$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/dd7f374a-32f5-328b-a3f6-3ea8586a9438.roa File: dd7f374a-32f5-328b-a3f6-3ea8586a9438.roa (raw, json) Hash identifier: Rjn56hKU5YwBnZQzl26++SR9t5tiR1jL/ZXXciVb9Vk= Subject key identifier: 67:85:DE:BF:64:F5:6B:5B:DC:0E:16:10:F0:D9:E0:A0:A8:90:D0:16 Certificate issuer: /CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4 Certificate serial: 010D0C9F4328584CA5F7053305365ED327DA7F00 Authority key identifier: 65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/dd7f374a-32f5-328b-a3f6-3ea8586a9438.roa Signing time: Mon 26 Jan 2026 02:00:32 +0000 ROA not before: Mon 26 Jan 2026 02:00:32 +0000 ROA not after: Sun 26 Apr 2026 01:00:32 +0000 asID: 14618 IP address blocks: 199.45.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 22 Feb 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a5:f7:05:33:05:36:5e:d3:27:da:7f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4 Validity Not Before: Jan 26 02:00:32 2026 GMT Not After : Apr 26 01:00:32 2026 GMT Subject: CN=e0ff6a27-856b-4d6c-990e-6ed149f1e8f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:0e:e7:45:d0:8a:dc:76:25:6c:22:84:a7:54: 18:b7:db:bc:d7:8f:6c:6d:9d:c1:9c:1b:c7:4d:eb: 33:08:60:fa:f1:96:39:61:d9:f8:57:d6:0b:65:48: ed:20:66:7a:0e:ae:fe:4c:70:ea:e9:24:86:95:d9: 2c:81:a8:ad:36:f2:46:22:bd:b1:d9:15:bf:79:19: e7:91:46:d9:93:fc:8e:8e:b2:5b:66:be:85:ef:73: 42:18:50:af:db:93:f3:c2:cd:29:b2:b7:22:3c:ea: 2d:e7:dc:6d:76:03:83:cf:95:a8:35:8b:c1:bd:b2: 20:f6:5b:8c:66:7a:43:4d:aa:d0:c8:44:2d:69:dd: 14:e8:0b:e7:21:93:aa:b6:95:f3:fd:63:59:d7:4a: 43:90:4a:28:99:9f:78:e4:97:65:20:39:d1:ab:63: a7:a7:ad:c0:43:1f:a6:1a:b2:66:36:36:7f:9e:d9: 02:5f:f9:00:96:5e:8c:79:c2:83:42:4c:a1:47:8b: b5:3d:bd:a2:5f:6d:b6:09:72:88:1d:99:14:47:05: d8:da:e2:a2:a2:53:59:51:40:4f:57:da:49:62:a9: 1d:c4:13:20:0b:17:8d:3b:a9:de:a0:8a:ac:1d:08: 1c:09:d4:6a:07:fc:e1:98:58:45:4b:3a:91:63:4b: 62:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:85:DE:BF:64:F5:6B:5B:DC:0E:16:10:F0:D9:E0:A0:A8:90:D0:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/dd7f374a-32f5-328b-a3f6-3ea8586a9438.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl X509v3 Authority Key Identifier: keyid:65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer sbgp-ipAddrBlock: critical IPv4: 199.45.