$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/81869ed5-49e1-39a5-87c3-95090388ab89.roa File: 81869ed5-49e1-39a5-87c3-95090388ab89.roa (raw, json) Hash identifier: QlJUGbabZgaBy1bAlv2yjgvzewJQh/ZUiarC/hwA184= Subject key identifier: 1D:34:5D:31:C0:D2:EC:A7:4D:86:F2:91:11:65:C4:8F:08:57:8E:85 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24DFA81FE28DF55A7BF45980 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/81869ed5-49e1-39a5-87c3-95090388ab89.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 40306 IP address blocks: 99.196.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:a8:1f:e2:8d:f5:5a:7b:f4:59:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=d3dd5bfb-f80e-4810-9ff6-04a7345188c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:42:99:77:65:c5:ae:3a:57:31:e8:a7:c1:50: a1:ae:03:e0:f8:24:d1:aa:8e:4f:a8:52:98:e8:8c: bb:ac:3f:69:2a:8d:aa:a6:00:b7:ce:98:ec:6f:00: 3e:99:c3:82:f9:f1:56:30:04:fe:7a:02:3a:71:4f: 52:81:da:1e:13:ca:a2:f6:38:8f:d3:60:0e:59:be: d9:e7:e4:47:7d:0b:d7:c6:3a:67:7c:f9:7e:d0:b7: 58:38:6d:54:ac:d0:4e:75:04:e9:4d:86:36:b8:79: fe:d9:6e:14:73:af:2a:30:e6:89:ea:36:76:07:5c: 63:f4:d7:b8:13:c1:78:10:02:58:f8:3c:02:93:35: 3c:84:85:e8:d8:d1:2c:c4:14:87:0d:86:32:59:98: cc:98:68:d3:6a:34:06:71:41:7d:07:3a:65:27:12: 71:b9:ac:e0:ae:65:fe:f5:68:3e:a6:7f:7e:58:e8: c1:03:52:5f:e4:26:1d:18:d5:7c:cf:58:89:a8:41: 02:16:b0:86:47:0e:15:f4:4f:a8:dc:ba:91:ff:25: 21:2f:5b:54:cb:53:64:89:23:f8:7b:ad:e0:6c:a3: 59:ee:20:48:ad:11:e2:01:66:2a:fe:2e:6b:8b:af: aa:d6:d9:c0:77:d8:58:91:ed:55:9e:70:64:e5:e1: e6:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:34:5D:31:C0:D2:EC:A7:4D:86:F2:91:11:65:C4:8F:08:57:8E:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/81869ed5-49e1-39a5-87c3-95090388ab89.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.196.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:8f:12:33:5b:a1:64:ff:fb:54:24:67:41:ab:83:83:ea:ce: 68:b4:51:c6:f7:0d:86:1e:ec:34:09:bc:0b:dc:0c:45:71:92: 6d:c6:17:0e:3f:bc:cd:82:10:b3:13:cf:41:1d:11:46:ba:64: db:6e:ca:56:60:87:ae:d6:7a:64:20:80:76:34:84:60:a0:9e: bd:c2:75:27:6a:f8:a5:a3:e5:14:60:1c:76:ab:5d:86:bb:9a: 6b:87:5e:97:db:3a:77:b0:4a:d6:95:89:28:cc:78:67:12:42: 1b:b2:87:d9:44:8e:1f:30:db:3e:d2:c6:c8:74:1f:be:ce:7f: c7:2a:90:f9:d1:7d:94:8e:af:75:d5:6d:76:79:00:dc:09:90: 1e:ab:da:f8:9a:2c:da:47:c6:d8:bf:04:d5:78:3a:cb:79:f7: 21:33:ee:f6:35:29:d5:72:10:e2:77:a1:37:94:61:9f:49:ec: 9e:1d:80:26:49:f7:83:5b:48:3c:4d:74:01:e9:7d:18:22:7d: d1:66:38:c7:24:50:73:36:2b:0e:a1:f5:41:d7:72:2d:d7:5a: f4:3b:c4:e5:80:cf:f9:c1:e1:03:b6:d2:2d:89:e7:ed:2b:5b: 6e:04:39:ba:71:bf:49:04:f4:d5:a7:59:9d:0f:41:16:2a:8f: 89:6e:d6:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k36gf4o31Wnv0WYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ZDNkZDViZmItZjgwZS00ODEwLTlmZjYtMDRhNzM0NTE4OGM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUKZd2XFrjpXMeinwVChrgPg+CTRqo5PqFKY 6Iy7rD9pKo2qpgC3zpjsbwA+mcOC+fFWMAT+egI6cU9SgdoeE8qi9jiP02AOWb7Z 5+RHfQvXxjpnfPl+0LdYOG1UrNBOdQTpTYY2uHn+2W4Uc68qMOaJ6jZ2B1xj9Ne4 E8F4EAJY+DwCkzU8hIXo2NEsxBSHDYYyWZjMmGjTajQGcUF9BzplJxJxuazgrmX+ 9Wg+pn9+WOjBA1Jf5CYdGNV8z1iJqEECFrCGRw4V9E+o3LqR/yUhL1tUy1NkiSP4 e63gbKNZ7iBIrRHiAWYq/i5ri6+q1tnAd9hYke1VnnBk5eHmYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB00XTHA0uynTYbykRFlxI8IV46FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvODE4NjllZDUtNDllMS0z OWE1LTg3YzMtOTUwOTAzODhhYjg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8R9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABCPEjNboWT/+1QkZ0Grg4Pqzmi0Ucb3DYYe7DQJvAvcDEVxkm3GFw4/ vM2CELMTz0EdEUa6ZNtuylZgh67WemQggHY0hGCgnr3CdSdq+KWj5RRgHHarXYa7 mmuHXpfbOnewStaViSjMeGcSQhuyh9lEjh8w2z7Sxsh0H77Of8cqkPnRfZSOr3XV bXZ5ANwJkB6r2viaLNpHxti/BNV4Ost59yEz7vY1KdVyEOJ3oTeUYZ9J7J4dgCZJ 94NbSDxNdAHpfRgifdFmOMckUHM2Kw6h9UHXci3XWvQ7xOWAz/nB4QO20i2J5+0r W24EObpxv0kE9NWnWZ0PQRYqj4lu1hs= -----END CERTIFICATE-----Generated at Thu Mar 26 18:57:28 2026 by rpki-client