$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a4239e8f-07a1-313a-a7a8-9a2479cfa30d.roa File: a4239e8f-07a1-313a-a7a8-9a2479cfa30d.roa (raw, json) Hash identifier: 5qospaUVS+rD7eUqS7aWTmNhYSUcuq/DUEonZxkzuhw= Subject key identifier: A4:FA:EA:AA:7F:82:15:81:47:59:56:4D:05:29:B7:87:E8:FF:32:EF Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F49839ACE40F8A9D7011AD980 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a4239e8f-07a1-313a-a7a8-9a2479cfa30d.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 99.197.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:83:9a:ce:40:f8:a9:d7:01:1a:d9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=37d80fa2-cfb5-4da8-96e1-af08cbffe2f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:82:1a:26:1a:bd:81:6c:49:f2:cd:68:b9:fa: 5a:39:b6:89:34:be:76:7d:36:8a:81:e9:c3:71:4b: ce:49:57:db:d3:e1:8e:b7:52:21:61:40:7b:47:fe: a8:0e:1b:2d:4f:de:57:da:73:20:e3:a5:e0:a8:3e: 81:b2:10:cd:df:5c:13:d6:35:ad:ea:32:bf:9c:dc: c5:a3:48:6c:d3:eb:ce:18:db:70:b7:a1:4c:52:63: 13:14:5d:5b:6f:2f:ab:8c:69:0f:df:72:73:88:92: 9d:e4:38:4a:ad:65:b7:65:10:24:49:93:e6:dc:82: 75:fa:58:8c:3f:20:2d:d5:7d:be:d8:c1:19:a8:c3: 7d:56:81:de:a1:60:d6:55:1c:55:7b:fc:cc:4d:6c: 05:84:2c:88:3f:d6:f5:06:3c:3a:ef:d1:68:02:72: 23:48:25:eb:e7:61:32:50:96:3c:b8:03:85:2d:28: 08:b0:71:b4:a5:75:18:d8:88:41:b5:b1:2c:15:5f: 24:d1:04:18:7b:e8:5e:46:d2:5e:6e:02:f2:19:01: 8e:ec:69:70:83:1a:cd:88:89:8e:7a:11:bb:6f:20: c6:cf:51:e0:70:f4:d0:13:48:41:1a:ff:b8:d1:c0: 88:65:a5:53:66:53:be:e9:b9:d6:74:7d:4c:37:57: 53:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:FA:EA:AA:7F:82:15:81:47:59:56:4D:05:29:B7:87:E8:FF:32:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a4239e8f-07a1-313a-a7a8-9a2479cfa30d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.197.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:9c:21:b6:3d:6c:c0:58:2f:c0:b0:d8:bd:d3:95:a6:ef:fa: 8c:bf:8e:ed:f0:af:56:6d:16:aa:e2:42:bb:d6:48:de:9d:73: fe:1b:c2:e8:b0:d5:7f:2e:f8:99:25:75:bf:37:3f:d4:e6:5e: 28:30:5a:40:1a:b4:aa:f4:2b:6f:f2:cc:c1:6b:a5:f5:a0:c9: 97:f4:16:ff:11:cc:60:db:63:0d:79:1b:af:00:4d:ab:e8:3b: 6d:1c:28:0a:a7:f9:0d:6b:c0:2c:9c:8c:e0:ae:19:ac:70:64: 87:10:c7:34:65:dc:1d:a0:68:0d:c4:f2:e4:df:fb:4a:c7:ea: 84:27:5d:4e:fe:72:55:d2:dd:01:58:f5:23:54:28:c8:13:9d: 63:3d:22:6e:aa:04:1d:60:52:f2:60:40:d7:c0:a5:c3:a9:a4: 79:97:16:08:12:a9:b0:34:e6:96:03:00:05:66:8a:7d:cc:e0: bc:68:d0:87:9d:92:bb:65:2c:71:5e:ee:f0:7c:6a:a0:26:ce: ec:9c:93:e6:04:63:7f:d9:e9:f5:ca:c5:ad:94:a4:f6:c9:63: 2d:a8:d8:d4:d0:50:7c:8c:ef:bf:f5:dc:88:a1:6a:1b:91:07: c9:2e:a7:e8:6b:63:e5:97:98:b5:22:ed:4a:4c:7e:a3:fe:24: 9a:c2:6a:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jg5rOQPip1wEa2YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MzdkODBmYTItY2ZiNS00ZGE4LTk2ZTEtYWYwOGNiZmZlMmY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiYIaJhq9gWxJ8s1oufpaObaJNL52fTaKgenD cUvOSVfb0+GOt1IhYUB7R/6oDhstT95X2nMg46XgqD6BshDN31wT1jWt6jK/nNzF o0hs0+vOGNtwt6FMUmMTFF1bby+rjGkP33JziJKd5DhKrWW3ZRAkSZPm3IJ1+liM PyAt1X2+2MEZqMN9VoHeoWDWVRxVe/zMTWwFhCyIP9b1Bjw679FoAnIjSCXr52Ey UJY8uAOFLSgIsHG0pXUY2IhBtbEsFV8k0QQYe+heRtJebgLyGQGO7GlwgxrNiImO ehG7byDGz1HgcPTQE0hBGv+40cCIZaVTZlO+6bnWdH1MN1dT3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKT66qp/ghWBR1lWTQUpt4fo/zLvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYTQyMzllOGYtMDdhMS0z MTNhLWE3YTgtOWEyNDc5Y2ZhMzBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8VtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFOcIbY9bMBYL8Cw2L3Tlabv+oy/ju3wr1ZtFqriQrvWSN6dc/4bwuiw 1X8u+Jkldb83P9TmXigwWkAatKr0K2/yzMFrpfWgyZf0Fv8RzGDbYw15G68ATavo O20cKAqn+Q1rwCycjOCuGaxwZIcQxzRl3B2gaA3E8uTf+0rH6oQnXU7+clXS3QFY 9SNUKMgTnWM9Im6qBB1gUvJgQNfApcOppHmXFggSqbA05pYDAAVmin3M4Lxo0Ied krtlLHFe7vB8aqAmzuyck+YEY3/Z6fXKxa2UpPbJYy2o2NTQUHyM77/13IihahuR B8kup+hrY+WXmLUi7UpMfqP+JJrCauU= -----END CERTIFICATE-----Generated at Sat Sep 26 07:42:41 2026 by rpki-client