$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/42ad79bb-fa0d-3ed4-8d81-57c913a2e429.roa File: 42ad79bb-fa0d-3ed4-8d81-57c913a2e429.roa (raw, json) Hash identifier: 8rJuZdA9xNkHvy4iomN2+7TW/LyhMRXk8Fpwx78jlTA= Subject key identifier: 5E:B8:64:88:65:9A:06:D0:42:32:07:48:6E:9A:54:B7:EE:D1:D3:91 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E0940ACE22C53123E23580 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/42ad79bb-fa0d-3ed4-8d81-57c913a2e429.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 99.196.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:94:0a:ce:22:c5:31:23:e2:35:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=e8dcf5e4-70e1-4da8-8d9f-47dfb341bd4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:60:dc:e7:86:b5:2e:86:cf:d7:cf:1a:e4:d2: 84:bf:07:0f:46:69:e8:de:3c:93:59:bc:b7:f8:b0: ef:34:1c:b4:d8:27:f2:a1:52:bf:07:42:66:57:03: 90:0e:7c:da:0c:d6:9b:02:71:b2:fb:c4:65:ae:15: 00:78:c3:ed:ff:26:55:22:a2:82:ac:3f:8f:e0:cb: 07:d2:17:f1:06:bf:ef:73:aa:5c:5b:be:42:3c:6a: 21:6c:20:51:e4:a2:23:e6:a7:a2:61:29:ef:77:fd: 9a:8e:f3:33:d7:c8:c2:04:5d:2f:58:64:9c:c0:5b: 0c:d1:26:5b:66:78:7e:57:3c:c1:63:6d:72:65:66: cc:bb:8e:ab:a4:4d:82:30:43:6f:48:95:19:01:28: a5:97:d5:18:10:6f:bd:ef:3d:29:13:f7:49:ba:15: d2:97:b2:24:49:30:cb:82:05:9a:c4:04:8f:0a:d6: 49:b2:ab:30:ec:c1:49:03:97:23:ac:dc:2f:57:bf: dd:56:eb:6d:fa:33:b9:6e:65:1f:c6:61:f8:14:ce: 92:d4:74:9d:35:df:88:1a:2d:1f:68:1e:d7:0e:cc: 16:e0:b4:9f:a1:f8:6b:1f:5d:08:a8:35:90:46:88: 57:83:af:8f:59:13:a8:a2:01:e3:ca:06:87:bf:2e: 03:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:B8:64:88:65:9A:06:D0:42:32:07:48:6E:9A:54:B7:EE:D1:D3:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/42ad79bb-fa0d-3ed4-8d81-57c913a2e429.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.196.194.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:81:25:db:dc:e5:a3:6a:09:97:4f:54:f1:bd:6e:51:3f:55: 58:52:1b:97:ad:49:cd:14:e9:a2:82:1c:3c:38:e7:d8:5f:f5: 5e:43:d0:8d:de:a7:10:b9:68:cd:d2:9b:a5:84:7a:13:fc:67: cd:0d:9b:be:42:0d:ef:a9:99:b6:78:b1:84:02:92:af:94:c4: bb:5f:0c:c0:ed:c3:bc:74:46:23:e0:12:f6:a5:94:d1:4b:d8: 5c:b7:18:61:b3:5f:ca:bc:ad:5c:ff:91:0e:d6:8f:79:3b:56: 2a:50:ea:88:db:3f:5a:9c:89:18:7d:78:5c:0e:6e:32:6f:20: 5f:b2:bf:82:fc:54:2c:0f:4a:ea:1a:cd:84:be:49:5b:b4:e9: 2b:02:30:6a:eb:6b:f9:22:2c:d1:1e:ef:fd:e0:74:b7:c0:6d: b1:ca:f2:5f:29:dc:db:cd:21:05:b4:79:61:c1:0a:86:c6:92: 66:b0:4c:21:12:a9:71:99:fe:c8:65:83:7f:ec:18:c4:d9:95: 6b:a7:74:5b:23:e2:c3:a6:61:30:1b:39:0a:4b:3e:ec:9b:cf: 12:fe:04:e3:a2:84:d7:2e:4e:18:2c:69:0c:d7:7e:91:a8:75: 32:c6:79:3e:1f:5d:ec:f8:24:61:5e:dc:fe:67:ce:90:2c:97: b8:21:68:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4JQKziLFMSPiNYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ZThkY2Y1ZTQtNzBlMS00ZGE4LThkOWYtNDdkZmIzNDFiZDRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGDc54a1LobP188a5NKEvwcPRmno3jyTWby3 +LDvNBy02CfyoVK/B0JmVwOQDnzaDNabAnGy+8RlrhUAeMPt/yZVIqKCrD+P4MsH 0hfxBr/vc6pcW75CPGohbCBR5KIj5qeiYSnvd/2ajvMz18jCBF0vWGScwFsM0SZb Znh+VzzBY21yZWbMu46rpE2CMENvSJUZASill9UYEG+97z0pE/dJuhXSl7IkSTDL ggWaxASPCtZJsqsw7MFJA5cjrNwvV7/dVutt+jO5bmUfxmH4FM6S1HSdNd+IGi0f aB7XDswW4LSfofhrH10IqDWQRohXg6+PWROoogHjygaHvy4DLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF64ZIhlmgbQQjIHSG6aVLfu0dORMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNDJhZDc5YmItZmEwZC0z ZWQ0LThkODEtNTdjOTEzYTJlNDI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8TCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHCBJdvc5aNqCZdPVPG9blE/VVhSG5etSc0U6aKCHDw459hf9V5D0I3e pxC5aM3Sm6WEehP8Z80Nm75CDe+pmbZ4sYQCkq+UxLtfDMDtw7x0RiPgEvallNFL 2Fy3GGGzX8q8rVz/kQ7Wj3k7VipQ6ojbP1qciRh9eFwObjJvIF+yv4L8VCwPSuoa zYS+SVu06SsCMGrra/kiLNEe7/3gdLfAbbHK8l8p3NvNIQW0eWHBCobGkmawTCES qXGZ/shlg3/sGMTZlWundFsj4sOmYTAbOQpLPuybzxL+BOOihNcuThgsaQzXfpGo dTLGeT4fXez4JGFe3P5nzpAsl7ghaAo= -----END CERTIFICATE-----Generated at Thu Mar 26 06:28:18 2026 by rpki-client