$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ae6df951-53be-3155-bec8-1c1f8894b601.roa File: ae6df951-53be-3155-bec8-1c1f8894b601.roa (raw, json) Hash identifier: bkBEZbB6sM73fHYVSwHSz3unJDeJ/1rK1EFSB9uCt1I= Subject key identifier: 53:EB:6F:36:BA:F3:98:E2:19:D6:ED:77:57:83:16:38:45:AC:4D:B1 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E08FC3347D8DB6B6775920 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ae6df951-53be-3155-bec8-1c1f8894b601.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 99.196.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:8f:c3:34:7d:8d:b6:b6:77:59:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=43e7c37f-d3d8-4122-a11b-566ce3e25bd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d3:75:5b:05:4c:56:c8:9b:29:33:ce:63:4f: 98:9f:ce:d0:29:65:79:9d:3e:cd:91:f0:f5:55:89: 84:f2:ca:8b:1c:39:3d:62:2d:b3:fa:03:12:3c:68: 86:74:b8:1d:f7:70:72:84:0a:bf:70:10:9e:47:8f: 5a:16:bc:3f:14:51:ce:6d:8a:43:01:91:96:ad:04: ce:68:a6:98:68:cd:5b:47:39:87:90:c2:5a:1a:39: 57:30:54:1b:22:48:65:91:49:62:a4:2d:27:cf:88: 3c:75:3c:15:13:7c:82:9b:d4:e1:7c:4b:ca:7c:d8: be:24:1c:c7:33:a9:23:9f:cd:54:1a:b7:fe:79:ef: 6c:09:bb:0a:36:bd:94:07:e5:41:95:b2:30:c8:3f: 28:53:7d:1a:41:8c:ed:98:4a:be:01:6c:ef:c9:76: d4:e0:09:15:18:ca:63:a2:e5:09:8d:ac:be:76:3a: b5:4a:b3:87:f9:9c:76:f8:bc:42:03:cb:05:e2:7c: 83:58:0c:6f:b4:de:a8:a4:5c:23:fd:47:ce:24:15: d2:9e:8a:4d:cf:ee:90:00:df:d7:70:6b:6b:22:6a: 97:ec:68:de:d3:59:52:f3:b6:c2:f0:9c:23:3f:61: fe:fe:5f:a5:93:ad:09:29:1c:04:e9:72:2a:42:0a: 66:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:EB:6F:36:BA:F3:98:E2:19:D6:ED:77:57:83:16:38:45:AC:4D:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ae6df951-53be-3155-bec8-1c1f8894b601.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.196.77.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:c1:4d:cf:8b:6b:d9:5d:2b:23:77:67:69:c0:88:0b:65:c1: 68:b1:a4:2b:8c:ca:c7:d7:ae:dd:f5:95:72:09:58:96:b0:d9: 33:6c:1f:b0:b0:57:95:43:2e:77:46:33:b1:5c:3d:9e:1d:ae: e4:ec:db:e1:52:67:cf:43:a4:2b:5a:b7:46:43:3d:f8:72:25: 24:b4:86:81:97:4e:7a:22:31:1a:b0:57:48:c0:ef:ce:b0:44: 7d:0b:42:49:d0:2e:b7:bf:38:3e:93:57:33:57:4b:de:76:50: fb:f4:0e:75:bb:8f:62:e5:21:50:53:24:47:93:12:bb:02:be: c6:9d:03:75:5e:b1:5a:7e:dc:cb:05:e6:c5:06:f8:61:b8:fb: d7:29:e8:7a:80:bc:48:63:38:b2:63:4a:72:6d:02:ea:69:27: 99:2e:98:79:e6:34:86:c1:50:44:0a:d4:b9:d8:99:d7:77:3c: 39:a5:e8:a8:d3:2a:64:e8:df:6a:f3:80:e5:b5:4b:d9:19:68: f9:17:11:67:6e:f4:a3:e8:d3:b1:26:70:93:b1:a0:a0:7e:4e: f5:f3:42:8e:ae:2c:8e:85:f8:0b:ed:b9:3a:32:40:ae:3a:3d: a1:f9:d4:e8:8b:58:b1:c7:f5:18:c7:e1:e9:a6:b4:bd:bd:62: c3:b0:1d:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4I/DNH2NtrZ3WSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NDNlN2MzN2YtZDNkOC00MTIyLWExMWItNTY2Y2UzZTI1YmQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNN1WwVMVsibKTPOY0+Yn87QKWV5nT7NkfD1 VYmE8sqLHDk9Yi2z+gMSPGiGdLgd93ByhAq/cBCeR49aFrw/FFHObYpDAZGWrQTO aKaYaM1bRzmHkMJaGjlXMFQbIkhlkUlipC0nz4g8dTwVE3yCm9ThfEvKfNi+JBzH M6kjn81UGrf+ee9sCbsKNr2UB+VBlbIwyD8oU30aQYztmEq+AWzvyXbU4AkVGMpj ouUJjay+djq1SrOH+Zx2+LxCA8sF4nyDWAxvtN6opFwj/UfOJBXSnopNz+6QAN/X cGtrImqX7Gje01lS87bC8JwjP2H+/l+lk60JKRwE6XIqQgpmFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFPrbza685jiGdbtd1eDFjhFrE2xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYWU2ZGY5NTEtNTNiZS0z MTU1LWJlYzgtMWMxZjg4OTRiNjAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8RNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACDBTc+La9ldKyN3Z2nAiAtlwWixpCuMysfXrt31lXIJWJaw2TNsH7Cw V5VDLndGM7FcPZ4druTs2+FSZ89DpCtat0ZDPfhyJSS0hoGXTnoiMRqwV0jA786w RH0LQknQLre/OD6TVzNXS952UPv0DnW7j2LlIVBTJEeTErsCvsadA3VesVp+3MsF 5sUG+GG4+9cp6HqAvEhjOLJjSnJtAuppJ5kumHnmNIbBUEQK1LnYmdd3PDml6KjT KmTo32rzgOW1S9kZaPkXEWdu9KPo07EmcJOxoKB+TvXzQo6uLI6F+AvtuToyQK46 PaH51OiLWLHH9RjH4emmtL29YsOwHWM= -----END CERTIFICATE-----Generated at Thu Mar 26 22:11:37 2026 by rpki-client