$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd9ab029-fead-4e1c-b7cc-3aedf23a797f/5c321eb2-77c0-3367-a9c5-6d1e9f4412a8.roa File: 5c321eb2-77c0-3367-a9c5-6d1e9f4412a8.roa (raw, json) Hash identifier: M3iggXkvFTn40MDRoHbcgZvDtNRe8rHRmOWozC/RXLA= Subject key identifier: AE:9D:8D:B0:D8:A4:50:E3:FE:32:C0:EA:91:E8:7A:83:4C:5A:5F:B7 Certificate issuer: /CN=fd9ab029-fead-4e1c-b7cc-3aedf23a797f Certificate serial: 010D0C9F4328584EA7887D5F2ABABAD6199F7880 Authority key identifier: 91:C7:D6:BD:DC:41:CD:1D:2A:AE:C6:8E:26:AF:B6:FA:74:7E:B0:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd9ab029-fead-4e1c-b7cc-3aedf23a797f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd9ab029-fead-4e1c-b7cc-3aedf23a797f/5c321eb2-77c0-3367-a9c5-6d1e9f4412a8.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 398395 IP address blocks: 172.99.148.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd9ab029-fead-4e1c-b7cc-3aedf23a797f/fd9ab029-fead-4e1c-b7cc-3aedf23a797f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd9ab029-fead-4e1c-b7cc-3aedf23a797f/fd9ab029-fead-4e1c-b7cc-3aedf23a797f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd9ab029-fead-4e1c-b7cc-3aedf23a797f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:7d:5f:2a:ba:ba:d6:19:9f:78:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd9ab029-fead-4e1c-b7cc-3aedf23a797f Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=0a735da5-3ec1-408d-b873-4b4caee609a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:99:f9:01:a7:74:2d:ce:2d:02:3c:04:aa:83: 87:12:da:9c:bc:3a:9d:8b:de:c3:1b:bc:05:ce:e4: c4:25:59:2c:36:f5:de:8f:fa:da:61:3b:fa:bb:dd: f9:85:b4:aa:f3:f8:8a:4e:36:c0:30:5d:52:75:de: e5:91:2a:70:e4:5c:af:64:07:ef:82:c6:16:2a:43: 2c:a5:1c:57:8c:78:a6:dc:b1:9d:c0:ea:e7:9e:a3: 32:28:d9:fe:fa:96:c8:4b:c4:49:c8:cf:d5:50:f4: 03:a7:ef:0f:f2:55:22:5a:4f:6c:dc:5e:46:0a:f0: bc:98:7b:ba:23:c3:b3:38:dd:e5:03:a5:a4:28:c5: 3f:0c:b4:8a:e1:bf:85:d1:34:aa:f3:9f:93:76:38: 85:ae:5a:04:6d:72:d5:0d:14:e4:60:84:d6:e5:f0: 37:5c:83:8e:84:08:dc:9f:66:6a:a1:d0:fc:dd:4c: d7:89:e6:36:17:9f:91:8d:b7:45:d0:13:33:ef:81: a6:07:44:29:ae:98:02:2a:91:09:28:45:56:44:99: fc:ce:40:d1:1d:8c:17:06:d6:da:4e:d2:4f:fc:41: 21:7b:23:91:6f:eb:33:0b:f1:11:11:1b:40:22:d3: bd:b8:bb:5d:59:93:9b:2e:70:46:a7:f8:e5:12:93: 1d:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:9D:8D:B0:D8:A4:50:E3:FE:32:C0:EA:91:E8:7A:83:4C:5A:5F:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd9ab029-fead-4e1c-b7cc-3aedf23a797f/5c321eb2-77c0-3367-a9c5-6d1e9f4412a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd9ab029-fead-4e1c-b7cc-3aedf23a797f/fd9ab029-fead-4e1c-b7cc-3aedf23a797f.crl X509v3 Authority Key Identifier: keyid:91:C7:D6:BD:DC:41:CD:1D:2A:AE:C6:8E:26:AF:B6:FA:74:7E:B0:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd9ab029-fead-4e1c-b7cc-3aedf23a797f.cer sbgp-ipAddrBlock: critical IPv4: 172.99.