$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f1d5ecd-8770-46a2-b7c8-251b564b9e28/3aa72ed7-e889-35b8-9416-168e2eae8942.roa File: 3aa72ed7-e889-35b8-9416-168e2eae8942.roa (raw, json) Hash identifier: zMOb0pdFxwOHDbsetBgYY8iUuUkUZcZCQ/PaxsoJ5U0= Subject key identifier: 9F:53:2D:5B:0C:2B:8E:C3:31:1E:E5:5A:29:F9:2B:47:AE:EF:D7:99 Certificate issuer: /CN=8f1d5ecd-8770-46a2-b7c8-251b564b9e28 Certificate serial: 010D0C9F4328584F1E2CEE6483E1800B97E17340 Authority key identifier: 00:89:07:A1:F7:83:66:C2:B3:3D:1A:F9:DD:73:98:F6:9A:AC:51:46 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f1d5ecd-8770-46a2-b7c8-251b564b9e28.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f1d5ecd-8770-46a2-b7c8-251b564b9e28/3aa72ed7-e889-35b8-9416-168e2eae8942.roa Signing time: Wed 09 Sep 2026 13:00:11 +0000 ROA not before: Wed 09 Sep 2026 13:00:11 +0000 ROA not after: Tue 08 Dec 2026 14:00:11 +0000 asID: 63083 IP address blocks: 172.99.176.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f1d5ecd-8770-46a2-b7c8-251b564b9e28/8f1d5ecd-8770-46a2-b7c8-251b564b9e28.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f1d5ecd-8770-46a2-b7c8-251b564b9e28/8f1d5ecd-8770-46a2-b7c8-251b564b9e28.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f1d5ecd-8770-46a2-b7c8-251b564b9e28.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1e:2c:ee:64:83:e1:80:0b:97:e1:73:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f1d5ecd-8770-46a2-b7c8-251b564b9e28 Validity Not Before: Sep 9 13:00:11 2026 GMT Not After : Dec 8 14:00:11 2026 GMT Subject: CN=28c5fcf9-b311-4ba7-b03b-eeaeb8fe86b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:42:01:a4:68:2a:d3:8a:a5:62:c9:1f:7f:f7: b0:70:c0:f3:c2:91:99:35:ef:94:eb:10:10:b8:f0: 1c:c3:f9:a0:79:90:d4:96:0b:7c:e9:23:b1:f2:4f: 25:ef:f5:4f:f7:ed:9e:c3:91:80:f2:5d:31:b3:87: f1:04:8e:f4:48:46:20:83:5c:2f:18:4d:c9:60:8d: 45:73:03:e2:e2:f6:77:73:6a:8d:aa:6a:df:8e:78: a0:3b:e9:ef:03:26:b0:55:01:ac:f4:8a:f0:e9:e6: 1b:f3:29:00:f9:f2:5a:7b:b9:5f:55:d3:9d:74:22: 7a:53:41:98:8f:78:12:48:37:81:34:ce:28:3a:49: 2a:ec:9c:ad:79:70:6d:64:ed:22:d0:e1:8b:d2:ae: 1b:34:8b:eb:65:65:c4:08:07:39:3e:e0:94:f9:ac: bb:c6:97:47:f0:b2:98:c8:b8:e6:03:1f:7e:5c:9e: 11:98:5d:1b:eb:b5:87:a9:be:4f:e1:fb:b7:bb:c5: 46:14:65:2b:b8:fb:5c:d4:6a:8f:df:5d:c8:80:a0: 38:2c:f8:4e:68:b6:10:26:f0:46:0d:3e:ba:ec:6e: c2:a9:b6:02:6e:77:ea:c1:f6:6d:8c:d4:5a:15:20: ed:d8:3a:b8:74:98:92:b6:a6:0e:c3:ac:77:42:0f: c6:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:53:2D:5B:0C:2B:8E:C3:31:1E:E5:5A:29:F9:2B:47:AE:EF:D7:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f1d5ecd-8770-46a2-b7c8-251b564b9e28/3aa72ed7-e889-35b8-9416-168e2eae8942.