$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/48812888-1769-36a0-aa5d-b6e90fe1bb90.roa File: 48812888-1769-36a0-aa5d-b6e90fe1bb90.roa (raw, json) Hash identifier: JrmhetFqUxeyXu3oiz8MSHuOom4OVhvBLBlrR9IUVTU= Subject key identifier: A2:E4:D2:A6:65:16:71:41:04:B6:58:A4:23:3E:95:7D:50:F8:57:8D Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E092F28C91545035CF4000 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/48812888-1769-36a0-aa5d-b6e90fe1bb90.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 99.196.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:92:f2:8c:91:54:50:35:cf:40:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=3e9dff3e-2c27-4459-8ec0-ad218fac6b06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:71:a0:67:dd:69:b1:73:84:a8:11:38:97:de: 24:8b:a3:ac:4e:4c:3b:6e:6c:08:c8:25:e4:61:28: b7:93:51:6e:f2:a1:6b:a2:e6:1f:94:80:78:f0:5e: 21:12:ea:ce:b4:46:f5:77:b4:65:04:e0:d7:cf:30: 57:9c:87:d5:f6:70:6c:92:44:10:2d:62:06:df:42: ac:be:78:6b:0c:d2:93:28:9e:25:ee:06:12:39:42: 5f:fa:bf:48:34:7a:33:fa:9a:fd:21:cc:d8:02:b0: 38:39:cb:c1:64:81:d4:8f:64:91:0d:ab:cc:a2:46: 75:5e:82:7f:8d:8b:bd:d6:61:ec:d3:be:6f:3f:c1: 7e:cb:34:6b:60:9f:b2:68:94:ed:47:01:a4:6f:0d: f9:65:7e:f5:42:33:02:b4:b1:c5:a4:50:ef:b1:ab: 3e:b1:8b:ea:8f:26:06:23:e8:9a:39:ad:93:a0:89: bc:04:58:d5:8f:b4:c9:5e:63:41:a4:ba:28:18:82: ef:49:d2:36:29:02:9c:00:8b:f8:66:da:9a:d8:b2: 25:b2:1b:95:f9:19:c3:4d:ba:10:a7:96:11:d3:9c: 19:73:68:b3:48:65:e6:f8:cf:2b:3b:e6:f3:29:6b: 33:23:4c:7c:f3:b8:88:4a:ea:a2:8b:67:ed:81:7e: bc:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:E4:D2:A6:65:16:71:41:04:B6:58:A4:23:3E:95:7D:50:F8:57:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/48812888-1769-36a0-aa5d-b6e90fe1bb90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.196.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d9:05:85:2b:9d:08:6a:0d:4d:7e:dd:e2:a4:1e:9c:94:cd:53: 28:7a:90:48:f5:f4:44:4a:b5:0e:69:6c:1f:b9:d9:59:19:c7: da:74:71:ad:a5:0a:58:ed:b7:31:60:80:a4:82:53:b6:39:03: db:e4:d8:eb:2d:bc:a2:ee:13:35:5c:bf:ad:89:ff:fb:79:d6: 95:7e:bc:5d:88:62:ad:51:26:24:8f:1d:b3:a7:ec:f7:c0:c5: c6:53:31:67:50:d7:28:4b:4a:68:ea:54:85:1a:0b:13:25:ca: 29:81:4d:50:9b:de:91:3d:5b:e5:03:cf:de:f5:f3:13:8b:7a: b6:ad:82:8b:91:ea:13:22:40:c0:e1:54:8c:83:38:0b:c2:8f: 49:6b:9d:17:58:e8:b1:e1:9c:49:ff:12:23:60:8a:eb:90:d4: 94:27:ec:dc:90:ab:9b:be:d8:fd:f7:3c:95:ec:b5:ee:d4:4f: a2:e2:a7:77:80:6c:df:26:cb:a3:04:f3:bd:2a:3b:c4:af:fc: b0:51:4a:cf:b2:eb:66:69:dc:47:5a:36:49:a2:d2:96:d7:a3: b1:87:3e:49:b6:94:5d:83:7a:b9:fe:00:2c:62:c4:f8:00:5b: 2d:2d:44:45:86:3c:38:e0:f2:5d:08:40:6a:17:af:35:49:03: a3:9a:79:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4JLyjJFUUDXPQAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk M2U5ZGZmM2UtMmMyNy00NDU5LThlYzAtYWQyMThmYWM2YjA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnGgZ91psXOEqBE4l94ki6OsTkw7bmwIyCXk YSi3k1Fu8qFrouYflIB48F4hEurOtEb1d7RlBODXzzBXnIfV9nBskkQQLWIG30Ks vnhrDNKTKJ4l7gYSOUJf+r9INHoz+pr9IczYArA4OcvBZIHUj2SRDavMokZ1XoJ/ jYu91mHs075vP8F+yzRrYJ+yaJTtRwGkbw35ZX71QjMCtLHFpFDvsas+sYvqjyYG I+iaOa2ToIm8BFjVj7TJXmNBpLooGILvSdI2KQKcAIv4Ztqa2LIlshuV+RnDTboQ p5YR05wZc2izSGXm+M8rO+bzKWszI0x887iISuqii2ftgX68wQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKLk0qZlFnFBBLZYpCM+lX1Q+FeNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNDg4MTI4ODgtMTc2OS0z NmEwLWFhNWQtYjZlOTBmZTFiYjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8SrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANkFhSudCGoNTX7d4qQenJTNUyh6kEj19ERKtQ5pbB+52VkZx9p0ca2l CljttzFggKSCU7Y5A9vk2OstvKLuEzVcv62J//t51pV+vF2IYq1RJiSPHbOn7PfA xcZTMWdQ1yhLSmjqVIUaCxMlyimBTVCb3pE9W+UDz9718xOLeratgouR6hMiQMDh VIyDOAvCj0lrnRdY6LHhnEn/EiNgiuuQ1JQn7NyQq5u+2P33PJXste7UT6Lip3eA bN8my6ME870qO8Sv/LBRSs+y62Zp3EdaNkmi0pbXo7GHPkm2lF2Dern+ACxixPgA Wy0tREWGPDjg8l0IQGoXrzVJA6OaeSA= -----END CERTIFICATE-----Generated at Thu Mar 26 22:12:42 2026 by rpki-client