$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8a520675-6613-388a-be6a-1f5023da6b64.roa File: 8a520675-6613-388a-be6a-1f5023da6b64.roa (raw, json) Hash identifier: X4HsOZynWAibxNm92ETeM4rfP9/x9WtmHOwcEZTQ+NA= Subject key identifier: 2B:89:75:51:BF:A4:5B:C4:A5:97:17:D2:0D:3F:8C:3D:4A:21:73:35 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24DFDF61708D7AD1F087F000 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8a520675-6613-388a-be6a-1f5023da6b64.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 99.196.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:df:61:70:8d:7a:d1:f0:87:f0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=e9b356dd-cdbe-42f6-8fe6-c62c76361f32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ce:13:13:19:1c:65:7b:4e:7e:60:20:ef:2f: 90:fb:f0:de:f0:54:9b:da:8a:a3:4e:59:b1:5b:34: be:42:85:a5:b4:d1:7f:44:0c:2f:60:29:3b:d2:f9: bb:33:e1:ab:6b:0f:e4:9b:f0:2f:61:c7:db:82:23: 2b:e6:a8:83:fa:4f:68:f6:d0:1a:33:d5:cb:e8:00: ac:0e:d2:65:d8:86:ef:cc:4d:7b:e1:f4:cb:78:42: 42:cc:39:d4:21:50:a2:67:65:ef:51:b3:5d:bd:47: 6c:74:f5:41:e2:56:43:e7:28:50:ad:7f:e9:7a:46: d3:60:9f:35:66:0f:b2:e5:25:50:00:13:bc:92:72: 88:cd:aa:9c:49:89:d3:5e:40:67:0c:75:1c:fb:50: 90:4f:66:3f:41:2f:c7:e9:3b:9c:ac:3e:25:5a:67: 4b:ad:ba:a1:53:be:2f:eb:07:30:f7:6c:7f:67:5a: fc:fb:9b:e9:cb:05:5d:ab:36:8f:c0:87:8c:ff:65: 75:2d:a1:19:97:5b:70:f2:28:33:af:5d:1c:d2:cd: 33:ff:e0:c1:79:ab:ec:a8:f9:68:c3:81:ac:62:29: 06:c4:03:b1:29:76:4c:30:96:1d:9a:63:b2:1b:ff: fa:9b:6c:0d:06:ab:2b:31:58:1a:1b:bf:99:12:6c: 25:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:89:75:51:BF:A4:5B:C4:A5:97:17:D2:0D:3F:8C:3D:4A:21:73:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8a520675-6613-388a-be6a-1f5023da6b64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.196.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:a7:7a:95:19:ef:f5:c3:a9:4f:56:53:3e:d1:4b:1c:51:7e: c4:c2:db:71:8a:27:cb:91:0f:d6:c2:fa:51:6d:47:9e:bf:66: e9:59:3f:1d:a0:9e:aa:c5:91:d5:68:c6:9f:c0:5d:51:80:83: 22:32:0a:95:2c:c6:c9:16:7f:86:9a:9e:e3:bb:c7:1f:5c:64: 27:56:87:4a:a9:56:fe:a5:1c:71:ee:63:95:71:19:33:72:ba: 3f:25:87:84:3c:3e:c1:49:f7:0c:47:a0:2a:dd:4a:79:ac:6b: a4:ba:d5:82:27:d7:6b:06:e6:c6:22:05:ce:73:8d:7d:c9:ba: 12:9f:7d:4e:61:9e:e6:b7:7a:66:31:a1:d9:51:36:d0:ef:dc: 9b:dd:62:26:f2:9b:4f:2f:20:82:ef:b7:a6:5d:82:71:c4:41: 74:34:52:c5:c5:de:36:d3:39:df:33:76:40:05:c3:2c:a0:2c: 21:29:22:8e:bd:6a:57:65:83:c3:17:52:4e:f5:2d:fd:4f:96: f5:e3:2c:9e:c0:9a:5b:e4:f8:87:5b:a8:11:86:02:33:3a:e4: e1:97:c2:4b:1e:cf:e6:8a:2d:2f:8b:d8:0f:29:2b:31:3e:2a: 35:68:d3:72:f3:08:d4:df:4f:25:73:ce:80:2e:69:33:4b:b1: 5c:1c:c8:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k399hcI160fCH8AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ZTliMzU2ZGQtY2RiZS00MmY2LThmZTYtYzYyYzc2MzYxZjMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnc4TExkcZXtOfmAg7y+Q+/De8FSb2oqjTlmx WzS+QoWltNF/RAwvYCk70vm7M+Graw/km/AvYcfbgiMr5qiD+k9o9tAaM9XL6ACs DtJl2IbvzE174fTLeEJCzDnUIVCiZ2XvUbNdvUdsdPVB4lZD5yhQrX/pekbTYJ81 Zg+y5SVQABO8knKIzaqcSYnTXkBnDHUc+1CQT2Y/QS/H6TucrD4lWmdLrbqhU74v 6wcw92x/Z1r8+5vpywVdqzaPwIeM/2V1LaEZl1tw8igzr10c0s0z/+DBeavsqPlo w4GsYikGxAOxKXZMMJYdmmOyG//6m2wNBqsrMVgaG7+ZEmwlzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCuJdVG/pFvEpZcX0g0/jD1KIXM1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOGE1MjA2NzUtNjYxMy0z ODhhLWJlNmEtMWY1MDIzZGE2YjY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8QBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACOnepUZ7/XDqU9WUz7RSxxRfsTC23GKJ8uRD9bC+lFtR56/ZulZPx2g nqrFkdVoxp/AXVGAgyIyCpUsxskWf4aanuO7xx9cZCdWh0qpVv6lHHHuY5VxGTNy uj8lh4Q8PsFJ9wxHoCrdSnmsa6S61YIn12sG5sYiBc5zjX3JuhKffU5hnua3emYx odlRNtDv3JvdYibym08vIILvt6ZdgnHEQXQ0UsXF3jbTOd8zdkAFwyygLCEpIo69 aldlg8MXUk71Lf1PlvXjLJ7Amlvk+IdbqBGGAjM65OGXwksez+aKLS+L2A8pKzE+ KjVo03LzCNTfTyVzzoAuaTNLsVwcyNc= -----END CERTIFICATE-----Generated at Thu Mar 26 17:57:21 2026 by rpki-client