$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/9e5ebf40-c830-3982-802c-6fb0581c00a8.roa File: 9e5ebf40-c830-3982-802c-6fb0581c00a8.roa (raw, json) Hash identifier: plycRVhQqYSEtRlYuGAe/V108sVRxBuchW5NNqvVmeM= Subject key identifier: 8E:22:DF:41:19:C0:F5:D8:4D:EF:3D:B4:75:F4:DE:BD:57:DE:C5:18 Certificate issuer: /CN=5c19a246-d9fa-481a-a4d7-010af8c132b3 Certificate serial: 010D0C9F4328584E210FDBF4131D8FF64EF38E18 Authority key identifier: 18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/9e5ebf40-c830-3982-802c-6fb0581c00a8.roa Signing time: Wed 10 Jun 2026 21:00:11 +0000 ROA not before: Wed 10 Jun 2026 21:00:11 +0000 ROA not after: Tue 08 Sep 2026 21:00:11 +0000 asID: 398395 IP address blocks: 172.99.132.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:21:0f:db:f4:13:1d:8f:f6:4e:f3:8e:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c19a246-d9fa-481a-a4d7-010af8c132b3 Validity Not Before: Jun 10 21:00:11 2026 GMT Not After : Sep 8 21:00:11 2026 GMT Subject: CN=9c7a0946-46c1-45c6-8dd1-4abc6866d3ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:fd:f4:06:46:82:01:c1:27:7e:d1:2f:e9:d4: 69:c3:f9:94:57:5e:2b:dc:fe:fb:61:ee:8f:bc:c4: b8:18:88:58:2a:ce:9a:82:d4:ec:da:b5:28:89:c3: d0:6d:a7:14:e8:7f:27:65:f5:ee:6a:b6:65:16:27: 1f:6e:02:ed:3c:91:5d:9c:ad:54:3d:85:e6:44:45: 7e:ac:ed:c6:c4:9e:55:28:58:ab:e5:e1:a6:67:e1: 21:70:70:0a:90:f6:0d:33:b3:3e:6f:e4:d6:c5:80: 67:0e:f1:73:20:58:6e:56:44:b8:e0:c1:2a:aa:ce: 91:9d:79:82:2a:34:56:2c:ab:e3:56:73:6a:57:ea: 02:6f:b6:ba:22:6b:40:f4:9a:46:c9:2e:ef:18:42: 13:dd:d1:87:9f:ce:12:67:df:fd:38:0d:55:f5:06: f1:10:1c:d7:31:55:42:58:02:0c:ea:dc:78:f2:74: 06:17:32:c5:17:03:48:83:95:ea:26:1d:a4:5f:cc: a0:de:41:81:ef:8e:67:89:41:95:78:6e:10:ae:11: 83:43:bc:fc:49:e4:2f:ff:48:a0:16:56:5c:39:9d: ae:b5:fb:76:88:95:e5:73:e8:d3:39:83:2f:53:dd: 04:fb:a1:2b:9f:82:a0:8a:f2:67:d1:48:18:fb:b4: 64:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:22:DF:41:19:C0:F5:D8:4D:EF:3D:B4:75:F4:DE:BD:57:DE:C5:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/9e5ebf40-c830-3982-802c-6fb0581c00a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl X509v3 Authority Key Identifier: keyid:18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer sbgp-ipAddrBlock: critical IPv4: 172.99.132.