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:a1:12:ee:f8:2e:b7:0b:44:b7:cd:0d:35:35:36:8d:09:b8: 70:5f:05:ad:1a:fa:04:1e:5f:09:99:5c:87:47:c4:c5:a1:55: f8:44:14:80:5b:47:a9:a1:b7:40:01:de:60:77:42:eb:89:f5: 49:cf:82:6d:7c:fe:56:57:f7:c5:5b:c9:8a:e7:7a:d5:8d:c7: a3:3d:05:83:58:cc:d1:b4:9c:d5:95:78:b3:c1:a6:13:fe:b0: 0c:17:a8:fb:9d:39:cc:ad:11:2a:c2:f7:ba:a4:75:0d:59:cc: 92:4d:eb:e2:b8:4d:0f:2c:6b:a6:ef:4d:01:89:03:86:31:86: 2e:28:ac:d5:e5:3b:85:53:51:15:e0:2b:76:47:80:9d:29:db: 81:45:4c:b8:4d:e3:07:25:d7:4d:29:ab:b4:d8:7e:d6:70:6d: 4a:51:7d:52:98:0e:3c:05:27:f7:fc:e7:85:cf:9e:f8:fa:eb: 22:70:75:b0:7a:4d:1e:5a:73:c0:d8:21:ac:28:a3:62:65:93: 75:d9:95:24:fb:34:38:9d:0f:1e:5e:06:01:0f:52:12:65:62: 37:4e:b1:a0:57:ce:75:5b:ae:58:02:66:cc:b0:47:53:a5:22: 52:d9:12:18:dd:35:bc:87:0e:af:1f:b0:11:b1:30:0d:73:30: 1a:4a:3b:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niH1fKrq61hmfeIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmQ5YWIwMjktZmVhZC00ZTFjLWI3Y2MtM2FlZGYyM2E3 OTdmMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MGE3MzVkYTUtM2VjMS00MDhkLWI4NzMtNGI0Y2FlZTYwOWE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5n5Aad0Lc4tAjwEqoOHEtqcvDqdi97DG7wF zuTEJVksNvXej/raYTv6u935hbSq8/iKTjbAMF1Sdd7lkSpw5FyvZAfvgsYWKkMs pRxXjHim3LGdwOrnnqMyKNn++pbIS8RJyM/VUPQDp+8P8lUiWk9s3F5GCvC8mHu6 I8OzON3lA6WkKMU/DLSK4b+F0TSq85+TdjiFrloEbXLVDRTkYITW5fA3XIOOhAjc n2ZqodD83UzXieY2F5+RjbdF0BMz74GmB0QprpgCKpEJKEVWRJn8zkDRHYwXBtba TtJP/EEheyORb+szC/ERERtAItO9uLtdWZObLnBGp/jlEpMdTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK6djbDYpFDj/jLA6pHoeoNMWl+3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mZDlh YjAyOS1mZWFkLTRlMWMtYjdjYy0zYWVkZjIzYTc5N2YvNWMzMjFlYjItNzdjMC0z MzY3LWE5YzUtNmQxZTlmNDQxMmE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZmQ5YWIwMjktZmVhZC00ZTFjLWI3 Y2MtM2FlZGYyM2E3OTdmL2ZkOWFiMDI5LWZlYWQtNGUxYy1iN2NjLTNhZWRmMjNh Nzk3Zi5jcmwwHwYDVR0jBBgwFoAUkcfWvdxBzR0qrsaOJq+2+nR+sJIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9mZDlhYjAyOS1mZWFkLTRlMWMtYjdjYy0zYWVk ZjIzYTc5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrGOUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEGhEu74LrcLRLfNDTU1No0JuHBfBa0a+gQeXwmZXIdHxMWhVfhEFIBb R6mht0AB3mB3QuuJ9UnPgm18/lZX98VbyYrnetWNx6M9BYNYzNG0nNWVeLPBphP+ sAwXqPudOcytESrC97qkdQ1ZzJJN6+K4TQ8sa6bvTQGJA4Yxhi4orNXlO4VTURXg K3ZHgJ0p24FFTLhN4wcl100pq7TYftZwbUpRfVKYDjwFJ/f854XPnvj66yJwdbB6 TR5ac8DYIawoo2Jlk3XZlST7NDidDx5eBgEPUhJlYjdOsaBXznVbrlgCZsywR1Ol IlLZEhjdNbyHDq8fsBGxMA1zMBpKO6M= -----END CERTIFICATE-----Generated at Sat Sep 5 06:37:51 2026 by rpki-client