$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/9e5ebf40-c830-3982-802c-6fb0581c00a8.roa File: 9e5ebf40-c830-3982-802c-6fb0581c00a8.roa (raw, json) Hash identifier: D8ts0SU214gjp4Ha8dBbIy63SJRh6OADC4W4RN22jEo= Subject key identifier: B6:5B:D0:E0:42:07:DD:81:66:26:C1:79:A5:67:88:30:E1:85:2D:AB Certificate issuer: /CN=5c19a246-d9fa-481a-a4d7-010af8c132b3 Certificate serial: 010D0C9F4328584F655E6C75D8DE3251ABB56800 Authority key identifier: 18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/9e5ebf40-c830-3982-802c-6fb0581c00a8.roa Signing time: Mon 05 Oct 2026 01:00:13 +0000 ROA not before: Mon 05 Oct 2026 01:00:13 +0000 ROA not after: Sun 03 Jan 2027 02:00:13 +0000 asID: 398395 IP address blocks: 172.99.132.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 24 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:65:5e:6c:75:d8:de:32:51:ab:b5:68:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c19a246-d9fa-481a-a4d7-010af8c132b3 Validity Not Before: Oct 5 01:00:13 2026 GMT Not After : Jan 3 02:00:13 2027 GMT Subject: CN=96903e68-d368-4666-b493-511d3c9f702c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:57:ae:a6:47:0f:c5:b9:bb:0f:85:0b:1e:45: 7e:a1:cb:e6:6e:1f:39:26:5e:f5:2d:a7:4e:b5:08: 1a:0e:10:4f:7e:15:b3:dc:dc:5d:dc:7e:c7:14:8a: d7:45:f6:61:86:9d:4c:b6:99:fc:35:c8:29:cd:2a: e7:cc:3e:62:c8:aa:b2:e0:2f:1c:dd:a2:ca:d4:67: bf:8a:a9:e1:17:0b:24:09:68:68:89:8a:64:dc:39: 0c:0d:b0:b6:01:2f:c3:9f:61:a5:0c:c6:fc:f2:1e: f8:f6:d6:7c:2f:bc:72:12:c0:89:3d:f6:41:93:82: 00:8e:c9:e6:3c:de:44:63:9e:e0:90:d2:97:25:34: b1:49:ca:e2:2a:c7:1d:3b:e2:44:76:90:25:b1:2e: de:be:be:c7:d4:59:36:f1:ec:05:fd:86:cc:27:1b: 0a:6d:5f:e4:6d:06:23:3c:ea:3f:6d:7d:5a:8e:24: 7a:80:56:01:73:00:18:82:47:4d:e4:e6:28:27:cd: 8a:83:fd:6c:59:98:a0:4d:93:c0:91:c5:71:ed:30: 09:60:d5:14:21:57:d0:ab:79:39:f8:9c:f5:3b:94: 45:0d:d6:84:c9:cb:a2:09:7f:b6:0d:06:e1:24:65: af:12:3b:07:46:9d:66:25:6b:db:23:e1:d3:77:6d: 09:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:5B:D0:E0:42:07:DD:81:66:26:C1:79:A5:67:88:30:E1:85:2D:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/9e5ebf40-c830-3982-802c-6fb0581c00a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl X509v3 Authority Key Identifier: keyid:18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer sbgp-ipAddrBlock: critical IPv4: 172.99.132.