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:38:b8:38:ae:13:7c:ee:2c:57:ff:da:38:de:74:88:52:7b: 71:34:7f:75:34:01:7b:47:20:c1:0b:ea:52:bc:3f:f3:c8:cf: 3f:de:ef:86:40:8e:b1:39:ef:f7:27:be:3f:65:6a:7f:18:b1: 15:fa:51:ec:c2:75:65:4a:62:bc:37:29:4b:69:ab:90:cd:e9: 72:f6:76:a1:9f:23:06:fe:85:c6:2d:e3:37:3a:42:5b:7a:86: 69:b6:2c:77:a2:b2:79:8a:47:27:17:c6:54:dc:a8:43:0f:53: 16:d2:88:4c:66:27:75:57:45:45:1e:a7:ef:0a:41:c5:f0:17: 88:29:5f:9c:09:33:9b:36:8f:29:3a:85:4d:74:0d:5b:46:76: 33:bc:5b:27:af:4f:76:bd:09:9c:68:0e:b6:2b:b0:df:de:e8: 5a:8d:5f:60:c8:33:6f:41:fa:b3:52:c3:a6:a2:08:9a:79:e2: 07:a0:07:d4:20:59:5c:d7:31:ca:de:b3:95:ce:78:65:c8:f1: 77:c0:65:0c:5d:ec:b1:d6:2a:0f:b2:d6:a3:5c:74:a1:c3:c8: 21:a4:f3:91:05:fb:0e:38:85:6a:c9:0f:4f:51:a0:23:da:ef: e0:48:ec:87:33:26:1a:9e:7c:8d:16:a0:76:0b:33:50:2e:e2: ea:8a:cc:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyl9wUzBTZe0yfafwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTlmYjZjOWEtY2UyOS00MWVlLWE0YWQtM2RlZTNmNzk3 MGE0MB4XDTI2MDEyNjAyMDAzMloXDTI2MDQyNjAxMDAzMlowLzEtMCsGA1UEAxMk ZTBmZjZhMjctODU2Yi00ZDZjLTk5MGUtNmVkMTQ5ZjFlOGY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgA7nRdCK3HYlbCKEp1QYt9u8149sbZ3BnBvH TeszCGD68ZY5Ydn4V9YLZUjtIGZ6Dq7+THDq6SSGldksgaitNvJGIr2x2RW/eRnn kUbZk/yOjrJbZr6F73NCGFCv25Pzws0psrciPOot59xtdgODz5WoNYvBvbIg9luM ZnpDTarQyEQtad0U6AvnIZOqtpXz/WNZ10pDkEoomZ945JdlIDnRq2Onp63AQx+m GrJmNjZ/ntkCX/kAll6MecKDQkyhR4u1Pb2iX222CXKIHZkURwXY2uKiolNZUUBP V9pJYqkdxBMgCxeNO6neoIqsHQgcCdRqB/zhmFhFSzqRY0ticQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGeF3r9k9Wtb3A4WEPDZ4KCokNAWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85OWZi NmM5YS1jZTI5LTQxZWUtYTRhZC0zZGVlM2Y3OTcwYTQvZGQ3ZjM3NGEtMzJmNS0z MjhiLWEzZjYtM2VhODU4NmE5NDM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOTlmYjZjOWEtY2UyOS00MWVlLWE0 YWQtM2RlZTNmNzk3MGE0Lzk5ZmI2YzlhLWNlMjktNDFlZS1hNGFkLTNkZWUzZjc5 NzBhNC5jcmwwHwYDVR0jBBgwFoAUZSJlk/hhOWSY4nrlbMI1s/Z+WzUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85OWZiNmM5YS1jZTI5LTQxZWUtYTRhZC0zZGVl M2Y3OTcwYTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxy3zMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABY4uDiuE3zuLFf/2jjedIhSe3E0f3U0AXtHIMEL6lK8P/PIzz/e74ZA jrE57/cnvj9lan8YsRX6UezCdWVKYrw3KUtpq5DN6XL2dqGfIwb+hcYt4zc6Qlt6 hmm2LHeisnmKRycXxlTcqEMPUxbSiExmJ3VXRUUep+8KQcXwF4gpX5wJM5s2jyk6 hU10DVtGdjO8WyevT3a9CZxoDrYrsN/e6FqNX2DIM29B+rNSw6aiCJp54gegB9Qg WVzXMcres5XOeGXI8XfAZQxd7LHWKg+y1qNcdKHDyCGk85EF+w44hWrJD09RoCPa 7+BI7IczJhqefI0WoHYLM1Au4uqKzCI= -----END CERTIFICATE-----Generated at Sat Feb 21 04:54:10 2026 by rpki-client