$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2a2e920b-8af2-3da5-a0ac-9b8ffa86c438.roa File: 2a2e920b-8af2-3da5-a0ac-9b8ffa86c438.roa (raw, json) Hash identifier: a+lMvhjZu8qI9RMw8WnAsw1+k/0aS7VLtkBTPT3/wag= Subject key identifier: EC:6A:92:CB:D0:40:F1:BB:56:08:CD:92:24:7F:9D:EC:8F:47:B8:81 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E091849AF4A1DF8D2D8100 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2a2e920b-8af2-3da5-a0ac-9b8ffa86c438.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 99.196.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:91:84:9a:f4:a1:df:8d:2d:81:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=6b48bb5c-0ee5-417f-9ad9-73a3349f182e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:d1:21:5b:4a:74:17:36:ed:a4:0b:3d:ac:f9: c8:a5:4f:9c:76:9e:40:9b:38:e9:93:50:41:d0:d5: 73:75:ae:9f:cd:af:8c:04:42:6d:f0:38:7e:2a:15: 81:df:42:f2:d4:39:de:cc:73:a6:cc:1c:87:8e:0c: 0b:7b:f1:a2:f7:1d:4d:34:61:10:90:e9:dc:cd:43: 34:c5:76:b0:bb:7c:d7:1c:eb:61:37:13:83:31:b9: fd:a2:a2:c0:bd:07:e4:6b:73:b6:a5:57:e3:9e:79: c6:12:4b:e1:28:d2:e7:db:54:40:4f:6f:35:72:18: 44:b9:7c:4d:6d:01:44:91:e8:b9:ce:8c:44:f3:4e: 0e:fe:f5:3c:2f:ee:d5:17:a5:37:04:3a:0f:29:79: 7b:39:9b:45:58:20:02:ae:bb:51:a3:70:2d:83:44: 83:de:96:f5:89:07:fb:a3:52:46:e4:66:20:61:94: 15:6a:82:07:d0:14:29:56:c8:62:90:6e:f1:79:10: da:42:47:66:28:8d:05:14:03:56:38:b9:e2:aa:b5: 92:ab:23:e0:ed:24:4f:a5:18:d5:77:cb:9b:fc:3f: 89:78:89:a0:c5:a7:37:e5:55:88:80:a7:e1:50:93: 99:9f:c9:c9:17:b4:60:c8:08:7c:dd:bb:1b:a0:23: f9:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:6A:92:CB:D0:40:F1:BB:56:08:CD:92:24:7F:9D:EC:8F:47:B8:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2a2e920b-8af2-3da5-a0ac-9b8ffa86c438.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.196.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:17:e8:ea:3c:06:29:76:06:47:25:5f:c6:35:cb:69:bb:d5: 16:6d:15:03:69:32:4b:e4:f5:2a:eb:20:06:3a:c3:bc:77:a1: b8:77:ad:22:9d:fa:75:b4:50:0a:3e:d6:d2:5f:f6:48:19:fc: f8:89:d0:78:76:3a:78:30:55:cc:95:dd:b2:19:81:d3:fc:a2: 53:5e:f3:f8:fb:52:c0:46:99:f8:e7:87:7e:d7:f8:93:f9:59: 00:cc:88:ee:ea:15:dc:f9:f1:ae:a2:aa:b0:c7:6e:57:0d:0b: 5f:30:92:20:20:42:cf:b3:e2:0d:1a:e8:ce:c7:b3:37:9f:37: 2e:40:13:82:9a:c0:34:41:78:fe:5c:82:8a:4b:66:01:b2:5c: f2:a7:5b:01:23:f9:0a:a5:a5:a7:57:42:22:58:19:71:6c:42: 8f:bc:44:ab:e3:24:b2:5b:86:2f:6f:b6:e2:16:1b:0d:92:9c: b8:d9:28:1c:e5:22:6f:49:6d:c2:a9:45:e3:2b:b6:85:73:6b: d6:a1:64:f6:b2:40:1d:0e:5c:f6:07:ac:7c:cf:a9:fc:0c:b5: 16:41:18:7e:4b:d3:4d:7c:68:b4:ba:4f:ac:bf:39:40:c9:c7: dc:cb:d5:05:e5:24:f9:5f:63:8f:d9:fe:1f:75:21:83:bd:44: 4b:37:9f:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4JGEmvSh340tgQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NmI0OGJiNWMtMGVlNS00MTdmLTlhZDktNzNhMzM0OWYxODJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgtEhW0p0FzbtpAs9rPnIpU+cdp5Amzjpk1BB 0NVzda6fza+MBEJt8Dh+KhWB30Ly1DnezHOmzByHjgwLe/Gi9x1NNGEQkOnczUM0 xXawu3zXHOthNxODMbn9oqLAvQfka3O2pVfjnnnGEkvhKNLn21RAT281chhEuXxN bQFEkei5zoxE804O/vU8L+7VF6U3BDoPKXl7OZtFWCACrrtRo3Atg0SD3pb1iQf7 o1JG5GYgYZQVaoIH0BQpVshikG7xeRDaQkdmKI0FFANWOLniqrWSqyPg7SRPpRjV d8ub/D+JeImgxac35VWIgKfhUJOZn8nJF7RgyAh83bsboCP5eQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOxqksvQQPG7VgjNkiR/neyPR7iBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMmEyZTkyMGItOGFmMi0z ZGE1LWEwYWMtOWI4ZmZhODZjNDM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8SJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEQX6Oo8Bil2BkclX8Y1y2m71RZtFQNpMkvk9SrrIAY6w7x3obh3rSKd +nW0UAo+1tJf9kgZ/PiJ0Hh2OngwVcyV3bIZgdP8olNe8/j7UsBGmfjnh37X+JP5 WQDMiO7qFdz58a6iqrDHblcNC18wkiAgQs+z4g0a6M7HszefNy5AE4KawDRBeP5c gopLZgGyXPKnWwEj+QqlpadXQiJYGXFsQo+8RKvjJLJbhi9vtuIWGw2SnLjZKBzl Im9JbcKpReMrtoVza9ahZPayQB0OXPYHrHzPqfwMtRZBGH5L0018aLS6T6y/OUDJ x9zL1QXlJPlfY4/Z/h91IYO9REs3n3c= -----END CERTIFICATE-----Generated at Thu Mar 26 06:20:03 2026 by rpki-client