$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/628202cf-1e14-3c4e-95c4-6ecc7d1d12f7.roa File: 628202cf-1e14-3c4e-95c4-6ecc7d1d12f7.roa (raw, json) Hash identifier: l2MKfj8ZWPbyAqDN5vWqUnJnmfPwmZbN0rjxFGsRbSE= Subject key identifier: AB:17:0D:EC:CC:73:68:A0:2A:87:50:F1:89:43:96:FA:97:AB:02:B9 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E095405C02A58897691D00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/628202cf-1e14-3c4e-95c4-6ecc7d1d12f7.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 99.196.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:95:40:5c:02:a5:88:97:69:1d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=45572b48-9680-4a43-bd78-742b8b40fc25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:e1:e8:55:50:41:38:d5:9b:86:3a:30:34:96: 3e:68:12:1f:0c:f4:ce:3e:bc:c6:fa:6b:2b:43:78: e2:c4:28:c3:5e:5c:59:a5:97:e7:de:58:ae:1f:b3: 30:98:37:4d:97:5a:c0:e8:e7:4b:f0:b6:ce:ea:17: 84:ea:28:c2:92:13:0a:eb:84:c5:16:29:af:b3:63: 2c:3f:2a:7e:3d:8e:2f:b7:03:d7:03:db:a3:8b:78: 2c:3f:54:3c:cb:c9:6a:d2:89:a1:51:0e:22:54:43: 76:58:94:93:7a:0e:da:aa:2e:9d:78:aa:93:80:44: 06:7a:6b:9d:10:04:71:75:b8:30:f0:24:d5:4f:d0: bf:bd:6b:82:4c:4b:ca:84:69:94:2a:7e:c8:bd:fa: 88:12:17:88:2d:af:09:6c:e2:a7:12:2d:66:ce:21: 90:4d:75:67:57:34:af:33:06:4c:75:07:db:35:46: e8:04:4d:e4:8c:65:27:e4:c6:f8:32:20:04:ea:52: 89:68:ab:a7:f2:92:03:a0:39:e0:c7:9c:f5:10:ef: 71:b4:fb:3a:ec:d2:86:4f:ba:cc:75:95:4d:e2:8b: c9:1f:b2:2e:a0:3a:71:28:cb:28:1e:36:cf:5a:2b: 25:2e:96:5d:c5:a7:24:0f:97:92:12:27:a9:64:fb: 67:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:17:0D:EC:CC:73:68:A0:2A:87:50:F1:89:43:96:FA:97:AB:02:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/628202cf-1e14-3c4e-95c4-6ecc7d1d12f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.196.231.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:a6:75:c4:3e:45:a4:30:d0:5a:b2:87:3c:0b:ab:75:24:c0: 6b:9f:5a:3c:e9:25:f7:49:3d:57:59:63:ce:e6:03:bb:85:e2: 9c:0c:4c:09:c4:dd:e1:6c:98:15:42:e7:01:81:88:a2:13:de: 03:a4:12:8b:aa:dd:cd:38:96:94:f9:8f:cb:c5:33:b0:d1:25: e2:a5:76:e9:1d:40:8c:bd:e6:d2:4d:af:a9:60:5c:fd:2f:54: 88:31:e5:30:02:55:e9:e4:49:73:a5:51:84:61:42:22:ea:d3: 6a:38:41:28:b5:ad:9f:87:fe:1d:16:97:0a:9b:8b:9e:07:5f: c0:a5:19:e3:a3:21:43:b6:18:3b:a3:c1:c9:8b:57:8e:8d:ee: 5e:d6:a6:2a:27:b8:40:e2:67:df:da:10:eb:1d:e0:fd:c8:ae: ab:9c:91:bc:8a:55:18:ad:b7:9c:b5:2c:d7:62:f4:4a:47:81: 50:ec:7e:bf:eb:a4:4e:9c:87:57:65:14:38:bc:3c:b8:07:0a: be:58:42:4c:73:90:5b:8d:8d:ad:54:da:21:3f:dd:48:f5:e1: 71:21:1e:54:b1:4e:27:68:c7:84:97:53:f9:ff:72:f7:e8:0c: 3a:68:ba:0a:9a:2c:93:f0:bc:cb:5b:6d:21:b1:dd:48:31:ee: 3c:15:8e:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4JVAXAKliJdpHQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NDU1NzJiNDgtOTY4MC00YTQzLWJkNzgtNzQyYjhiNDBmYzI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgeHoVVBBONWbhjowNJY+aBIfDPTOPrzG+msr Q3jixCjDXlxZpZfn3liuH7MwmDdNl1rA6OdL8LbO6heE6ijCkhMK64TFFimvs2Ms Pyp+PY4vtwPXA9uji3gsP1Q8y8lq0omhUQ4iVEN2WJSTeg7aqi6deKqTgEQGemud EARxdbgw8CTVT9C/vWuCTEvKhGmUKn7IvfqIEheILa8JbOKnEi1mziGQTXVnVzSv MwZMdQfbNUboBE3kjGUn5Mb4MiAE6lKJaKun8pIDoDngx5z1EO9xtPs67NKGT7rM dZVN4ovJH7IuoDpxKMsoHjbPWislLpZdxackD5eSEiepZPtnLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKsXDezMc2igKodQ8YlDlvqXqwK5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNjI4MjAyY2YtMWUxNC0z YzRlLTk1YzQtNmVjYzdkMWQxMmY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8TnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALSmdcQ+RaQw0FqyhzwLq3UkwGufWjzpJfdJPVdZY87mA7uF4pwMTAnE 3eFsmBVC5wGBiKIT3gOkEouq3c04lpT5j8vFM7DRJeKldukdQIy95tJNr6lgXP0v VIgx5TACVenkSXOlUYRhQiLq02o4QSi1rZ+H/h0Wlwqbi54HX8ClGeOjIUO2GDuj wcmLV46N7l7WpionuEDiZ9/aEOsd4P3IrquckbyKVRitt5y1LNdi9EpHgVDsfr/r pE6ch1dlFDi8PLgHCr5YQkxzkFuNja1U2iE/3Uj14XEhHlSxTidox4SXU/n/cvfo DDpougqaLJPwvMtbbSGx3Ugx7jwVjrw= -----END CERTIFICATE-----Generated at Thu Mar 26 14:59:19 2026 by rpki-client