$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a8beb67e-028d-3124-afd5-48f4e7a97843.roa File: a8beb67e-028d-3124-afd5-48f4e7a97843.roa (raw, json) Hash identifier: AV1q+cXVfYkbEX8Zlm6sfa3x8hOv6Y7OBznXvbmaUFE= Subject key identifier: 82:62:E7:55:11:4B:E2:2C:15:BF:CD:BB:55:CE:0B:14:CD:A8:7B:B3 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E0A0D1D798E0C5D4224180 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a8beb67e-028d-3124-afd5-48f4e7a97843.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 99.198.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:a0:d1:d7:98:e0:c5:d4:22:41:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=b4117961-b06c-4757-bc4a-19b4303b09c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:e5:23:aa:95:cc:ae:a9:46:17:ee:5a:fb:cc: be:07:ec:66:c0:65:08:84:24:ce:f5:8a:62:89:04: 01:31:0e:54:34:2a:1d:39:16:08:c9:ad:1d:36:93: 5a:57:2a:25:d8:d6:53:90:81:43:cd:b0:63:8d:e3: 6e:e4:e1:02:55:02:f9:d4:28:e1:8e:46:e4:2c:80: 85:b8:c4:37:d3:15:1a:21:17:40:a8:a3:96:1d:f4: 00:96:25:e5:54:48:a3:76:2d:c2:61:39:cb:f6:39: d3:ab:d7:fe:2e:7e:41:ba:cf:bc:d1:87:38:6a:48: 08:a7:af:8c:03:39:dc:e1:0b:7d:a2:f8:42:25:45: 1f:6e:fe:7d:26:fe:75:9e:66:9b:9c:70:e5:9c:bf: e5:c0:ae:62:cd:35:09:d2:2a:28:0b:10:c9:91:a0: ed:ee:dc:f3:0f:6b:63:5c:f6:29:d8:77:73:74:3c: 24:0b:5f:58:47:7e:b3:60:6d:d2:bc:69:99:6e:73: bc:cd:52:a2:83:1a:92:0e:41:49:2f:dc:0c:aa:d6: 95:b3:c1:60:5f:6b:25:19:50:ef:f0:23:ee:e1:a5: 38:38:21:4b:2d:d4:d8:4f:3a:0e:c4:d4:5a:f9:94: ca:78:cf:50:23:d2:7c:fc:fe:93:11:5a:04:ee:e7: 75:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:62:E7:55:11:4B:E2:2C:15:BF:CD:BB:55:CE:0B:14:CD:A8:7B:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a8beb67e-028d-3124-afd5-48f4e7a97843.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.198.22.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:fd:7c:1b:b8:56:24:99:b3:0e:a5:5d:c3:74:96:d3:3f:9b: 48:82:0d:b0:87:3d:7f:cd:e2:a3:5a:66:fc:3e:f3:20:f1:b2: 94:fc:ec:f3:8e:6b:a3:9d:5f:62:5d:8b:9e:9f:0a:3f:19:51: 32:fd:64:9d:2b:53:c7:ab:71:cb:4d:7c:d2:f0:a3:3a:c0:33: 5c:cf:4d:a9:f3:2d:fe:5a:06:40:52:02:b6:b5:2b:ac:9f:5d: bc:33:78:52:3c:ce:7c:b8:8c:c4:af:49:79:d1:a1:cb:79:24: 82:65:39:c0:a4:ac:b6:b8:fa:1e:3a:63:95:69:72:40:7e:67: a5:a8:ad:66:2a:32:a3:d5:f3:59:85:4f:48:58:59:ff:50:8d: 77:fa:da:41:8a:96:9b:e3:1d:8e:2a:8a:75:51:69:d4:6f:7b: 42:c3:d8:fb:6a:ab:87:e4:00:32:cd:4a:a7:ee:cd:1d:0b:51: 45:d5:d4:6c:79:d7:31:f6:f2:f0:81:4b:f7:84:69:ec:ca:76: 7e:15:03:68:10:88:3c:8e:f4:7f:24:12:af:c3:63:9e:e1:70: 49:e7:67:de:7f:03:55:fa:07:4d:9f:c0:16:0f:6f:a6:ca:8f: b3:ba:a2:58:cc:32:ca:47:55:67:39:f7:3f:60:eb:47:8b:b4: a9:f7:f5:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4KDR15jgxdQiQYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk YjQxMTc5NjEtYjA2Yy00NzU3LWJjNGEtMTliNDMwM2IwOWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgeUjqpXMrqlGF+5a+8y+B+xmwGUIhCTO9Ypi iQQBMQ5UNCodORYIya0dNpNaVyol2NZTkIFDzbBjjeNu5OECVQL51CjhjkbkLICF uMQ30xUaIRdAqKOWHfQAliXlVEijdi3CYTnL9jnTq9f+Ln5Bus+80Yc4akgIp6+M Aznc4Qt9ovhCJUUfbv59Jv51nmabnHDlnL/lwK5izTUJ0iooCxDJkaDt7tzzD2tj XPYp2HdzdDwkC19YR36zYG3SvGmZbnO8zVKigxqSDkFJL9wMqtaVs8FgX2slGVDv 8CPu4aU4OCFLLdTYTzoOxNRa+ZTKeM9QI9J8/P6TEVoE7ud1LQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIJi51URS+IsFb/Nu1XOCxTNqHuzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYThiZWI2N2UtMDI4ZC0z MTI0LWFmZDUtNDhmNGU3YTk3ODQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8YWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD/9fBu4ViSZsw6lXcN0ltM/m0iCDbCHPX/N4qNaZvw+8yDxspT87POO a6OdX2Jdi56fCj8ZUTL9ZJ0rU8ercctNfNLwozrAM1zPTanzLf5aBkBSAra1K6yf XbwzeFI8zny4jMSvSXnRoct5JIJlOcCkrLa4+h46Y5VpckB+Z6WorWYqMqPV81mF T0hYWf9QjXf62kGKlpvjHY4qinVRadRve0LD2Ptqq4fkADLNSqfuzR0LUUXV1Gx5 1zH28vCBS/eEaezKdn4VA2gQiDyO9H8kEq/DY57hcEnnZ95/A1X6B02fwBYPb6bK j7O6oljMMspHVWc59z9g60eLtKn39Xc= -----END CERTIFICATE-----Generated at Thu Mar 26 07:58:52 2026 by rpki-client