$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de9d9fe8-3a53-49a0-955b-cc4dfeeb9f7b/a83b75f4-9ab9-3c46-a34f-06a59c25f666.roa File: a83b75f4-9ab9-3c46-a34f-06a59c25f666.roa (raw, json) Hash identifier: NyiAWeWekAbEeYJA8q90IRuE7Q6tDdR+zkG52rK2biY= Subject key identifier: B4:DB:73:24:B7:10:28:87:F1:57:66:C9:72:AC:80:EF:CF:30:7A:7D Certificate issuer: /CN=de9d9fe8-3a53-49a0-955b-cc4dfeeb9f7b Certificate serial: 010D0C9F4328584F3B7D1E83C4071C68608CAB80 Authority key identifier: 6E:C1:59:BC:12:59:CB:1A:EF:81:AA:75:0B:AC:8C:C2:73:48:37:18 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de9d9fe8-3a53-49a0-955b-cc4dfeeb9f7b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de9d9fe8-3a53-49a0-955b-cc4dfeeb9f7b/a83b75f4-9ab9-3c46-a34f-06a59c25f666.roa Signing time: Sun 20 Sep 2026 01:00:11 +0000 ROA not before: Sun 20 Sep 2026 01:00:11 +0000 ROA not after: Sat 19 Dec 2026 02:00:11 +0000 asID: 40838 IP address blocks: 172.99.200.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de9d9fe8-3a53-49a0-955b-cc4dfeeb9f7b/de9d9fe8-3a53-49a0-955b-cc4dfeeb9f7b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de9d9fe8-3a53-49a0-955b-cc4dfeeb9f7b/de9d9fe8-3a53-49a0-955b-cc4dfeeb9f7b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de9d9fe8-3a53-49a0-955b-cc4dfeeb9f7b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3b:7d:1e:83:c4:07:1c:68:60:8c:ab:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de9d9fe8-3a53-49a0-955b-cc4dfeeb9f7b Validity Not Before: Sep 20 01:00:11 2026 GMT Not After : Dec 19 02:00:11 2026 GMT Subject: CN=0c65cc06-d317-4def-b455-36a2e13bedb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:69:a4:3d:6a:06:b4:35:3d:df:80:74:d4:4f: 48:e5:fa:0e:3b:af:6c:46:f2:48:94:2c:dd:58:51: 43:46:df:f9:67:83:b7:6f:79:f9:01:e2:ca:1c:34: af:47:c7:f8:a2:fe:aa:22:bd:e9:69:a4:5f:00:b5: 0a:e2:3d:f2:35:61:00:a7:96:18:49:03:99:db:64: 98:af:29:ff:bc:e7:23:d6:20:0e:12:a5:56:47:c2: a2:a2:13:59:a3:4e:f5:f2:e7:65:34:11:4a:bb:e5: 7a:7e:76:0a:55:36:41:98:8d:1b:b0:8a:44:fc:90: 3b:b1:47:48:4d:4b:0d:7f:0d:d3:9a:de:f4:91:34: b1:38:90:6a:e4:c0:74:57:66:e2:71:bd:45:60:8c: 9b:59:87:81:07:bf:58:18:f0:89:96:64:81:49:16: 84:5c:ae:c0:ba:6e:e2:41:b2:2a:53:06:2d:c6:9d: 4f:3f:64:9e:f2:b9:34:b1:73:37:d0:12:9f:9c:fb: 88:72:6f:02:12:fd:0d:b2:ad:e9:c2:0d:48:88:ae: b8:35:ba:ee:d1:d1:20:2e:26:28:02:83:f6:fd:30: 2e:22:8a:06:72:40:a9:99:8c:fb:24:b6:b7:37:0c: 1d:6b:04:34:e2:23:26:0a:47:dc:21:b3:dc:60:b1: b3:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:DB:73:24:B7:10:28:87:F1:57:66:C9:72:AC:80:EF:CF:30:7A:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de9d9fe8-3a53-49a0-955b-cc4dfeeb9f7b/a83b75f4-9ab9-3c46-a34f-06a59c25f666.