$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ac48c613-6299-36e8-82d3-67333ad7fc53.roa File: ac48c613-6299-36e8-82d3-67333ad7fc53.roa (raw, json) Hash identifier: 8hwnvp4/1ybDgZlSc0a7eL2BJVSHapKbf7uxoKfbLtw= Subject key identifier: 99:0F:C3:25:C1:C1:EA:EF:A7:78:FA:32:7E:45:84:A2:97:58:73:21 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F49838960C41F887B375E2780 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ac48c613-6299-36e8-82d3-67333ad7fc53.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 99.196.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:83:89:60:c4:1f:88:7b:37:5e:27:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=0a96dde0-68d1-44a5-b897-0029116362d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:9f:83:2c:54:5e:0c:eb:23:aa:70:6b:62:b7: 93:56:35:7d:76:60:42:e0:f1:19:8e:98:29:1f:00: ad:76:74:10:bf:f1:1a:62:da:14:56:e1:66:f6:dc: c9:3c:62:9f:5e:58:76:f5:61:0a:e9:3f:b4:49:09: 81:79:e8:65:ca:1b:33:a1:4c:d9:c9:58:17:dd:d5: fd:41:b9:a1:b2:0b:ca:40:cd:de:08:04:8c:b8:a8: 23:e2:47:89:a5:c1:87:b2:ed:d9:44:28:c7:f7:38: c2:66:ad:24:90:7c:f2:50:71:75:bd:75:be:a6:3c: d7:73:0f:d0:06:b4:df:d2:73:04:59:f6:d9:03:82: 51:f7:c2:56:5b:f4:f5:15:42:01:10:a6:73:be:6c: 82:35:56:4d:01:98:ac:40:39:6c:29:3a:a5:dc:45: ec:bf:ab:d4:cc:41:4d:c1:5e:93:b9:7f:0e:b7:78: d3:06:89:a5:e2:c5:4c:b7:c4:14:ee:1e:ae:e7:f9: ac:7d:0f:90:6e:0f:fc:fc:a5:a5:c2:1e:50:9b:12: 1f:68:af:8a:6e:ee:2d:11:ba:1c:94:e9:62:92:4c: 0b:e1:59:ff:ce:ad:a0:47:74:5b:a4:06:30:ed:66: d5:db:3d:e8:ae:f6:7c:7b:52:68:77:60:57:51:a5: 3f:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:0F:C3:25:C1:C1:EA:EF:A7:78:FA:32:7E:45:84:A2:97:58:73:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ac48c613-6299-36e8-82d3-67333ad7fc53.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.196.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:9f:d0:e8:2c:34:bb:be:56:7e:35:46:48:18:af:0d:b0:d3: ab:46:cc:98:ec:8f:57:11:c1:b8:69:d0:dc:cd:9d:05:6d:51: 86:c8:a6:7e:e8:ca:b2:c6:ac:e8:e8:41:31:1d:35:2f:50:78: 35:79:ae:b5:46:fd:9e:c7:d2:25:8e:af:6d:e0:1a:fd:89:76: e2:f1:11:59:7e:1b:96:94:2a:82:b9:67:fe:6c:00:d0:25:b0: 41:53:21:52:37:3f:ef:a0:fa:cd:86:47:68:93:de:80:96:e2: 8a:b4:bf:cc:33:54:f9:4e:86:4f:8a:0f:9e:18:b1:59:3c:4c: 8b:78:ef:c9:47:f1:e1:d4:25:ce:6a:bf:90:27:c7:b3:3e:6f: dc:60:6b:b4:89:e0:c7:e7:93:bc:07:86:12:17:e7:fe:a6:ae: 0a:4b:99:7a:20:eb:e9:4b:76:d3:ff:16:d4:66:fe:d1:c3:2f: 5e:21:9e:96:d9:ce:b4:e8:f4:ec:9f:af:95:5b:1e:63:a4:2b: 5b:6c:1f:3b:70:98:b8:17:41:99:02:fe:3f:d9:07:2e:28:b3: be:b6:c8:98:9e:41:09:5c:db:5c:da:8c:fe:66:b3:68:4b:ac: ff:04:d1:e6:98:2e:79:03:61:36:1c:c6:b9:19:74:de:c1:35: 28:a3:1b:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jg4lgxB+IezdeJ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MGE5NmRkZTAtNjhkMS00NGE1LWI4OTctMDAyOTExNjM2MmQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA15+DLFReDOsjqnBrYreTVjV9dmBC4PEZjpgp HwCtdnQQv/EaYtoUVuFm9tzJPGKfXlh29WEK6T+0SQmBeehlyhszoUzZyVgX3dX9 QbmhsgvKQM3eCASMuKgj4keJpcGHsu3ZRCjH9zjCZq0kkHzyUHF1vXW+pjzXcw/Q BrTf0nMEWfbZA4JR98JWW/T1FUIBEKZzvmyCNVZNAZisQDlsKTql3EXsv6vUzEFN wV6TuX8Ot3jTBoml4sVMt8QU7h6u5/msfQ+Qbg/8/KWlwh5QmxIfaK+Kbu4tEboc lOlikkwL4Vn/zq2gR3RbpAYw7WbV2z3orvZ8e1Jod2BXUaU/WQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJkPwyXBwervp3j6Mn5FhKKXWHMhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYWM0OGM2MTMtNjI5OS0z NmU4LTgyZDMtNjczMzNhZDdmYzUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8SPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGOf0OgsNLu+Vn41RkgYrw2w06tGzJjsj1cRwbhp0NzNnQVtUYbIpn7o yrLGrOjoQTEdNS9QeDV5rrVG/Z7H0iWOr23gGv2JduLxEVl+G5aUKoK5Z/5sANAl sEFTIVI3P++g+s2GR2iT3oCW4oq0v8wzVPlOhk+KD54YsVk8TIt478lH8eHUJc5q v5Anx7M+b9xga7SJ4Mfnk7wHhhIX5/6mrgpLmXog6+lLdtP/FtRm/tHDL14hnpbZ zrTo9Oyfr5VbHmOkK1tsHztwmLgXQZkC/j/ZBy4os762yJieQQlc21zajP5ms2hL rP8E0eaYLnkDYTYcxrkZdN7BNSijG4k= -----END CERTIFICATE-----Generated at Sat Oct 3 10:59:07 2026 by rpki-client