$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd9ab029-fead-4e1c-b7cc-3aedf23a797f/5c321eb2-77c0-3367-a9c5-6d1e9f4412a8.roa File: 5c321eb2-77c0-3367-a9c5-6d1e9f4412a8.roa (raw, json) Hash identifier: cp/DmZqodDfyp/byBhMgantfU7SjmfbcsMgUO1llzmg= Subject key identifier: A8:2C:09:76:FD:42:8B:DC:CF:E2:9C:9F:36:8B:59:BE:72:17:76:08 Certificate issuer: /CN=fd9ab029-fead-4e1c-b7cc-3aedf23a797f Certificate serial: 010D0C9F4328584B38219C073F55A8F284A48C90 Authority key identifier: 91:C7:D6:BD:DC:41:CD:1D:2A:AE:C6:8E:26:AF:B6:FA:74:7E:B0:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd9ab029-fead-4e1c-b7cc-3aedf23a797f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd9ab029-fead-4e1c-b7cc-3aedf23a797f/5c321eb2-77c0-3367-a9c5-6d1e9f4412a8.roa Signing time: Wed 17 Sep 2025 01:00:33 +0000 ROA not before: Wed 17 Sep 2025 01:00:33 +0000 ROA not after: Tue 16 Dec 2025 02:00:33 +0000 asID: 398395 IP address blocks: 172.99.148.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd9ab029-fead-4e1c-b7cc-3aedf23a797f/fd9ab029-fead-4e1c-b7cc-3aedf23a797f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd9ab029-fead-4e1c-b7cc-3aedf23a797f/fd9ab029-fead-4e1c-b7cc-3aedf23a797f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd9ab029-fead-4e1c-b7cc-3aedf23a797f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:38:21:9c:07:3f:55:a8:f2:84:a4:8c:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd9ab029-fead-4e1c-b7cc-3aedf23a797f Validity Not Before: Sep 17 01:00:33 2025 GMT Not After : Dec 16 02:00:33 2025 GMT Subject: CN=dbc44d8b-239a-4ae7-a4b2-888abd7dc0c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:2c:16:38:f9:4e:f2:e5:9c:d5:dc:9c:90:b4: 5b:af:84:ce:4e:91:38:dc:3e:60:e7:ac:07:87:29: 7b:f8:3a:ef:64:96:55:8e:02:3a:48:15:1c:60:f9: 8a:53:17:76:09:d9:e0:0c:04:af:3e:b6:f3:1d:12: e9:c2:9a:ed:1b:e8:a3:b0:aa:fd:8b:ae:8f:ed:2f: bd:cf:f6:85:f2:a9:57:39:f7:03:2a:8c:67:45:3d: 69:97:65:1f:52:9a:49:b9:fe:cb:b1:00:ad:55:23: 47:78:1c:91:9f:c3:74:6f:9c:30:db:65:1d:01:a2: ee:61:52:d1:a4:13:0f:35:25:f2:39:15:d4:8a:9a: 74:eb:35:5a:19:f6:f4:60:43:b0:c3:12:8f:4e:f9: 34:96:00:0a:0e:9a:07:39:4f:b7:03:d3:0b:96:f9: 8d:a3:19:3a:7c:89:65:40:dc:9a:18:9d:b8:44:d9: ad:56:35:32:43:12:bb:20:0e:80:eb:be:ee:08:ec: f0:d6:a2:ba:8f:7c:b9:28:3c:74:aa:51:11:6a:1c: 94:e7:0b:8a:37:f7:fb:f8:e4:c8:3a:86:b3:6e:be: b6:98:fc:36:85:f2:de:55:69:4a:40:18:fd:bc:ce: e8:63:b0:0a:16:81:b2:bc:c0:7b:fb:74:2a:65:e0: cd:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:2C:09:76:FD:42:8B:DC:CF:E2:9C:9F:36:8B:59:BE:72:17:76:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd9ab029-fead-4e1c-b7cc-3aedf23a797f/5c321eb2-77c0-3367-a9c5-6d1e9f4412a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd9ab029-fead-4e1c-b7cc-3aedf23a797f/fd9ab029-fead-4e1c-b7cc-3aedf23a797f.crl X509v3 Authority Key Identifier: keyid:91:C7:D6:BD:DC:41:CD:1D:2A:AE:C6:8E:26:AF:B6:FA:74:7E:B0:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd9ab029-fead-4e1c-b7cc-3aedf23a797f.cer sbgp-ipAddrBlock: critical IPv4: 172.99.