$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/aa11fa91-79fa-3b1e-acc5-a8167b018d1f.roa File: aa11fa91-79fa-3b1e-acc5-a8167b018d1f.roa (raw, json) Hash identifier: OxsmfWhL67a1575fHCuF0Unhn8ABKycsayOdNqBRPWw= Subject key identifier: F4:CE:8B:0A:79:B1:0A:47:8A:F3:69:AF:98:C2:5D:31:0F:F6:7B:69 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F497B5FA2AE43B0D5145C4700 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/aa11fa91-79fa-3b1e-acc5-a8167b018d1f.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 99.196.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7b:5f:a2:ae:43:b0:d5:14:5c:47:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d7f74e8b-2d5a-4df3-befe-d8ccfd3a53df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:71:a5:3c:15:36:17:db:96:88:45:47:49:bd: f7:ce:50:23:99:f1:d2:70:d5:33:bd:5b:31:ca:e2: 9e:ca:dd:03:37:cf:6f:2f:68:35:98:14:30:f3:7d: b6:49:ba:63:4a:c9:92:f5:c0:81:6b:9e:58:3c:14: 11:78:eb:1f:3e:7f:56:a1:85:04:6c:29:84:2d:ee: 3f:2f:45:17:bb:25:ea:35:9b:75:2e:64:f4:67:29: 31:02:b9:9e:b7:cc:44:9e:cf:43:f9:33:d6:ec:90: 45:f0:b5:3a:da:9d:f6:45:a4:47:03:b4:92:f2:32: 05:8f:13:df:b2:c6:19:7b:6c:c7:09:e1:9a:18:2a: 70:e8:32:ac:92:20:69:4f:c9:45:25:18:84:93:fb: c6:d0:cf:f8:43:03:bc:cd:d7:c5:0c:cf:77:9f:58: d7:11:0e:1c:d2:93:d4:55:0f:20:58:c8:f5:12:0c: 52:d2:07:8b:e8:f2:86:ea:b9:71:50:e9:97:41:0c: eb:85:94:06:ec:13:39:61:fc:24:c6:86:07:28:cb: 27:63:2a:d5:79:58:f5:56:e9:b9:e5:02:2b:ae:93: bf:ef:a1:5e:88:92:2c:5d:41:dc:06:63:ce:b1:a6: de:7a:9e:6e:32:ba:50:5a:f8:44:14:6d:8f:1c:c7: 54:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:CE:8B:0A:79:B1:0A:47:8A:F3:69:AF:98:C2:5D:31:0F:F6:7B:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/aa11fa91-79fa-3b1e-acc5-a8167b018d1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.196.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:76:c2:44:72:7a:c8:d3:98:10:15:bd:ca:86:60:c3:ba:9d: 75:7f:28:49:11:6d:a2:a6:45:c4:0b:1f:a4:55:fd:7e:67:f3: 47:be:6f:0c:2c:93:25:f5:78:de:63:bc:b2:37:4a:9d:89:01: b2:94:10:ec:8a:7b:bc:07:be:8a:54:df:77:93:22:0d:40:4b: ed:63:c2:bb:6e:dc:a0:0e:32:1f:b5:95:5e:48:52:d8:82:b6: 20:91:9c:2c:2e:50:2e:41:29:c2:be:f3:54:e4:c3:0a:0f:3b: d5:5c:35:d9:e1:61:b3:48:ba:e8:c0:2e:5d:e2:5c:ff:56:b2: 62:de:b3:a8:ba:6a:f2:64:36:1e:fe:04:f7:be:f4:80:bf:c0: 47:71:64:d5:39:6a:4f:94:e6:32:e6:80:fd:2f:99:d9:57:b2: af:fe:c2:11:a7:6e:2e:84:25:d6:51:e3:fa:13:35:c8:59:93: e7:d7:b7:a0:90:aa:da:8e:d9:e7:c0:96:e3:d7:99:44:72:2d: c7:cc:4e:c0:2c:72:8d:6b:20:33:1b:b5:fc:e0:e8:df:7a:6b: dd:f2:5d:3c:98:1c:24:96:fd:7f:f7:ab:f2:2b:3d:03:20:28: 00:0e:b5:da:65:4f:c7:a9:18:78:df:60:c7:94:0e:d1:8e:14: 2c:36:7a:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Je1+irkOw1RRcRwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDdmNzRlOGItMmQ1YS00ZGYzLWJlZmUtZDhjY2ZkM2E1M2RmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnGlPBU2F9uWiEVHSb33zlAjmfHScNUzvVsx yuKeyt0DN89vL2g1mBQw8322SbpjSsmS9cCBa55YPBQReOsfPn9WoYUEbCmELe4/ L0UXuyXqNZt1LmT0ZykxArmet8xEns9D+TPW7JBF8LU62p32RaRHA7SS8jIFjxPf ssYZe2zHCeGaGCpw6DKskiBpT8lFJRiEk/vG0M/4QwO8zdfFDM93n1jXEQ4c0pPU VQ8gWMj1EgxS0geL6PKG6rlxUOmXQQzrhZQG7BM5YfwkxoYHKMsnYyrVeVj1Vum5 5QIrrpO/76FeiJIsXUHcBmPOsabeep5uMrpQWvhEFG2PHMdUIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPTOiwp5sQpHivNpr5jCXTEP9ntpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYWExMWZhOTEtNzlmYS0z YjFlLWFjYzUtYTgxNjdiMDE4ZDFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8RwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIV2wkRyesjTmBAVvcqGYMO6nXV/KEkRbaKmRcQLH6RV/X5n80e+bwws kyX1eN5jvLI3Sp2JAbKUEOyKe7wHvopU33eTIg1AS+1jwrtu3KAOMh+1lV5IUtiC tiCRnCwuUC5BKcK+81TkwwoPO9VcNdnhYbNIuujALl3iXP9WsmLes6i6avJkNh7+ BPe+9IC/wEdxZNU5ak+U5jLmgP0vmdlXsq/+whGnbi6EJdZR4/oTNchZk+fXt6CQ qtqO2efAluPXmURyLcfMTsAsco1rIDMbtfzg6N96a93yXTyYHCSW/X/3q/IrPQMg KAAOtdplT8epGHjfYMeUDtGOFCw2euc= -----END CERTIFICATE-----Generated at Wed Sep 30 20:04:09 2026 by rpki-client