$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9179e4ff-328d-4753-b8f9-9149f799cfec/d1a8c96f-965f-3f6d-9e75-b87e358360c9.roa File: d1a8c96f-965f-3f6d-9e75-b87e358360c9.roa (raw, json) Hash identifier: ShDBBcHrPlkLX6Y7+lp9tCwsF4JOug7hAMUkI9majdw= Subject key identifier: A8:6C:2A:53:C0:F4:96:C2:A4:74:3F:D8:E4:9A:0D:E6:E5:06:D6:DC Certificate issuer: /CN=9179e4ff-328d-4753-b8f9-9149f799cfec Certificate serial: 010D0C9F4328584F4BA41025E9285DFF918277C0 Authority key identifier: 65:75:5C:AB:1B:D8:C1:B4:32:0D:B7:E7:BE:2B:40:A9:D7:97:B7:1C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9179e4ff-328d-4753-b8f9-9149f799cfec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9179e4ff-328d-4753-b8f9-9149f799cfec/d1a8c96f-965f-3f6d-9e75-b87e358360c9.roa Signing time: Fri 25 Sep 2026 19:51:39 +0000 ROA not before: Fri 25 Sep 2026 19:51:39 +0000 ROA not after: Thu 24 Dec 2026 20:51:39 +0000 asID: 394203 IP address blocks: 172.99.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9179e4ff-328d-4753-b8f9-9149f799cfec/9179e4ff-328d-4753-b8f9-9149f799cfec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9179e4ff-328d-4753-b8f9-9149f799cfec/9179e4ff-328d-4753-b8f9-9149f799cfec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9179e4ff-328d-4753-b8f9-9149f799cfec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4b:a4:10:25:e9:28:5d:ff:91:82:77:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9179e4ff-328d-4753-b8f9-9149f799cfec Validity Not Before: Sep 25 19:51:39 2026 GMT Not After : Dec 24 20:51:39 2026 GMT Subject: CN=bcf78705-063c-478e-a3a5-2f2095fa54f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e0:0f:d4:69:3b:1b:0c:f0:74:0d:17:81:fb: 4e:95:a1:9c:ef:5e:4b:c8:2a:6f:3a:a2:15:7a:f2: 2b:c4:f9:47:63:db:15:c6:61:03:c4:da:7f:68:1b: 3c:79:7d:1d:e0:e9:c2:0b:13:07:eb:91:a0:f2:1b: be:6b:5f:ca:90:9e:54:01:a9:7e:d7:d4:ec:de:b3: 0e:a9:86:9f:79:54:0d:d4:3c:4d:17:06:18:af:c3: eb:24:d5:cb:8c:38:83:1c:86:30:9b:7c:32:0a:f9: ab:90:d0:b5:47:0a:f4:66:02:d1:27:d1:d3:62:47: c6:52:5f:67:5b:ae:ba:32:cf:dc:63:ee:99:9c:75: 1b:30:75:41:c6:eb:f6:57:04:7e:92:97:21:b1:aa: a8:56:d4:91:25:a9:49:d0:a5:f3:6e:da:d4:b4:a9: 1c:04:83:7e:74:f8:ae:1e:0a:65:db:a0:b4:8d:79: 18:c3:88:98:6a:90:a9:41:05:7c:7f:ec:e3:1d:d3: 7a:2a:18:e7:9d:28:e9:26:b3:ee:db:2f:ba:ae:b5: ad:b1:da:aa:c1:bc:e9:e4:64:0b:15:da:67:45:43: 3d:14:fa:ca:78:54:67:ff:4c:18:bf:1f:46:0e:80: 21:83:ee:95:8e:a9:75:53:fc:87:7e:0f:d7:1c:8e: 7a:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:6C:2A:53:C0:F4:96:C2:A4:74:3F:D8:E4:9A:0D:E6:E5:06:D6:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9179e4ff-328d-4753-b8f9-9149f799cfec/d1a8c96f-965f-3f6d-9e75-b87e358360c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9179e4ff-328d-4753-b8f9-9149f799cfec/9179e4ff-328d-4753-b8f9-9149f799cfec.crl X509v3 Authority Key Identifier: keyid:65:75:5C:AB:1B:D8:C1:B4:32:0D:B7:E7:BE:2B:40:A9:D7:97:B7:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9179e4ff-328d-4753-b8f9-9149f799cfec.cer sbgp-ipAddrBlock: critical IPv4: 172.99.