$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9179e4ff-328d-4753-b8f9-9149f799cfec/002cf558-bfd3-31c9-b195-582b2c34a385.roa File: 002cf558-bfd3-31c9-b195-582b2c34a385.roa (raw, json) Hash identifier: M61jZVj+xa/JX+n+TuauG5l2s1opNRIWYw7jSS53ccA= Subject key identifier: B0:B3:14:DA:4C:67:10:3A:73:36:AC:7A:37:52:8E:1E:FB:53:35:11 Certificate issuer: /CN=9179e4ff-328d-4753-b8f9-9149f799cfec Certificate serial: 010D0C9F4328584F0AFA5EC8BF7712FEE8F30B00 Authority key identifier: 65:75:5C:AB:1B:D8:C1:B4:32:0D:B7:E7:BE:2B:40:A9:D7:97:B7:1C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9179e4ff-328d-4753-b8f9-9149f799cfec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9179e4ff-328d-4753-b8f9-9149f799cfec/002cf558-bfd3-31c9-b195-582b2c34a385.roa Signing time: Wed 02 Sep 2026 15:58:00 +0000 ROA not before: Wed 02 Sep 2026 15:58:00 +0000 ROA not after: Tue 01 Dec 2026 16:58:00 +0000 asID: 400298 IP address blocks: 172.99.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9179e4ff-328d-4753-b8f9-9149f799cfec/9179e4ff-328d-4753-b8f9-9149f799cfec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9179e4ff-328d-4753-b8f9-9149f799cfec/9179e4ff-328d-4753-b8f9-9149f799cfec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9179e4ff-328d-4753-b8f9-9149f799cfec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0a:fa:5e:c8:bf:77:12:fe:e8:f3:0b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9179e4ff-328d-4753-b8f9-9149f799cfec Validity Not Before: Sep 2 15:58:00 2026 GMT Not After : Dec 1 16:58:00 2026 GMT Subject: CN=c171b1b4-a30d-46c0-b2c4-cb3af38c5403 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:a2:bc:7a:7b:81:94:1a:45:d3:75:b4:e8:9d: b8:8c:b0:c5:8b:85:88:d1:6b:90:d5:3f:10:84:22: 77:78:99:b9:fd:38:25:4f:6f:7f:3d:a0:57:dc:ea: 40:9e:42:e9:c0:18:81:c3:11:16:fa:19:36:6b:38: 2e:02:17:36:d6:9f:77:14:4d:85:e1:3b:f9:cf:bf: bc:41:1d:cb:89:e8:6e:52:d6:00:36:8b:58:c8:ab: 2f:5f:3c:ff:f1:35:1f:a9:a6:79:e9:75:4d:61:c3: 6b:1d:17:a8:77:dc:ba:d8:97:4e:c5:f0:08:a1:85: 10:6f:d8:92:16:bd:2b:75:e7:7b:fd:47:4e:84:f1: 1a:4f:cc:7a:5c:7f:91:b8:a7:10:a6:79:76:1a:c1: e6:92:4e:25:ad:0d:4a:02:c4:ba:c9:17:2c:5d:a0: 89:cc:fc:56:79:c3:3a:c9:81:a9:dd:69:85:87:11: 5d:50:8d:59:58:16:d5:b5:8c:9a:17:a5:3e:ac:10: 70:b2:a2:9c:55:e0:78:de:9e:76:63:f7:00:0b:e8: 74:76:46:7c:bd:18:70:1f:cd:0e:eb:63:0b:dd:9d: 0d:77:8b:c4:71:24:3a:25:18:c2:5d:08:42:a9:81: d0:07:76:29:c7:28:a4:09:ad:81:66:e4:24:15:15: 3d:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:B3:14:DA:4C:67:10:3A:73:36:AC:7A:37:52:8E:1E:FB:53:35:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9179e4ff-328d-4753-b8f9-9149f799cfec/002cf558-bfd3-31c9-b195-582b2c34a385.