$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/994e1943-4aa7-3acc-88b0-4257f34b6b16.roa File: 994e1943-4aa7-3acc-88b0-4257f34b6b16.roa (raw, json) Hash identifier: JRgpE0k/TSictaswdogPIhG7qO97SSo7Un5rGCWHMH8= Subject key identifier: 18:12:9C:E8:3B:73:21:8F:95:42:33:69:5D:8D:DB:0A:10:6B:CC:DC Certificate issuer: /CN=99cd086f-b993-42d9-8f47-c65df74d693b Certificate serial: 010D0C9F4328584E7634F51AA29ED6F2939FE400 Authority key identifier: C3:7C:6E:74:65:2F:44:92:72:76:3A:6D:8C:36:51:7C:69:F5:55:F7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/994e1943-4aa7-3acc-88b0-4257f34b6b16.roa Signing time: Sat 11 Jul 2026 09:00:12 +0000 ROA not before: Sat 11 Jul 2026 09:00:12 +0000 ROA not after: Fri 09 Oct 2026 09:00:12 +0000 asID: 34689 IP address blocks: 162.255.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/99cd086f-b993-42d9-8f47-c65df74d693b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/99cd086f-b993-42d9-8f47-c65df74d693b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Jul 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:76:34:f5:1a:a2:9e:d6:f2:93:9f:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99cd086f-b993-42d9-8f47-c65df74d693b Validity Not Before: Jul 11 09:00:12 2026 GMT Not After : Oct 9 09:00:12 2026 GMT Subject: CN=be93d427-0293-43be-9393-14ee1b9fae64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:e1:23:8a:11:a3:58:e4:07:9a:2c:b5:68:fa: bf:76:01:85:f1:11:7e:a8:e7:62:f1:a7:91:01:7b: dd:5f:14:ee:b9:92:c7:d9:b0:25:12:ba:54:a1:4a: 3e:01:b5:60:b7:76:a1:4a:0e:af:0a:5d:c2:de:ca: b7:61:65:8f:c0:ea:1a:80:71:77:ac:af:6b:d8:a1: 37:c4:de:1a:42:6d:ca:60:8c:45:8e:10:23:ef:5e: 62:b5:e3:a6:b4:f7:73:e6:6e:dc:47:7b:5b:33:bc: 4f:53:de:63:87:79:ce:78:93:88:48:ed:14:81:f7: e1:48:96:d1:c5:b1:fd:95:be:91:b2:69:41:0e:1a: 2e:0d:fd:b3:8b:53:94:59:90:74:60:ff:03:67:72: f0:b8:96:fb:db:e4:56:8f:ad:71:67:4e:21:99:2f: 6e:c2:ee:1d:3b:cd:da:94:41:3c:5a:62:45:42:f0: e7:90:ad:31:6f:fc:72:02:af:b4:2c:78:fa:25:f0: 8f:d4:d5:7b:41:ee:51:37:95:64:f9:ec:88:70:93: 0b:52:c9:e7:84:d2:f4:c1:46:00:49:0f:a9:bb:ca: 57:5c:10:ae:0b:9c:d3:bf:84:60:da:ea:7d:99:2f: 34:87:40:7c:16:7a:4d:d7:91:4d:eb:ab:c3:34:c8: 09:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:12:9C:E8:3B:73:21:8F:95:42:33:69:5D:8D:DB:0A:10:6B:CC:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/994e1943-4aa7-3acc-88b0-4257f34b6b16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/99cd086f-b993-42d9-8f47-c65df74d693b.crl X509v3 Authority Key Identifier: keyid:C3:7C:6E:74:65:2F:44:92:72:76:3A:6D:8C:36:51:7C:69:F5:55:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b.cer sbgp-ipAddrBlock: critical IPv4: 162.255.