$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bc4fe23f-e309-3763-86e7-290bf33085dd.roa File: bc4fe23f-e309-3763-86e7-290bf33085dd.roa (raw, json) Hash identifier: vmZqBvt/7GsOcGfX1mBPUvOOhoLAT4TkrDg9EW981U4= Subject key identifier: E8:D3:B5:DF:3B:92:FD:F3:30:EA:E8:BD:0E:5A:14:EE:A1:D9:6E:AF Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E0A15E3BA21B7C94C185C0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bc4fe23f-e309-3763-86e7-290bf33085dd.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 99.198.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:a1:5e:3b:a2:1b:7c:94:c1:85:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=9cd9fe62-99af-4e6c-b5cf-62d9f7d117ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:8e:19:a8:08:e5:32:c7:aa:3c:6f:77:13:87: 8a:cb:f3:96:ac:f7:bc:5a:f2:0e:95:3c:18:d9:9c: 25:4f:53:2f:1b:f8:13:e7:c7:e8:31:b4:6b:aa:c9: a5:47:12:ba:85:89:c1:41:94:8e:37:53:33:d4:25: 63:61:da:db:bc:f3:9d:ea:77:b3:68:42:49:a0:6e: 3d:c2:a8:60:89:35:cc:9b:2b:df:bd:bf:0b:3f:0a: 38:4b:a2:82:12:d6:29:ef:3a:6a:9a:69:c2:10:12: 24:18:ad:0b:b3:66:c9:f4:f3:01:5d:96:49:5f:47: 77:4c:e9:e8:47:7e:3e:04:34:d3:9c:68:be:5e:10: ca:2c:13:92:da:6b:5b:f5:d1:ef:23:9b:5f:6a:f2: 4f:34:11:e5:1a:eb:32:09:89:6a:e1:b5:f5:0e:cc: cf:b6:20:08:cc:fd:71:ad:e3:df:5b:7d:99:4c:a6: 9b:62:23:3b:32:24:57:e1:68:66:63:95:d4:06:94: 5e:e4:bf:50:76:71:8e:9e:af:49:f7:74:8d:07:bd: 78:a0:e9:0d:cd:d0:1b:9a:0f:fc:cd:26:7c:4a:6f: 24:62:94:87:bf:09:b7:b6:eb:e1:7a:87:7c:6b:32: e8:4a:54:d5:c6:67:ea:17:76:82:61:31:76:3e:f0: 33:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:D3:B5:DF:3B:92:FD:F3:30:EA:E8:BD:0E:5A:14:EE:A1:D9:6E:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bc4fe23f-e309-3763-86e7-290bf33085dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.198.34.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:7b:9e:80:df:ee:a1:f9:13:61:62:ef:89:22:96:97:e3:be: 5e:bf:c1:7e:34:97:5a:39:86:bf:c1:d9:6d:d7:51:94:a7:78: 40:8f:dc:a9:49:2a:39:50:61:91:8b:9c:f9:a9:da:b3:b1:86: 47:4c:fc:9c:07:47:a7:0b:79:9d:67:9c:05:5b:67:41:a4:1a: ad:d5:3e:41:8f:1f:4c:64:95:75:fa:a8:42:17:d9:16:be:6c: 88:1a:24:9f:f2:7f:1c:f4:eb:bd:43:6b:e0:bb:08:b2:f1:67: 38:a0:a2:88:7c:f6:7b:ce:f1:03:ce:a8:97:7a:44:d1:ca:0d: 46:4f:46:29:ba:4d:99:79:e5:d6:d7:fb:ee:a5:f2:91:e9:bd: 4d:c1:1e:f3:99:d2:c9:55:b8:9e:86:34:07:65:03:3b:8d:d2: ab:7d:16:23:a9:f9:00:48:f6:82:47:c9:c2:1d:be:5e:77:e3: c2:ef:65:34:cd:70:4e:d7:ff:f9:35:30:34:d3:7f:51:2c:8b: ad:17:9d:d0:b0:7f:6e:bc:fb:fd:30:85:9e:85:18:e5:e3:bd: 18:57:51:01:d0:2f:9f:d3:96:d5:6c:5b:a6:b3:28:c3:ae:3d: 54:d7:25:3b:fe:e6:18:76:7e:ec:76:41:aa:53:b4:9d:7e:4e: 83:a1:68:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4KFeO6IbfJTBhcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk OWNkOWZlNjItOTlhZi00ZTZjLWI1Y2YtNjJkOWY3ZDExN2FkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA144ZqAjlMseqPG93E4eKy/OWrPe8WvIOlTwY 2ZwlT1MvG/gT58foMbRrqsmlRxK6hYnBQZSON1Mz1CVjYdrbvPOd6nezaEJJoG49 wqhgiTXMmyvfvb8LPwo4S6KCEtYp7zpqmmnCEBIkGK0Ls2bJ9PMBXZZJX0d3TOno R34+BDTTnGi+XhDKLBOS2mtb9dHvI5tfavJPNBHlGusyCYlq4bX1DszPtiAIzP1x rePfW32ZTKabYiM7MiRX4WhmY5XUBpRe5L9QdnGOnq9J93SNB714oOkNzdAbmg/8 zSZ8Sm8kYpSHvwm3tuvheod8azLoSlTVxmfqF3aCYTF2PvAzIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOjTtd87kv3zMOrovQ5aFO6h2W6vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYmM0ZmUyM2YtZTMwOS0z NzYzLTg2ZTctMjkwYmYzMzA4NWRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8YiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAER7noDf7qH5E2Fi74kilpfjvl6/wX40l1o5hr/B2W3XUZSneECP3KlJ KjlQYZGLnPmp2rOxhkdM/JwHR6cLeZ1nnAVbZ0GkGq3VPkGPH0xklXX6qEIX2Ra+ bIgaJJ/yfxz0671Da+C7CLLxZzigooh89nvO8QPOqJd6RNHKDUZPRim6TZl55dbX ++6l8pHpvU3BHvOZ0slVuJ6GNAdlAzuN0qt9FiOp+QBI9oJHycIdvl5348LvZTTN cE7X//k1MDTTf1Esi60XndCwf268+/0whZ6FGOXjvRhXUQHQL5/TltVsW6azKMOu PVTXJTv+5hh2fux2QapTtJ1+ToOhaCA= -----END CERTIFICATE-----Generated at Thu Mar 26 04:42:30 2026 by rpki-client