$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/235a6387-8e61-3db9-9681-79ae32b937d1.roa File: 235a6387-8e61-3db9-9681-79ae32b937d1.roa (raw, json) Hash identifier: NO25gHFm6mEdMQ6N6tDVAheV97nG0ORhEweBjDCKyOM= Subject key identifier: DE:D3:1E:F3:BC:42:4A:17:D0:9E:CA:27:9C:5C:0B:B1:7C:AE:C6:53 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F4983B153769FCDC4D690B360 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/235a6387-8e61-3db9-9681-79ae32b937d1.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 99.198.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:83:b1:53:76:9f:cd:c4:d6:90:b3:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=1a2395a0-6eac-480a-919f-c257ab7d1093 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:62:15:2c:d3:e7:83:08:49:1e:92:27:3b:48: fb:2e:cd:de:7a:fa:82:ef:3d:b8:bf:f6:ec:ae:b7: 16:b8:ec:99:83:ee:82:a3:85:37:ac:3d:50:7f:03: 9c:8f:68:d2:d4:42:89:ec:e5:87:b7:82:d2:71:5c: 95:a3:b1:b9:b7:32:29:9e:3c:c1:98:5e:65:2f:5a: 7d:b0:86:ab:11:e8:54:93:2b:3e:55:84:7e:16:6b: 35:4a:b8:37:56:7f:86:40:5f:8d:6a:41:37:b9:a9: 6b:c4:75:75:57:06:13:53:42:e7:51:23:7b:68:fd: 8d:b8:44:78:91:af:e6:99:c9:39:06:45:4e:2f:85: 33:7f:3b:34:20:35:c3:45:63:2f:d6:9d:d2:b2:d6: f9:e2:cf:bb:54:11:62:1b:29:58:ff:0f:3e:69:85: bc:4f:fb:63:9d:d6:28:2a:77:92:c4:a1:ba:99:8f: ff:43:d0:e0:b0:1a:62:1a:33:e7:79:62:ea:fc:c5: 9b:f8:79:36:cb:35:6d:7a:16:b8:fe:6b:6c:8c:12: d9:9f:78:47:ec:16:69:79:02:de:e4:ae:bc:f8:e8: 52:45:b7:9a:76:31:3c:17:4d:44:cd:9c:dd:8e:d9: 1c:9a:fb:2b:8d:e3:12:0b:80:48:a1:8a:5f:5c:7b: 48:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:D3:1E:F3:BC:42:4A:17:D0:9E:CA:27:9C:5C:0B:B1:7C:AE:C6:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/235a6387-8e61-3db9-9681-79ae32b937d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.198.60.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:70:46:eb:f5:c6:53:f6:c6:56:9e:63:dc:6a:db:5e:15:53: 86:81:db:0b:bb:28:b8:04:2e:3b:84:81:63:c0:b5:e5:f8:eb: b7:0c:96:fc:3d:a2:28:aa:88:81:c1:d7:2f:1e:7b:6d:29:81: 04:e9:b3:da:70:b3:3d:76:db:46:05:f2:b4:65:6a:00:44:83: 2d:7f:bb:e2:f1:4c:2f:5d:63:0c:f6:91:4c:f2:1e:d7:53:09: 48:82:e3:13:a3:d7:ad:ee:93:26:50:23:f0:b6:2b:66:ee:f0: 9d:36:32:04:fe:69:4a:a8:df:8c:62:71:07:2d:d0:62:3e:97: f7:96:70:df:7d:e5:b7:cf:69:10:37:e2:cc:15:3a:77:3b:55: 28:54:15:b8:2c:1b:1a:3b:52:2b:b4:20:b4:6b:0f:8b:da:8b: af:00:e2:fe:7b:d1:b7:13:2a:ab:c2:d8:96:35:1e:a1:b7:c1: 94:4d:cc:62:7c:7d:3d:9e:9b:06:44:a9:46:17:cd:ba:98:de: 41:02:17:36:62:9e:62:3f:35:f2:39:05:d1:73:4e:80:13:08: ee:6d:e7:3d:6c:06:52:e3:c1:cb:86:5b:99:9a:db:21:51:57: 21:bb:e1:ba:4c:ed:48:2d:06:8d:7c:02:98:af:63:11:ba:ce: 9b:f3:bb:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jg7FTdp/NxNaQs2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MWEyMzk1YTAtNmVhYy00ODBhLTkxOWYtYzI1N2FiN2QxMDkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWIVLNPngwhJHpInO0j7Ls3eevqC7z24v/bs rrcWuOyZg+6Co4U3rD1QfwOcj2jS1EKJ7OWHt4LScVyVo7G5tzIpnjzBmF5lL1p9 sIarEehUkys+VYR+Fms1Srg3Vn+GQF+NakE3ualrxHV1VwYTU0LnUSN7aP2NuER4 ka/mmck5BkVOL4Uzfzs0IDXDRWMv1p3Sstb54s+7VBFiGylY/w8+aYW8T/tjndYo KneSxKG6mY//Q9DgsBpiGjPneWLq/MWb+Hk2yzVteha4/mtsjBLZn3hH7BZpeQLe 5K68+OhSRbeadjE8F01EzZzdjtkcmvsrjeMSC4BIoYpfXHtIdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN7THvO8QkoX0J7KJ5xcC7F8rsZTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMjM1YTYzODctOGU2MS0z ZGI5LTk2ODEtNzlhZTMyYjkzN2QxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8Y8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB1wRuv1xlP2xlaeY9xq214VU4aB2wu7KLgELjuEgWPAteX467cMlvw9 oiiqiIHB1y8ee20pgQTps9pwsz1220YF8rRlagBEgy1/u+LxTC9dYwz2kUzyHtdT CUiC4xOj163ukyZQI/C2K2bu8J02MgT+aUqo34xicQct0GI+l/eWcN995bfPaRA3 4swVOnc7VShUFbgsGxo7Uiu0ILRrD4vai68A4v570bcTKqvC2JY1HqG3wZRNzGJ8 fT2emwZEqUYXzbqY3kECFzZinmI/NfI5BdFzToATCO5t5z1sBlLjwcuGW5ma2yFR VyG74bpM7UgtBo18ApivYxG6zpvzuw8= -----END CERTIFICATE-----Generated at Mon Sep 28 21:45:41 2026 by rpki-client