$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8f396276-3d59-34ad-8ee1-c940abc4c9c8.roa File: 8f396276-3d59-34ad-8ee1-c940abc4c9c8.roa (raw, json) Hash identifier: TY3NT38CmmGY3/QyYcFa8vJHKVRJONPW1+eMpC2KrD0= Subject key identifier: 35:1C:38:18:A7:EF:55:9D:AB:FC:20:42:23:3B:2B:7E:09:F1:0A:D2 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F4983AD5B0969857011524F40 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8f396276-3d59-34ad-8ee1-c940abc4c9c8.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 99.198.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:83:ad:5b:09:69:85:70:11:52:4f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=66d64915-f9ec-4771-9fd1-7e186d86fb59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:79:4b:ca:b6:b9:2f:aa:7c:2a:00:63:ca:1e: fb:55:84:3a:ee:1a:79:83:ee:ee:d9:7c:8c:cd:4a: c5:0a:21:7c:7b:7d:0c:a4:d2:b1:fd:a2:bb:20:e8: 32:3d:1b:e4:64:73:15:ce:84:21:75:e3:b6:22:7a: c0:ea:52:64:6f:86:3d:fc:d3:eb:6c:b7:77:62:bf: 1b:36:77:b0:14:7a:d2:dd:9d:bd:af:92:ba:fe:7f: fa:d3:ea:02:6c:9c:7a:a9:a1:ca:7e:e7:fb:4c:ec: ad:7d:1e:ee:1a:ae:fb:da:ee:77:3e:ae:9e:56:ce: 00:75:b6:1c:61:47:2e:35:86:f2:d3:66:bf:0d:d5: e1:c5:42:24:27:5d:57:fd:4f:6e:1d:4c:f0:5a:73: 49:73:34:58:6b:46:62:ab:0c:fa:23:29:44:7c:e7: 00:b0:93:fa:6e:6b:c8:6b:f3:7d:be:7f:65:88:48: 77:13:95:8e:c4:4f:5c:64:d0:f4:d2:bb:2f:76:27: d8:e0:87:d0:87:d3:ba:2f:d7:93:82:d4:2f:8f:ff: d7:29:be:b6:df:ff:64:4d:c5:10:62:76:48:71:b4: ea:e6:73:9e:de:d4:fa:1c:18:b0:8e:c0:ac:09:b3: d9:a0:2b:b6:fd:8f:1d:0a:17:4c:a3:82:0e:a7:ea: 20:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:1C:38:18:A7:EF:55:9D:AB:FC:20:42:23:3B:2B:7E:09:F1:0A:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8f396276-3d59-34ad-8ee1-c940abc4c9c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.198.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:e2:ba:c1:03:a2:c4:fe:1a:fc:42:1c:5a:f7:11:9e:d4:2c: 6b:09:11:25:d0:ad:4d:5e:0a:01:12:ef:9e:1b:46:15:e9:85: 9a:8b:9e:da:cc:3d:ab:82:2b:9f:1a:4d:4e:76:4c:57:20:33: 94:ca:82:d4:aa:17:1a:27:e2:6d:b2:fc:25:26:c2:3b:5e:d1: 99:7d:3c:5c:2f:e2:1a:0a:14:a7:f0:c4:7a:65:f5:50:30:dc: b6:2a:e8:c4:1f:41:0a:0f:5a:9e:d9:ae:49:4b:e6:d6:f2:f0: e7:7e:15:99:82:14:6e:99:42:bf:16:1f:2c:14:46:d2:0c:ec: 2e:c8:2d:2b:ad:87:23:a5:e3:17:cf:e4:b7:4b:53:2a:f5:43: 24:e5:6f:17:81:a3:88:ca:40:fd:11:02:f8:7e:13:f7:e6:c5: 1f:ba:79:5d:34:cf:cd:75:02:1d:4d:09:f0:a3:20:53:99:91: 3d:8f:c5:33:ba:4a:26:b7:c5:04:6f:25:55:f0:10:7a:59:2b: ae:8e:3e:cf:83:d1:dc:bd:93:88:a6:9e:80:a5:8a:4b:96:e9: 7d:12:26:2c:a9:bd:21:27:b9:18:7c:e6:2e:ef:5d:b5:05:59: 8b:0c:27:24:95:26:73:c5:8a:dd:bd:f8:d8:96:fe:ad:1d:7e: 78:e5:08:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jg61bCWmFcBFST0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NjZkNjQ5MTUtZjllYy00NzcxLTlmZDEtN2UxODZkODZmYjU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHlLyra5L6p8KgBjyh77VYQ67hp5g+7u2XyM zUrFCiF8e30MpNKx/aK7IOgyPRvkZHMVzoQhdeO2InrA6lJkb4Y9/NPrbLd3Yr8b NnewFHrS3Z29r5K6/n/60+oCbJx6qaHKfuf7TOytfR7uGq772u53Pq6eVs4AdbYc YUcuNYby02a/DdXhxUIkJ11X/U9uHUzwWnNJczRYa0Ziqwz6IylEfOcAsJP6bmvI a/N9vn9liEh3E5WOxE9cZND00rsvdifY4IfQh9O6L9eTgtQvj//XKb623/9kTcUQ YnZIcbTq5nOe3tT6HBiwjsCsCbPZoCu2/Y8dChdMo4IOp+ogFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDUcOBin71Wdq/wgQiM7K34J8QrSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOGYzOTYyNzYtM2Q1OS0z NGFkLThlZTEtYzk0MGFiYzRjOWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8YhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG/iusEDosT+GvxCHFr3EZ7ULGsJESXQrU1eCgES754bRhXphZqLntrM PauCK58aTU52TFcgM5TKgtSqFxon4m2y/CUmwjte0Zl9PFwv4hoKFKfwxHpl9VAw 3LYq6MQfQQoPWp7ZrklL5tby8Od+FZmCFG6ZQr8WHywURtIM7C7ILSuthyOl4xfP 5LdLUyr1QyTlbxeBo4jKQP0RAvh+E/fmxR+6eV00z811Ah1NCfCjIFOZkT2PxTO6 Sia3xQRvJVXwEHpZK66OPs+D0dy9k4imnoClikuW6X0SJiypvSEnuRh85i7vXbUF WYsMJySVJnPFit29+NiW/q0dfnjlCGA= -----END CERTIFICATE-----Generated at Tue Sep 29 02:48:08 2026 by rpki-client