$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1aab2e9b-2fec-3b50-a5bb-ae677c938ced.roa File: 1aab2e9b-2fec-3b50-a5bb-ae677c938ced.roa (raw, json) Hash identifier: HPXlpKDERwzBQ9FlAa+mQG8L7k21zSSP6gnq/KDh6yQ= Subject key identifier: BB:FB:7D:CD:32:1E:46:55:37:0E:33:31:9C:74:3C:74:33:1A:0C:C1 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E093069F7D06F04A342F80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1aab2e9b-2fec-3b50-a5bb-ae677c938ced.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 99.196.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:93:06:9f:7d:06:f0:4a:34:2f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=c10f8830-57e6-46c3-80d7-e33942407308 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:e2:ad:3c:a9:92:f3:cc:75:05:50:15:86:8f: a5:c0:6b:32:d1:e2:db:7a:ea:4a:4c:1b:40:cf:e5: 15:7e:a5:ce:9b:58:70:22:ac:a2:25:d5:d2:38:3d: de:42:e6:4b:af:25:53:b7:16:f4:18:11:cf:62:84: 70:fb:68:d9:49:5f:80:0d:ef:7f:b5:fe:9e:6e:3b: 96:ed:75:bd:ff:ff:0a:f9:be:6f:f5:95:41:2a:cc: 70:a5:b6:f1:94:25:10:ec:66:77:11:55:e0:93:95: 0a:81:b2:b6:03:d6:1d:88:f9:05:85:43:eb:f3:84: 44:62:99:ce:7b:6b:c8:23:d8:21:65:6d:9b:6a:69: e5:f0:c2:83:ad:46:e1:9c:54:8f:86:2f:b2:95:0e: db:0f:0a:91:bc:23:0c:1f:87:8c:fd:82:74:79:f3: 53:dd:5b:13:02:9f:dc:38:af:37:77:ee:2a:59:ba: 64:72:6e:a8:7c:2f:be:4f:d0:25:44:9f:79:92:67: a4:b4:bc:ec:8a:07:af:9b:b9:f0:a9:72:de:02:b5: c7:8e:22:c4:7b:82:84:28:87:aa:da:ca:47:66:8b: 41:e2:c0:15:14:d1:4b:b7:1e:75:82:eb:52:3a:69: ea:44:29:c9:80:fc:62:7e:2d:21:42:89:0e:d7:c9: be:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:FB:7D:CD:32:1E:46:55:37:0E:33:31:9C:74:3C:74:33:1A:0C:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1aab2e9b-2fec-3b50-a5bb-ae677c938ced.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.196.175.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:fb:16:c0:e3:a0:45:de:98:e5:08:29:9f:56:91:cb:74:a7: c2:be:f4:90:f1:15:73:6f:59:59:43:4b:fa:b0:4b:02:46:6c: 19:44:49:62:4d:9d:64:26:14:79:ba:a2:10:37:02:73:25:30: 51:42:56:08:a3:3b:9d:c2:4e:50:98:47:ed:28:f7:36:68:c2: 3e:9d:34:81:0f:7c:37:1c:1d:44:77:a6:0e:f0:8c:4b:9c:3a: 47:83:f3:91:04:a9:7c:e3:d5:06:b4:5a:db:a2:f3:8c:eb:75: 44:bc:0d:16:b7:e7:92:4b:a1:de:60:6a:2a:8a:59:70:4f:50: 74:5a:06:c9:c2:69:d0:ea:04:aa:3c:1d:cd:04:93:8a:bd:e1: 32:8b:d6:e6:11:09:ed:4d:4f:d6:5c:88:66:06:56:a3:c1:37: 0b:33:ce:6b:a1:4e:a4:0b:58:e8:11:c8:fc:5d:d5:bb:df:d7: 5a:f8:00:07:66:66:d7:c2:6b:4a:07:ec:2e:05:52:47:40:8f: c7:c2:2c:21:73:19:31:88:26:43:00:c2:c7:cf:90:df:ae:b8: ca:9e:48:b1:1d:9a:9d:b1:2f:c9:68:4b:d8:1f:d2:f2:85:a8: 1c:a0:4c:ab:69:76:d8:56:48:9a:a6:4b:ef:38:05:c3:01:6f: 2d:ac:f8:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4JMGn30G8Eo0L4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk YzEwZjg4MzAtNTdlNi00NmMzLTgwZDctZTMzOTQyNDA3MzA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhuKtPKmS88x1BVAVho+lwGsy0eLbeupKTBtA z+UVfqXOm1hwIqyiJdXSOD3eQuZLryVTtxb0GBHPYoRw+2jZSV+ADe9/tf6ebjuW 7XW9//8K+b5v9ZVBKsxwpbbxlCUQ7GZ3EVXgk5UKgbK2A9YdiPkFhUPr84REYpnO e2vII9ghZW2bamnl8MKDrUbhnFSPhi+ylQ7bDwqRvCMMH4eM/YJ0efNT3VsTAp/c OK83d+4qWbpkcm6ofC++T9AlRJ95kmektLzsigevm7nwqXLeArXHjiLEe4KEKIeq 2spHZotB4sAVFNFLtx51gutSOmnqRCnJgPxifi0hQokO18m+uQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLv7fc0yHkZVNw4zMZx0PHQzGgzBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMWFhYjJlOWItMmZlYy0z YjUwLWE1YmItYWU2NzdjOTM4Y2VkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8SvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAP7FsDjoEXemOUIKZ9Wkct0p8K+9JDxFXNvWVlDS/qwSwJGbBlESWJN nWQmFHm6ohA3AnMlMFFCVgijO53CTlCYR+0o9zZowj6dNIEPfDccHUR3pg7wjEuc OkeD85EEqXzj1Qa0Wtui84zrdUS8DRa355JLod5gaiqKWXBPUHRaBsnCadDqBKo8 Hc0Ek4q94TKL1uYRCe1NT9ZciGYGVqPBNwszzmuhTqQLWOgRyPxd1bvf11r4AAdm ZtfCa0oH7C4FUkdAj8fCLCFzGTGIJkMAwsfPkN+uuMqeSLEdmp2xL8loS9gf0vKF qBygTKtpdthWSJqmS+84BcMBby2s+NI= -----END CERTIFICATE-----Generated at Thu Mar 26 06:20:37 2026 by rpki-client