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9179e4ff-328d-4753-b8f9-9149f799cfec/9179e4ff-328d-4753-b8f9-9149f799cfec.crl X509v3 Authority Key Identifier: keyid:65:75:5C:AB:1B:D8:C1:B4:32:0D:B7:E7:BE:2B:40:A9:D7:97:B7:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9179e4ff-328d-4753-b8f9-9149f799cfec.cer sbgp-ipAddrBlock: critical IPv4: 172.99.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:15:56:3e:7d:48:41:ae:99:12:4c:5f:c3:ce:5f:a8:81:2f: 3b:6b:a5:f0:32:1e:38:b1:a5:79:63:06:97:f3:e8:24:de:ba: 1f:1f:67:3e:3f:56:f2:ad:cc:98:11:fe:0c:46:af:20:55:4c: 79:d5:3b:6a:15:59:6b:46:52:b0:fd:25:15:fd:3b:a2:68:05: e7:e4:77:ae:bc:94:f7:23:9f:42:dd:b9:14:02:f0:6e:c9:4a: 75:9e:78:8e:98:56:87:ec:8f:24:fa:ab:a8:0f:82:f1:20:82: bc:08:45:a3:79:91:a1:78:7f:94:d4:63:81:49:55:27:58:0b: 55:84:2f:e7:ca:1a:5d:22:0b:f3:a7:bc:be:a3:2f:16:33:c7: aa:a8:60:b1:11:1c:5d:99:06:b4:09:b5:f4:26:04:15:d5:b1: 0a:0f:f1:4c:f8:bd:d2:19:56:38:4c:f1:d6:83:70:f6:e2:0e: 4c:7d:1b:53:d8:85:2a:31:c8:ad:52:2d:d4:0f:71:96:cb:e9: 82:68:5f:5e:87:94:8a:89:2c:dd:8f:61:31:ac:6e:1d:fc:a6: 42:fc:b0:6e:ff:1a:59:94:8e:69:fb:48:6f:b2:e3:a0:3d:fd: 2c:14:7d:d9:3b:75:46:f2:42:2b:7e:ac:4c:06:57:a8:0c:fc: 3b:94:bb:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8K+l7Iv3cS/ujzCwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE3OWU0ZmYtMzI4ZC00NzUzLWI4ZjktOTE0OWY3OTlj ZmVjMB4XDTI2MDkwMjE1NTgwMFoXDTI2MTIwMTE2NTgwMFowLzEtMCsGA1UEAxMk YzE3MWIxYjQtYTMwZC00NmMwLWIyYzQtY2IzYWYzOGM1NDAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiKK8enuBlBpF03W06J24jLDFi4WI0WuQ1T8Q hCJ3eJm5/TglT29/PaBX3OpAnkLpwBiBwxEW+hk2azguAhc21p93FE2F4Tv5z7+8 QR3LiehuUtYANotYyKsvXzz/8TUfqaZ56XVNYcNrHReod9y62JdOxfAIoYUQb9iS Fr0rded7/UdOhPEaT8x6XH+RuKcQpnl2GsHmkk4lrQ1KAsS6yRcsXaCJzPxWecM6 yYGp3WmFhxFdUI1ZWBbVtYyaF6U+rBBwsqKcVeB43p52Y/cAC+h0dkZ8vRhwH80O 62ML3Z0Nd4vEcSQ6JRjCXQhCqYHQB3YpxyikCa2BZuQkFRU9kwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLCzFNpMZxA6czasejdSjh77UzURMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85MTc5 ZTRmZi0zMjhkLTQ3NTMtYjhmOS05MTQ5Zjc5OWNmZWMvMDAyY2Y1NTgtYmZkMy0z MWM5LWIxOTUtNTgyYjJjMzRhMzg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTE3OWU0ZmYtMzI4ZC00NzUzLWI4 ZjktOTE0OWY3OTljZmVjLzkxNzllNGZmLTMyOGQtNDc1My1iOGY5LTkxNDlmNzk5 Y2ZlYy5jcmwwHwYDVR0jBBgwFoAUZXVcqxvYwbQyDbfnvitAqdeXtxwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85MTc5ZTRmZi0zMjhkLTQ3NTMtYjhmOS05MTQ5 Zjc5OWNmZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGP5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJMVVj59SEGumRJMX8POX6iBLztrpfAyHjixpXljBpfz6CTeuh8fZz4/ VvKtzJgR/gxGryBVTHnVO2oVWWtGUrD9JRX9O6JoBefkd668lPcjn0LduRQC8G7J SnWeeI6YVofsjyT6q6gPgvEggrwIRaN5kaF4f5TUY4FJVSdYC1WEL+fKGl0iC/On vL6jLxYzx6qoYLERHF2ZBrQJtfQmBBXVsQoP8Uz4vdIZVjhM8daDcPbiDkx9G1PY hSoxyK1SLdQPcZbL6YJoX16HlIqJLN2PYTGsbh38pkL8sG7/GlmUjmn7SG+y46A9 /SwUfdk7dUbyQit+rEwGV6gM/DuUu3o= -----END CERTIFICATE-----Generated at Tue Sep 22 16:59:13 2026 by rpki-client