$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/962ca24b-f8ec-36d2-8816-11a53021331e.roa File: 962ca24b-f8ec-36d2-8816-11a53021331e.roa (raw, json) Hash identifier: VLQ+QoC3dv0UsJKt/eyCs72tmEFGpSjWaXD0L1sk1rY= Subject key identifier: CD:51:34:A1:9F:16:E3:04:8D:50:26:FD:F7:FA:21:0E:32:2C:22:2F Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F4983A6B4D5976B2CF3E11EA0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/962ca24b-f8ec-36d2-8816-11a53021331e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 99.197.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:83:a6:b4:d5:97:6b:2c:f3:e1:1e:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=887a8210-a676-4292-95eb-c661020a7ff2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:b8:3f:53:bc:7c:7a:0b:8d:91:3a:4d:5e:33: 50:04:cb:2b:28:38:1f:99:42:03:87:46:a9:ef:0e: 1e:98:6a:6d:ac:bc:f3:96:18:43:50:6c:e8:94:9d: 31:a0:4c:f5:61:62:85:2a:32:0a:af:f7:9d:e1:c8: 52:68:b1:20:fb:18:2d:89:e4:5d:44:11:c9:af:5c: 77:ba:23:27:05:57:a5:05:6d:f7:52:d5:cd:90:92: d2:5d:97:43:71:12:09:3c:be:7b:10:ee:10:66:97: f4:18:58:50:a2:17:64:ec:66:41:5e:63:4f:e6:0e: 1a:68:e6:54:d4:3c:08:e8:a6:72:aa:d1:eb:4c:58: e7:b2:d7:e1:67:62:11:2b:2b:06:a7:8e:7d:a2:5c: 58:5b:6d:12:6f:6e:39:22:fa:6e:fc:d5:a8:e2:84: 49:30:20:9c:f9:73:d1:50:f0:e5:f2:b6:6b:c4:c2: ad:72:a5:16:0d:dc:05:c7:84:0e:9e:bf:0e:a8:16: ac:f0:6c:37:ff:c9:59:41:2f:d2:e4:72:42:db:f8: c8:04:f9:dc:0f:bf:52:8b:97:ca:95:bb:05:0d:0f: 54:77:b9:0e:c6:51:0a:d0:9a:10:06:f2:88:73:71: c1:3f:95:b8:e4:88:8e:aa:34:1c:48:e5:51:42:e6: a9:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:51:34:A1:9F:16:E3:04:8D:50:26:FD:F7:FA:21:0E:32:2C:22:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/962ca24b-f8ec-36d2-8816-11a53021331e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.197.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:9e:3a:fa:68:c6:09:52:77:a8:63:4a:b3:81:5c:74:73:f5: 58:e8:7a:f5:99:3c:88:91:42:78:dc:e0:fd:16:ed:14:9a:10: a0:85:89:bd:26:99:bd:cd:af:d3:32:9d:16:24:00:42:5c:9f: e0:60:35:67:5b:3d:d3:8e:04:6a:11:dc:86:55:0f:7d:94:f7: 3e:7f:69:31:5c:91:0a:6a:12:dc:6d:6c:d1:c4:84:21:a1:6e: 4c:7b:24:71:54:45:c6:b7:84:88:95:9d:2f:61:e3:2f:da:b1: 71:92:8c:b7:a8:43:5b:ff:14:52:e7:df:f2:9c:ad:99:8f:ce: c5:c9:11:a9:6f:3f:a6:c2:bc:60:6c:d9:db:ac:3d:dd:f0:36: f0:16:a7:95:29:ec:fc:d8:38:97:05:34:ee:16:f5:a8:ab:ac: f0:e4:7a:3c:30:4d:43:c0:c1:33:73:3e:9d:70:64:6d:9f:af: 72:2c:44:06:7c:c5:2a:b3:11:ee:7f:1d:f7:52:72:f4:d8:07: 86:c3:ef:96:14:9d:d3:73:54:83:49:6f:45:d1:e6:f0:b2:ba: 25:fd:0f:5a:41:82:d0:56:85:9c:c3:60:3c:76:74:fd:79:3a: 6e:ab:8d:e8:2c:47:5f:f4:d4:07:4d:7a:be:98:ee:88:24:3d: 61:ce:9f:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jg6a01ZdrLPPhHqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ODg3YTgyMTAtYTY3Ni00MjkyLTk1ZWItYzY2MTAyMGE3ZmYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7g/U7x8eguNkTpNXjNQBMsrKDgfmUIDh0ap 7w4emGptrLzzlhhDUGzolJ0xoEz1YWKFKjIKr/ed4chSaLEg+xgtieRdRBHJr1x3 uiMnBVelBW33UtXNkJLSXZdDcRIJPL57EO4QZpf0GFhQohdk7GZBXmNP5g4aaOZU 1DwI6KZyqtHrTFjnstfhZ2IRKysGp459olxYW20Sb245Ivpu/NWo4oRJMCCc+XPR UPDl8rZrxMKtcqUWDdwFx4QOnr8OqBas8Gw3/8lZQS/S5HJC2/jIBPncD79Si5fK lbsFDQ9Ud7kOxlEK0JoQBvKIc3HBP5W45IiOqjQcSOVRQuapZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM1RNKGfFuMEjVAm/ff6IQ4yLCIvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOTYyY2EyNGItZjhlYy0z NmQyLTg4MTYtMTFhNTMwMjEzMzFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8XuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKKeOvpoxglSd6hjSrOBXHRz9VjoevWZPIiRQnjc4P0W7RSaEKCFib0m mb3Nr9MynRYkAEJcn+BgNWdbPdOOBGoR3IZVD32U9z5/aTFckQpqEtxtbNHEhCGh bkx7JHFURca3hIiVnS9h4y/asXGSjLeoQ1v/FFLn3/KcrZmPzsXJEalvP6bCvGBs 2dusPd3wNvAWp5Up7PzYOJcFNO4W9airrPDkejwwTUPAwTNzPp1wZG2fr3IsRAZ8 xSqzEe5/HfdScvTYB4bD75YUndNzVINJb0XR5vCyuiX9D1pBgtBWhZzDYDx2dP15 Om6rjegsR1/01AdNer6Y7ogkPWHOn8c= -----END CERTIFICATE-----Generated at Sat Oct 3 09:08:44 2026 by rpki-client