$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/238bfe04-4cf5-3527-a289-b0f0ac6c86af.roa File: 238bfe04-4cf5-3527-a289-b0f0ac6c86af.roa (raw, json) Hash identifier: iS2nVmYd9PFP8/qpzZRxQyy/GDD5fykqaIHknyumISE= Subject key identifier: EB:05:71:67:92:35:DA:3E:27:2E:0A:17:1C:5B:E6:5E:BF:7B:93:4B Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E09F95459FD92FE42F4F80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/238bfe04-4cf5-3527-a289-b0f0ac6c86af.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 99.197.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:9f:95:45:9f:d9:2f:e4:2f:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=e072f0e9-c346-47de-806e-dcabd9db7eae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:bc:ee:70:42:13:f0:61:58:23:a7:30:c1:98: f3:73:45:28:9c:2b:a9:44:1b:5e:f2:e4:60:1a:6b: 40:45:3c:3e:5a:18:cb:2d:f4:fa:50:52:dc:51:11: fe:d6:a1:c7:ac:1e:48:05:a3:11:0d:4f:d9:e4:03: 07:07:e2:ee:14:b6:86:80:77:ee:6c:26:f4:6f:e0: 1c:55:79:7b:ee:03:b7:bb:80:8c:a6:ca:80:72:5f: db:14:f1:8e:c9:57:71:a7:a1:06:30:6c:ce:b8:49: a9:60:c5:90:f8:cf:09:2c:79:5a:8b:6a:24:f9:5f: 07:11:57:e3:6b:c8:c8:00:88:89:64:1b:95:8e:04: 4c:77:9c:50:06:ff:b4:f3:ca:a3:83:93:21:c2:36: 81:7c:35:da:a0:d1:cc:6e:cb:ca:31:00:af:7d:77: e3:2c:83:3b:65:04:88:91:b1:7f:50:eb:e8:37:0f: 81:d9:a8:57:32:c3:4c:9e:23:8c:8e:7f:fd:e6:5a: bb:79:ad:ea:42:6e:c3:93:ed:27:74:c0:0c:00:ea: c7:ba:60:12:05:db:9a:54:2c:b6:5d:75:6f:9f:37: 95:66:60:cf:55:41:41:77:11:45:8f:b9:76:dd:c1: e1:1e:78:bd:31:1f:79:09:4f:1b:f5:9d:26:8b:59: 1b:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:05:71:67:92:35:DA:3E:27:2E:0A:17:1C:5B:E6:5E:BF:7B:93:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/238bfe04-4cf5-3527-a289-b0f0ac6c86af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.197.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:63:5d:2f:cc:9f:7a:c0:49:01:d5:d0:ee:e4:1d:83:6f:9e: 13:65:57:61:a6:c8:35:0e:72:ea:1c:2b:7b:81:b5:d1:80:f5: cd:de:60:56:d8:e2:38:35:15:9b:c8:31:1e:38:99:ed:6d:a3: 1d:d1:b1:3c:23:49:f9:a6:7c:d9:89:0d:b5:e2:ec:ca:15:c0: 2c:52:d3:88:3d:a8:42:dd:90:83:d2:a1:e9:53:87:97:80:d2: fb:f1:ca:d7:10:a2:6b:37:13:07:63:fe:57:db:13:88:c1:22: a5:38:76:62:c3:5b:b9:55:54:33:e5:89:85:98:c0:b1:93:4e: 23:c2:87:8e:31:11:5b:12:29:39:6b:66:4a:33:d7:f2:0c:6d: 85:4b:a1:a6:2f:3b:34:1d:25:fa:f3:2f:b5:25:ac:43:ef:63: ce:5b:c0:b6:79:ed:10:12:13:1a:6e:cc:b4:64:7a:14:91:ce: 7f:2e:f5:89:9c:8b:c4:c0:19:a8:1c:67:44:cd:4c:e7:2d:e2: 3a:18:bf:56:0d:0d:25:81:76:df:62:12:65:42:63:cd:10:4c: de:ae:28:cd:3a:af:cf:3d:94:2c:93:b7:dd:73:14:6d:a8:21: 84:52:bf:7c:e4:3e:52:11:91:7c:ca:34:b2:5d:18:54:da:90: d3:61:1f:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4J+VRZ/ZL+QvT4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ZTA3MmYwZTktYzM0Ni00N2RlLTgwNmUtZGNhYmQ5ZGI3ZWFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLzucEIT8GFYI6cwwZjzc0UonCupRBte8uRg GmtARTw+WhjLLfT6UFLcURH+1qHHrB5IBaMRDU/Z5AMHB+LuFLaGgHfubCb0b+Ac VXl77gO3u4CMpsqAcl/bFPGOyVdxp6EGMGzOuEmpYMWQ+M8JLHlai2ok+V8HEVfj a8jIAIiJZBuVjgRMd5xQBv+088qjg5MhwjaBfDXaoNHMbsvKMQCvfXfjLIM7ZQSI kbF/UOvoNw+B2ahXMsNMniOMjn/95lq7ea3qQm7Dk+0ndMAMAOrHumASBduaVCy2 XXVvnzeVZmDPVUFBdxFFj7l23cHhHni9MR95CU8b9Z0mi1kbXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOsFcWeSNdo+Jy4KFxxb5l6/e5NLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMjM4YmZlMDQtNGNmNS0z NTI3LWEyODktYjBmMGFjNmM4NmFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8X1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE1jXS/Mn3rASQHV0O7kHYNvnhNlV2GmyDUOcuocK3uBtdGA9c3eYFbY 4jg1FZvIMR44me1tox3RsTwjSfmmfNmJDbXi7MoVwCxS04g9qELdkIPSoelTh5eA 0vvxytcQoms3Ewdj/lfbE4jBIqU4dmLDW7lVVDPliYWYwLGTTiPCh44xEVsSKTlr Zkoz1/IMbYVLoaYvOzQdJfrzL7UlrEPvY85bwLZ57RASExpuzLRkehSRzn8u9Ymc i8TAGagcZ0TNTOct4joYv1YNDSWBdt9iEmVCY80QTN6uKM06r889lCyTt91zFG2o IYRSv3zkPlIRkXzKNLJdGFTakNNhH7k= -----END CERTIFICATE-----Generated at Thu Mar 26 17:11:27 2026 by rpki-client