$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ca9f025a-4c86-3893-b0ef-c2ccd93b28b9.roa File: ca9f025a-4c86-3893-b0ef-c2ccd93b28b9.roa (raw, json) Hash identifier: KL0gtBdxNtIhLm3s/aOer/M0InCu9E2RQqs1QOjEacY= Subject key identifier: 70:98:A6:50:D7:4E:9C:EE:A3:A7:6E:62:BA:6A:29:12:7D:41:64:0D Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24DFA8431F2B8C6E7C560980 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ca9f025a-4c86-3893-b0ef-c2ccd93b28b9.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 40306 IP address blocks: 99.196.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:a8:43:1f:2b:8c:6e:7c:56:09:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=a8ae70df-57cf-4a2f-a43a-03ecf4df4021 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:f6:c8:3c:0d:05:c8:24:9b:da:1a:df:13:32: 84:f5:c2:7c:68:3e:9f:d4:e4:ce:0b:03:c6:90:9d: ba:51:af:d7:fe:2b:83:27:c9:dd:18:34:41:23:ab: 07:f3:19:2f:d5:9b:b0:93:78:7b:78:0a:a3:cc:64: 7d:d3:bb:bc:21:80:1d:de:1f:94:31:a1:c7:2c:bb: 73:74:98:71:2a:9e:8a:fe:d5:95:8b:64:84:89:62: 85:88:47:bd:6a:b7:ef:69:36:bb:d9:f5:f7:e7:0e: 60:cb:47:c3:be:1e:c3:2a:0f:bc:f7:43:c9:87:2c: e7:c8:b9:23:f0:26:34:4b:8e:59:9c:46:34:5c:aa: 8e:7c:ec:0f:2b:99:41:9b:d9:0c:05:73:0a:f1:50: 45:d8:e7:26:61:ff:37:89:7f:15:b2:e8:33:93:cd: fa:62:06:3f:27:ae:f4:d7:b2:4c:ee:ec:22:b5:c2: bd:38:98:89:b8:9c:b9:4d:c0:df:ce:c3:05:6b:cc: 7d:11:88:a4:c0:77:dc:e5:23:f5:d3:fb:a5:20:22: c8:3a:b0:d8:80:4e:c2:ca:9f:56:6e:57:f0:dd:e8: 67:a5:0a:bb:2f:8f:49:01:5f:c2:cc:43:10:c7:3b: 9a:2d:69:3a:4b:0e:5c:b2:26:24:29:4c:55:9d:41: 78:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:98:A6:50:D7:4E:9C:EE:A3:A7:6E:62:BA:6A:29:12:7D:41:64:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ca9f025a-4c86-3893-b0ef-c2ccd93b28b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.196.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:fb:04:a7:af:7f:71:19:ea:e6:6f:fc:2c:b7:27:d6:8d:d8: 9d:bc:84:0e:0e:18:d7:22:f2:0f:87:01:86:68:cc:aa:59:ff: c9:48:10:12:d7:9f:c3:ed:52:9f:fc:6e:54:6f:6c:6f:81:96: 7b:8d:5f:00:9a:e4:97:3b:a6:3e:b2:ad:a2:70:c1:ad:99:75: 56:76:86:fd:c8:04:2c:10:b1:1d:41:f0:8a:d3:5b:7f:6f:16: 87:fd:c8:cf:93:24:d9:dc:4d:11:0d:c1:4a:1c:76:81:94:c6: 9e:1e:04:eb:4f:d1:22:da:95:cd:fe:00:0b:c7:19:f1:d1:c3: 41:e4:47:f5:46:5c:b0:1d:96:fa:48:1e:04:09:ee:26:59:45: 91:b8:04:f2:2a:7a:16:0c:0e:1b:50:c4:97:71:3b:dd:cd:b0: e0:40:56:74:50:10:40:80:3e:7d:43:c8:f8:e2:3a:1f:a0:31: ff:3e:1b:82:b2:ca:53:63:85:93:9c:9b:38:7c:68:d4:51:ba: 1a:b1:5f:0f:22:67:46:e8:89:ef:48:11:c5:00:cd:2e:b2:1d: 38:d5:dd:e1:47:d0:7a:6f:dc:7d:80:7c:a2:d6:70:42:43:22: f3:56:1a:9c:3e:c0:25:b8:00:e8:3c:66:59:3b:88:2b:db:8e: 5a:f8:41:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k36hDHyuMbnxWCYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk YThhZTcwZGYtNTdjZi00YTJmLWE0M2EtMDNlY2Y0ZGY0MDIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvbIPA0FyCSb2hrfEzKE9cJ8aD6f1OTOCwPG kJ26Ua/X/iuDJ8ndGDRBI6sH8xkv1Zuwk3h7eAqjzGR907u8IYAd3h+UMaHHLLtz dJhxKp6K/tWVi2SEiWKFiEe9arfvaTa72fX35w5gy0fDvh7DKg+890PJhyznyLkj 8CY0S45ZnEY0XKqOfOwPK5lBm9kMBXMK8VBF2OcmYf83iX8Vsugzk836YgY/J670 17JM7uwitcK9OJiJuJy5TcDfzsMFa8x9EYikwHfc5SP10/ulICLIOrDYgE7Cyp9W blfw3ehnpQq7L49JAV/CzEMQxzuaLWk6Sw5csiYkKUxVnUF4XQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHCYplDXTpzuo6duYrpqKRJ9QWQNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvY2E5ZjAyNWEtNGM4Ni0z ODkzLWIwZWYtYzJjY2Q5M2IyOGI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8R/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG37BKevf3EZ6uZv/Cy3J9aN2J28hA4OGNci8g+HAYZozKpZ/8lIEBLX n8PtUp/8blRvbG+BlnuNXwCa5Jc7pj6yraJwwa2ZdVZ2hv3IBCwQsR1B8IrTW39v Fof9yM+TJNncTRENwUocdoGUxp4eBOtP0SLalc3+AAvHGfHRw0HkR/VGXLAdlvpI HgQJ7iZZRZG4BPIqehYMDhtQxJdxO93NsOBAVnRQEECAPn1DyPjiOh+gMf8+G4Ky ylNjhZOcmzh8aNRRuhqxXw8iZ0boie9IEcUAzS6yHTjV3eFH0Hpv3H2AfKLWcEJD IvNWGpw+wCW4AOg8Zlk7iCvbjlr4Qa4= -----END CERTIFICATE-----Generated at Thu Mar 26 05:12:15 2026 by rpki-client