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:3d:c4:79:e6:d8:78:0e:84:fd:f5:80:30:75:5e:15:80:54: 08:53:ca:4e:9d:4e:80:af:1e:a9:93:bc:80:10:01:60:63:38: c0:45:54:64:62:53:07:ba:ae:c9:bd:a2:4f:fc:b3:ed:80:50: 16:c9:86:32:5e:db:3f:80:70:33:49:53:ce:22:10:16:ff:1b: 30:6a:5d:65:2e:64:c2:14:81:3a:59:2f:f9:2a:bd:00:80:8b: 65:e3:f2:25:b7:a7:ab:d2:24:aa:0e:ed:da:9f:3b:0c:12:34: 38:ab:b8:a5:b7:37:4a:a8:05:f8:5d:61:ee:93:21:7f:fd:c8: 3f:00:df:b5:7e:e6:db:23:47:29:7e:ad:a9:bd:86:1a:90:c3: a5:06:f9:f6:ec:20:f2:b5:a4:b4:1c:83:d1:62:67:fb:23:82: 3b:ad:f2:70:82:b5:1e:29:4f:5e:83:f1:76:58:08:89:ae:78: a2:41:fa:54:a0:85:1a:d8:1a:23:6a:fb:8b:f1:19:d9:8c:41: c1:a0:48:0c:f6:6a:7c:59:7a:24:e0:7a:be:88:49:c3:81:b8: ff:3f:68:a6:1c:52:81:12:c4:a3:c5:3f:2b:1b:33:5b:ba:42: f7:73:65:a8:82:d6:77:dc:09:da:3a:66:c3:ee:e5:ef:f2:87: 0c:07:3b:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9lXmx12N4yUau1aAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWMxOWEyNDYtZDlmYS00ODFhLWE0ZDctMDEwYWY4YzEz MmIzMB4XDTI2MTAwNTAxMDAxM1oXDTI3MDEwMzAyMDAxM1owLzEtMCsGA1UEAxMk OTY5MDNlNjgtZDM2OC00NjY2LWI0OTMtNTExZDNjOWY3MDJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFeupkcPxbm7D4ULHkV+ocvmbh85Jl71LadO tQgaDhBPfhWz3Nxd3H7HFIrXRfZhhp1Mtpn8NcgpzSrnzD5iyKqy4C8c3aLK1Ge/ iqnhFwskCWhoiYpk3DkMDbC2AS/Dn2GlDMb88h749tZ8L7xyEsCJPfZBk4IAjsnm PN5EY57gkNKXJTSxScriKscdO+JEdpAlsS7evr7H1Fk28ewF/YbMJxsKbV/kbQYj POo/bX1ajiR6gFYBcwAYgkdN5OYoJ82Kg/1sWZigTZPAkcVx7TAJYNUUIVfQq3k5 +Jz1O5RFDdaEycuiCX+2DQbhJGWvEjsHRp1mJWvbI+HTd20JEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLZb0OBCB92BZibBeaVniDDhhS2rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81YzE5 YTI0Ni1kOWZhLTQ4MWEtYTRkNy0wMTBhZjhjMTMyYjMvOWU1ZWJmNDAtYzgzMC0z OTgyLTgwMmMtNmZiMDU4MWMwMGE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNWMxOWEyNDYtZDlmYS00ODFhLWE0 ZDctMDEwYWY4YzEzMmIzLzVjMTlhMjQ2LWQ5ZmEtNDgxYS1hNGQ3LTAxMGFmOGMx MzJiMy5jcmwwHwYDVR0jBBgwFoAUGBmr0BGL/MK+/l1zc0BDuuWTrnAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81YzE5YTI0Ni1kOWZhLTQ4MWEtYTRkNy0wMTBh ZjhjMTMyYjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrGOEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJk9xHnm2HgOhP31gDB1XhWAVAhTyk6dToCvHqmTvIAQAWBjOMBFVGRi Uwe6rsm9ok/8s+2AUBbJhjJe2z+AcDNJU84iEBb/GzBqXWUuZMIUgTpZL/kqvQCA i2Xj8iW3p6vSJKoO7dqfOwwSNDiruKW3N0qoBfhdYe6TIX/9yD8A37V+5tsjRyl+ ram9hhqQw6UG+fbsIPK1pLQcg9FiZ/sjgjut8nCCtR4pT16D8XZYCImueKJB+lSg hRrYGiNq+4vxGdmMQcGgSAz2anxZeiTger6IScOBuP8/aKYcUoESxKPFPysbM1u6 QvdzZaiC1nfcCdo6ZsPu5e/yhwwHO9Q= -----END CERTIFICATE-----Generated at Thu Oct 22 05:54:43 2026 by rpki-client