$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bbf3ada6-0ffd-386f-be9b-8ffe580c49fd.roa File: bbf3ada6-0ffd-386f-be9b-8ffe580c49fd.roa (raw, json) Hash identifier: EWOg+GBhVhgYWGnpM3uF8texjFUhUvNwREdl/njcH50= Subject key identifier: 73:8B:A8:65:41:31:0A:98:4B:F7:9F:D4:B0:AB:63:09:CA:CB:54:55 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F49754D97256F033F59588B00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bbf3ada6-0ffd-386f-be9b-8ffe580c49fd.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 40306 IP address blocks: 99.196.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:4d:97:25:6f:03:3f:59:58:8b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=8283a73c-dff6-48e9-9cfb-e2ad1f96cf06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:1e:44:00:ab:49:9d:69:55:6e:93:ad:9f:09: 71:20:44:f9:9c:e3:b5:86:51:57:bd:a6:55:a9:fd: 0f:39:ee:55:91:fb:93:4c:a1:4a:c5:d9:60:5f:35: fd:ea:f0:71:5e:cb:9d:7f:23:e2:0b:b7:dd:b8:a5: fd:3b:49:5e:f1:eb:b3:bb:90:89:77:ca:af:d6:86: 62:80:3f:c5:7b:2a:15:07:8f:b2:70:54:71:3a:33: 17:5f:2b:bb:50:15:66:6e:11:3b:1a:5c:bc:1d:7e: 4c:29:b3:dc:69:ba:d9:d2:a1:6d:35:91:99:af:fc: 83:25:97:65:ed:2c:75:2c:13:1c:96:b5:30:79:ee: c4:56:46:54:5b:dc:91:a5:5a:c7:29:e4:1e:a8:ca: 6e:99:94:c2:ac:ed:9c:77:0b:c6:e9:70:9f:c8:67: 27:82:64:fd:b7:e9:54:8f:e2:ee:04:50:d5:ee:ff: 23:43:e0:9d:d7:b0:37:d8:3b:cc:00:05:63:d9:b4: 79:4f:08:0a:8f:9e:ad:57:31:b7:cb:d0:8b:66:f9: 20:a5:66:1c:ef:a8:51:ee:2b:a3:7a:d8:a9:bc:49: 49:af:56:ee:b3:cf:c1:ce:71:d2:09:c8:46:3c:41: b8:29:98:1c:ec:a4:05:f4:99:06:d5:42:39:20:d8: 26:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:8B:A8:65:41:31:0A:98:4B:F7:9F:D4:B0:AB:63:09:CA:CB:54:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bbf3ada6-0ffd-386f-be9b-8ffe580c49fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.196.134.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d2:b8:48:7f:d3:6d:0a:23:92:d7:c4:fd:37:64:f8:aa:8a:4d: ce:66:25:ad:39:0a:f8:26:a6:f3:b0:b4:fe:b9:26:de:b2:19: 0a:38:34:47:12:77:25:6d:44:12:c7:d5:60:5f:75:a0:e5:6a: ed:7f:38:37:a8:98:d2:59:1d:f3:51:17:68:4c:36:29:3b:49: db:5c:f4:a0:3e:0f:8a:2a:30:51:41:a4:a5:3c:61:a0:a7:84: a8:18:d5:9f:81:61:8b:f1:3d:f4:09:2c:e9:59:be:31:5e:d3: 21:eb:5a:ce:95:04:d2:55:9d:88:32:fc:48:cb:d8:85:dd:23: e0:cd:28:38:50:a9:8b:b4:d2:01:88:c7:6b:a7:1a:9f:43:d2: ff:27:f2:83:c0:38:dd:d6:b6:d0:ab:65:b3:2b:c0:13:e5:fc: a7:c0:b5:2c:00:33:58:db:aa:ea:53:ef:3e:9a:41:a9:dd:2f: 4c:5b:ed:1c:6f:e5:19:20:65:3a:e0:1f:81:bd:f6:96:de:b2: 6b:4f:cc:57:93:4f:a5:c0:44:dc:20:32:d4:70:4c:06:e2:55: 6d:c8:bc:d6:b8:21:89:f8:a5:09:89:27:16:76:dc:6a:c5:d0: 6c:c6:ea:8a:9d:a0:d4:a2:99:a1:57:59:47:57:07:f4:80:8f: 47:d2:9f:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdU2XJW8DP1lYiwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ODI4M2E3M2MtZGZmNi00OGU5LTljZmItZTJhZDFmOTZjZjA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjx5EAKtJnWlVbpOtnwlxIET5nOO1hlFXvaZV qf0POe5VkfuTTKFKxdlgXzX96vBxXsudfyPiC7fduKX9O0le8euzu5CJd8qv1oZi gD/FeyoVB4+ycFRxOjMXXyu7UBVmbhE7Gly8HX5MKbPcabrZ0qFtNZGZr/yDJZdl 7Sx1LBMclrUwee7EVkZUW9yRpVrHKeQeqMpumZTCrO2cdwvG6XCfyGcngmT9t+lU j+LuBFDV7v8jQ+Cd17A32DvMAAVj2bR5TwgKj56tVzG3y9CLZvkgpWYc76hR7iuj etipvElJr1bus8/BznHSCchGPEG4KZgc7KQF9JkG1UI5INgmYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHOLqGVBMQqYS/ef1LCrYwnKy1RVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYmJmM2FkYTYtMGZmZC0z ODZmLWJlOWItOGZmZTU4MGM0OWZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8SGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANK4SH/TbQojktfE/Tdk+KqKTc5mJa05CvgmpvOwtP65Jt6yGQo4NEcS dyVtRBLH1WBfdaDlau1/ODeomNJZHfNRF2hMNik7Sdtc9KA+D4oqMFFBpKU8YaCn hKgY1Z+BYYvxPfQJLOlZvjFe0yHrWs6VBNJVnYgy/EjL2IXdI+DNKDhQqYu00gGI x2unGp9D0v8n8oPAON3WttCrZbMrwBPl/KfAtSwAM1jbqupT7z6aQandL0xb7Rxv 5RkgZTrgH4G99pbesmtPzFeTT6XARNwgMtRwTAbiVW3IvNa4IYn4pQmJJxZ23GrF 0GzG6oqdoNSimaFXWUdXB/SAj0fSnyA= -----END CERTIFICATE-----Generated at Tue Sep 29 12:36:27 2026 by rpki-client