$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/332d63c2-3999-31a4-8a15-60aca8e080af.roa File: 332d63c2-3999-31a4-8a15-60aca8e080af.roa (raw, json) Hash identifier: EjuD9WUa4HhYL8HAajjiKdMApkFZ3rqWEq+Z9qJuZuk= Subject key identifier: E0:D4:F3:FC:F9:0D:51:30:88:81:F7:E3:77:98:45:20:71:9B:6F:6B Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24DFE2575430F51051023B80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/332d63c2-3999-31a4-8a15-60aca8e080af.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 99.196.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:e2:57:54:30:f5:10:51:02:3b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=932b5bdf-77af-4657-abe2-037b2ae8b97a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:e1:87:39:96:0a:56:18:b4:88:68:32:ec:d2: c5:89:9f:9f:27:cf:ab:aa:74:be:90:42:5b:d1:48: ad:f5:89:44:02:18:b2:bd:ef:5e:be:f4:56:d3:5d: bc:8d:9a:b3:ee:4b:e0:b1:a6:12:37:6e:31:12:fb: 50:47:2e:61:35:b1:9d:8f:e3:02:8b:0f:fa:f7:60: a1:81:fb:1a:99:4a:13:40:19:d2:d0:65:a6:65:e9: a3:4e:18:a9:60:f9:9a:a0:6d:48:fc:cd:9f:5e:01: 7d:7c:a5:b1:de:83:1d:8b:34:7b:41:b3:bf:7e:bd: 94:2c:11:a0:01:44:d5:7e:ca:8a:94:01:ab:11:6f: ea:d1:bf:2b:74:93:12:0d:04:8f:5f:be:d6:a6:ce: 04:29:c4:bc:c8:42:51:31:9f:be:8e:25:55:c8:11: 38:cf:8b:0c:f6:7e:95:d8:88:0f:32:f9:36:5a:f7: 0c:ed:78:9e:06:2c:cf:29:90:ce:dc:da:cb:48:7b: aa:52:ef:b7:35:4c:7d:ea:bd:b8:e1:cb:69:02:3c: 40:5b:05:73:df:e7:3d:cd:86:5c:c2:98:c9:e6:35: af:31:85:89:ea:5f:d4:f0:4c:e5:0a:91:0b:06:f6: 38:cd:ee:13:00:6b:39:97:d1:8f:7e:f2:eb:f0:22: 01:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:D4:F3:FC:F9:0D:51:30:88:81:F7:E3:77:98:45:20:71:9B:6F:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/332d63c2-3999-31a4-8a15-60aca8e080af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.196.98.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:ea:4d:7b:de:37:e0:f3:ef:f3:ad:bd:7d:96:87:76:00:ec: eb:a2:95:39:18:ce:47:10:38:19:a4:e5:fd:c5:c4:ef:d0:8b: c5:ef:7d:e7:6f:95:98:1d:c3:46:a3:f0:45:a9:2c:4c:c6:4f: c3:80:ce:2c:90:3d:44:8e:75:fd:08:60:ab:fe:48:4e:98:32: 24:d1:fc:fe:e2:06:af:23:82:e0:b7:ed:00:2b:7f:7e:50:d2: d4:76:01:b3:42:e2:f9:6a:8f:4d:f4:12:84:05:34:c7:df:4b: 98:93:c6:52:3e:ee:63:80:d9:e9:47:22:59:5e:f7:b2:e5:11: 70:fb:03:ad:38:37:c2:e6:77:48:ed:da:7e:d9:e9:d3:b7:66: ca:c7:d2:be:b7:3e:ae:9f:e1:12:db:1f:67:47:00:a2:ab:eb: 92:b3:20:a3:27:88:0c:fe:f4:5e:4a:8c:6c:0f:d3:af:81:38: e7:0b:0e:08:f3:af:c3:49:c9:7f:e0:7b:54:6c:1a:ed:39:02: c8:94:c7:33:e4:51:10:31:2b:45:fc:a7:dd:6d:28:fa:3b:ed: 5a:67:e8:ed:dc:31:cc:20:87:4d:d3:23:fe:da:56:eb:a1:bc: 11:aa:84:c4:71:0e:7a:36:f4:e3:b7:1e:46:7e:24:2c:af:fe: 96:6b:ed:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k3+JXVDD1EFECO4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk OTMyYjViZGYtNzdhZi00NjU3LWFiZTItMDM3YjJhZThiOTdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiOGHOZYKVhi0iGgy7NLFiZ+fJ8+rqnS+kEJb 0Uit9YlEAhiyve9evvRW0128jZqz7kvgsaYSN24xEvtQRy5hNbGdj+MCiw/692Ch gfsamUoTQBnS0GWmZemjThipYPmaoG1I/M2fXgF9fKWx3oMdizR7QbO/fr2ULBGg AUTVfsqKlAGrEW/q0b8rdJMSDQSPX77Wps4EKcS8yEJRMZ++jiVVyBE4z4sM9n6V 2IgPMvk2WvcM7XieBizPKZDO3NrLSHuqUu+3NUx96r244ctpAjxAWwVz3+c9zYZc wpjJ5jWvMYWJ6l/U8EzlCpELBvY4ze4TAGs5l9GPfvLr8CIBpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFODU8/z5DVEwiIH343eYRSBxm29rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMzMyZDYzYzItMzk5OS0z MWE0LThhMTUtNjBhY2E4ZTA4MGFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8RiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGLqTXveN+Dz7/OtvX2Wh3YA7OuilTkYzkcQOBmk5f3FxO/Qi8Xvfedv lZgdw0aj8EWpLEzGT8OAziyQPUSOdf0IYKv+SE6YMiTR/P7iBq8jguC37QArf35Q 0tR2AbNC4vlqj030EoQFNMffS5iTxlI+7mOA2elHIlle97LlEXD7A604N8Lmd0jt 2n7Z6dO3ZsrH0r63Pq6f4RLbH2dHAKKr65KzIKMniAz+9F5KjGwP06+BOOcLDgjz r8NJyX/ge1RsGu05AsiUxzPkURAxK0X8p91tKPo77Vpn6O3cMcwgh03TI/7aVuuh vBGqhMRxDno29OO3HkZ+JCyv/pZr7XU= -----END CERTIFICATE-----Generated at Thu Mar 26 16:32:24 2026 by rpki-client