$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/648c7757-1bda-3b4e-bfac-3174ff41eb6a.roa File: 648c7757-1bda-3b4e-bfac-3174ff41eb6a.roa (raw, json) Hash identifier: EsqkYJUL2MQ5qLhqKTO+ZKv3BAw3G2ktEWubhStatsw= Subject key identifier: 03:4C:8D:F7:9C:69:7B:6F:13:63:3F:CD:42:30:81:43:00:D1:CD:64 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E09FD288B0BED7CD909300 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/648c7757-1bda-3b4e-bfac-3174ff41eb6a.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 99.197.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:9f:d2:88:b0:be:d7:cd:90:93:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=ab3ccd50-d052-405a-bb6c-a6834884d87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:32:c5:3a:2e:e1:14:eb:79:b2:84:a1:94:c1: f2:8c:5f:73:80:1c:4b:38:2a:9d:98:46:19:d3:f2: 57:5d:d6:76:4d:5d:b5:34:cf:f8:4e:bd:cc:b6:8b: e3:32:e1:76:6d:2d:ef:b9:a3:4d:4b:af:58:2d:d6: f3:d0:00:60:a5:da:ca:af:76:1a:80:12:9b:8a:ee: 9b:df:1c:b0:5c:70:e3:8c:b9:91:40:6a:f1:74:b4: 73:3a:ee:a0:4d:5c:52:8f:61:f6:9c:5b:af:db:e7: fe:94:97:05:e1:54:86:3b:c3:70:9c:ac:64:8c:1a: d1:dd:0c:ca:39:3c:2a:12:99:25:58:51:a6:3b:34: ad:93:1b:db:aa:85:b8:80:97:8c:64:b2:e2:9c:25: 74:54:16:bf:45:84:20:a2:33:b2:60:fc:cb:3e:fc: f9:54:e7:2c:10:ba:6d:4a:7f:82:01:42:ed:d4:70: f3:d2:2a:c0:e5:0e:0c:4d:1a:e9:b8:a8:74:76:9f: ee:01:df:31:73:58:dd:dc:d5:7c:f0:7e:37:5c:8b: 4c:1f:27:47:13:63:c8:1c:67:56:fe:36:8a:a9:c7: 05:64:cd:05:31:57:84:d5:0f:29:66:49:e0:20:c4: 5b:31:d8:03:05:f7:46:58:38:3b:ec:77:67:57:81: 5f:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:4C:8D:F7:9C:69:7B:6F:13:63:3F:CD:42:30:81:43:00:D1:CD:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/648c7757-1bda-3b4e-bfac-3174ff41eb6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.197.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:04:66:8f:ae:a0:7a:17:6c:0d:63:0b:9b:b7:9e:ea:8b:b5: 43:68:c8:bc:2a:5f:17:7f:1a:2f:18:74:5d:9c:34:82:d0:62: 66:7d:43:41:0c:c7:67:67:15:4f:04:ce:fd:8d:db:7b:4f:81: 91:85:65:6f:3d:52:fa:e3:3d:66:3e:a2:84:51:94:42:85:5a: 6b:c1:58:d8:b0:d9:10:5b:74:7d:d1:ed:5a:cd:b2:49:15:13: b1:cf:54:82:29:54:89:d3:be:24:00:33:b8:cf:21:f6:15:3c: ce:cf:49:0b:45:ae:a7:f0:5e:6e:94:77:4b:69:8f:09:2f:b8: d6:38:09:60:66:72:64:53:6f:cf:2c:c2:84:ec:9e:b1:13:8b: c8:c1:3d:31:4f:2c:db:3c:15:c2:23:64:fb:cb:af:88:b6:f5: 5d:1d:07:61:9d:cf:af:f5:cb:0a:21:6e:6d:ce:0b:fe:ce:d0: 3e:4b:f3:ca:3b:7c:98:a1:ec:6f:55:23:91:0a:b0:5e:0b:e8: d9:4d:58:fd:98:ae:69:2c:c2:84:f9:20:15:8b:13:a3:29:e0: 16:6b:7e:18:c0:cb:40:02:b2:eb:0a:d8:52:72:fe:26:2a:20: 6c:cd:de:72:66:11:5e:9e:78:0c:cb:f9:2a:9e:69:ce:e0:54: 11:ec:64:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4J/SiLC+182QkwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk YWIzY2NkNTAtZDA1Mi00MDVhLWJiNmMtYTY4MzQ4ODRkODdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8TLFOi7hFOt5soShlMHyjF9zgBxLOCqdmEYZ 0/JXXdZ2TV21NM/4Tr3MtovjMuF2bS3vuaNNS69YLdbz0ABgpdrKr3YagBKbiu6b 3xywXHDjjLmRQGrxdLRzOu6gTVxSj2H2nFuv2+f+lJcF4VSGO8NwnKxkjBrR3QzK OTwqEpklWFGmOzStkxvbqoW4gJeMZLLinCV0VBa/RYQgojOyYPzLPvz5VOcsELpt Sn+CAULt1HDz0irA5Q4MTRrpuKh0dp/uAd8xc1jd3NV88H43XItMHydHE2PIHGdW /jaKqccFZM0FMVeE1Q8pZkngIMRbMdgDBfdGWDg77HdnV4FfnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFANMjfecaXtvE2M/zUIwgUMA0c1kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNjQ4Yzc3NTctMWJkYS0z YjRlLWJmYWMtMzE3NGZmNDFlYjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8X6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK4EZo+uoHoXbA1jC5u3nuqLtUNoyLwqXxd/Gi8YdF2cNILQYmZ9Q0EM x2dnFU8Ezv2N23tPgZGFZW89UvrjPWY+ooRRlEKFWmvBWNiw2RBbdH3R7VrNskkV E7HPVIIpVInTviQAM7jPIfYVPM7PSQtFrqfwXm6Ud0tpjwkvuNY4CWBmcmRTb88s woTsnrETi8jBPTFPLNs8FcIjZPvLr4i29V0dB2Gdz6/1ywohbm3OC/7O0D5L88o7 fJih7G9VI5EKsF4L6NlNWP2YrmkswoT5IBWLE6Mp4BZrfhjAy0ACsusK2FJy/iYq IGzN3nJmEV6eeAzL+Sqeac7gVBHsZLs= -----END CERTIFICATE-----Generated at Thu Mar 26 13:10:16 2026 by rpki-client