$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/41eeabcf-8f98-3cb1-98ea-082c4f2791ec.roa File: 41eeabcf-8f98-3cb1-98ea-082c4f2791ec.roa (raw, json) Hash identifier: quY23dg9pbhVdYWkjuJYlt5x/6qEHBNCvC1MOT6WR5k= Subject key identifier: 75:12:06:34:1C:BF:9B:50:AA:A4:55:42:3A:D3:8A:6D:D4:5B:99:03 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F4983AC657B8D6E6DE119B580 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/41eeabcf-8f98-3cb1-98ea-082c4f2791ec.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 99.198.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:83:ac:65:7b:8d:6e:6d:e1:19:b5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=e62b5166-14d5-42b8-879a-a177f2132fde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:10:a9:30:3b:26:21:70:43:8d:35:f7:6c:43: 1e:21:61:1d:fa:0c:7f:30:49:9c:b2:16:74:ad:fa: 58:82:cf:07:a0:ea:38:26:7f:e0:cb:e7:52:b8:09: f9:72:f0:8a:e8:b5:25:d4:63:94:70:06:63:62:3e: 06:97:ef:21:96:91:a1:7a:5d:bd:1f:51:d0:30:bb: 38:0f:8d:38:9f:6b:f2:88:db:18:e3:43:40:35:aa: 11:fc:fe:d1:8d:25:cc:db:61:67:80:14:af:fa:5b: 07:33:a3:d3:b9:4c:79:c4:d7:6b:41:fe:b6:5a:15: 1c:d4:78:81:46:72:03:b7:09:ec:f7:b8:1a:0b:61: ee:37:3f:5e:84:ec:cf:40:90:f0:31:2c:4a:8c:28: 73:cc:71:3a:67:e6:a9:33:48:64:7e:4a:db:36:f2: 18:4b:b3:b9:b9:e0:e0:8e:47:32:a0:72:55:dc:57: a6:bc:bf:f0:6e:b2:ca:74:88:68:b8:35:ea:38:e5: 75:14:ff:71:c2:7d:bf:74:0a:79:14:6f:f1:82:5b: 81:51:23:b0:58:97:61:7f:75:53:42:ef:ba:cb:77: 85:57:4f:5c:8f:f3:9f:85:84:31:e5:3e:8d:70:5c: 56:a8:f3:7a:ed:18:92:17:25:13:44:e3:c9:1b:27: d1:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:12:06:34:1C:BF:9B:50:AA:A4:55:42:3A:D3:8A:6D:D4:5B:99:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/41eeabcf-8f98-3cb1-98ea-082c4f2791ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.198.18.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:6a:75:af:5d:83:c4:5e:96:5f:d5:2d:27:89:e8:9b:87:c9: 91:7b:76:19:3a:db:d9:28:8f:0b:bd:94:f6:bf:78:34:34:ea: 28:ff:9e:a9:69:5c:4b:9b:4e:81:18:18:1a:cf:10:f4:41:48: a4:0c:5f:fa:5c:08:f6:9e:46:07:d9:6f:3f:df:45:ce:68:83: d1:b2:3e:3f:b5:5d:1a:e1:44:b6:e6:5d:a0:89:c3:10:eb:a7: af:cb:bc:68:f7:98:76:db:5f:f2:3e:37:3b:27:94:cd:76:66: 9d:75:51:74:b4:f9:4a:ca:8b:5a:68:b1:a9:88:ed:97:80:d9: be:ba:18:d2:6c:1a:01:da:ad:7d:ac:f6:88:08:e2:7a:92:f5: a0:16:81:b0:6d:60:44:f8:8d:20:33:61:98:c1:a4:7a:02:86: 2d:4e:8d:d6:c9:f1:4b:88:78:ba:18:ad:e5:3d:0e:87:d3:4a: 39:87:2c:96:d4:4e:4c:33:3a:2e:dc:64:d4:3e:b0:0a:01:e5: c3:31:2d:bd:12:34:ba:9e:44:14:92:8f:db:41:a9:bb:2d:37: 78:26:24:21:53:dc:25:a8:16:40:41:08:25:fd:d5:81:13:0d: 6d:8f:08:bf:22:9e:06:e2:c4:74:02:8b:7e:6f:50:98:44:eb: a5:b7:11:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jg6xle41ubeEZtYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZTYyYjUxNjYtMTRkNS00MmI4LTg3OWEtYTE3N2YyMTMyZmRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhCpMDsmIXBDjTX3bEMeIWEd+gx/MEmcshZ0 rfpYgs8HoOo4Jn/gy+dSuAn5cvCK6LUl1GOUcAZjYj4Gl+8hlpGhel29H1HQMLs4 D404n2vyiNsY40NANaoR/P7RjSXM22FngBSv+lsHM6PTuUx5xNdrQf62WhUc1HiB RnIDtwns97gaC2HuNz9ehOzPQJDwMSxKjChzzHE6Z+apM0hkfkrbNvIYS7O5ueDg jkcyoHJV3FemvL/wbrLKdIhouDXqOOV1FP9xwn2/dAp5FG/xgluBUSOwWJdhf3VT Qu+6y3eFV09cj/OfhYQx5T6NcFxWqPN67RiSFyUTROPJGyfRuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHUSBjQcv5tQqqRVQjrTim3UW5kDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNDFlZWFiY2YtOGY5OC0z Y2IxLTk4ZWEtMDgyYzRmMjc5MWVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8YSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIpqda9dg8Rell/VLSeJ6JuHyZF7dhk629kojwu9lPa/eDQ06ij/nqlp XEubToEYGBrPEPRBSKQMX/pcCPaeRgfZbz/fRc5og9GyPj+1XRrhRLbmXaCJwxDr p6/LvGj3mHbbX/I+NzsnlM12Zp11UXS0+UrKi1posamI7ZeA2b66GNJsGgHarX2s 9ogI4nqS9aAWgbBtYET4jSAzYZjBpHoChi1OjdbJ8UuIeLoYreU9DofTSjmHLJbU TkwzOi7cZNQ+sAoB5cMxLb0SNLqeRBSSj9tBqbstN3gmJCFT3CWoFkBBCCX91YET DW2PCL8ingbixHQCi35vUJhE66W3EWs= -----END CERTIFICATE-----Generated at Sun Sep 27 18:43:39 2026 by rpki-client