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:f4:ee:d1:2b:f7:14:72:e3:41:9d:f7:e5:79:53:33:6f:07: 94:1a:81:d7:e1:c3:c7:1c:0f:3c:87:46:52:20:42:0a:80:34: 81:53:5b:3f:ce:66:1d:77:66:ca:98:6b:55:a1:7d:dd:81:b7: 1a:fb:54:70:79:a3:e0:d7:ec:ef:8f:b0:7b:16:ea:73:1e:d9: d8:ec:28:d8:57:18:ab:2a:1a:73:af:0c:16:27:89:8a:7b:f9: 6a:7a:80:33:ad:29:14:f3:fc:60:39:ab:5b:84:16:b5:d4:2c: 33:fd:28:5f:fe:eb:77:07:5e:6f:49:67:ff:e5:89:ce:98:be: be:77:ba:d1:8f:d9:6a:07:04:b7:e8:2e:30:01:89:28:81:f4: 8c:97:e6:af:03:a0:6f:bd:62:b3:2c:3e:4d:ad:a2:a5:02:90: da:60:db:dd:44:c9:e9:f9:8a:80:50:58:d6:66:f5:63:81:ae: 4a:04:cc:30:34:c6:f5:c3:15:4e:37:16:e5:57:38:40:27:b8: 6c:dd:7f:b0:6a:d7:dc:54:a1:db:91:17:be:b1:f1:8d:85:37: 49:6c:ce:b3:08:4e:a6:29:de:7d:94:19:80:f2:28:cf:12:2a: d0:e3:d6:65:7e:ec:dc:7f:7f:5b:4d:cd:17:09:16:c9:00:96: d9:6b:7c:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4hD9v0Ex2P9k7zjhgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWMxOWEyNDYtZDlmYS00ODFhLWE0ZDctMDEwYWY4YzEz MmIzMB4XDTI2MDYxMDIxMDAxMVoXDTI2MDkwODIxMDAxMVowLzEtMCsGA1UEAxMk OWM3YTA5NDYtNDZjMS00NWM2LThkZDEtNGFiYzY4NjZkM2NlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsv30BkaCAcEnftEv6dRpw/mUV14r3P77Ye6P vMS4GIhYKs6agtTs2rUoicPQbacU6H8nZfXuarZlFicfbgLtPJFdnK1UPYXmREV+ rO3GxJ5VKFir5eGmZ+EhcHAKkPYNM7M+b+TWxYBnDvFzIFhuVkS44MEqqs6RnXmC KjRWLKvjVnNqV+oCb7a6ImtA9JpGyS7vGEIT3dGHn84SZ9/9OA1V9QbxEBzXMVVC WAIM6tx48nQGFzLFFwNIg5XqJh2kX8yg3kGB745niUGVeG4QrhGDQ7z8SeQv/0ig FlZcOZ2utft2iJXlc+jTOYMvU90E+6Ern4KgivJn0UgY+7Rk6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI4i30EZwPXYTe89tHX03r1X3sUYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81YzE5 YTI0Ni1kOWZhLTQ4MWEtYTRkNy0wMTBhZjhjMTMyYjMvOWU1ZWJmNDAtYzgzMC0z OTgyLTgwMmMtNmZiMDU4MWMwMGE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNWMxOWEyNDYtZDlmYS00ODFhLWE0 ZDctMDEwYWY4YzEzMmIzLzVjMTlhMjQ2LWQ5ZmEtNDgxYS1hNGQ3LTAxMGFmOGMx MzJiMy5jcmwwHwYDVR0jBBgwFoAUGBmr0BGL/MK+/l1zc0BDuuWTrnAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81YzE5YTI0Ni1kOWZhLTQ4MWEtYTRkNy0wMTBh ZjhjMTMyYjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrGOEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKH07tEr9xRy40Gd9+V5UzNvB5Qagdfhw8ccDzyHRlIgQgqANIFTWz/O Zh13ZsqYa1Whfd2Btxr7VHB5o+DX7O+PsHsW6nMe2djsKNhXGKsqGnOvDBYniYp7 +Wp6gDOtKRTz/GA5q1uEFrXULDP9KF/+63cHXm9JZ//lic6Yvr53utGP2WoHBLfo LjABiSiB9IyX5q8DoG+9YrMsPk2toqUCkNpg291Eyen5ioBQWNZm9WOBrkoEzDA0 xvXDFU43FuVXOEAnuGzdf7Bq19xUoduRF76x8Y2FN0lszrMITqYp3n2UGYDyKM8S KtDj1mV+7Nx/f1tNzRcJFskAltlrfMQ= -----END CERTIFICATE-----Generated at Sat Jun 13 13:10:25 2026 by rpki-client