$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5441dcc1-ab30-3af9-a7e3-51726545da4d.roa File: 5441dcc1-ab30-3af9-a7e3-51726545da4d.roa (raw, json) Hash identifier: 7/E/ZTH4oSVBeJ28GdWsZVc24SM6mkG24XKAM/XeMLA= Subject key identifier: 28:5A:31:DC:BA:CC:2E:AE:B7:FD:78:61:A8:13:96:08:DB:23:0B:57 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24DFE5BD63F92C7ECE0D8380 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5441dcc1-ab30-3af9-a7e3-51726545da4d.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 99.196.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:e5:bd:63:f9:2c:7e:ce:0d:83:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=c5397de5-5726-4c22-b287-296b9e808e3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:13:20:a2:ed:77:77:a5:3e:3b:47:c5:5a:b7: 48:91:b5:23:c8:17:55:dc:89:c9:47:3b:9b:13:96: 52:9c:d6:0d:0d:f8:b6:6e:6f:5c:8c:94:e5:3b:c6: 62:9d:cb:bb:3d:14:35:f3:2e:a5:9a:a1:ae:f6:90: 27:0e:41:d0:4c:61:ba:15:3d:a0:76:61:15:4e:d7: e2:48:ee:55:70:f2:f1:ad:9c:ab:67:dc:8e:15:60: 4a:f0:06:45:94:e9:d8:ea:e1:d6:13:c7:91:c7:60: 7e:15:95:e3:e8:57:20:f5:4f:6b:f9:ac:0d:0b:34: a3:e8:92:be:25:0f:2b:ec:32:e0:17:1d:96:62:6e: d4:46:44:fd:2b:16:47:3d:cf:a7:cf:6d:cf:d1:bf: 1b:29:19:de:fd:db:eb:20:23:5e:b1:50:4d:19:5a: 2d:e6:f9:0e:41:3b:b0:47:8b:52:21:01:86:a0:6a: 4b:f0:2b:b5:df:3c:66:50:c6:e2:f2:1f:2a:9c:41: 93:41:fd:51:fc:28:73:6c:34:4a:e0:73:81:7a:3e: df:5b:30:d9:09:3b:b2:8f:5c:cd:d7:fb:91:de:a1: d6:c4:99:11:b9:d7:f7:23:ae:cf:30:32:66:7a:6a: c8:7e:50:ed:cf:64:af:2b:46:91:0d:ac:cf:9a:37: 36:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:5A:31:DC:BA:CC:2E:AE:B7:FD:78:61:A8:13:96:08:DB:23:0B:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5441dcc1-ab30-3af9-a7e3-51726545da4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.196.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:b5:91:23:cf:82:1e:69:ff:76:70:12:aa:ad:1e:23:79:e2: 7c:8b:8f:7d:7d:43:e8:1a:26:80:be:e2:7f:11:48:63:cd:75: 07:44:be:c5:31:3f:b1:6d:db:c9:9a:46:e0:09:e7:b7:a4:cc: ae:75:7c:66:e7:05:ee:2b:74:c4:ce:35:f0:c5:02:d2:28:41: cc:dd:13:fc:cd:53:b8:61:64:6c:a7:bc:7c:9e:46:46:cf:9f: 1c:91:b1:d3:1b:2d:0f:f0:69:b7:71:7d:3d:49:3e:07:6b:27: bb:ba:62:e3:88:5e:f9:b0:e7:9c:63:9b:0a:cf:d8:45:72:be: 01:14:9e:a3:21:6d:a0:98:b8:bf:ed:f8:61:40:1b:ae:39:57: 70:ae:71:18:34:c9:fe:5b:86:10:66:85:bc:08:e3:4b:4e:4f: a5:41:3a:f7:93:34:11:ab:2a:33:21:96:1c:8a:cc:2f:24:cc: e7:09:9a:3e:51:e7:0c:aa:b3:fd:7e:c1:13:5e:fc:68:94:b9: dc:da:0a:b7:4d:76:b1:ca:d4:4a:17:59:30:3c:14:4b:41:9b: 94:c5:c8:25:aa:62:f7:95:52:4d:7c:2a:3b:2f:21:2e:97:a9: 6f:77:e3:6c:04:cc:81:4b:40:8d:60:23:24:04:23:70:ba:b4: 55:2a:29:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k3+W9Y/ksfs4Ng4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk YzUzOTdkZTUtNTcyNi00YzIyLWIyODctMjk2YjllODA4ZTNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthMgou13d6U+O0fFWrdIkbUjyBdV3InJRzub E5ZSnNYNDfi2bm9cjJTlO8Zincu7PRQ18y6lmqGu9pAnDkHQTGG6FT2gdmEVTtfi SO5VcPLxrZyrZ9yOFWBK8AZFlOnY6uHWE8eRx2B+FZXj6Fcg9U9r+awNCzSj6JK+ JQ8r7DLgFx2WYm7URkT9KxZHPc+nz23P0b8bKRne/dvrICNesVBNGVot5vkOQTuw R4tSIQGGoGpL8Cu13zxmUMbi8h8qnEGTQf1R/ChzbDRK4HOBej7fWzDZCTuyj1zN 1/uR3qHWxJkRudf3I67PMDJmemrIflDtz2SvK0aRDazPmjc2tQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFChaMdy6zC6ut/14YagTlgjbIwtXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNTQ0MWRjYzEtYWIzMC0z YWY5LWE3ZTMtNTE3MjY1NDVkYTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8TQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEa1kSPPgh5p/3ZwEqqtHiN54nyLj319Q+gaJoC+4n8RSGPNdQdEvsUx P7Ft28maRuAJ57ekzK51fGbnBe4rdMTONfDFAtIoQczdE/zNU7hhZGynvHyeRkbP nxyRsdMbLQ/wabdxfT1JPgdrJ7u6YuOIXvmw55xjmwrP2EVyvgEUnqMhbaCYuL/t +GFAG645V3CucRg0yf5bhhBmhbwI40tOT6VBOveTNBGrKjMhlhyKzC8kzOcJmj5R 5wyqs/1+wRNe/GiUudzaCrdNdrHK1EoXWTA8FEtBm5TFyCWqYveVUk18KjsvIS6X qW9342wEzIFLQI1gIyQEI3C6tFUqKRw= -----END CERTIFICATE-----Generated at Thu Mar 26 16:31:41 2026 by rpki-client