$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bd4f0ff9-a650-38e7-bf43-75822ec0cb69.roa File: bd4f0ff9-a650-38e7-bf43-75822ec0cb69.roa (raw, json) Hash identifier: hbSCquYjIXE11NhWk8WkXmminFlD55KuenDT1oAx42g= Subject key identifier: BC:FC:80:09:02:56:C8:E0:D3:18:5D:4F:92:2F:E9:FA:5A:FB:91:F1 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E0969D72448ECD0C80FFC0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bd4f0ff9-a650-38e7-bf43-75822ec0cb69.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 99.197.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:96:9d:72:44:8e:cd:0c:80:ff:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=c419e77a-b96c-4b7e-b8f3-86e8531cfe05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:d0:c0:82:3c:2b:f3:69:29:6d:bf:db:51:7d: 27:26:50:a1:ff:4a:fa:04:46:0a:0b:a9:73:28:23: 6d:cb:54:ae:e5:f6:aa:b3:fa:b8:85:10:1f:21:57: 22:3b:64:24:49:d3:2f:59:04:ce:6e:fc:be:d3:c7: b6:0e:7c:cb:fe:b4:b9:f5:85:4d:04:90:73:b5:cd: 9b:5d:ca:bc:fb:91:63:e5:25:47:32:53:a7:eb:c9: 75:1f:84:4e:0e:3f:ee:78:e5:fc:0f:ce:0a:f2:d1: c0:2f:a0:5e:17:f1:2f:8d:c5:c9:e5:f7:84:cc:b8: 8a:93:00:4a:b2:09:fc:3b:3b:58:03:4c:76:8e:10: 63:67:27:78:16:7f:3d:f2:e5:fd:ad:9d:47:4b:6b: ba:7f:81:61:65:cb:81:cf:aa:a8:80:48:6f:06:4b: 8b:cd:9c:18:d3:b0:4f:5b:58:cf:e3:db:3f:98:3b: 7e:43:de:85:0d:70:19:8c:09:a4:b7:81:82:13:fe: d7:56:a9:68:0f:be:a9:56:12:9f:5f:de:07:19:70: 53:59:b0:04:4c:8a:c9:2f:b8:57:57:96:40:33:c4: 7d:31:11:7e:73:70:fe:2d:e0:95:7a:db:16:5a:4a: 36:f4:22:ed:69:14:f8:4a:b4:64:ea:53:8d:6c:61: 94:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:FC:80:09:02:56:C8:E0:D3:18:5D:4F:92:2F:E9:FA:5A:FB:91:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bd4f0ff9-a650-38e7-bf43-75822ec0cb69.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.197.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d7:d2:85:48:15:fb:5e:16:d5:f3:65:10:51:c8:0d:c4:34:f7: 5f:5f:67:fd:96:81:bb:17:23:d4:ff:1d:ae:79:0e:26:74:b6: 88:4f:c3:a9:23:74:4b:04:a7:60:f1:be:d9:68:1d:95:0b:c7: 1d:b4:11:ff:d0:4f:c4:36:f2:93:a2:77:6e:01:4e:be:39:ff: 9b:24:95:09:38:38:90:f0:cf:ba:56:7d:9a:65:42:60:c4:19: 25:de:20:10:af:ce:77:2e:f9:bb:1f:42:5c:06:98:bb:29:11: 91:c6:2a:fc:84:00:88:db:b4:5c:ab:fa:26:24:5e:9d:45:3d: fa:e9:9f:43:ea:4b:dd:d6:9c:90:e9:6c:bc:a3:ec:9d:7a:cd: e4:05:5e:f9:9e:44:22:14:9a:cc:d5:44:1b:e7:f9:29:2c:d4: de:47:5a:14:41:65:d7:bf:68:c5:96:88:92:15:e6:f8:88:cf: 9b:5f:db:93:97:cf:15:3d:d6:21:c2:38:02:f9:b5:83:f9:d5: ed:d1:95:07:00:de:23:07:50:6d:87:ad:e3:9d:27:1d:5d:9c: 33:e8:78:ab:8d:ed:1a:e5:42:1e:76:0d:bd:5c:db:29:c8:55: 60:69:6f:7c:0c:f0:0e:37:9d:6a:7c:60:90:89:7e:3b:fe:bc: 66:ad:95:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4JadckSOzQyA/8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk YzQxOWU3N2EtYjk2Yy00YjdlLWI4ZjMtODZlODUzMWNmZTA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgtDAgjwr82kpbb/bUX0nJlCh/0r6BEYKC6lz KCNty1Su5faqs/q4hRAfIVciO2QkSdMvWQTObvy+08e2DnzL/rS59YVNBJBztc2b Xcq8+5Fj5SVHMlOn68l1H4RODj/ueOX8D84K8tHAL6BeF/EvjcXJ5feEzLiKkwBK sgn8OztYA0x2jhBjZyd4Fn898uX9rZ1HS2u6f4FhZcuBz6qogEhvBkuLzZwY07BP W1jP49s/mDt+Q96FDXAZjAmkt4GCE/7XVqloD76pVhKfX94HGXBTWbAETIrJL7hX V5ZAM8R9MRF+c3D+LeCVetsWWko29CLtaRT4SrRk6lONbGGUWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLz8gAkCVsjg0xhdT5Iv6fpa+5HxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYmQ0ZjBmZjktYTY1MC0z OGU3LWJmNDMtNzU4MjJlYzBjYjY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8UUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANfShUgV+14W1fNlEFHIDcQ0919fZ/2WgbsXI9T/Ha55DiZ0tohPw6kj dEsEp2DxvtloHZULxx20Ef/QT8Q28pOid24BTr45/5sklQk4OJDwz7pWfZplQmDE GSXeIBCvzncu+bsfQlwGmLspEZHGKvyEAIjbtFyr+iYkXp1FPfrpn0PqS93WnJDp bLyj7J16zeQFXvmeRCIUmszVRBvn+Sks1N5HWhRBZde/aMWWiJIV5viIz5tf25OX zxU91iHCOAL5tYP51e3RlQcA3iMHUG2HreOdJx1dnDPoeKuN7RrlQh52Db1c2ynI VWBpb3wM8A43nWp8YJCJfjv+vGatlYU= -----END CERTIFICATE-----Generated at Thu Mar 26 17:54:08 2026 by rpki-client