$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9179e4ff-328d-4753-b8f9-9149f799cfec/42c59281-8f5e-3fec-a72d-5e042ea40173.roa File: 42c59281-8f5e-3fec-a72d-5e042ea40173.roa (raw, json) Hash identifier: o3SQeCHn5Fiu/ARtU2W/2xOIcAaerEyjqe1RqGaWPyc= Subject key identifier: C5:8E:D2:60:6B:90:2D:D7:9E:13:5C:34:90:F3:88:EB:23:21:C7:AB Certificate issuer: /CN=9179e4ff-328d-4753-b8f9-9149f799cfec Certificate serial: 010D0C9F4328584F3032198BA897FE0D862132A0 Authority key identifier: 65:75:5C:AB:1B:D8:C1:B4:32:0D:B7:E7:BE:2B:40:A9:D7:97:B7:1C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9179e4ff-328d-4753-b8f9-9149f799cfec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9179e4ff-328d-4753-b8f9-9149f799cfec/42c59281-8f5e-3fec-a72d-5e042ea40173.roa Signing time: Tue 15 Sep 2026 23:55:12 +0000 ROA not before: Tue 15 Sep 2026 23:55:12 +0000 ROA not after: Tue 15 Dec 2026 00:55:12 +0000 asID: 394203 IP address blocks: 172.99.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9179e4ff-328d-4753-b8f9-9149f799cfec/9179e4ff-328d-4753-b8f9-9149f799cfec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9179e4ff-328d-4753-b8f9-9149f799cfec/9179e4ff-328d-4753-b8f9-9149f799cfec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9179e4ff-328d-4753-b8f9-9149f799cfec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:30:32:19:8b:a8:97:fe:0d:86:21:32:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9179e4ff-328d-4753-b8f9-9149f799cfec Validity Not Before: Sep 15 23:55:12 2026 GMT Not After : Dec 15 00:55:12 2026 GMT Subject: CN=251fc638-f8d2-48da-8ef8-4fedac1be113 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:30:17:e0:f4:92:f8:40:43:65:b1:92:94:21: d5:b7:cd:1c:99:29:fa:07:aa:46:78:e3:af:59:7a: 2e:70:2a:57:1a:f2:0f:bc:24:2c:2c:c9:ac:a6:c1: 38:03:26:85:39:55:26:14:49:a2:36:69:54:e9:26: 34:b2:16:46:90:c7:29:b6:31:31:85:af:29:d7:a4: 3d:1e:53:e6:26:d1:3b:e3:16:c8:66:25:b5:61:99: 7b:b4:be:62:26:f4:75:9f:fc:cb:5b:1d:ed:a7:64: 5b:e5:5c:69:6c:ca:49:92:c2:93:85:c4:9b:23:78: f1:74:b1:89:aa:43:ae:64:9a:43:c5:0b:94:41:26: d7:76:a0:2a:b7:cc:eb:6b:e7:d0:05:06:0e:be:6e: e0:da:84:e5:26:ef:5d:9e:64:93:c0:f8:7e:39:a3: 9e:95:e5:85:d4:3c:f8:8e:0b:7d:af:0e:f2:e8:da: 41:a3:0e:2b:0f:c5:5d:38:69:04:2b:9e:0f:90:70: d0:c4:f7:22:3d:56:55:e3:3e:d4:44:18:6c:5e:a6: 68:a1:fa:21:67:d6:92:82:e7:02:67:77:bb:c2:8e: bf:31:0b:61:42:4b:29:22:0b:3c:c6:f4:41:75:45: a5:16:6e:08:4c:1d:43:6c:78:58:83:9e:4b:3e:bc: 9b:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:8E:D2:60:6B:90:2D:D7:9E:13:5C:34:90:F3:88:EB:23:21:C7:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9179e4ff-328d-4753-b8f9-9149f799cfec/42c59281-8f5e-3fec-a72d-5e042ea40173.