$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4c22d3b0-82e0-3df5-af12-75c68e589d2e.roa File: 4c22d3b0-82e0-3df5-af12-75c68e589d2e.roa (raw, json) Hash identifier: JKFfYP2F0WdFvbgIOXZ8SNgQKj9CMRnTvm7KBcKwxBg= Subject key identifier: 59:44:5C:B1:E1:D2:2A:6A:FD:09:6A:88:94:58:FF:76:5C:6A:C5:D1 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24DFEF00825E238DFAD31500 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4c22d3b0-82e0-3df5-af12-75c68e589d2e.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 99.198.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:ef:00:82:5e:23:8d:fa:d3:15:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=7b321681-a8c6-463c-94a5-55cdeeb33b9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:4a:ac:9f:60:30:32:d1:e5:be:e5:73:3f:2c: db:7f:cb:28:c4:f5:9d:50:41:d3:90:4f:21:c3:60: be:61:d9:f3:17:09:53:85:c8:be:82:29:1c:a1:0c: 5c:67:ad:09:6a:4c:3d:ef:76:ac:34:ad:fc:e3:4b: 87:f8:b2:83:2d:a5:0a:a3:0e:ba:ff:0c:fd:03:ab: 10:50:ef:eb:ec:e5:af:6f:12:4c:78:68:5d:6a:89: 60:55:2f:0c:a5:fe:e6:02:59:4c:d6:0e:9b:57:25: 54:ad:0d:f6:26:e6:7f:1f:6a:f1:61:39:2d:0a:05: ee:b2:a6:05:f7:26:2b:46:7d:bf:ce:e5:a4:65:55: 3c:7d:e6:72:f1:21:64:37:66:48:d4:52:61:bb:dc: 17:c7:56:8b:fd:ee:95:27:a1:80:5f:1a:a5:21:85: 08:61:fd:1b:43:bb:73:67:50:e7:5a:c6:cc:6c:e4: dc:d3:db:5e:25:f5:75:e7:3f:c6:ee:67:7a:76:8b: be:11:77:70:f4:10:76:59:0f:15:6f:bf:e7:96:75: 55:88:1c:65:73:00:97:b4:bd:15:f3:3e:fc:26:03: b9:31:26:fb:97:1f:7e:5d:fb:ce:97:c9:07:5a:ed: e6:be:fd:6a:c0:f7:2b:7d:14:25:af:13:b4:f2:32: 23:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:44:5C:B1:E1:D2:2A:6A:FD:09:6A:88:94:58:FF:76:5C:6A:C5:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4c22d3b0-82e0-3df5-af12-75c68e589d2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.198.37.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:6d:a2:77:8f:ec:bc:09:24:01:c2:96:95:e7:8f:a9:15:68: 69:13:70:cb:6f:22:1f:60:9b:94:3f:5a:ee:1d:2b:bf:04:bc: 00:6c:b1:53:53:65:cd:5a:0d:b3:63:12:51:31:d3:bd:10:ce: d3:ee:08:4f:63:18:b9:a6:2d:ed:eb:5e:b2:18:6d:79:1a:8f: 1a:a6:2e:ba:0e:31:84:4d:1a:61:d5:b2:4f:e8:08:61:06:fa: 45:00:d7:b0:7b:2f:8c:93:63:1d:ad:fa:3d:13:f5:5c:75:9c: 13:63:87:e0:b3:95:56:5d:d9:c4:bb:90:4c:69:84:be:3a:23: 27:86:3e:50:82:92:96:fd:7b:60:75:e0:84:b7:5e:1b:74:0a: 64:4d:f5:bf:c1:8a:f8:a3:2b:30:b9:83:ac:58:31:1b:46:1c: 92:95:37:e4:46:b8:b5:32:79:b7:c0:1a:e2:68:39:7c:24:08: 0f:61:3b:0d:5c:0f:c2:ce:0e:60:ba:ca:81:b4:cd:f6:3c:9e: 4b:13:8b:44:ba:45:88:7b:23:c0:17:a6:f3:d1:54:4a:a8:3a: 20:6d:1e:70:13:db:31:e2:66:83:33:35:65:6f:f5:22:e4:53: d1:a5:0e:c7:e7:51:7a:69:38:66:ba:b1:03:13:00:5f:c3:6d: c6:55:9a:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k3+8Agl4jjfrTFQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk N2IzMjE2ODEtYThjNi00NjNjLTk0YTUtNTVjZGVlYjMzYjllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUqsn2AwMtHlvuVzPyzbf8soxPWdUEHTkE8h w2C+YdnzFwlThci+gikcoQxcZ60Jakw973asNK3840uH+LKDLaUKow66/wz9A6sQ UO/r7OWvbxJMeGhdaolgVS8Mpf7mAllM1g6bVyVUrQ32JuZ/H2rxYTktCgXusqYF 9yYrRn2/zuWkZVU8feZy8SFkN2ZI1FJhu9wXx1aL/e6VJ6GAXxqlIYUIYf0bQ7tz Z1DnWsbMbOTc09teJfV15z/G7md6dou+EXdw9BB2WQ8Vb7/nlnVViBxlcwCXtL0V 8z78JgO5MSb7lx9+XfvOl8kHWu3mvv1qwPcrfRQlrxO08jIj6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFlEXLHh0ipq/QlqiJRY/3ZcasXRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNGMyMmQzYjAtODJlMC0z ZGY1LWFmMTItNzVjNjhlNTg5ZDJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8YlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK9toneP7LwJJAHClpXnj6kVaGkTcMtvIh9gm5Q/Wu4dK78EvABssVNT Zc1aDbNjElEx070QztPuCE9jGLmmLe3rXrIYbXkajxqmLroOMYRNGmHVsk/oCGEG +kUA17B7L4yTYx2t+j0T9Vx1nBNjh+CzlVZd2cS7kExphL46IyeGPlCCkpb9e2B1 4IS3Xht0CmRN9b/BivijKzC5g6xYMRtGHJKVN+RGuLUyebfAGuJoOXwkCA9hOw1c D8LODmC6yoG0zfY8nksTi0S6RYh7I8AXpvPRVEqoOiBtHnAT2zHiZoMzNWVv9SLk U9GlDsfnUXppOGa6sQMTAF/DbcZVmuQ= -----END CERTIFICATE-----Generated at Thu Mar 26 06:04:04 2026 by rpki-client