$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/322b0e3f-3c83-3c25-b0e4-64ab1f04c556.roa File: 322b0e3f-3c83-3c25-b0e4-64ab1f04c556.roa (raw, json) Hash identifier: HzZKIXd/zO1NvsvmTNTMjNx3ycNKEzIyqK0T9Hn6sso= Subject key identifier: 55:71:29:5E:43:34:4D:F5:81:48:32:4D:FA:3E:0D:62:94:DC:3B:E7 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F4983AF3817D5581AE5C13200 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/322b0e3f-3c83-3c25-b0e4-64ab1f04c556.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 99.198.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:83:af:38:17:d5:58:1a:e5:c1:32:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=7c5be9a6-e845-417f-aa2c-78590069512f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:fb:bb:9d:fb:ba:17:ae:24:05:10:ea:a9:f2: 79:36:85:64:d5:8b:f7:0d:0d:1d:df:d9:04:ce:10: 3a:03:97:bb:b6:67:b5:12:07:93:71:9e:e9:04:39: 6e:61:c7:5d:5f:0d:01:10:7e:a3:84:1a:3c:5b:83: 5b:be:ca:bd:44:43:06:1b:91:e1:36:f4:e0:b6:72: 0a:25:54:22:1a:ac:9c:48:c5:72:48:96:e3:19:78: 59:03:32:cf:1d:8d:99:41:50:f1:52:6a:66:74:6f: 63:dc:0f:00:6e:ca:27:47:a3:78:ef:68:79:0c:8e: c4:ea:af:22:e4:ac:28:d8:7c:98:10:a0:a8:31:0b: 3b:0f:c0:73:32:f4:41:62:24:0b:3d:00:c5:5b:3a: 9c:2e:1e:9c:fc:a8:80:7b:63:83:12:7d:1b:2c:28: 47:62:47:86:1a:a5:27:d0:ef:ce:dc:96:6d:af:9c: b3:1c:40:b3:c2:9a:8c:72:6f:88:1f:f3:93:f8:74: 95:ce:51:62:c4:c7:94:06:ca:12:97:f9:99:a6:d3: c7:92:9f:cc:10:bf:ed:ed:30:78:5e:2d:15:db:26: 44:8f:f4:7b:55:be:a7:13:d2:ae:51:f7:8b:9d:61: 5e:e7:1a:9e:b2:cd:bd:82:6a:59:cc:46:0c:64:b2: 41:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:71:29:5E:43:34:4D:F5:81:48:32:4D:FA:3E:0D:62:94:DC:3B:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/322b0e3f-3c83-3c25-b0e4-64ab1f04c556.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.198.46.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:7b:7a:08:8d:e4:5c:00:e7:c4:9c:b2:34:5b:ee:76:a8:a1: e1:87:ec:ba:e8:56:37:0a:ae:d2:98:99:43:e0:f1:e6:82:c2: 01:5a:39:be:7a:39:b2:36:2f:98:52:fa:40:ba:16:69:8a:1f: 38:c0:eb:83:a5:18:64:32:ed:5e:fb:f1:6e:c5:b8:1f:83:75: df:75:31:f8:64:58:07:53:25:5a:70:e2:82:22:fc:7e:4f:9e: 2e:dc:bc:43:1b:59:6b:fa:61:73:29:5a:85:55:c2:02:46:5c: 89:12:c3:d0:41:61:af:f0:17:b4:00:fc:95:cb:76:95:25:73: 4c:80:e5:09:84:a0:95:df:79:02:49:68:61:e5:c4:86:7b:21: ce:6a:3a:fb:ea:8b:6e:c3:6c:5d:b2:5b:e9:05:7c:06:c7:ab: da:7b:5d:17:c7:df:8a:ca:e4:6d:ae:1e:4a:4b:d9:7a:bc:cb: 19:d9:43:f7:50:b4:83:a3:85:ec:5a:fe:29:3a:c3:1e:f8:92: 7c:5c:a2:5a:9c:3d:b3:85:81:99:57:f3:b8:fd:59:b8:e4:6f: 21:94:71:83:83:45:6b:a5:ad:ea:03:6f:a2:b1:1f:7f:c9:81: 32:b3:ba:ab:c4:aa:a8:6f:26:42:6a:dc:73:a8:51:ab:5f:f0: 9d:17:d0:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jg684F9VYGuXBMgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk N2M1YmU5YTYtZTg0NS00MTdmLWFhMmMtNzg1OTAwNjk1MTJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/u7nfu6F64kBRDqqfJ5NoVk1Yv3DQ0d39kE zhA6A5e7tme1EgeTcZ7pBDluYcddXw0BEH6jhBo8W4Nbvsq9REMGG5HhNvTgtnIK JVQiGqycSMVySJbjGXhZAzLPHY2ZQVDxUmpmdG9j3A8AbsonR6N472h5DI7E6q8i 5Kwo2HyYEKCoMQs7D8BzMvRBYiQLPQDFWzqcLh6c/KiAe2ODEn0bLChHYkeGGqUn 0O/O3JZtr5yzHECzwpqMcm+IH/OT+HSVzlFixMeUBsoSl/mZptPHkp/MEL/t7TB4 Xi0V2yZEj/R7Vb6nE9KuUfeLnWFe5xqess29gmpZzEYMZLJB4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFVxKV5DNE31gUgyTfo+DWKU3DvnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMzIyYjBlM2YtM2M4My0z YzI1LWIwZTQtNjRhYjFmMDRjNTU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8YuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALN7egiN5FwA58ScsjRb7naooeGH7LroVjcKrtKYmUPg8eaCwgFaOb56 ObI2L5hS+kC6FmmKHzjA64OlGGQy7V778W7FuB+Ddd91MfhkWAdTJVpw4oIi/H5P ni7cvEMbWWv6YXMpWoVVwgJGXIkSw9BBYa/wF7QA/JXLdpUlc0yA5QmEoJXfeQJJ aGHlxIZ7Ic5qOvvqi27DbF2yW+kFfAbHq9p7XRfH34rK5G2uHkpL2Xq8yxnZQ/dQ tIOjhexa/ik6wx74knxcolqcPbOFgZlX87j9WbjkbyGUcYODRWulreoDb6KxH3/J gTKzuqvEqqhvJkJq3HOoUatf8J0X0PA= -----END CERTIFICATE-----Generated at Tue Sep 29 01:52:00 2026 by rpki-client