$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c743b329-2385-4bb0-899d-c1639569faa3/67c811c4-c2ac-3048-91a0-e33dc9f4049e.roa File: 67c811c4-c2ac-3048-91a0-e33dc9f4049e.roa (raw, json) Hash identifier: U9aWc3FQ3hTGX6HXHjlZEGGMbn0jVN/hVW6OskIB34s= Subject key identifier: D5:B1:6E:68:C1:8F:3C:8A:C9:8E:E7:6D:31:03:2E:D2:95:5C:E7:27 Certificate issuer: /CN=c743b329-2385-4bb0-899d-c1639569faa3 Certificate serial: 010D0C9F4328584EE38C9A9AAE93E4D83D78B260 Authority key identifier: 9B:D7:5F:66:B7:3C:80:89:49:B2:4A:36:5B:57:D2:58:0F:F8:3A:0A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c743b329-2385-4bb0-899d-c1639569faa3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c743b329-2385-4bb0-899d-c1639569faa3/67c811c4-c2ac-3048-91a0-e33dc9f4049e.roa Signing time: Wed 19 Aug 2026 13:00:11 +0000 ROA not before: Wed 19 Aug 2026 13:00:11 +0000 ROA not after: Tue 17 Nov 2026 14:00:11 +0000 asID: 399199 IP address blocks: 172.99.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c743b329-2385-4bb0-899d-c1639569faa3/c743b329-2385-4bb0-899d-c1639569faa3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c743b329-2385-4bb0-899d-c1639569faa3/c743b329-2385-4bb0-899d-c1639569faa3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c743b329-2385-4bb0-899d-c1639569faa3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e3:8c:9a:9a:ae:93:e4:d8:3d:78:b2:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c743b329-2385-4bb0-899d-c1639569faa3 Validity Not Before: Aug 19 13:00:11 2026 GMT Not After : Nov 17 14:00:11 2026 GMT Subject: CN=3eec39e3-c4ab-4394-a391-b378a5055388 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:07:5a:28:36:ce:5b:94:4a:c6:ad:53:1a:18: 1f:a4:4f:4a:4b:0a:df:9b:47:07:5e:fb:53:d6:16: 39:53:bf:37:3a:e4:99:da:5b:4c:42:01:68:42:d2: d9:6c:60:93:a8:99:74:06:90:15:fa:4b:94:3c:cd: d7:cb:90:2a:65:4d:5e:4a:e0:c3:13:cf:19:2f:0a: dd:29:20:51:2a:64:8a:b3:af:7a:57:f6:67:00:57: 6f:ff:7c:d2:01:1f:1a:08:13:47:57:80:a7:3e:5f: ae:da:74:0d:ec:b0:a9:bf:ff:4e:b2:8a:72:78:76: f5:ae:8f:95:5d:a3:e4:25:82:ad:97:7f:99:b3:93: ff:1e:6c:11:8b:c0:96:2e:b1:9e:7d:e0:54:85:3e: 3d:5c:b5:ce:d9:a0:24:24:b1:ec:0d:5f:8b:ba:4e: ad:82:5c:1a:c0:b4:89:8a:ff:88:cb:02:a4:6d:29: f6:25:d8:4b:51:d7:57:8a:7c:13:c9:5f:c0:9e:d2: a7:a1:8b:cc:f8:db:d3:7b:24:47:8b:5e:59:a5:80: f8:3a:66:50:85:b5:43:5f:bc:aa:4c:1c:8b:77:d9: 0b:18:54:c8:56:9f:70:2c:cd:9a:6d:c8:d0:67:88: 50:47:30:bf:98:1a:4b:93:f6:b0:08:13:c7:7a:c7: 58:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:B1:6E:68:C1:8F:3C:8A:C9:8E:E7:6D:31:03:2E:D2:95:5C:E7:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c743b329-2385-4bb0-899d-c1639569faa3/67c811c4-c2ac-3048-91a0-e33dc9f4049e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c743b329-2385-4bb0-899d-c1639569faa3/c743b329-2385-4bb0-899d-c1639569faa3.crl X509v3 Authority Key Identifier: keyid:9B:D7:5F:66:B7:3C:80:89:49:B2:4A:36:5B:57:D2:58:0F:F8:3A:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c743b329-2385-4bb0-899d-c1639569faa3.cer sbgp-ipAddrBlock: critical IPv4: 172.99.192.