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:23:f5:7f:07:ae:9c:21:63:e8:87:d9:70:9d:d7:87:0a:83: 2c:26:0f:5b:f7:d5:16:4b:cc:87:d7:20:39:ce:3f:2c:78:26: 7f:f9:f2:47:08:6c:a8:2f:3c:96:4f:1d:bb:c5:c0:05:71:2b: be:60:24:09:43:42:38:c2:8a:7d:26:64:d3:51:a6:07:45:05: 90:38:5b:f4:08:8b:7f:13:91:6d:c0:7e:71:bb:0f:21:b6:d7: 4f:c0:19:53:38:26:1f:b1:2b:2c:7b:82:fe:30:03:91:61:77: 1e:33:ad:32:98:55:91:33:43:a7:18:5f:5d:78:80:ed:94:a7: ac:ff:b4:52:a6:51:bb:22:49:8f:b9:cc:b0:0d:dc:f9:37:1a: 2d:91:e0:9b:75:1e:5d:22:f2:e1:c9:21:60:c4:d2:51:87:c1: 8f:ef:d3:b7:a4:ce:da:b3:8e:05:89:3d:27:eb:31:07:c4:59: a4:af:81:71:39:88:da:ff:0a:0e:ad:12:e2:75:06:c1:a2:36: dc:fc:51:31:e4:4f:72:43:a8:25:29:05:25:28:50:bd:cf:63: ce:c0:6a:36:9d:63:a2:84:42:68:46:ec:44:44:dc:f5:75:a8: f6:37:e0:bb:18:eb:ec:29:06:d1:20:c2:b4:f0:fa:ab:a0:7d: d3:0a:df:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE52NPUaop7W8pOf5AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTljZDA4NmYtYjk5My00MmQ5LThmNDctYzY1ZGY3NGQ2 OTNiMB4XDTI2MDcxMTA5MDAxMloXDTI2MTAwOTA5MDAxMlowLzEtMCsGA1UEAxMk YmU5M2Q0MjctMDI5My00M2JlLTkzOTMtMTRlZTFiOWZhZTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnuEjihGjWOQHmiy1aPq/dgGF8RF+qOdi8aeR AXvdXxTuuZLH2bAlErpUoUo+AbVgt3ahSg6vCl3C3sq3YWWPwOoagHF3rK9r2KE3 xN4aQm3KYIxFjhAj715iteOmtPdz5m7cR3tbM7xPU95jh3nOeJOISO0UgffhSJbR xbH9lb6RsmlBDhouDf2zi1OUWZB0YP8DZ3LwuJb72+RWj61xZ04hmS9uwu4dO83a lEE8WmJFQvDnkK0xb/xyAq+0LHj6JfCP1NV7Qe5RN5Vk+eyIcJMLUsnnhNL0wUYA SQ+pu8pXXBCuC5zTv4Rg2up9mS80h0B8FnpN15FN66vDNMgJnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBgSnOg7cyGPlUIzaV2N2woQa8zcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85OWNk MDg2Zi1iOTkzLTQyZDktOGY0Ny1jNjVkZjc0ZDY5M2IvOTk0ZTE5NDMtNGFhNy0z YWNjLTg4YjAtNDI1N2YzNGI2YjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTljZDA4NmYtYjk5My00MmQ5LThm NDctYzY1ZGY3NGQ2OTNiLzk5Y2QwODZmLWI5OTMtNDJkOS04ZjQ3LWM2NWRmNzRk NjkzYi5jcmwwHwYDVR0jBBgwFoAUw3xudGUvRJJydjptjDZRfGn1VfcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85OWNkMDg2Zi1iOTkzLTQyZDktOGY0Ny1jNjVk Zjc0ZDY5M2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAov+YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFAj9X8HrpwhY+iH2XCd14cKgywmD1v31RZLzIfXIDnOPyx4Jn/58kcI bKgvPJZPHbvFwAVxK75gJAlDQjjCin0mZNNRpgdFBZA4W/QIi38TkW3AfnG7DyG2 10/AGVM4Jh+xKyx7gv4wA5Fhdx4zrTKYVZEzQ6cYX114gO2Up6z/tFKmUbsiSY+5 zLAN3Pk3Gi2R4Jt1Hl0i8uHJIWDE0lGHwY/v07ekztqzjgWJPSfrMQfEWaSvgXE5 iNr/Cg6tEuJ1BsGiNtz8UTHkT3JDqCUpBSUoUL3PY87AajadY6KEQmhG7ERE3PV1 qPY34LsY6+wpBtEgwrTw+qugfdMK39M= -----END CERTIFICATE-----Generated at Sat Jul 18 03:00:04 2026 by rpki-client