$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9be5dca9-6acf-3619-8cd1-321b7fa6283f.roa File: 9be5dca9-6acf-3619-8cd1-321b7fa6283f.roa (raw, json) Hash identifier: 9juxfOjDgbk7sAC6Y2DQTNSZG5fiOt4OGylSZF8w6z8= Subject key identifier: 36:56:53:55:8F:76:A6:E4:25:B7:7D:93:FD:C3:CE:AC:D4:05:AC:AB Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F4983889B71F323233EF2A480 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9be5dca9-6acf-3619-8cd1-321b7fa6283f.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 99.196.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:83:88:9b:71:f3:23:23:3e:f2:a4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=ba9d0aa7-bb7f-4241-99ee-37eea2ec20f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:81:95:4e:c8:55:f6:af:4c:e6:29:14:b4:30: 9f:dd:50:81:1d:35:68:94:b0:dd:41:45:d9:06:50: bd:48:a6:04:15:5c:4f:11:71:a0:01:be:e8:5f:4d: b3:41:48:1c:71:75:d6:c4:11:bc:3a:49:15:2e:06: 72:99:ab:26:ff:47:16:25:31:16:b7:e0:53:b3:a7: c8:35:59:b5:8b:eb:f2:69:d1:aa:4c:f7:66:04:2b: 5c:a0:50:82:34:34:7f:e8:3d:4f:56:22:91:66:14: d7:81:56:50:55:c9:96:ce:29:7c:cf:12:92:9c:71: 96:41:e1:47:97:b7:8d:88:10:1d:6c:b6:30:b9:27: 72:bc:11:22:a9:6b:91:9a:e5:17:ab:e0:a0:29:54: c8:47:b0:24:99:52:57:78:7e:79:78:aa:f6:49:c0: ac:08:53:20:d1:77:ef:15:3b:2c:e0:7a:c9:ff:3b: fa:03:21:eb:ba:a6:90:4c:e2:bc:70:4e:0a:46:d9: da:0e:9d:c6:86:9a:52:b3:f9:b3:17:82:83:bb:8b: f9:79:32:0f:5e:d4:cf:b0:72:ea:69:d5:8a:80:e9: 13:a9:f4:c5:c4:d6:0c:85:19:7a:6d:9b:35:30:24: d1:54:2d:75:4f:b0:28:a6:54:04:19:45:5d:91:cf: 8c:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:56:53:55:8F:76:A6:E4:25:B7:7D:93:FD:C3:CE:AC:D4:05:AC:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9be5dca9-6acf-3619-8cd1-321b7fa6283f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.196.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:dc:c3:42:7b:9c:15:8e:82:7c:cb:cd:f5:ad:6a:48:61:f7: e4:83:9e:37:41:71:b3:80:74:40:a9:51:27:13:ed:50:5d:6e: b3:ae:32:f7:b3:3a:b5:5c:e6:7b:62:bc:3c:6f:ab:e2:72:a6: 2c:b4:9d:60:16:aa:03:3c:2e:e3:ef:42:ba:ba:76:3d:45:e2: 0b:f8:06:0f:27:c1:18:fc:55:86:b0:5e:2d:9f:c7:7e:aa:5b: 65:dc:ff:e2:41:24:75:2e:63:1e:3e:61:4e:ac:8b:28:20:72: c5:9a:73:a0:03:f8:42:b0:79:0f:d5:89:20:65:2b:64:02:f9: 79:bf:1a:35:ea:f4:eb:8c:bd:d8:8a:e0:54:58:a4:11:4e:64: ff:e5:9b:56:9d:49:93:1a:4c:78:b3:49:78:1f:cb:42:77:73: a2:52:9e:9a:d2:a9:11:44:a1:f0:f8:1d:6e:d1:7b:4e:5d:72: d7:79:e3:76:5c:e9:95:a2:25:1f:ae:aa:5e:9b:11:a6:6e:b0: d9:ee:87:e5:37:82:f6:12:71:7f:21:1b:c1:80:21:a2:04:e4: 24:30:65:91:ce:75:a2:22:75:93:80:91:78:db:95:9a:d8:f5: 04:97:cc:46:01:7b:6b:42:fc:ae:76:c9:4b:4a:f7:47:d4:83: 97:19:a7:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jg4ibcfMjIz7ypIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YmE5ZDBhYTctYmI3Zi00MjQxLTk5ZWUtMzdlZWEyZWMyMGY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjoGVTshV9q9M5ikUtDCf3VCBHTVolLDdQUXZ BlC9SKYEFVxPEXGgAb7oX02zQUgccXXWxBG8OkkVLgZymasm/0cWJTEWt+BTs6fI NVm1i+vyadGqTPdmBCtcoFCCNDR/6D1PViKRZhTXgVZQVcmWzil8zxKSnHGWQeFH l7eNiBAdbLYwuSdyvBEiqWuRmuUXq+CgKVTIR7AkmVJXeH55eKr2ScCsCFMg0Xfv FTss4HrJ/zv6AyHruqaQTOK8cE4KRtnaDp3GhppSs/mzF4KDu4v5eTIPXtTPsHLq adWKgOkTqfTFxNYMhRl6bZs1MCTRVC11T7AoplQEGUVdkc+MZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDZWU1WPdqbkJbd9k/3DzqzUBayrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOWJlNWRjYTktNmFjZi0z NjE5LThjZDEtMzIxYjdmYTYyODNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8SDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI7cw0J7nBWOgnzLzfWtakhh9+SDnjdBcbOAdECpUScT7VBdbrOuMvez OrVc5ntivDxvq+Jypiy0nWAWqgM8LuPvQrq6dj1F4gv4Bg8nwRj8VYawXi2fx36q W2Xc/+JBJHUuYx4+YU6siyggcsWac6AD+EKweQ/ViSBlK2QC+Xm/GjXq9OuMvdiK 4FRYpBFOZP/lm1adSZMaTHizSXgfy0J3c6JSnprSqRFEofD4HW7Re05dctd543Zc 6ZWiJR+uql6bEaZusNnuh+U3gvYScX8hG8GAIaIE5CQwZZHOdaIidZOAkXjblZrY 9QSXzEYBe2tC/K52yUtK90fUg5cZpz0= -----END CERTIFICATE-----Generated at Sat Sep 26 03:30:39 2026 by rpki-client