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:5d:7c:5d:63:7f:4d:be:0c:9e:11:25:eb:bb:19:cb:dc:51: d6:c5:4c:01:6e:cb:cb:af:25:47:a1:de:a3:33:5b:71:3e:20: 25:5c:2c:1c:26:72:2e:a5:24:6e:68:2a:d2:2d:55:fb:e5:ca: de:5f:20:d4:e1:15:eb:38:b6:40:38:60:41:b4:79:91:e1:1a: 31:69:28:df:3b:3b:a9:77:dc:f4:8d:c2:21:6a:2a:26:e2:62: 4a:5f:26:c8:e5:8a:ca:a5:17:fa:d6:9d:08:56:f1:d5:8e:76: 45:b5:9a:aa:ab:c1:b6:01:de:c2:09:99:d3:d2:91:6c:ac:a9: e6:08:64:b8:11:c4:bd:73:5c:2c:c1:8f:23:db:6c:3f:76:68: b4:76:a6:43:56:31:23:75:00:31:1b:a5:7b:91:ff:f3:a4:fa: b8:90:50:df:3e:9e:2b:ce:bc:93:f4:b5:d2:15:41:1d:fe:07: 26:e5:bf:13:21:9b:1d:82:dd:cd:3c:e0:20:58:03:c2:54:1a: 93:37:ef:f2:41:ba:c4:62:69:64:70:76:41:38:b3:6b:d6:f7: af:c0:37:1a:b7:ae:82:dc:9e:98:22:72:d6:34:a5:c3:f8:91: 49:67:53:fc:ec:a4:a1:21:f9:87:af:40:fc:62:55:58:e8:49: ad:da:1f:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9LpBAl6Shd/5GCd8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE3OWU0ZmYtMzI4ZC00NzUzLWI4ZjktOTE0OWY3OTlj ZmVjMB4XDTI2MDkyNTE5NTEzOVoXDTI2MTIyNDIwNTEzOVowLzEtMCsGA1UEAxMk YmNmNzg3MDUtMDYzYy00NzhlLWEzYTUtMmYyMDk1ZmE1NGYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+AP1Gk7GwzwdA0XgftOlaGc715LyCpvOqIV evIrxPlHY9sVxmEDxNp/aBs8eX0d4OnCCxMH65Gg8hu+a1/KkJ5UAal+19Ts3rMO qYafeVQN1DxNFwYYr8PrJNXLjDiDHIYwm3wyCvmrkNC1Rwr0ZgLRJ9HTYkfGUl9n W666Ms/cY+6ZnHUbMHVBxuv2VwR+kpchsaqoVtSRJalJ0KXzbtrUtKkcBIN+dPiu Hgpl26C0jXkYw4iYapCpQQV8f+zjHdN6KhjnnSjpJrPu2y+6rrWtsdqqwbzp5GQL FdpnRUM9FPrKeFRn/0wYvx9GDoAhg+6Vjql1U/yHfg/XHI56jQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKhsKlPA9JbCpHQ/2OSaDeblBtbcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85MTc5 ZTRmZi0zMjhkLTQ3NTMtYjhmOS05MTQ5Zjc5OWNmZWMvZDFhOGM5NmYtOTY1Zi0z ZjZkLTllNzUtYjg3ZTM1ODM2MGM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTE3OWU0ZmYtMzI4ZC00NzUzLWI4 ZjktOTE0OWY3OTljZmVjLzkxNzllNGZmLTMyOGQtNDc1My1iOGY5LTkxNDlmNzk5 Y2ZlYy5jcmwwHwYDVR0jBBgwFoAUZXVcqxvYwbQyDbfnvitAqdeXtxwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85MTc5ZTRmZi0zMjhkLTQ3NTMtYjhmOS05MTQ5 Zjc5OWNmZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGP5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH1dfF1jf02+DJ4RJeu7GcvcUdbFTAFuy8uvJUeh3qMzW3E+ICVcLBwm ci6lJG5oKtItVfvlyt5fINThFes4tkA4YEG0eZHhGjFpKN87O6l33PSNwiFqKibi YkpfJsjlisqlF/rWnQhW8dWOdkW1mqqrwbYB3sIJmdPSkWysqeYIZLgRxL1zXCzB jyPbbD92aLR2pkNWMSN1ADEbpXuR//Ok+riQUN8+nivOvJP0tdIVQR3+ByblvxMh mx2C3c084CBYA8JUGpM37/JBusRiaWRwdkE4s2vW96/ANxq3roLcnpgictY0pcP4 kUlnU/zspKEh+YevQPxiVVjoSa3aH78= -----END CERTIFICATE-----Generated at Sat Sep 26 02:31:43 2026 by rpki-client