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:60:f6:40:e0:36:68:5f:aa:c9:df:a0:c1:0a:92:01:16:12: 59:7f:b0:c9:2c:d5:20:88:98:b3:fb:02:e4:49:76:28:10:ea: 39:e0:58:04:0f:80:2c:74:48:8b:a6:a1:96:0b:22:70:ab:06: 88:ee:fc:38:f9:ba:39:1e:47:1c:45:a3:9c:a0:dd:af:a6:9c: 0f:b7:7c:8a:12:bc:7c:8b:79:1e:b4:58:22:21:15:c6:19:ac: 18:39:b9:2f:83:b7:f7:ad:00:f4:d3:90:31:62:60:0e:8a:36: 35:28:a0:05:4d:6c:88:78:b9:6f:f2:d3:b6:5e:0e:f8:a1:36: 62:bd:d5:7a:e1:5b:17:af:75:4a:f0:72:5d:72:d5:f9:bc:a1: 83:3e:9c:ba:6d:52:f0:64:64:1b:28:7b:ab:ea:fd:36:b2:19: f4:ad:84:0e:9c:a2:c7:80:80:2d:b7:e1:0b:f7:3e:60:71:95: 55:5f:31:8d:4d:3a:b7:4c:32:4a:16:4c:72:a3:50:ea:4c:1d: 53:bc:68:64:6b:0c:4d:59:96:78:cc:74:ee:54:bd:66:16:1c: 97:25:d2:22:80:cb:e0:7c:63:ca:b6:b0:94:a8:0d:7f:8c:62: 27:83:c0:84:20:13:93:86:7a:52:5c:15:5a:01:a3:d2:6c:53: f2:0f:c0:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7jjJqarpPk2D14smAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzc0M2IzMjktMjM4NS00YmIwLTg5OWQtYzE2Mzk1Njlm YWEzMB4XDTI2MDgxOTEzMDAxMVoXDTI2MTExNzE0MDAxMVowLzEtMCsGA1UEAxMk M2VlYzM5ZTMtYzRhYi00Mzk0LWEzOTEtYjM3OGE1MDU1Mzg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwdaKDbOW5RKxq1TGhgfpE9KSwrfm0cHXvtT 1hY5U783OuSZ2ltMQgFoQtLZbGCTqJl0BpAV+kuUPM3Xy5AqZU1eSuDDE88ZLwrd KSBRKmSKs696V/ZnAFdv/3zSAR8aCBNHV4CnPl+u2nQN7LCpv/9OsopyeHb1ro+V XaPkJYKtl3+Zs5P/HmwRi8CWLrGefeBUhT49XLXO2aAkJLHsDV+Luk6tglwawLSJ iv+IywKkbSn2JdhLUddXinwTyV/AntKnoYvM+NvTeyRHi15ZpYD4OmZQhbVDX7yq TByLd9kLGFTIVp9wLM2abcjQZ4hQRzC/mBpLk/awCBPHesdYtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNWxbmjBjzyKyY7nbTEDLtKVXOcnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jNzQz YjMyOS0yMzg1LTRiYjAtODk5ZC1jMTYzOTU2OWZhYTMvNjdjODExYzQtYzJhYy0z MDQ4LTkxYTAtZTMzZGM5ZjQwNDllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzc0M2IzMjktMjM4NS00YmIwLTg5 OWQtYzE2Mzk1NjlmYWEzL2M3NDNiMzI5LTIzODUtNGJiMC04OTlkLWMxNjM5NTY5 ZmFhMy5jcmwwHwYDVR0jBBgwFoAUm9dfZrc8gIlJsko2W1fSWA/4OgowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jNzQzYjMyOS0yMzg1LTRiYjAtODk5ZC1jMTYz OTU2OWZhYTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGPAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIJg9kDgNmhfqsnfoMEKkgEWEll/sMks1SCImLP7AuRJdigQ6jngWAQP gCx0SIumoZYLInCrBoju/Dj5ujkeRxxFo5yg3a+mnA+3fIoSvHyLeR60WCIhFcYZ rBg5uS+Dt/etAPTTkDFiYA6KNjUooAVNbIh4uW/y07ZeDvihNmK91XrhWxevdUrw cl1y1fm8oYM+nLptUvBkZBsoe6vq/TayGfSthA6coseAgC234Qv3PmBxlVVfMY1N OrdMMkoWTHKjUOpMHVO8aGRrDE1ZlnjMdO5UvWYWHJcl0iKAy+B8Y8q2sJSoDX+M YieDwIQgE5OGelJcFVoBo9JsU/IPwBo= -----END CERTIFICATE-----Generated at Sun Sep 27 16:41:40 2026 by rpki-client