$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2d3bdb23-29ba-3ed2-95db-087bd1ce079a.roa File: 2d3bdb23-29ba-3ed2-95db-087bd1ce079a.roa (raw, json) Hash identifier: 83bT5Retf3OqiUslBThc8O9uapYZ/6Zs9n5ek7rFx6A= Subject key identifier: 69:26:09:DD:D5:0A:B7:71:B8:11:69:07:AE:0B:42:68:FD:28:E3:5E Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E091A97D6D22A1BC88AA80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2d3bdb23-29ba-3ed2-95db-087bd1ce079a.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 99.196.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:91:a9:7d:6d:22:a1:bc:88:aa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=dae530dc-b251-4e8f-9eb4-e4c12971ae27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:3f:58:ac:a9:82:b7:ff:24:97:79:18:fb:5f: a7:a3:00:72:54:42:3b:bd:3d:40:99:0c:de:a2:b5: f0:8b:6b:93:3d:a5:9c:4f:8d:af:f2:f2:c5:6e:79: c4:e5:09:37:79:f6:16:0b:25:c1:b9:f3:e5:1d:3e: c3:bb:eb:9b:65:f3:b6:71:1d:f9:60:92:2e:e5:39: 76:68:00:7d:71:e1:38:5c:9d:51:4f:8f:51:78:db: 8b:ab:cf:85:07:aa:0f:1d:d1:34:b2:89:9a:55:ff: 57:0a:d9:32:23:14:b5:b7:3f:58:db:2d:e7:6e:94: 24:38:5f:3e:e5:b0:2c:31:c9:34:9e:ee:ff:8b:b0: 7a:29:ce:17:02:79:0f:3a:88:6f:5f:a1:ae:13:52: 23:89:56:04:5a:da:e6:b4:b7:71:61:45:1d:fc:33: 40:0b:d3:d4:7c:66:d5:13:70:15:8b:af:c5:20:00: 86:68:78:4b:68:b1:31:bc:2c:15:8e:f4:29:68:90: 54:3b:e1:1a:6f:14:82:81:fe:14:10:ef:15:5e:27: c4:f4:f9:ee:9c:1a:d1:e7:c0:ba:47:41:35:b4:b2: 16:45:f5:03:d5:7f:95:80:1f:42:99:ee:6a:87:47: 36:af:c7:41:40:95:64:6f:a9:83:2a:03:4c:89:19: e0:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:26:09:DD:D5:0A:B7:71:B8:11:69:07:AE:0B:42:68:FD:28:E3:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2d3bdb23-29ba-3ed2-95db-087bd1ce079a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.196.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:df:25:25:bd:02:9c:e3:57:99:3c:be:0c:6e:8a:b6:fb:79: f3:0c:e8:4a:3a:97:be:0a:55:36:d1:00:a5:d2:62:ff:42:7d: 22:b4:03:b3:a3:3a:01:a4:fb:7c:b6:50:7a:a9:58:a5:0d:fc: 69:c2:47:fa:d4:55:c8:7e:99:ee:d1:7a:a0:4b:75:f4:cf:b5: f6:90:61:e5:17:d6:60:f2:55:2b:e0:09:08:d0:94:2c:28:22: 6d:5b:63:d3:9a:27:c6:3b:83:34:7f:80:a3:dd:c8:12:06:bb: a4:a3:1f:af:e6:fb:5b:26:27:91:ca:1a:f1:8c:86:71:67:7a: f3:0d:08:9b:b7:f2:f2:31:de:a8:ff:ea:61:c4:90:fd:6e:cf: ec:e3:4d:07:ae:5c:b5:6d:c7:17:3e:4e:c3:cd:38:c9:c8:bb: 49:b0:cb:7f:3b:f9:c2:7b:8c:62:11:1b:cb:be:ee:93:b5:cc: c9:fb:29:63:e6:2f:27:15:df:b9:73:d0:5b:7a:c7:f6:ff:50: fd:42:3f:8b:aa:45:64:8e:de:2a:aa:67:b7:52:6e:98:28:50: 3b:4e:84:ed:07:2b:4b:7f:94:71:78:16:ed:0e:12:95:2c:d5: 58:92:52:7c:eb:83:ca:20:aa:be:34:11:99:41:c2:34:f9:9e: 9f:b5:7f:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4JGpfW0iobyIqoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ZGFlNTMwZGMtYjI1MS00ZThmLTllYjQtZTRjMTI5NzFhZTI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlT9YrKmCt/8kl3kY+1+nowByVEI7vT1AmQze orXwi2uTPaWcT42v8vLFbnnE5Qk3efYWCyXBufPlHT7Du+ubZfO2cR35YJIu5Tl2 aAB9ceE4XJ1RT49ReNuLq8+FB6oPHdE0somaVf9XCtkyIxS1tz9Y2y3nbpQkOF8+ 5bAsMck0nu7/i7B6Kc4XAnkPOohvX6GuE1IjiVYEWtrmtLdxYUUd/DNAC9PUfGbV E3AVi6/FIACGaHhLaLExvCwVjvQpaJBUO+EabxSCgf4UEO8VXifE9PnunBrR58C6 R0E1tLIWRfUD1X+VgB9Cme5qh0c2r8dBQJVkb6mDKgNMiRngBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGkmCd3VCrdxuBFpB64LQmj9KONeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMmQzYmRiMjMtMjliYS0z ZWQyLTk1ZGItMDg3YmQxY2UwNzlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8SMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAnfJSW9ApzjV5k8vgxuirb7efMM6Eo6l74KVTbRAKXSYv9CfSK0A7Oj OgGk+3y2UHqpWKUN/GnCR/rUVch+me7ReqBLdfTPtfaQYeUX1mDyVSvgCQjQlCwo Im1bY9OaJ8Y7gzR/gKPdyBIGu6SjH6/m+1smJ5HKGvGMhnFnevMNCJu38vIx3qj/ 6mHEkP1uz+zjTQeuXLVtxxc+TsPNOMnIu0mwy387+cJ7jGIRG8u+7pO1zMn7KWPm LycV37lz0Ft6x/b/UP1CP4uqRWSO3iqqZ7dSbpgoUDtOhO0HK0t/lHF4Fu0OEpUs 1ViSUnzrg8ogqr40EZlBwjT5np+1fz4= -----END CERTIFICATE-----Generated at Thu Mar 26 15:42:33 2026 by rpki-client