$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/620c9921-4f80-34dd-840e-1c36b07b9504.roa File: 620c9921-4f80-34dd-840e-1c36b07b9504.roa (raw, json) Hash identifier: x5/iM/42MrP5QG7aavQrskgCd7gl8OChSlxcyawh03E= Subject key identifier: A6:C4:6D:15:D6:52:0C:1B:D0:2F:8B:ED:3E:95:10:51:6E:53:9A:49 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E09F7AABE6713E0737A1E0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/620c9921-4f80-34dd-840e-1c36b07b9504.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 99.197.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:9f:7a:ab:e6:71:3e:07:37:a1:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=c85dc1ca-86da-4192-9e74-58fa107855e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:73:dd:8c:2b:02:c9:94:8b:0b:86:51:5c:2c: bc:38:6c:ce:cb:b9:ef:66:f0:fc:51:73:e8:40:41: b4:01:6a:46:66:94:1b:76:fc:74:bd:35:ad:e8:78: 39:c7:32:39:bd:38:68:f3:31:4b:b6:05:16:89:9a: 18:8c:6b:b4:34:9c:f3:21:40:6f:14:d7:3c:af:da: 70:43:83:fd:4d:ef:4c:31:1f:02:f0:77:89:1c:06: a9:a5:12:27:b9:41:24:d9:bf:a1:3b:d1:b6:bb:52: bc:d2:f2:02:2a:7c:11:36:46:f8:6c:83:61:f7:26: 55:fe:b1:85:0e:31:d3:ed:a8:b5:f6:da:4d:b3:e5: f4:b8:76:f4:8e:95:d9:7e:61:49:90:64:25:f3:02: 36:0c:a8:08:65:7d:ec:2a:00:df:93:70:38:0a:94: b3:73:99:41:5b:9d:52:dc:2d:98:80:8f:3c:3f:79: 8a:16:32:6c:5e:5a:ae:75:e2:0a:4d:dc:14:c1:da: 2a:b8:e3:55:57:ee:27:14:35:0f:4a:68:58:04:ec: ac:6b:a3:ff:cc:a8:5c:b0:d9:f9:13:35:04:87:d5: 0a:ea:0d:87:a4:e3:f4:5e:8e:2f:0d:f4:53:6e:3d: 13:b0:11:01:05:57:a0:1f:37:33:d8:a3:e4:b1:8d: a1:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:C4:6D:15:D6:52:0C:1B:D0:2F:8B:ED:3E:95:10:51:6E:53:9A:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/620c9921-4f80-34dd-840e-1c36b07b9504.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.197.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:25:47:7a:b6:da:25:5b:25:d0:42:13:17:0a:5b:36:10:3b: 55:42:db:19:d2:23:40:87:17:2d:84:0d:cc:c1:67:4b:73:4c: 71:d2:80:8e:64:8a:01:77:3b:3d:15:16:6f:65:7f:37:1d:ef: 94:b5:4b:3e:db:31:c2:81:6c:2d:f0:11:39:6e:c1:2d:69:61: 56:91:d3:96:e4:8c:d9:fa:33:c3:c7:8d:1a:88:37:dc:31:ba: fd:d8:37:e3:4a:70:9e:04:35:76:7f:ef:1c:8e:13:91:a7:6e: 51:6f:69:ad:ad:78:74:15:f2:c0:32:64:2b:8f:8a:ae:cc:0a: cb:21:af:02:f0:4f:da:53:97:81:9c:3b:3d:6b:54:29:29:6b: 83:c8:c8:2b:b2:7f:16:33:fe:55:9b:45:24:f7:d8:d3:f8:3a: 7e:26:c0:7b:09:2a:e8:95:c6:2f:5f:f1:cd:06:03:1d:b5:c5: 16:db:84:1e:40:02:2c:1a:cd:56:7c:db:36:28:47:53:64:2d: c5:4a:c9:1a:f3:76:87:81:da:b8:8b:d6:cc:41:e5:82:39:ca: 65:c2:63:ab:6f:ad:11:12:f4:b6:b9:cf:c9:e6:3a:b6:a5:1c: 04:62:3c:02:d9:e7:8f:b3:16:db:b2:04:c7:26:d3:4d:39:b4: c1:cb:a5:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4J96q+ZxPgc3oeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk Yzg1ZGMxY2EtODZkYS00MTkyLTllNzQtNThmYTEwNzg1NWU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyHPdjCsCyZSLC4ZRXCy8OGzOy7nvZvD8UXPo QEG0AWpGZpQbdvx0vTWt6Hg5xzI5vTho8zFLtgUWiZoYjGu0NJzzIUBvFNc8r9pw Q4P9Te9MMR8C8HeJHAappRInuUEk2b+hO9G2u1K80vICKnwRNkb4bINh9yZV/rGF DjHT7ai19tpNs+X0uHb0jpXZfmFJkGQl8wI2DKgIZX3sKgDfk3A4CpSzc5lBW51S 3C2YgI88P3mKFjJsXlqudeIKTdwUwdoquONVV+4nFDUPSmhYBOysa6P/zKhcsNn5 EzUEh9UK6g2HpOP0Xo4vDfRTbj0TsBEBBVegHzcz2KPksY2hmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKbEbRXWUgwb0C+L7T6VEFFuU5pJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNjIwYzk5MjEtNGY4MC0z NGRkLTg0MGUtMWMzNmIwN2I5NTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8XzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHclR3q22iVbJdBCExcKWzYQO1VC2xnSI0CHFy2EDczBZ0tzTHHSgI5k igF3Oz0VFm9lfzcd75S1Sz7bMcKBbC3wETluwS1pYVaR05bkjNn6M8PHjRqIN9wx uv3YN+NKcJ4ENXZ/7xyOE5GnblFvaa2teHQV8sAyZCuPiq7MCsshrwLwT9pTl4Gc Oz1rVCkpa4PIyCuyfxYz/lWbRST32NP4On4mwHsJKuiVxi9f8c0GAx21xRbbhB5A AiwazVZ82zYoR1NkLcVKyRrzdoeB2riL1sxB5YI5ymXCY6tvrRES9La5z8nmOral HARiPALZ54+zFtuyBMcm0005tMHLpTc= -----END CERTIFICATE-----Generated at Thu Mar 26 17:42:09 2026 by rpki-client