$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7625ea75-54eb-38a0-81a7-e01c5635461e.roa File: 7625ea75-54eb-38a0-81a7-e01c5635461e.roa (raw, json) Hash identifier: ogMjhVHtcPS20DvJmi147FeBF4+KrNRVDeG8lB2WH3Y= Subject key identifier: 69:D4:34:90:27:15:98:60:CC:F7:5C:4C:19:39:92:66:61:45:F2:6D Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E09FDE6BE529EC52F751E0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7625ea75-54eb-38a0-81a7-e01c5635461e.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 99.197.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:9f:de:6b:e5:29:ec:52:f7:51:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=323dd9f6-7279-44b4-84a6-1e944a984dad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:96:82:9f:12:3d:28:24:d8:a0:41:55:20:7e: ee:98:e2:af:3c:7d:ea:be:f6:63:34:55:17:13:4d: 8d:bd:f8:9a:cf:b8:90:05:be:4c:71:0f:b3:51:f6: f4:24:40:d0:ee:75:80:8d:78:da:82:26:27:af:3f: 51:e2:7b:da:66:d6:59:85:0a:04:15:31:83:a1:13: 8a:a3:a8:21:39:53:35:11:2b:a6:36:a0:88:e5:f8: 41:3e:b6:99:e2:a0:21:99:79:6a:d6:d3:97:83:6e: 17:3e:5c:17:38:1a:6e:c2:ec:79:82:20:f8:15:89: d3:b8:23:a2:4e:52:28:ad:85:45:be:9b:52:2f:b0: fe:c8:52:e9:b3:bf:21:79:f5:0f:d5:3e:e7:4d:22: eb:ae:e4:10:bf:16:67:08:56:a5:5e:7b:d1:35:2c: 53:07:1b:df:e1:b3:ee:11:cd:01:67:2d:ae:5a:0e: 98:04:60:e4:99:87:d6:ad:b9:b3:45:65:e8:0b:35: 06:de:45:51:e7:1a:05:c8:48:12:f5:d0:90:b5:0c: 86:28:25:d8:8e:c9:22:f5:90:5c:d0:eb:f3:63:8a: 38:d1:4c:1b:9e:57:17:f7:c6:d2:cc:5f:f2:30:55: 90:c2:41:14:89:d2:0a:27:45:91:fc:d5:e5:c0:8a: 26:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:D4:34:90:27:15:98:60:CC:F7:5C:4C:19:39:92:66:61:45:F2:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7625ea75-54eb-38a0-81a7-e01c5635461e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.197.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:c4:2e:1a:62:40:46:89:1a:31:3a:33:e7:e6:ae:8f:6b:61: 59:4d:a0:45:ed:24:e7:e0:8b:7e:6e:18:b7:37:fc:6b:1c:87: 7c:8b:ca:99:78:bf:41:85:7f:26:5e:de:a3:f2:35:5e:9f:ad: 4c:67:6f:cf:f5:b5:83:fe:ed:ac:04:6f:1d:fe:55:5f:ed:81: 6e:54:be:89:61:d8:0a:b9:57:a5:e9:5b:1a:af:93:1c:b5:d3: de:51:dc:8f:ce:35:7f:09:29:61:a0:7b:80:98:58:49:8c:0a: 2d:c5:8e:c3:60:24:fb:36:5c:cc:ed:be:70:dc:df:cb:b7:3c: bd:ab:aa:52:a7:bb:aa:53:10:74:ba:bd:b5:5e:81:0d:69:05: 80:72:52:26:50:27:09:b1:b8:f7:95:b4:a0:9b:97:be:74:2f: 39:c5:01:20:cb:25:f4:4c:83:c7:85:f2:73:57:c2:da:90:8a: b9:56:f4:88:c3:49:18:5d:ca:c0:ef:d7:b9:25:da:37:d8:6e: ea:74:49:df:d6:cc:f2:db:59:de:26:7a:cb:0c:66:5f:8a:8a: 5f:0c:53:f8:0c:a6:45:27:f6:4c:3b:b8:57:a1:b8:e6:22:4e: 3b:31:77:86:fc:20:48:ad:7f:50:8f:77:99:b0:14:65:c4:2c: 83:3c:ab:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4J/ea+Up7FL3UeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MzIzZGQ5ZjYtNzI3OS00NGI0LTg0YTYtMWU5NDRhOTg0ZGFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJaCnxI9KCTYoEFVIH7umOKvPH3qvvZjNFUX E02Nvfiaz7iQBb5McQ+zUfb0JEDQ7nWAjXjagiYnrz9R4nvaZtZZhQoEFTGDoROK o6ghOVM1ESumNqCI5fhBPraZ4qAhmXlq1tOXg24XPlwXOBpuwux5giD4FYnTuCOi TlIorYVFvptSL7D+yFLps78hefUP1T7nTSLrruQQvxZnCFalXnvRNSxTBxvf4bPu Ec0BZy2uWg6YBGDkmYfWrbmzRWXoCzUG3kVR5xoFyEgS9dCQtQyGKCXYjski9ZBc 0OvzY4o40UwbnlcX98bSzF/yMFWQwkEUidIKJ0WR/NXlwIom5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGnUNJAnFZhgzPdcTBk5kmZhRfJtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNzYyNWVhNzUtNTRlYi0z OGEwLTgxYTctZTAxYzU2MzU0NjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8X7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALHELhpiQEaJGjE6M+fmro9rYVlNoEXtJOfgi35uGLc3/Gsch3yLypl4 v0GFfyZe3qPyNV6frUxnb8/1tYP+7awEbx3+VV/tgW5Uvolh2Aq5V6XpWxqvkxy1 095R3I/ONX8JKWGge4CYWEmMCi3FjsNgJPs2XMztvnDc38u3PL2rqlKnu6pTEHS6 vbVegQ1pBYByUiZQJwmxuPeVtKCbl750LznFASDLJfRMg8eF8nNXwtqQirlW9IjD SRhdysDv17kl2jfYbup0Sd/WzPLbWd4messMZl+Kil8MU/gMpkUn9kw7uFehuOYi Tjsxd4b8IEitf1CPd5mwFGXELIM8q7Q= -----END CERTIFICATE-----Generated at Thu Mar 26 15:21:06 2026 by rpki-client