$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/aaab4cf9-a704-3b55-a783-40328265eeef.roa File: aaab4cf9-a704-3b55-a783-40328265eeef.roa (raw, json) Hash identifier: wZOaYuVhLcsdh3i4i25fQWd8OHxECzD8fAuUm18nUBo= Subject key identifier: BF:7A:36:5B:A5:E9:84:C7:E3:E8:A5:21:90:CD:79:C5:29:F3:49:10 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24DFE601B2ADE25C512E0080 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/aaab4cf9-a704-3b55-a783-40328265eeef.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 99.196.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:e6:01:b2:ad:e2:5c:51:2e:00:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=cf1fe851-8b5a-4a28-a9b9-9a2fe3fe41b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:db:0a:55:e9:4f:1f:d4:a0:df:f2:cc:63:d8: 4b:f1:dc:b2:0b:92:bc:aa:14:bf:7c:01:5d:82:51: c1:94:8f:20:2f:1a:11:e9:d0:cb:68:7c:40:25:48: 39:87:34:44:ad:c7:a1:cd:3f:c4:38:4b:3e:57:84: 10:84:c6:b1:74:93:fb:a1:4a:e0:47:8c:91:9c:52: b6:a7:c7:74:4e:d4:b2:3b:0c:22:01:19:d1:00:96: aa:16:b4:48:e9:03:a4:de:ad:8b:d5:b0:c2:4b:e2: c1:fe:11:81:e2:23:5c:bb:85:07:08:c8:7f:13:0d: 35:2d:ec:9d:29:0b:44:70:48:6c:c3:9b:6a:33:07: ac:27:a6:fe:2c:d6:ab:bb:98:e3:7f:c4:48:0b:fb: da:03:45:e6:21:ad:b1:3e:da:69:8f:d1:f0:78:5f: ba:d4:62:6a:ab:da:46:08:84:a9:34:8b:94:2a:29: 8a:4a:cc:52:11:37:3a:ae:48:51:37:e2:1c:52:ce: d0:78:f2:c4:3b:61:c5:cc:f8:ed:cc:a3:f8:d7:d7: 60:57:16:11:00:8b:63:db:72:34:57:b5:62:f2:b9: ed:95:e3:86:eb:56:45:b3:15:e3:e8:72:63:50:59: 3f:3a:9b:44:59:00:04:ea:ff:8c:85:46:97:68:d4: 38:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:7A:36:5B:A5:E9:84:C7:E3:E8:A5:21:90:CD:79:C5:29:F3:49:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/aaab4cf9-a704-3b55-a783-40328265eeef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.196.215.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:d7:16:5a:e7:81:55:33:29:48:dd:a0:a1:d1:19:80:f5:59: fc:0a:15:10:d1:2a:71:18:b3:bc:c6:69:82:60:95:7a:1e:28: 7f:b4:02:0b:6c:61:4a:b1:bb:d9:7e:9a:37:ce:9f:52:b7:22: da:62:30:42:fb:91:9b:9b:42:73:e0:37:05:41:f3:37:39:51: 72:36:74:b1:21:55:e4:3e:92:63:f0:06:7d:cc:de:88:53:85: a6:e2:ff:92:48:65:88:d1:e7:a8:e4:c3:d4:0b:78:e3:21:17: c7:c0:62:41:76:6b:39:f4:ba:96:d7:a2:e2:48:c4:1f:3c:f6: 39:2d:f6:1c:a2:ef:59:a3:3e:33:e5:33:c0:ca:5f:0b:89:82: 29:a2:9c:ae:b7:7d:bb:05:10:25:7a:fc:f2:96:62:7d:c3:5d: 61:8f:bf:27:96:da:98:a7:02:37:91:fd:58:56:cf:84:f4:e1: 2d:e5:5e:93:3d:44:f1:e8:89:22:b4:a2:60:bc:eb:f9:23:dd: 21:86:c0:a0:3f:4e:7f:f3:14:5b:5e:de:ed:36:72:f7:d9:65: 6d:e5:9a:56:a6:c5:66:5c:a3:b1:c8:13:d7:ab:7c:2c:0a:c5: 91:f3:d6:6a:40:c4:ec:1e:fa:47:61:60:00:bf:76:89:7d:eb: 48:6d:b2:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k3+YBsq3iXFEuAIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk Y2YxZmU4NTEtOGI1YS00YTI4LWE5YjktOWEyZmUzZmU0MWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdsKVelPH9Sg3/LMY9hL8dyyC5K8qhS/fAFd glHBlI8gLxoR6dDLaHxAJUg5hzRErcehzT/EOEs+V4QQhMaxdJP7oUrgR4yRnFK2 p8d0TtSyOwwiARnRAJaqFrRI6QOk3q2L1bDCS+LB/hGB4iNcu4UHCMh/Ew01Leyd KQtEcEhsw5tqMwesJ6b+LNaru5jjf8RIC/vaA0XmIa2xPtppj9HweF+61GJqq9pG CISpNIuUKimKSsxSETc6rkhRN+IcUs7QePLEO2HFzPjtzKP419dgVxYRAItj23I0 V7Vi8rntleOG61ZFsxXj6HJjUFk/OptEWQAE6v+MhUaXaNQ4twIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL96Nlul6YTH4+ilIZDNecUp80kQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYWFhYjRjZjktYTcwNC0z YjU1LWE3ODMtNDAzMjgyNjVlZWVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8TXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIzXFlrngVUzKUjdoKHRGYD1WfwKFRDRKnEYs7zGaYJglXoeKH+0Agts YUqxu9l+mjfOn1K3ItpiMEL7kZubQnPgNwVB8zc5UXI2dLEhVeQ+kmPwBn3M3ohT habi/5JIZYjR56jkw9QLeOMhF8fAYkF2azn0upbXouJIxB889jkt9hyi71mjPjPl M8DKXwuJgiminK63fbsFECV6/PKWYn3DXWGPvyeW2pinAjeR/VhWz4T04S3lXpM9 RPHoiSK0omC86/kj3SGGwKA/Tn/zFFte3u02cvfZZW3lmlamxWZco7HIE9erfCwK xZHz1mpAxOwe+kdhYAC/dol960htsss= -----END CERTIFICATE-----Generated at Thu Mar 26 17:07:09 2026 by rpki-client