$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8a520675-6613-388a-be6a-1f5023da6b64.roa File: 8a520675-6613-388a-be6a-1f5023da6b64.roa (raw, json) Hash identifier: dlnbUl+2CVC7txVrNCCH33HoTSSi2El+43ZIwkfgJDQ= Subject key identifier: 01:CB:E4:11:89:77:ED:BF:7E:1E:C5:3C:81:B3:0D:BF:82:8C:0E:26 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F497B5922F5049E93EFF84C00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8a520675-6613-388a-be6a-1f5023da6b64.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 99.196.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7b:59:22:f5:04:9e:93:ef:f8:4c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=b9a0581a-0a8f-4b47-b6f8-97065de40b4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ea:fe:32:7e:70:39:7e:8d:14:0e:b9:99:0a: 28:7a:c9:e5:36:d3:11:4b:63:ca:0e:ca:ef:d0:97: 78:7b:01:03:9c:80:cd:ba:b7:f8:c1:a8:98:ea:0f: 70:3f:72:ad:b3:40:6e:80:76:05:4c:72:41:51:c9: ef:22:8a:e4:10:88:06:f4:54:59:6c:86:d6:82:c5: 2f:02:14:d1:e5:5b:51:ff:c3:25:2d:86:5b:d9:f7: 75:00:1d:9a:6a:ca:38:ce:f9:a3:ad:32:a4:9a:f6: dd:08:91:55:d4:83:3b:52:24:02:10:4c:a6:16:c0: 88:10:c3:4c:6a:0a:a2:6a:08:ce:fb:07:46:a2:c6: dc:30:c2:8d:94:3f:92:5d:5f:66:ea:37:d7:2f:52: aa:6e:fe:ee:b9:bc:72:d3:37:6c:83:37:4b:09:3b: 9a:c1:c3:76:49:a6:f6:49:45:13:03:63:f5:e8:d1: 78:1a:93:61:53:b9:03:07:f7:bf:a8:34:4e:ca:3d: ff:17:55:a4:64:e6:c3:61:76:aa:07:17:13:3a:6c: 71:20:5c:67:0a:0a:ce:20:79:e2:7e:88:77:27:87: 20:cf:bc:c2:3f:d9:f2:17:7c:84:a0:44:ed:98:7d: 08:18:bc:8c:67:9e:45:11:e8:2e:90:03:6c:01:d3: 2a:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:CB:E4:11:89:77:ED:BF:7E:1E:C5:3C:81:B3:0D:BF:82:8C:0E:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8a520675-6613-388a-be6a-1f5023da6b64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.196.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:bb:73:d4:a5:8f:a4:24:43:ac:42:15:1f:a5:08:68:14:83: 93:17:73:3f:8f:c7:88:76:74:f7:1c:57:53:1d:6d:cf:d3:f5: ac:6f:3c:9d:04:68:fd:89:21:f9:97:b6:b0:e0:ec:b4:af:86: f7:c5:0f:06:84:d4:c8:d5:50:42:21:c8:4c:28:2d:c9:de:6f: be:b6:96:74:c4:58:f1:4f:4e:4d:e1:9b:29:5c:03:49:5b:8a: 7b:aa:4c:c0:ce:54:fd:e7:a2:99:b8:a6:e8:a7:04:8c:70:ec: a1:c4:de:20:9e:b6:41:2b:2d:dd:54:dc:d6:23:fd:fa:24:ae: cc:30:9c:fb:28:3f:28:fb:cb:40:91:08:e4:af:9b:a2:f2:93: 92:b4:28:07:f7:46:29:ae:c4:40:0c:19:65:23:27:9b:38:70: d7:25:c0:92:ca:42:10:a0:02:23:94:c8:4b:50:f6:96:2b:00: b1:84:d2:40:09:1c:34:ee:b2:12:18:d9:ca:52:8f:7d:15:42: 9d:46:59:be:71:e2:85:bf:76:71:26:5c:34:fe:a0:81:e7:a0: 45:4c:dd:22:1a:29:61:ed:d7:47:f3:0d:fd:af:12:6e:2a:de: 09:a8:8a:ac:fb:ea:e7:9d:a8:a1:b5:91:34:13:c0:cd:3a:26: 65:35:b8:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Je1ki9QSek+/4TAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YjlhMDU4MWEtMGE4Zi00YjQ3LWI2ZjgtOTcwNjVkZTQwYjRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+r+Mn5wOX6NFA65mQooesnlNtMRS2PKDsrv 0Jd4ewEDnIDNurf4waiY6g9wP3Kts0BugHYFTHJBUcnvIorkEIgG9FRZbIbWgsUv AhTR5VtR/8MlLYZb2fd1AB2aaso4zvmjrTKkmvbdCJFV1IM7UiQCEEymFsCIEMNM agqiagjO+wdGosbcMMKNlD+SXV9m6jfXL1Kqbv7uubxy0zdsgzdLCTuawcN2Sab2 SUUTA2P16NF4GpNhU7kDB/e/qDROyj3/F1WkZObDYXaqBxcTOmxxIFxnCgrOIHni foh3J4cgz7zCP9nyF3yEoETtmH0IGLyMZ55FEegukANsAdMqsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAHL5BGJd+2/fh7FPIGzDb+CjA4mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOGE1MjA2NzUtNjYxMy0z ODhhLWJlNmEtMWY1MDIzZGE2YjY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8QBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH67c9Slj6QkQ6xCFR+lCGgUg5MXcz+Px4h2dPccV1Mdbc/T9axvPJ0E aP2JIfmXtrDg7LSvhvfFDwaE1MjVUEIhyEwoLcneb762lnTEWPFPTk3hmylcA0lb inuqTMDOVP3nopm4puinBIxw7KHE3iCetkErLd1U3NYj/fokrswwnPsoPyj7y0CR COSvm6Lyk5K0KAf3RimuxEAMGWUjJ5s4cNclwJLKQhCgAiOUyEtQ9pYrALGE0kAJ HDTushIY2cpSj30VQp1GWb5x4oW/dnEmXDT+oIHnoEVM3SIaKWHt10fzDf2vEm4q 3gmoiqz76uedqKG1kTQTwM06JmU1uCw= -----END CERTIFICATE-----Generated at Thu Oct 8 13:47:53 2026 by rpki-client