$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b858aae4-a2d0-3206-926a-11f8600ccc2a.roa File: b858aae4-a2d0-3206-926a-11f8600ccc2a.roa (raw, json) Hash identifier: 2a/6VfkcjSzN77UPSysrX0vcCXesS//HEdt0W2f86Og= Subject key identifier: 6F:2A:63:E1:8B:A5:B2:CB:17:AA:86:D0:25:F3:F4:4E:A8:6A:8E:41 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24DFA80F946EB1816821F198 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b858aae4-a2d0-3206-926a-11f8600ccc2a.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 40306 IP address blocks: 99.196.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:a8:0f:94:6e:b1:81:68:21:f1:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=166d83cc-4d9f-4cee-86bd-9254a244001d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:54:23:d2:e6:2f:5a:cc:a3:17:81:cb:60:13: 67:18:c7:88:ad:a5:e2:86:ae:51:ed:80:ba:9a:3e: 77:b9:9c:9d:1e:13:b4:d4:ea:18:bb:2c:16:b4:4e: 3e:14:b0:58:67:db:34:2f:59:80:f9:32:b5:bf:5b: a4:79:ff:fa:1b:74:bc:a0:59:7c:e8:1f:7d:07:48: b0:c3:38:dc:d5:9b:ce:e5:90:4b:ed:33:ed:85:05: 29:d0:36:9f:d4:fb:3a:ae:3a:60:bf:72:64:81:98: 4b:78:4e:0d:cc:d8:a7:69:5a:0e:e5:f3:12:53:75: 13:6c:ab:ae:18:43:71:12:28:d7:18:38:90:5f:46: 3d:55:cb:a1:c7:c8:88:d8:7d:e1:53:61:b2:e2:51: db:db:18:e5:99:23:bf:2c:57:3c:46:23:ad:ee:31: 87:75:2c:c3:58:3a:63:79:80:2c:2b:d9:24:d4:22: ea:e9:94:fc:8b:a4:bc:8b:bd:0d:8f:51:7f:03:08: 18:0f:72:dc:90:99:63:50:65:4f:46:75:e6:a7:57: 23:54:21:1e:4a:1c:09:5f:5b:f3:81:e3:df:3c:d7: a4:32:8a:c2:b9:df:17:6e:44:0d:f7:ec:90:67:86: fc:a7:81:a6:be:aa:4d:ad:69:00:f7:2c:58:6f:57: f2:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:2A:63:E1:8B:A5:B2:CB:17:AA:86:D0:25:F3:F4:4E:A8:6A:8E:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b858aae4-a2d0-3206-926a-11f8600ccc2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.196.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:e5:18:f8:78:01:97:35:ab:47:19:6c:8e:b3:66:c0:50:7f: 16:2d:66:36:01:3a:4d:45:8e:2b:5c:2c:15:00:b0:d8:8f:53: 5d:38:10:77:b0:a6:e7:eb:1f:16:fc:b2:ea:2c:91:13:3b:d6: 59:00:2c:08:9f:bf:27:47:31:7c:fa:99:40:04:ef:88:a1:78: 1e:62:aa:51:c8:e2:57:1c:ed:85:3b:2e:9b:be:cc:37:63:33: 02:d0:90:b6:6d:b5:72:b6:12:c6:ce:32:d9:57:06:db:f0:71: 0e:45:87:ec:83:ec:32:de:5d:7a:ea:c8:29:be:bc:8a:89:ad: e3:eb:fc:47:22:03:8f:0f:70:c5:07:ec:75:1c:c7:e3:0d:a6: 13:26:f1:d1:bf:68:c5:2c:50:f4:ff:c0:c8:c0:56:97:e9:6f: f3:5c:09:a0:fd:50:44:e4:49:c7:7b:a7:99:29:73:42:df:68: 95:45:9a:8b:49:d9:e7:9f:72:d1:71:4d:82:dd:26:fb:a1:5a: 2d:37:07:eb:42:e4:ff:41:66:13:c0:f3:e0:62:b2:c4:4d:f8: 55:dc:be:e9:f0:df:cd:7a:ef:66:fc:e4:91:7e:17:64:40:80: 2b:db:84:09:9d:61:7e:90:22:e8:c6:b1:7e:79:2e:75:4f:d3: 97:f2:2e:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k36gPlG6xgWgh8ZgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MTY2ZDgzY2MtNGQ5Zi00Y2VlLTg2YmQtOTI1NGEyNDQwMDFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlQj0uYvWsyjF4HLYBNnGMeIraXihq5R7YC6 mj53uZydHhO01OoYuywWtE4+FLBYZ9s0L1mA+TK1v1ukef/6G3S8oFl86B99B0iw wzjc1ZvO5ZBL7TPthQUp0Daf1Ps6rjpgv3JkgZhLeE4NzNinaVoO5fMSU3UTbKuu GENxEijXGDiQX0Y9Vcuhx8iI2H3hU2Gy4lHb2xjlmSO/LFc8RiOt7jGHdSzDWDpj eYAsK9kk1CLq6ZT8i6S8i70Nj1F/AwgYD3LckJljUGVPRnXmp1cjVCEeShwJX1vz gePfPNekMorCud8XbkQN9+yQZ4b8p4GmvqpNrWkA9yxYb1fyKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG8qY+GLpbLLF6qG0CXz9E6oao5BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYjg1OGFhZTQtYTJkMC0z MjA2LTkyNmEtMTFmODYwMGNjYzJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8R7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGHlGPh4AZc1q0cZbI6zZsBQfxYtZjYBOk1FjitcLBUAsNiPU104EHew pufrHxb8suoskRM71lkALAifvydHMXz6mUAE74iheB5iqlHI4lcc7YU7Lpu+zDdj MwLQkLZttXK2EsbOMtlXBtvwcQ5Fh+yD7DLeXXrqyCm+vIqJrePr/EciA48PcMUH 7HUcx+MNphMm8dG/aMUsUPT/wMjAVpfpb/NcCaD9UETkScd7p5kpc0LfaJVFmotJ 2eefctFxTYLdJvuhWi03B+tC5P9BZhPA8+BissRN+FXcvunw381672b85JF+F2RA gCvbhAmdYX6QIujGsX55LnVP05fyLnI= -----END CERTIFICATE-----Generated at Thu Mar 26 13:40:35 2026 by rpki-client