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9179e4ff-328d-4753-b8f9-9149f799cfec/9179e4ff-328d-4753-b8f9-9149f799cfec.crl X509v3 Authority Key Identifier: keyid:65:75:5C:AB:1B:D8:C1:B4:32:0D:B7:E7:BE:2B:40:A9:D7:97:B7:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9179e4ff-328d-4753-b8f9-9149f799cfec.cer sbgp-ipAddrBlock: critical IPv4: 172.99.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:74:a1:3e:48:79:50:8a:61:f9:23:a9:ef:04:ac:b0:e1:cd: 0c:b6:76:a5:3e:ac:26:e8:41:e6:3d:73:5c:ca:e0:6a:fa:50: 3b:f9:bf:3a:fb:06:19:c9:59:a4:98:f5:ec:90:0b:96:f6:30: 53:14:da:ea:76:bc:ae:e1:91:a1:c0:82:70:b8:c2:39:7a:9f: ac:b8:76:c6:d9:14:be:57:28:7e:cd:8e:f9:57:2b:ff:37:2a: 61:60:61:2a:e9:66:05:35:81:56:b5:11:cf:d7:64:e4:f5:40: 19:c0:d7:25:4b:3f:a4:41:8f:b6:d5:9b:c5:a3:58:c2:af:4c: 02:f0:01:80:ab:6c:0b:3c:85:52:28:22:ea:35:b6:dc:50:f2: 15:44:6b:ba:82:fa:21:19:78:dc:59:ec:19:0a:49:ad:ba:9a: 17:f4:a7:72:ec:d6:3f:af:eb:f2:4a:a5:a9:90:3f:d9:3f:b9: 62:2b:4a:bd:15:45:e6:26:42:09:3e:c2:e8:7a:2d:e0:9f:a6: 7d:4b:df:4f:28:d2:55:4a:35:b5:22:68:34:82:5d:60:ba:57: 32:3e:66:77:76:7a:73:62:e0:66:19:bb:b5:5c:65:c2:cd:0c: 3f:68:bb:94:e5:d0:ba:96:34:55:23:4b:d7:92:f8:55:76:04: 1f:f0:cf:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8wMhmLqJf+DYYhMqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE3OWU0ZmYtMzI4ZC00NzUzLWI4ZjktOTE0OWY3OTlj ZmVjMB4XDTI2MDkxNTIzNTUxMloXDTI2MTIxNTAwNTUxMlowLzEtMCsGA1UEAxMk MjUxZmM2MzgtZjhkMi00OGRhLThlZjgtNGZlZGFjMWJlMTEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizAX4PSS+EBDZbGSlCHVt80cmSn6B6pGeOOv WXoucCpXGvIPvCQsLMmspsE4AyaFOVUmFEmiNmlU6SY0shZGkMcptjExha8p16Q9 HlPmJtE74xbIZiW1YZl7tL5iJvR1n/zLWx3tp2Rb5VxpbMpJksKThcSbI3jxdLGJ qkOuZJpDxQuUQSbXdqAqt8zra+fQBQYOvm7g2oTlJu9dnmSTwPh+OaOeleWF1Dz4 jgt9rw7y6NpBow4rD8VdOGkEK54PkHDQxPciPVZV4z7URBhsXqZoofohZ9aSgucC Z3e7wo6/MQthQkspIgs8xvRBdUWlFm4ITB1DbHhYg55LPrybpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMWO0mBrkC3XnhNcNJDziOsjIcerMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85MTc5 ZTRmZi0zMjhkLTQ3NTMtYjhmOS05MTQ5Zjc5OWNmZWMvNDJjNTkyODEtOGY1ZS0z ZmVjLWE3MmQtNWUwNDJlYTQwMTczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTE3OWU0ZmYtMzI4ZC00NzUzLWI4 ZjktOTE0OWY3OTljZmVjLzkxNzllNGZmLTMyOGQtNDc1My1iOGY5LTkxNDlmNzk5 Y2ZlYy5jcmwwHwYDVR0jBBgwFoAUZXVcqxvYwbQyDbfnvitAqdeXtxwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85MTc5ZTRmZi0zMjhkLTQ3NTMtYjhmOS05MTQ5 Zjc5OWNmZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGP5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA50oT5IeVCKYfkjqe8ErLDhzQy2dqU+rCboQeY9c1zK4Gr6UDv5vzr7 BhnJWaSY9eyQC5b2MFMU2up2vK7hkaHAgnC4wjl6n6y4dsbZFL5XKH7NjvlXK/83 KmFgYSrpZgU1gVa1Ec/XZOT1QBnA1yVLP6RBj7bVm8WjWMKvTALwAYCrbAs8hVIo Iuo1ttxQ8hVEa7qC+iEZeNxZ7BkKSa26mhf0p3Ls1j+v6/JKpamQP9k/uWIrSr0V ReYmQgk+wuh6LeCfpn1L308o0lVKNbUiaDSCXWC6VzI+Znd2enNi4GYZu7VcZcLN DD9ou5Tl0LqWNFUjS9eS+FV2BB/wz5c= -----END CERTIFICATE-----Generated at Sun Sep 20 09:21:52 2026 by rpki-client