$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9ff0e20b-2ff8-35d2-8ed2-4638d8468358.roa File: 9ff0e20b-2ff8-35d2-8ed2-4638d8468358.roa (raw, json) Hash identifier: XCxWEl4iyoYkh4AKpEFOL6UmY6jfTzFoM+fI6wPx2gg= Subject key identifier: 7C:A4:04:83:B7:69:F6:43:3C:F7:87:1C:58:4A:86:B5:9F:12:53:FC Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24DFE84C3C6C24016C3B1DC0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9ff0e20b-2ff8-35d2-8ed2-4638d8468358.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 99.197.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:e8:4c:3c:6c:24:01:6c:3b:1d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=692f5f61-ede8-4123-97c1-f99df8d4c9ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ab:91:f2:55:e4:89:17:af:8e:79:51:13:bf: 97:a1:b3:68:cd:f4:e9:81:8f:7f:f9:d9:88:f5:1d: 71:e7:97:47:01:df:ad:b9:29:2b:26:8c:91:ca:d7: 0c:1c:71:42:76:3d:76:cf:a5:ca:d8:a5:10:53:04: 8f:8d:70:df:2e:78:80:83:b7:b9:d3:8c:b5:7e:9d: 33:93:d1:1c:21:94:4f:6b:78:06:a9:07:c3:a7:0b: ab:ae:73:8b:fa:fe:22:ea:ed:e7:58:0f:f0:cd:99: 89:3b:f9:f4:88:79:62:08:48:89:37:bf:28:18:ae: 03:5c:8a:31:75:85:a3:2c:dd:74:e5:d2:b7:76:be: 49:98:e5:09:81:25:8e:1a:e0:64:cf:6b:7a:9a:0e: 8d:1a:5b:48:e1:7b:ce:f6:03:c1:43:96:22:1d:74: fd:27:9f:7c:13:aa:12:f5:76:dd:c6:41:fa:89:e0: 53:71:b7:60:28:91:d9:09:6b:37:db:cd:2a:8b:fe: 6f:7e:66:51:fe:19:d5:20:14:e3:9e:fc:2a:44:3e: 0f:96:3e:5a:ad:c5:b5:6b:65:4d:14:d0:e0:29:39: 53:21:c1:bc:56:3a:ea:be:62:42:2d:88:82:60:b2: 2f:8a:72:26:f2:d3:c7:f7:16:ba:d4:e1:a8:d5:0a: 40:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:A4:04:83:B7:69:F6:43:3C:F7:87:1C:58:4A:86:B5:9F:12:53:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9ff0e20b-2ff8-35d2-8ed2-4638d8468358.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.197.27.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:35:42:a3:4b:5d:94:44:b4:3f:6b:e2:88:e1:b7:72:47:cb: 98:16:0b:e3:73:73:78:ae:c3:72:0f:39:03:c4:29:89:49:4e: 9f:44:45:af:15:db:c6:71:0d:71:55:0e:66:b3:83:fe:f8:1e: 2b:46:85:c1:ab:be:7f:ca:0c:4b:fc:72:99:99:0c:51:91:b9: 1b:a2:0d:4b:b9:f7:1e:7c:b5:c5:09:a9:2a:56:5c:f5:a3:28: bb:30:83:47:93:71:8e:41:37:26:be:4b:cf:8d:21:3f:ed:7c: 8f:1b:26:f6:4c:14:cb:24:40:2d:49:97:be:db:b3:a0:25:b0: f5:d1:1c:d9:48:3b:09:f4:b5:95:f2:d6:92:a7:59:dd:0c:fe: 14:24:d3:74:e9:22:99:d5:f1:7a:13:94:3a:dc:f8:b9:14:f1: 17:f7:8a:18:83:44:68:90:5b:6c:e0:a1:9d:d3:fa:33:1a:06: c3:56:48:5e:10:9e:09:6d:4c:34:30:55:b3:48:1c:34:47:fb: 83:f9:fd:33:f2:83:21:8b:6e:68:a9:b3:e1:10:90:bf:78:4b: 05:f6:fb:0b:fc:20:74:c4:b0:bb:d5:58:f2:df:19:24:77:35: 43:9f:9b:1f:4c:da:19:77:ad:bb:04:a1:f7:1b:1f:c7:29:db: c7:b4:85:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k3+hMPGwkAWw7HcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NjkyZjVmNjEtZWRlOC00MTIzLTk3YzEtZjk5ZGY4ZDRjOWJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlauR8lXkiRevjnlRE7+XobNozfTpgY9/+dmI 9R1x55dHAd+tuSkrJoyRytcMHHFCdj12z6XK2KUQUwSPjXDfLniAg7e504y1fp0z k9EcIZRPa3gGqQfDpwurrnOL+v4i6u3nWA/wzZmJO/n0iHliCEiJN78oGK4DXIox dYWjLN105dK3dr5JmOUJgSWOGuBkz2t6mg6NGltI4XvO9gPBQ5YiHXT9J598E6oS 9XbdxkH6ieBTcbdgKJHZCWs3280qi/5vfmZR/hnVIBTjnvwqRD4Plj5arcW1a2VN FNDgKTlTIcG8VjrqvmJCLYiCYLIvinIm8tPH9xa61OGo1QpABwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHykBIO3afZDPPeHHFhKhrWfElP8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOWZmMGUyMGItMmZmOC0z NWQyLThlZDItNDYzOGQ4NDY4MzU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8UbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEs1QqNLXZREtD9r4ojht3JHy5gWC+Nzc3iuw3IPOQPEKYlJTp9ERa8V 28ZxDXFVDmazg/74HitGhcGrvn/KDEv8cpmZDFGRuRuiDUu59x58tcUJqSpWXPWj KLswg0eTcY5BNya+S8+NIT/tfI8bJvZMFMskQC1Jl77bs6AlsPXRHNlIOwn0tZXy 1pKnWd0M/hQk03TpIpnV8XoTlDrc+LkU8Rf3ihiDRGiQW2zgoZ3T+jMaBsNWSF4Q ngltTDQwVbNIHDRH+4P5/TPygyGLbmips+EQkL94SwX2+wv8IHTEsLvVWPLfGSR3 NUOfmx9M2hl3rbsEofcbH8cp28e0he8= -----END CERTIFICATE-----Generated at Thu Mar 26 13:34:26 2026 by rpki-client