$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1e07c0b9-6461-3439-8c37-f0ff7fbc1591.roa File: 1e07c0b9-6461-3439-8c37-f0ff7fbc1591.roa (raw, json) Hash identifier: jEGbPZgssD77uRn3BgykzPfaCyvcO+qlcPqW+ob/85U= Subject key identifier: 2D:D1:60:76:2F:8F:93:CA:5B:73:35:EA:13:42:C1:CA:A7:C7:52:32 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F497B71C05478908D71D7AA00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1e07c0b9-6461-3439-8c37-f0ff7fbc1591.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 99.197.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7b:71:c0:54:78:90:8d:71:d7:aa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=dbf14e40-660e-4542-81d0-f7815a7715d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:f0:7a:37:7b:33:1a:72:2c:d4:be:11:02:64: cb:e1:8e:e8:c6:ed:7c:a5:e8:74:7c:39:60:07:86: 2d:59:ee:ac:6d:83:e4:f1:e8:81:16:bc:c8:72:d4: 5e:f2:03:5f:9a:56:cd:d3:24:48:27:6f:56:ec:0d: 4e:a3:70:cb:ef:68:0d:fe:fe:2d:11:3c:a7:84:f9: 03:52:d8:aa:8d:a4:8a:bb:c4:f5:43:2f:c3:49:72: e1:2d:c4:2c:7e:80:5c:a9:aa:5a:38:3c:dc:48:2e: a9:0a:3c:35:63:15:9a:7a:47:21:9a:66:fb:dd:56: 97:75:2c:3b:bc:4d:e9:ae:07:2c:8d:7d:87:4d:8b: 16:89:24:6b:2b:d3:1d:f4:bf:73:a5:7c:7e:b7:84: 9d:20:80:44:37:65:84:31:dc:ca:62:1c:53:42:da: eb:37:c5:31:2d:51:2e:d8:89:a9:d6:2a:99:0e:b1: 1b:4d:45:2d:ac:08:97:06:93:92:fd:dd:95:0e:2a: 6d:f1:99:df:ab:5a:5f:12:9a:eb:d8:0b:45:79:cf: 40:41:d7:b4:65:c3:82:9d:87:1e:e0:92:ad:d0:f1: d4:c4:65:ac:d4:e2:60:b9:cd:ec:c9:08:80:be:e0: 2c:5d:fa:d0:ea:e6:bf:50:5c:52:a9:37:c9:7f:91: e9:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:D1:60:76:2F:8F:93:CA:5B:73:35:EA:13:42:C1:CA:A7:C7:52:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1e07c0b9-6461-3439-8c37-f0ff7fbc1591.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.197.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:a7:12:62:1d:5c:dd:a4:a3:f3:7e:2b:b2:80:77:f6:5d:51: 9c:cf:da:19:01:7c:93:ed:e6:5b:8d:6c:58:00:54:55:e5:f0: 45:75:24:a6:05:55:f8:e1:da:b9:5b:be:3d:55:92:cd:ce:af: c0:43:1f:e3:dc:d1:60:f2:89:31:4d:9a:67:44:e5:7c:12:36: ae:68:d2:51:4c:c2:f2:31:53:04:39:5c:c8:bb:e5:aa:90:dd: e1:aa:9a:e3:47:11:40:b5:fa:f8:de:59:9a:39:0e:11:a9:ee: a8:86:32:ee:78:c6:65:aa:0b:be:f2:23:f7:21:96:52:80:30: 6c:47:fc:d5:53:35:74:d5:3f:7c:0d:93:2d:b1:66:5d:af:08: e1:aa:5a:bf:09:09:f9:5b:6f:9e:c0:86:2d:b2:9c:16:a6:3e: 74:0a:d6:f6:9f:7a:09:34:9f:de:24:dc:70:9d:83:28:1c:a4: a9:ab:5c:61:42:db:59:d5:cd:6b:65:d2:b9:2b:22:e6:5b:9a: 4d:6a:9b:4a:e6:ed:a3:8b:6e:d2:e1:48:56:4b:fa:bc:51:d8: c6:0d:16:63:5e:4f:71:e3:5e:1c:a6:fa:90:7d:98:e8:dc:f9: cf:f4:c9:b4:bd:58:ea:15:2d:eb:9a:0b:90:ea:49:e9:17:fd: ae:3e:5f:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Je3HAVHiQjXHXqgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZGJmMTRlNDAtNjYwZS00NTQyLTgxZDAtZjc4MTVhNzcxNWQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjfB6N3szGnIs1L4RAmTL4Y7oxu18peh0fDlg B4YtWe6sbYPk8eiBFrzIctRe8gNfmlbN0yRIJ29W7A1Oo3DL72gN/v4tETynhPkD UtiqjaSKu8T1Qy/DSXLhLcQsfoBcqapaODzcSC6pCjw1YxWaekchmmb73VaXdSw7 vE3prgcsjX2HTYsWiSRrK9Md9L9zpXx+t4SdIIBEN2WEMdzKYhxTQtrrN8UxLVEu 2Imp1iqZDrEbTUUtrAiXBpOS/d2VDipt8Znfq1pfEprr2AtFec9AQde0ZcOCnYce 4JKt0PHUxGWs1OJguc3syQiAvuAsXfrQ6ua/UFxSqTfJf5HpSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC3RYHYvj5PKW3M16hNCwcqnx1IyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMWUwN2MwYjktNjQ2MS0z NDM5LThjMzctZjBmZjdmYmMxNTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8WoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACWnEmIdXN2ko/N+K7KAd/ZdUZzP2hkBfJPt5luNbFgAVFXl8EV1JKYF Vfjh2rlbvj1Vks3Or8BDH+Pc0WDyiTFNmmdE5XwSNq5o0lFMwvIxUwQ5XMi75aqQ 3eGqmuNHEUC1+vjeWZo5DhGp7qiGMu54xmWqC77yI/chllKAMGxH/NVTNXTVP3wN ky2xZl2vCOGqWr8JCflbb57Ahi2ynBamPnQK1vafegk0n94k3HCdgygcpKmrXGFC 21nVzWtl0rkrIuZbmk1qm0rm7aOLbtLhSFZL+rxR2MYNFmNeT3HjXhym+pB9mOjc +c/0ybS9WOoVLeuaC5DqSekX/a4+X/Q= -----END CERTIFICATE-----Generated at Tue Oct 13 01:17:58 2026 by rpki-client