$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8d00d24f-c679-3d3b-ae8f-a6328b5506be.roa File: 8d00d24f-c679-3d3b-ae8f-a6328b5506be.roa (raw, json) Hash identifier: CKtYmi9Gnz3juuJVgJnGfCvxf9VLdPbzd/YDIAcO6AY= Subject key identifier: 12:4E:32:34:5B:93:75:DE:39:5C:7E:A3:4D:A2:29:B4:64:7E:F4:87 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E099324B7BD99977A3F800 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8d00d24f-c679-3d3b-ae8f-a6328b5506be.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 99.197.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:99:32:4b:7b:d9:99:77:a3:f8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=f34343ea-cf16-403a-b20f-e172ac7e43a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:0c:78:4c:33:b4:9e:61:cd:26:f7:2f:6f:eb: e2:97:64:0a:c4:57:a8:ff:97:12:4e:d7:08:05:fb: 77:23:d0:73:5a:81:bd:f8:5e:da:4b:45:9d:da:10: 72:f9:a1:f8:90:07:06:72:79:af:20:d2:09:fa:a1: f4:36:34:e8:1b:d9:57:73:48:69:3c:4a:fd:e5:a9: 0f:dc:a9:65:1f:7d:b7:87:b3:34:a9:4b:38:ad:40: 19:89:46:c6:9f:ba:94:cf:dc:39:ea:ce:66:ab:f5: 99:cf:d2:e2:a9:d3:ac:95:0f:38:1f:69:90:4f:d2: 72:1e:e3:50:0f:b1:30:26:0e:57:1f:01:3f:44:5d: fb:2f:b8:c9:be:1b:76:1d:dd:33:37:ad:d1:80:58: c4:24:a9:e0:d7:4e:59:46:c3:f3:5d:3f:5d:29:82: 7c:9e:c9:20:8c:2c:c8:a0:11:87:f5:b0:42:1a:70: 92:13:df:ff:e6:45:84:65:4e:f8:40:4a:46:cf:1e: 7a:4f:93:58:09:ca:39:d4:3e:4d:ec:03:23:b5:2a: a4:d4:29:eb:19:80:3f:72:ae:01:ac:02:64:81:51: f6:35:b6:8a:cf:65:c9:79:2a:d2:54:b0:ac:5a:2a: ab:2d:c8:b2:68:ed:69:17:f0:be:db:29:ff:63:26: 2e:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:4E:32:34:5B:93:75:DE:39:5C:7E:A3:4D:A2:29:B4:64:7E:F4:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8d00d24f-c679-3d3b-ae8f-a6328b5506be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.197.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:2c:ae:89:8f:af:b7:24:87:f5:65:b1:8c:17:29:ac:dd:b8: 39:1d:c8:00:e1:43:d8:b0:40:07:98:f9:8a:50:bd:b4:36:bf: c2:2d:0e:45:74:bf:1b:93:ad:52:0d:55:38:77:21:16:e7:21: dd:61:73:46:53:ff:64:46:27:cf:b4:47:2f:76:0d:93:7c:6c: 58:f9:c9:6d:e3:24:cf:fc:59:8f:6d:b2:d7:91:e4:9e:d3:b3: 16:cf:7c:4e:df:b9:51:60:2f:54:9e:ed:3f:a7:08:20:88:0c: 51:8b:42:13:27:ba:c3:9e:d0:20:c3:ba:40:5e:56:94:dc:1f: ce:99:58:08:f9:49:80:41:01:e5:42:9b:3c:a9:cc:d6:0b:41: 5e:ce:0e:24:7a:4c:ff:74:23:79:bc:a1:03:63:81:40:9a:6a: 1a:54:c2:7a:3d:d6:8a:ca:5b:66:e8:2e:fc:0a:5e:2e:c4:74: b1:e9:ce:08:e3:81:50:a4:e2:6f:f2:f1:ad:01:48:98:f4:a4: a0:6e:c3:02:ec:2a:bf:1a:30:62:cb:72:83:e2:e6:ee:ee:6e: 83:3d:ed:47:86:bd:ee:cb:b2:fe:f7:ea:53:22:50:66:9a:12: f4:f5:bf:9e:61:d8:b9:08:1a:1c:94:f9:70:7c:8e:1b:a2:da: d8:25:cf:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4JkyS3vZmXej+AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ZjM0MzQzZWEtY2YxNi00MDNhLWIyMGYtZTE3MmFjN2U0M2EwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgx4TDO0nmHNJvcvb+vil2QKxFeo/5cSTtcI Bft3I9BzWoG9+F7aS0Wd2hBy+aH4kAcGcnmvINIJ+qH0NjToG9lXc0hpPEr95akP 3KllH323h7M0qUs4rUAZiUbGn7qUz9w56s5mq/WZz9LiqdOslQ84H2mQT9JyHuNQ D7EwJg5XHwE/RF37L7jJvht2Hd0zN63RgFjEJKng105ZRsPzXT9dKYJ8nskgjCzI oBGH9bBCGnCSE9//5kWEZU74QEpGzx56T5NYCco51D5N7AMjtSqk1CnrGYA/cq4B rAJkgVH2NbaKz2XJeSrSVLCsWiqrLciyaO1pF/C+2yn/YyYuLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBJOMjRbk3XeOVx+o02iKbRkfvSHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOGQwMGQyNGYtYzY3OS0z ZDNiLWFlOGYtYTYzMjhiNTUwNmJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8VZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADssromPr7ckh/VlsYwXKazduDkdyADhQ9iwQAeY+YpQvbQ2v8ItDkV0 vxuTrVINVTh3IRbnId1hc0ZT/2RGJ8+0Ry92DZN8bFj5yW3jJM/8WY9tsteR5J7T sxbPfE7fuVFgL1Se7T+nCCCIDFGLQhMnusOe0CDDukBeVpTcH86ZWAj5SYBBAeVC mzypzNYLQV7ODiR6TP90I3m8oQNjgUCaahpUwno91orKW2boLvwKXi7EdLHpzgjj gVCk4m/y8a0BSJj0pKBuwwLsKr8aMGLLcoPi5u7uboM97UeGve7Lsv736lMiUGaa EvT1v55h2LkIGhyU+XB8jhui2tglz8Y= -----END CERTIFICATE-----Generated at Thu Mar 26 15:42:21 2026 by rpki-client