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f1d5ecd-8770-46a2-b7c8-251b564b9e28/8f1d5ecd-8770-46a2-b7c8-251b564b9e28.crl X509v3 Authority Key Identifier: keyid:00:89:07:A1:F7:83:66:C2:B3:3D:1A:F9:DD:73:98:F6:9A:AC:51:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f1d5ecd-8770-46a2-b7c8-251b564b9e28.cer sbgp-ipAddrBlock: critical IPv4: 172.99.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:ce:8f:1e:ff:86:fb:09:b2:fd:60:df:10:bc:08:53:3b:79: 52:e6:22:ee:e0:31:61:f4:ae:10:8d:e7:19:4b:f9:87:7e:50: 92:4c:a6:1e:95:21:6f:40:4b:e7:65:2d:7c:da:7a:a1:30:c8: 84:a1:9f:65:1b:85:2f:49:52:cc:e5:50:32:89:90:9a:56:be: de:69:c6:d7:47:94:cf:db:46:d4:6f:f0:13:d7:37:d0:bc:61: ce:de:df:6a:24:a5:e7:ef:97:f0:49:fa:57:5d:28:9a:54:22: 7f:76:f0:2a:cd:c2:13:b0:24:c0:8b:ef:d2:72:4c:f0:6b:95: 16:2e:2b:0b:a6:85:9d:48:92:a7:16:dc:ae:6d:24:5b:fa:b4: 03:78:11:be:e1:8d:08:f5:37:48:06:bd:e5:8f:a8:27:af:58: b4:99:a0:02:cb:5f:60:21:a6:09:b8:c1:c9:75:2d:34:2f:c7: 44:a1:d3:78:af:4e:fa:93:6a:2a:4b:59:d2:3a:9c:14:5e:6f: 61:11:2f:93:79:02:42:14:a3:40:a8:d7:10:c3:1b:ac:d7:81: 4a:c3:a1:2b:b3:6c:a0:f2:43:0a:91:25:7c:9a:8d:45:73:39: a1:59:b1:e2:96:70:db:16:09:39:cb:39:89:41:c1:de:37:e9: 0d:e4:10:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8eLO5kg+GAC5fhc0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGYxZDVlY2QtODc3MC00NmEyLWI3YzgtMjUxYjU2NGI5 ZTI4MB4XDTI2MDkwOTEzMDAxMVoXDTI2MTIwODE0MDAxMVowLzEtMCsGA1UEAxMk MjhjNWZjZjktYjMxMS00YmE3LWIwM2ItZWVhZWI4ZmU4NmIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAykIBpGgq04qlYskff/ewcMDzwpGZNe+U6xAQ uPAcw/mgeZDUlgt86SOx8k8l7/VP9+2ew5GA8l0xs4fxBI70SEYgg1wvGE3JYI1F cwPi4vZ3c2qNqmrfjnigO+nvAyawVQGs9Irw6eYb8ykA+fJae7lfVdOddCJ6U0GY j3gSSDeBNM4oOkkq7JyteXBtZO0i0OGL0q4bNIvrZWXECAc5PuCU+ay7xpdH8LKY yLjmAx9+XJ4RmF0b67WHqb5P4fu3u8VGFGUruPtc1GqP313IgKA4LPhOaLYQJvBG DT667G7CqbYCbnfqwfZtjNRaFSDt2Dq4dJiStqYOw6x3Qg/G7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ9TLVsMK47DMR7lWin5K0eu79eZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy84ZjFk NWVjZC04NzcwLTQ2YTItYjdjOC0yNTFiNTY0YjllMjgvM2FhNzJlZDctZTg4OS0z NWI4LTk0MTYtMTY4ZTJlYWU4OTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvOGYxZDVlY2QtODc3MC00NmEyLWI3 YzgtMjUxYjU2NGI5ZTI4LzhmMWQ1ZWNkLTg3NzAtNDZhMi1iN2M4LTI1MWI1NjRi OWUyOC5jcmwwHwYDVR0jBBgwFoAUAIkHofeDZsKzPRr53XOY9pqsUUYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy84ZjFkNWVjZC04NzcwLTQ2YTItYjdjOC0yNTFi NTY0YjllMjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrGOwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH/Ojx7/hvsJsv1g3xC8CFM7eVLmIu7gMWH0rhCN5xlL+Yd+UJJMph6V IW9AS+dlLXzaeqEwyIShn2UbhS9JUszlUDKJkJpWvt5pxtdHlM/bRtRv8BPXN9C8 Yc7e32okpefvl/BJ+lddKJpUIn928CrNwhOwJMCL79JyTPBrlRYuKwumhZ1IkqcW 3K5tJFv6tAN4Eb7hjQj1N0gGveWPqCevWLSZoALLX2Ahpgm4wcl1LTQvx0Sh03iv TvqTaipLWdI6nBReb2ERL5N5AkIUo0Co1xDDG6zXgUrDoSuzbKDyQwqRJXyajUVz OaFZseKWcNsWCTnLOYlBwd436Q3kED0= -----END CERTIFICATE-----Generated at Sat Sep 26 09:21:26 2026 by rpki-client