ca:df:d1:92:91:96:88:2e:fc:65:dd:34:fa:be:cc: 4b:fb:14:08:12:a5:9d:b3:57:9b:df:b4:b5:88:83:6f:f2:dd: 58:12:38:fe:31:36:db:ad:d1:e4:65:c3:6c:86:18:e9:51:6b: 9a:10:fd:35:5f:9b:64:1d:95:f0:53:82:2a:ef:d5:02:c7:3e: 39:c5:1a:8b:bc:fe:a9:42:62:e2:11:7d:78:9d:1e:02:0d:28: 45:6b:9f:96:97:01:04:c4:5b:57:b8:c2:a3:8d:98:e9:17:d4: ec:16:02:06:c4:64:13:2a:ed:9c:79:7c:03:7d:50:07:eb:98: 2b:fc:43:de:6a:2f:a2:78:2c:97:a2:40:e2:3d:0c:c1:ac:9c: 50:e8:d8:98:3e:1a:cb:03:45:93:01:fd:21:d8:1b:91:b4:0c: af:2b:d7:1f:29:be:32:73:9e:30:69:be:0f:b5:37:41:2d:d3: c6:a3:29:c1:18:e7:84:b8:85:d1:c1:38:a9:61:27:67:7e:c9: a7:1e:fb:7d:ad:bf:fc:68:88:ed:03:98:01:4d:75:00:81:14: ae:d0:83:01:88:e9:cc:f4:0e:47:d3:af:de:10:1c:b2:97:cf: 99:66:c2:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdKTmSxx0Ly4XqcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmQ5YWIwMjktZmVhZC00ZTFjLWI3Y2MtM2FlZGYyM2E3 OTdmMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MGQzODMxZDEtZGU4Yy00ZjBiLWJiMmYtODk1MzFjYzI4N2UwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnOA8zxYxKo3yJ4YWEThyxWzugAQV1slA1lc 5bZFZ180JO+6pFnYsbjZbYjj3DBaPxYpWxuhN+eE2mjAjgEQQ/U3Zd8m6NPtLnMA 6bxj69rCLuDNOkAx9mMSLZSggJ7uZ/olHQ9LVtkMngM0P2K9AmQ9B63j0Rhjd6Ox qVAYPqOro4P1xDNcO0IA8GXl1eNdIwERzRl3XS7ir7HW4uAcmVyhfONsQgUBdCkY G5zMD8dhVgkwCXpqGRbMl985ppM8bSPIxTbq3DSC3S4InveOL/GzILL+/5ONBjCZ St3h2ZGzIePJkQC/1OaJriiNGbq9Y6JGIpXHh4chdg+hXEd9JwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGYI/9Hs0OfGe9bmgBr4X96srprfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mZDlh YjAyOS1mZWFkLTRlMWMtYjdjYy0zYWVkZjIzYTc5N2YvNWMzMjFlYjItNzdjMC0z MzY3LWE5YzUtNmQxZTlmNDQxMmE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZmQ5YWIwMjktZmVhZC00ZTFjLWI3 Y2MtM2FlZGYyM2E3OTdmL2ZkOWFiMDI5LWZlYWQtNGUxYy1iN2NjLTNhZWRmMjNh Nzk3Zi5jcmwwHwYDVR0jBBgwFoAUkcfWvdxBzR0qrsaOJq+2+nR+sJIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9mZDlhYjAyOS1mZWFkLTRlMWMtYjdjYy0zYWVk ZjIzYTc5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrGOUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADn0g83l5IKEDppyeXEuOiQ8eR8ogsrf0ZKRlogu/GXdNPq+zEv7FAgS pZ2zV5vftLWIg2/y3VgSOP4xNtut0eRlw2yGGOlRa5oQ/TVfm2QdlfBTgirv1QLH PjnFGou8/qlCYuIRfXidHgINKEVrn5aXAQTEW1e4wqONmOkX1OwWAgbEZBMq7Zx5 fAN9UAfrmCv8Q95qL6J4LJeiQOI9DMGsnFDo2Jg+GssDRZMB/SHYG5G0DK8r1x8p vjJznjBpvg+1N0Et08ajKcEY54S4hdHBOKlhJ2d+yace+32tv/xoiO0DmAFNdQCB FK7QgwGI6cz0DkfTr94QHLKXz5lmwlI= -----END CERTIFICATE-----Generated at Sun Oct 4 18:22:07 2026 by rpki-client