$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/08b09676-5d28-3324-b657-f0a18c7d1343.roa File: 08b09676-5d28-3324-b657-f0a18c7d1343.roa (raw, json) Hash identifier: R/RtUFcPmEL8OAt5l5GHuLpQfwj1x3vRlntKXIumK3c= Subject key identifier: 01:07:44:99:99:41:58:F2:45:1E:A9:6B:DC:CF:EB:8C:4E:25:59:F6 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F49837E9F69EBB70FEE55B300 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/08b09676-5d28-3324-b657-f0a18c7d1343.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 99.196.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:83:7e:9f:69:eb:b7:0f:ee:55:b3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=ee384002-a424-4a81-aaee-9208a3a1203d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:34:13:58:ea:98:27:25:8f:d9:06:07:04:22: 66:00:f8:9f:92:7c:48:50:8a:79:c5:d2:9e:3f:09: fa:74:df:14:a3:bd:df:05:8e:5e:4c:bb:27:37:a8: fa:2d:61:ff:a6:e9:c3:ff:29:02:ac:fe:39:27:05: da:e4:e5:1c:65:e2:db:68:f4:7c:9a:30:1f:47:e2: 43:cd:c7:ec:a9:a7:60:2b:e8:06:a7:5f:9c:fb:b1: 44:09:03:f5:6a:81:f0:6b:fb:fe:17:30:0a:2c:9e: 9e:13:b7:ea:67:cb:92:ff:43:ee:9c:6f:ac:33:eb: 50:31:2f:b9:78:e3:03:ea:bf:6d:49:1f:a8:58:ad: d8:35:f4:35:b9:2f:f0:ef:9f:d8:94:04:54:40:84: 11:18:c0:78:40:35:81:23:44:3c:dc:cc:5d:e8:88: f9:c4:73:a9:3a:d3:70:74:e9:28:01:26:e4:eb:c2: 9e:db:a9:20:5c:a1:da:6c:c4:b3:81:00:0c:18:fe: d8:75:ce:72:75:1e:54:4f:ba:f4:3a:18:43:01:0c: da:2b:7a:54:eb:ec:cf:dd:8e:17:42:4c:41:ea:c3: c5:d4:74:69:11:5a:53:e1:d9:4a:21:e6:65:be:80: 7c:92:c4:fa:f0:b2:1e:fa:2f:63:b3:23:7c:67:e0: 26:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:07:44:99:99:41:58:F2:45:1E:A9:6B:DC:CF:EB:8C:4E:25:59:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/08b09676-5d28-3324-b657-f0a18c7d1343.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.196.13.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:a8:a0:52:69:4e:80:a7:71:a7:8f:5a:06:d4:f0:ef:f9:63: 6a:8c:a0:29:97:df:3b:3a:ca:4f:7a:c6:96:b0:89:da:7a:22: b8:b6:dd:ef:7f:c0:6b:bf:ff:b2:95:62:39:e9:7b:03:6b:08: 49:a7:57:3f:07:9c:d0:6c:c6:af:44:06:ad:01:bd:cf:f1:ab: 69:88:34:45:61:0a:4b:fd:dd:5a:2e:dc:23:6c:b1:34:f5:2a: b4:2e:1d:21:cf:3b:e4:60:ac:90:b3:90:29:f7:78:61:79:90: 0d:9a:fe:8e:c7:03:5a:81:09:d1:ed:07:5f:f0:c4:f7:d1:e0: 8d:77:6c:1d:bb:c7:31:17:f9:58:5a:5a:04:c9:19:de:11:80: c7:51:bc:c0:07:c9:3c:34:a1:33:a4:41:b4:78:b0:59:e8:76: 0a:3c:36:7f:76:27:83:11:65:61:23:22:ea:fd:d3:22:8b:eb: d1:6e:36:06:31:fd:2c:c6:56:d7:b3:59:29:6f:e0:cc:dc:89: 46:69:8b:23:10:bf:72:20:f9:9c:9d:89:c5:6f:1e:b5:c4:e3: f4:51:47:79:a3:19:55:c7:ed:9c:7e:7c:57:1a:2e:90:17:b6: 79:09:af:6f:64:83:42:d5:2a:bc:a4:73:84:3f:30:03:81:cc: 7c:87:56:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jg36faeu3D+5VswAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZWUzODQwMDItYTQyNC00YTgxLWFhZWUtOTIwOGEzYTEyMDNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDQTWOqYJyWP2QYHBCJmAPifknxIUIp5xdKe Pwn6dN8Uo73fBY5eTLsnN6j6LWH/punD/ykCrP45JwXa5OUcZeLbaPR8mjAfR+JD zcfsqadgK+gGp1+c+7FECQP1aoHwa/v+FzAKLJ6eE7fqZ8uS/0PunG+sM+tQMS+5 eOMD6r9tSR+oWK3YNfQ1uS/w75/YlARUQIQRGMB4QDWBI0Q83Mxd6Ij5xHOpOtNw dOkoASbk68Ke26kgXKHabMSzgQAMGP7Ydc5ydR5UT7r0OhhDAQzaK3pU6+zP3Y4X QkxB6sPF1HRpEVpT4dlKIeZlvoB8ksT68LIe+i9jsyN8Z+AmHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAEHRJmZQVjyRR6pa9zP64xOJVn2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMDhiMDk2NzYtNWQyOC0z MzI0LWI2NTctZjBhMThjN2QxMzQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8QNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGyooFJpToCncaePWgbU8O/5Y2qMoCmX3zs6yk96xpawidp6Iri23e9/ wGu//7KVYjnpewNrCEmnVz8HnNBsxq9EBq0Bvc/xq2mINEVhCkv93Vou3CNssTT1 KrQuHSHPO+RgrJCzkCn3eGF5kA2a/o7HA1qBCdHtB1/wxPfR4I13bB27xzEX+Vha WgTJGd4RgMdRvMAHyTw0oTOkQbR4sFnodgo8Nn92J4MRZWEjIur90yKL69FuNgYx /SzGVtezWSlv4MzciUZpiyMQv3Ig+ZydicVvHrXE4/RRR3mjGVXH7Zx+fFcaLpAX tnkJr29kg0LVKrykc4Q/MAOBzHyHVhI= -----END CERTIFICATE-----Generated at Mon Sep 28 10:32:49 2026 by rpki-client