$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/299865cd-8bfe-34c1-990c-0ed4c115ec15.roa File: 299865cd-8bfe-34c1-990c-0ed4c115ec15.roa (raw, json) Hash identifier: mhR90klvGn6o+/cp6x+orhCHO8tEptIjFaxh2k3woFU= Subject key identifier: A7:A3:27:29:B5:C9:8B:53:72:CD:0F:7D:D7:C1:C1:8D:E6:09:73:93 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E093A3D3F863AD8D236380 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/299865cd-8bfe-34c1-990c-0ed4c115ec15.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 99.196.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:93:a3:d3:f8:63:ad:8d:23:63:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=ffa38416-af48-4722-8db4-83e23a4bf1f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:56:e0:9d:56:ab:7b:98:66:80:97:e7:e0:f0: fd:84:d0:ed:27:16:ef:9b:2a:b4:ac:18:9e:cd:df: 61:62:bc:50:34:bb:f6:c5:55:6d:8f:e0:be:a0:d7: f1:f0:22:14:91:7b:4b:95:5e:24:c8:16:68:12:bb: 2f:d5:44:02:03:dd:91:cb:f6:4f:a2:a6:4d:50:0c: 77:7b:d0:fd:f2:b3:d1:84:14:2d:07:3f:57:62:6d: c4:4f:db:dd:ae:40:38:58:24:f6:01:7c:0f:2f:2c: 3f:13:dc:95:0c:fa:17:05:c5:3c:cd:2c:f6:87:91: 67:d4:68:f7:31:bb:a1:83:c4:05:7b:fb:71:42:21: 06:f7:07:f1:b0:cb:c4:86:f0:92:2e:1c:a8:2e:72: 85:fa:1c:fc:95:db:f5:20:ad:15:a4:46:bc:e4:b1: 22:02:82:e1:fe:2d:34:24:92:84:18:03:e0:01:65: 7f:74:aa:db:75:a6:ad:5d:5c:25:8d:77:b2:6a:57: ee:88:7f:54:0e:63:e8:ae:c1:7c:1f:bf:fe:3e:2c: 71:ee:9b:ce:5e:fb:f4:e1:67:69:f1:68:04:f5:1c: 15:90:62:09:bf:a3:5b:40:d0:c8:8c:74:c4:5c:92: 78:06:8d:3d:ae:d1:50:34:f1:a6:c4:d1:0f:57:ab: 4d:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:A3:27:29:B5:C9:8B:53:72:CD:0F:7D:D7:C1:C1:8D:E6:09:73:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/299865cd-8bfe-34c1-990c-0ed4c115ec15.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.196.187.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:31:4f:c6:c2:9a:69:be:b1:d7:47:10:95:9d:62:ed:1a:3e: e1:2d:1b:85:85:33:7d:0f:27:0f:13:38:b9:44:0f:54:83:4c: 6a:5f:b8:39:b3:2b:e9:2d:bd:b5:80:b5:54:db:8e:e5:55:4a: 99:60:f1:33:b7:1a:51:03:d9:bc:58:c7:ba:59:de:b8:20:b6: 9a:7f:ca:30:b8:1a:d9:b7:3a:84:85:bb:53:bb:6b:44:52:fc: b4:a6:11:56:9c:3b:a6:2c:e8:1d:4e:61:3c:30:e3:84:13:eb: 14:83:f4:96:8e:8d:b3:9c:ee:b6:0f:90:f4:74:a7:51:b4:18: 12:50:ab:e1:90:a5:5b:1a:60:08:c5:77:a3:aa:41:fa:a0:f0: a9:be:39:75:e0:7c:4c:bc:e4:9f:1a:1f:98:1e:ae:ee:46:93: 42:75:db:ad:cb:56:32:43:ec:25:a3:af:7b:e2:2c:d5:31:23: 45:e9:b9:55:df:6a:0a:6b:90:d0:96:75:d5:b0:62:4e:d8:45: 34:29:95:60:fd:dd:9c:81:ad:d6:55:6a:1b:8f:65:ff:a0:86: 74:20:4b:bc:1c:87:1c:75:1d:bd:44:04:24:b5:01:49:f2:fa: 16:ad:34:eb:e4:37:85:bf:49:7c:4b:0c:6a:00:ca:9d:07:7f: 2d:ef:4b:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4JOj0/hjrY0jY4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ZmZhMzg0MTYtYWY0OC00NzIyLThkYjQtODNlMjNhNGJmMWY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVbgnVare5hmgJfn4PD9hNDtJxbvmyq0rBie zd9hYrxQNLv2xVVtj+C+oNfx8CIUkXtLlV4kyBZoErsv1UQCA92Ry/ZPoqZNUAx3 e9D98rPRhBQtBz9XYm3ET9vdrkA4WCT2AXwPLyw/E9yVDPoXBcU8zSz2h5Fn1Gj3 Mbuhg8QFe/txQiEG9wfxsMvEhvCSLhyoLnKF+hz8ldv1IK0VpEa85LEiAoLh/i00 JJKEGAPgAWV/dKrbdaatXVwljXeyalfuiH9UDmPorsF8H7/+Pixx7pvOXvv04Wdp 8WgE9RwVkGIJv6NbQNDIjHTEXJJ4Bo09rtFQNPGmxNEPV6tNKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKejJym1yYtTcs0PfdfBwY3mCXOTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMjk5ODY1Y2QtOGJmZS0z NGMxLTk5MGMtMGVkNGMxMTVlYzE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8S7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADcxT8bCmmm+sddHEJWdYu0aPuEtG4WFM30PJw8TOLlED1SDTGpfuDmz K+ktvbWAtVTbjuVVSplg8TO3GlED2bxYx7pZ3rggtpp/yjC4Gtm3OoSFu1O7a0RS /LSmEVacO6Ys6B1OYTww44QT6xSD9JaOjbOc7rYPkPR0p1G0GBJQq+GQpVsaYAjF d6OqQfqg8Km+OXXgfEy85J8aH5geru5Gk0J1263LVjJD7CWjr3viLNUxI0XpuVXf agprkNCWddWwYk7YRTQplWD93ZyBrdZVahuPZf+ghnQgS7wchxx1Hb1EBCS1AUny +hatNOvkN4W/SXxLDGoAyp0Hfy3vS/Y= -----END CERTIFICATE-----Generated at Thu Mar 26 17:09:43 2026 by rpki-client