$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4e88df13-7f38-327d-87d1-6b6209eaae91.roa File: 4e88df13-7f38-327d-87d1-6b6209eaae91.roa (raw, json) Hash identifier: HEsN5uDijqckbAET5uwd3vIkSqg9cyefioaXZTa3eRE= Subject key identifier: E9:AF:9B:15:11:2D:18:38:43:5A:36:2F:BF:00:F3:56:40:62:C0:35 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E09B0507C7FD05EB8DAAC0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4e88df13-7f38-327d-87d1-6b6209eaae91.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 99.197.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:9b:05:07:c7:fd:05:eb:8d:aa:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=08cc7721-5dc3-4643-bf6c-5c9ac2906876 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ff:4d:f5:58:c4:ee:07:e5:8b:cf:6c:80:2e: cc:b8:82:5d:91:42:f7:b8:c0:cb:f3:6e:58:03:60: fe:24:29:b6:b7:09:1f:3d:39:f2:2f:df:d7:f9:a1: 84:22:82:7f:5f:e8:9a:23:e8:3a:c4:6f:46:f2:d4: 8d:36:93:a2:b7:e5:76:41:65:1b:0b:f9:3b:9a:c3: f6:27:a1:96:89:7f:cd:e3:84:b3:32:fa:8a:0f:af: 3d:c1:6a:56:d3:a5:45:3a:0e:6f:9d:83:a6:b6:75: da:59:34:a9:1c:67:94:bf:71:c8:d7:22:ed:38:72: b8:bc:da:6d:b0:22:f1:8a:bb:1c:6c:0f:69:d8:a8: d0:19:8a:a5:c8:68:bd:78:ca:d2:5c:d5:00:b7:8e: e2:b9:8a:50:fb:6f:2c:53:54:25:81:6a:ae:38:3f: bb:3d:fe:86:9c:b5:26:f4:d2:8b:82:c6:f4:4e:68: 31:eb:30:f8:ff:fd:87:f9:99:07:86:23:cf:48:b8: 3a:7a:c4:39:3c:c8:82:ec:c6:60:96:4b:ff:87:7c: 7c:45:9d:db:b5:ca:78:94:38:0e:13:67:70:bf:46: c0:cc:25:b0:c3:ba:c3:e2:c0:41:2c:69:8c:4a:ce: df:2e:bf:77:0f:8d:88:5f:bb:01:2a:15:da:8d:92: ce:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:AF:9B:15:11:2D:18:38:43:5A:36:2F:BF:00:F3:56:40:62:C0:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4e88df13-7f38-327d-87d1-6b6209eaae91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.197.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:d2:53:56:e5:f3:3f:a2:c7:ec:4b:e3:b7:ad:d5:a6:52:5a: 1c:e3:d8:81:a7:26:bf:50:c6:68:39:64:dd:04:e4:8b:bd:46: 27:ab:4d:95:ba:df:cf:44:39:19:cf:a2:dd:08:10:b6:cd:b0: 4c:d4:8b:8f:ee:90:e7:57:0a:b9:2d:80:47:f8:0f:71:8d:5d: 88:8d:05:2c:16:ff:4d:74:5a:c7:e5:26:6a:0a:2a:49:ec:50: ad:ca:72:8b:64:5e:94:e0:66:0d:49:77:f4:40:f2:54:c6:38: ee:7d:e1:5c:a7:87:e2:1a:9f:26:77:23:66:95:2d:9d:84:d8: 8e:3e:5b:5a:8a:d7:72:ee:4c:72:18:56:ea:f8:d3:15:63:81: 42:d0:27:cb:13:2d:15:06:ec:19:96:db:3f:d8:f4:29:05:51: 37:44:ff:d0:ac:9f:b2:7e:61:08:02:c9:06:3d:00:54:0e:1a: 93:2b:3f:5e:d8:84:38:ad:d6:c5:fe:da:e6:ad:6c:fd:cd:b1: 02:a6:6f:20:e6:13:15:93:9c:be:17:d0:6a:12:ab:ba:3b:8a: 8b:3c:77:64:98:8d:a7:86:dc:7f:90:3a:68:1f:5c:91:28:00: c9:1d:52:70:0f:f9:89:d2:1a:86:83:97:7a:27:14:82:2e:fd: 2a:2f:e3:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4JsFB8f9BeuNqsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MDhjYzc3MjEtNWRjMy00NjQzLWJmNmMtNWM5YWMyOTA2ODc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnP9N9VjE7gfli89sgC7MuIJdkUL3uMDL825Y A2D+JCm2twkfPTnyL9/X+aGEIoJ/X+iaI+g6xG9G8tSNNpOit+V2QWUbC/k7msP2 J6GWiX/N44SzMvqKD689wWpW06VFOg5vnYOmtnXaWTSpHGeUv3HI1yLtOHK4vNpt sCLxirscbA9p2KjQGYqlyGi9eMrSXNUAt47iuYpQ+28sU1QlgWquOD+7Pf6GnLUm 9NKLgsb0Tmgx6zD4//2H+ZkHhiPPSLg6esQ5PMiC7MZglkv/h3x8RZ3btcp4lDgO E2dwv0bAzCWww7rD4sBBLGmMSs7fLr93D42IX7sBKhXajZLOUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOmvmxURLRg4Q1o2L78A81ZAYsA1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNGU4OGRmMTMtN2YzOC0z MjdkLTg3ZDEtNmI2MjA5ZWFhZTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8V8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEjSU1bl8z+ix+xL47et1aZSWhzj2IGnJr9Qxmg5ZN0E5Iu9RierTZW6 389EORnPot0IELbNsEzUi4/ukOdXCrktgEf4D3GNXYiNBSwW/010WsflJmoKKkns UK3KcotkXpTgZg1Jd/RA8lTGOO594Vynh+IanyZ3I2aVLZ2E2I4+W1qK13LuTHIY Vur40xVjgULQJ8sTLRUG7BmW2z/Y9CkFUTdE/9Csn7J+YQgCyQY9AFQOGpMrP17Y hDit1sX+2uatbP3NsQKmbyDmExWTnL4X0GoSq7o7ios8d2SYjaeG3H+QOmgfXJEo AMkdUnAP+YnSGoaDl3onFIIu/Sov43I= -----END CERTIFICATE-----Generated at Thu Mar 26 05:58:38 2026 by rpki-client