$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/09f382a9-5c90-3538-af23-04618afe943c.roa File: 09f382a9-5c90-3538-af23-04618afe943c.roa (raw, json) Hash identifier: 3ZfHz7zP15hIiFWxZiMrGgHsUuYMEy++EY+GCquyh9I= Subject key identifier: 32:A1:C2:EE:AE:2B:3D:50:48:1C:3F:4F:5C:FF:D7:A2:DC:21:A3:9D Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F49838E4EC317B29224C6DD00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/09f382a9-5c90-3538-af23-04618afe943c.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 99.196.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:83:8e:4e:c3:17:b2:92:24:c6:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=a23f0ddf-49ce-4156-b91c-8b9316350c31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:bf:17:7a:5c:23:70:02:eb:4c:ef:19:75:a2: fb:8c:a5:79:49:22:1d:4a:e8:0c:72:f9:80:36:78: 5e:bd:cf:2d:bd:f7:5d:0a:d0:8a:36:4c:7d:37:f3: 44:cc:e2:03:50:7e:fd:8f:6e:3f:14:82:61:27:9c: 3f:a5:8d:2b:38:fe:da:f8:5f:81:74:23:ba:c2:05: e9:4f:ee:ee:9f:e1:8b:cf:9a:08:0f:57:e5:7c:87: 48:78:81:ce:65:41:ab:f7:89:e7:fc:3d:1a:db:38: 75:84:31:eb:1c:6d:8d:a5:cb:1f:24:d2:c4:ad:d3: 09:11:d2:45:80:e8:6c:c9:7e:68:60:43:b6:a1:c0: 5d:1f:0c:55:c9:f6:f2:bf:d5:12:ea:b6:1e:11:f6: 55:e0:6b:30:98:e9:0a:de:24:9d:a3:12:65:e5:83: e4:1e:9c:8e:ac:66:4e:f3:f2:6a:04:af:28:69:8d: da:74:6d:1d:b9:1f:78:28:44:10:a3:8e:aa:3a:c0: 1a:2d:29:a3:92:fb:3c:61:3b:0e:4c:d9:38:96:e9: cb:2a:8a:f1:ce:71:22:06:5f:5e:b1:cf:5d:fa:dd: ea:7b:40:dc:80:42:86:37:eb:23:9e:4a:b0:8b:63: 90:c8:29:8c:17:c1:a6:ef:0f:a2:52:b2:57:c7:79: c8:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:A1:C2:EE:AE:2B:3D:50:48:1C:3F:4F:5C:FF:D7:A2:DC:21:A3:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/09f382a9-5c90-3538-af23-04618afe943c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.196.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:5a:98:60:f3:b2:1e:73:f2:d3:d0:8d:0f:9a:96:78:6c:8d: 97:26:73:56:b7:7b:76:64:27:3f:3a:26:47:9e:15:fd:58:f6: 15:49:b4:87:55:a6:43:55:a5:f3:af:27:0b:24:29:ec:80:d0: 19:78:19:ce:6e:b3:90:dd:4d:97:f0:20:38:3e:3f:ca:0f:61: b9:16:7b:e0:2a:a6:e8:b5:07:fe:62:44:2d:36:45:23:46:b4: be:c3:e3:b5:02:49:90:11:e2:6d:84:1c:ba:c2:92:b8:dd:12: e5:23:a8:59:86:3b:44:4e:2d:aa:95:80:17:87:bd:21:a1:ff: 59:b9:4b:9f:d7:ab:7c:e3:a4:eb:3e:a9:ea:81:6b:95:f7:9c: ec:e1:67:c2:1a:83:fb:dc:5f:0d:06:50:57:d0:84:c5:90:cd: 55:23:aa:49:7c:b7:c5:04:36:12:38:47:2b:61:86:59:fb:72: 4e:8a:7e:a6:b5:df:8c:e8:04:0f:8d:b9:bd:d8:f3:8d:26:01: 04:0b:76:54:70:9e:da:3a:d2:c3:39:38:15:61:7d:1e:54:d0: 95:26:56:ca:f0:b2:7d:72:4e:ff:a1:8f:b0:78:e8:9c:35:d6: 19:bc:d7:0d:fc:44:95:24:6c:40:f3:d1:d5:5e:5f:97:47:9b: 25:e2:73:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jg45OwxeykiTG3QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YTIzZjBkZGYtNDljZS00MTU2LWI5MWMtOGI5MzE2MzUwYzMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlr8XelwjcALrTO8ZdaL7jKV5SSIdSugMcvmA Nnhevc8tvfddCtCKNkx9N/NEzOIDUH79j24/FIJhJ5w/pY0rOP7a+F+BdCO6wgXp T+7un+GLz5oID1flfIdIeIHOZUGr94nn/D0a2zh1hDHrHG2NpcsfJNLErdMJEdJF gOhsyX5oYEO2ocBdHwxVyfbyv9US6rYeEfZV4GswmOkK3iSdoxJl5YPkHpyOrGZO 8/JqBK8oaY3adG0duR94KEQQo46qOsAaLSmjkvs8YTsOTNk4lunLKorxznEiBl9e sc9d+t3qe0DcgEKGN+sjnkqwi2OQyCmMF8Gm7w+iUrJXx3nIvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDKhwu6uKz1QSBw/T1z/16LcIaOdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMDlmMzgyYTktNWM5MC0z NTM4LWFmMjMtMDQ2MThhZmU5NDNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8TKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFlamGDzsh5z8tPQjQ+alnhsjZcmc1a3e3ZkJz86JkeeFf1Y9hVJtIdV pkNVpfOvJwskKeyA0Bl4Gc5us5DdTZfwIDg+P8oPYbkWe+Aqpui1B/5iRC02RSNG tL7D47UCSZAR4m2EHLrCkrjdEuUjqFmGO0ROLaqVgBeHvSGh/1m5S5/Xq3zjpOs+ qeqBa5X3nOzhZ8Iag/vcXw0GUFfQhMWQzVUjqkl8t8UENhI4Rythhln7ck6Kfqa1 34zoBA+Nub3Y840mAQQLdlRwnto60sM5OBVhfR5U0JUmVsrwsn1yTv+hj7B46Jw1 1hm81w38RJUkbEDz0dVeX5dHmyXic64= -----END CERTIFICATE-----Generated at Sun Oct 11 19:41:48 2026 by rpki-client