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:df:1b:8f:57:62:47:a4:ed:6a:9e:bd:a9:61:5c:2a:67:cd: c3:6f:07:06:97:81:ac:93:f6:24:62:fd:d0:01:23:47:3e:8e: e9:31:5b:f6:f2:44:1d:03:c1:65:2d:1a:4d:aa:f6:9e:d9:c5: 5e:f2:95:70:a8:3c:11:ed:93:0b:03:92:32:b6:fe:a1:a2:47: 45:b2:46:34:75:11:41:95:d7:5d:89:7f:1c:d0:f3:f1:5f:84: ea:23:73:76:36:40:3a:d1:2a:c6:9f:20:76:18:ed:22:50:7a: f1:1f:4a:32:6b:4b:81:13:c7:5c:a1:ba:e7:94:8e:c4:00:6e: f8:f5:85:e9:28:e4:79:69:87:65:b4:7d:3d:01:45:b4:ac:4b: 19:d5:06:d9:5d:92:9b:98:a5:fe:1c:4f:e5:dc:60:0f:45:c6: 1b:08:aa:a3:cc:f9:71:3e:98:76:b9:ef:96:bd:74:7a:b3:eb: 37:40:b8:30:e9:07:ce:61:94:50:51:05:2b:5c:73:99:22:68: ea:f6:a5:e0:ef:7d:a8:77:70:88:d8:0f:07:02:cc:5c:de:72: e4:42:f5:2a:ef:aa:f8:63:7e:94:93:ec:71:b9:1b:48:b5:3b: 64:69:a9:ce:a1:4b:f0:d4:8f:a2:82:13:19:66:5c:76:4e:78: 95:c4:a9:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs4IZwHP1Wo8oSkjJAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmQ5YWIwMjktZmVhZC00ZTFjLWI3Y2MtM2FlZGYyM2E3 OTdmMB4XDTI1MDkxNzAxMDAzM1oXDTI1MTIxNjAyMDAzM1owLzEtMCsGA1UEAxMk ZGJjNDRkOGItMjM5YS00YWU3LWE0YjItODg4YWJkN2RjMGMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCwWOPlO8uWc1dyckLRbr4TOTpE43D5g56wH hyl7+DrvZJZVjgI6SBUcYPmKUxd2CdngDASvPrbzHRLpwprtG+ijsKr9i66P7S+9 z/aF8qlXOfcDKoxnRT1pl2UfUppJuf7LsQCtVSNHeByRn8N0b5ww22UdAaLuYVLR pBMPNSXyORXUipp06zVaGfb0YEOwwxKPTvk0lgAKDpoHOU+3A9MLlvmNoxk6fIll QNyaGJ24RNmtVjUyQxK7IA6A677uCOzw1qK6j3y5KDx0qlERahyU5wuKN/f7+OTI Ooazbr62mPw2hfLeVWlKQBj9vM7oY7AKFoGyvMB7+3QqZeDNQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKgsCXb9Qovcz+KcnzaLWb5yF3YIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mZDlh YjAyOS1mZWFkLTRlMWMtYjdjYy0zYWVkZjIzYTc5N2YvNWMzMjFlYjItNzdjMC0z MzY3LWE5YzUtNmQxZTlmNDQxMmE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZmQ5YWIwMjktZmVhZC00ZTFjLWI3 Y2MtM2FlZGYyM2E3OTdmL2ZkOWFiMDI5LWZlYWQtNGUxYy1iN2NjLTNhZWRmMjNh Nzk3Zi5jcmwwHwYDVR0jBBgwFoAUkcfWvdxBzR0qrsaOJq+2+nR+sJIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9mZDlhYjAyOS1mZWFkLTRlMWMtYjdjYy0zYWVk ZjIzYTc5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrGOUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAALfG49XYkek7WqevalhXCpnzcNvBwaXgayT9iRi/dABI0c+jukxW/by RB0DwWUtGk2q9p7ZxV7ylXCoPBHtkwsDkjK2/qGiR0WyRjR1EUGV112JfxzQ8/Ff hOojc3Y2QDrRKsafIHYY7SJQevEfSjJrS4ETx1yhuueUjsQAbvj1heko5Hlph2W0 fT0BRbSsSxnVBtldkpuYpf4cT+XcYA9FxhsIqqPM+XE+mHa575a9dHqz6zdAuDDp B85hlFBRBStcc5kiaOr2peDvfah3cIjYDwcCzFzecuRC9SrvqvhjfpST7HG5G0i1 O2Rpqc6hS/DUj6KCExlmXHZOeJXEqaA= -----END CERTIFICATE-----Generated at Fri Oct 10 21:31:17 2025 by rpki-client