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de9d9fe8-3a53-49a0-955b-cc4dfeeb9f7b/de9d9fe8-3a53-49a0-955b-cc4dfeeb9f7b.crl X509v3 Authority Key Identifier: keyid:6E:C1:59:BC:12:59:CB:1A:EF:81:AA:75:0B:AC:8C:C2:73:48:37:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de9d9fe8-3a53-49a0-955b-cc4dfeeb9f7b.cer sbgp-ipAddrBlock: critical IPv4: 172.99.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:f2:f9:cf:cf:4e:b2:28:9f:01:9e:40:47:57:30:5e:f0:cc: 0c:ea:b8:18:ae:67:8f:96:36:08:34:e6:36:de:1e:ac:1e:e1: 02:a9:c1:b6:3a:8d:d2:a7:58:9b:e7:dc:a0:d0:6d:b5:25:54: e6:31:7e:e9:74:40:76:85:7a:53:ec:74:21:74:41:d0:2d:a5: ca:2f:f0:eb:27:8f:0e:c7:49:d9:41:04:41:3d:68:57:1c:dc: 30:a9:68:8c:d4:35:d7:a9:30:b3:41:18:1d:48:79:ef:42:ac: 54:53:2c:52:e1:70:83:6d:6f:b5:48:3d:ee:09:68:da:4e:f2: c2:10:b3:95:e7:a6:e0:89:79:53:84:8d:9b:24:9d:0c:f3:04: d2:ad:6d:29:93:d4:b7:8d:e0:ec:5b:38:c3:d6:8c:39:f6:fb: 6f:1d:f3:59:38:a8:92:72:1f:da:f8:f0:fe:23:b0:36:7f:c5: bd:da:0c:1c:76:b1:6a:e4:4b:79:14:ed:17:a8:d6:30:47:ad: 02:ee:91:8f:f4:9f:03:b4:07:10:9a:89:ef:8f:2f:04:98:d6: 0e:ce:66:ae:54:fa:40:45:fd:8d:40:4a:79:8a:91:5a:24:3f: 15:ba:a2:77:52:2e:26:21:d6:3d:51:8a:b4:7b:50:b2:17:fe: 1f:e4:56:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE87fR6DxAccaGCMq4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGU5ZDlmZTgtM2E1My00OWEwLTk1NWItY2M0ZGZlZWI5 ZjdiMB4XDTI2MDkyMDAxMDAxMVoXDTI2MTIxOTAyMDAxMVowLzEtMCsGA1UEAxMk MGM2NWNjMDYtZDMxNy00ZGVmLWI0NTUtMzZhMmUxM2JlZGI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWmkPWoGtDU934B01E9I5foOO69sRvJIlCzd WFFDRt/5Z4O3b3n5AeLKHDSvR8f4ov6qIr3paaRfALUK4j3yNWEAp5YYSQOZ22SY ryn/vOcj1iAOEqVWR8KiohNZo0718udlNBFKu+V6fnYKVTZBmI0bsIpE/JA7sUdI TUsNfw3Tmt70kTSxOJBq5MB0V2bicb1FYIybWYeBB79YGPCJlmSBSRaEXK7Aum7i QbIqUwYtxp1PP2Se8rk0sXM30BKfnPuIcm8CEv0Nsq3pwg1IiK64Nbru0dEgLiYo AoP2/TAuIooGckCpmYz7JLa3NwwdawQ04iMmCkfcIbPcYLGz9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLTbcyS3ECiH8VdmyXKsgO/PMHp9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9kZTlk OWZlOC0zYTUzLTQ5YTAtOTU1Yi1jYzRkZmVlYjlmN2IvYTgzYjc1ZjQtOWFiOS0z YzQ2LWEzNGYtMDZhNTljMjVmNjY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZGU5ZDlmZTgtM2E1My00OWEwLTk1 NWItY2M0ZGZlZWI5ZjdiL2RlOWQ5ZmU4LTNhNTMtNDlhMC05NTViLWNjNGRmZWVi OWY3Yi5jcmwwHwYDVR0jBBgwFoAUbsFZvBJZyxrvgap1C6yMwnNINxgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9kZTlkOWZlOC0zYTUzLTQ5YTAtOTU1Yi1jYzRk ZmVlYjlmN2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrGPIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHfy+c/PTrIonwGeQEdXMF7wzAzquBiuZ4+WNgg05jbeHqwe4QKpwbY6 jdKnWJvn3KDQbbUlVOYxful0QHaFelPsdCF0QdAtpcov8Osnjw7HSdlBBEE9aFcc 3DCpaIzUNdepMLNBGB1Iee9CrFRTLFLhcINtb7VIPe4JaNpO8sIQs5XnpuCJeVOE jZsknQzzBNKtbSmT1LeN4OxbOMPWjDn2+28d81k4qJJyH9r48P4jsDZ/xb3aDBx2 sWrkS3kU7Reo1jBHrQLukY/0nwO0BxCaie+PLwSY1g7OZq5U+kBF/Y1ASnmKkVok PxW6ondSLiYh1j1RirR7ULIX/h/kVhE= -----END CERTIFICATE-----Generated at Fri Sep 25 00:18:24 2026 by rpki-client