$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cba352e2-e4d4-3c5b-b9c0-935703779602.roa File: cba352e2-e4d4-3c5b-b9c0-935703779602.roa (raw, json) Hash identifier: nz1ziOj++/2CfDU1CejDY+oOP16wxkzu8EkIlanXnv8= Subject key identifier: 96:61:CC:AB:F7:38:81:C4:F2:72:BE:1E:DA:1A:25:EF:55:92:D7:19 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E0973B36B82733DA0FB980 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cba352e2-e4d4-3c5b-b9c0-935703779602.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 99.197.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:97:3b:36:b8:27:33:da:0f:b9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=1f0ce64f-c33c-461a-9a6d-9d9b463a25e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:a0:a4:79:1d:3c:91:cf:a3:4f:0a:c9:db:b4: 92:70:4b:7f:2e:0a:4f:81:71:62:37:d1:f9:46:98: 61:d4:96:ed:62:f6:4e:da:f3:ef:50:e2:d1:2d:41: 65:33:10:8f:09:a7:00:ce:60:c9:94:d6:78:b6:49: f1:51:57:e5:c6:e6:c6:74:51:38:fe:83:db:4d:73: 26:a6:dc:0f:48:ed:d6:c1:f1:d2:57:d6:93:d7:0b: a6:5a:69:a9:78:cf:f1:60:24:2a:3e:2e:09:d0:b8: 63:8c:05:58:3e:70:e1:5e:8f:0e:c8:07:d1:c8:ec: 03:5b:23:df:e9:a0:0e:b4:3f:dc:16:8b:0f:f0:44: 03:1b:84:e4:d3:b5:28:35:e6:18:aa:f0:2d:f1:db: 37:bd:54:d6:26:4a:08:82:bf:f9:7f:7b:bf:36:99: 2c:93:8e:d0:ab:92:d3:25:7d:f6:ef:93:2a:34:3c: 62:71:13:c0:b3:a9:53:59:ca:22:9f:4c:b3:ae:5d: 6e:75:a1:ba:a4:eb:54:8a:6f:be:15:60:ff:6d:d5: 72:66:e9:70:49:6d:c3:ba:77:4d:44:2a:50:eb:33: 77:0c:a5:56:dc:a9:e9:be:d8:4c:9d:d3:0d:98:5d: d1:30:7f:45:0e:c6:a3:e8:24:7e:4b:87:79:fb:65: 21:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:61:CC:AB:F7:38:81:C4:F2:72:BE:1E:DA:1A:25:EF:55:92:D7:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cba352e2-e4d4-3c5b-b9c0-935703779602.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.197.57.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:07:2e:a2:34:91:e0:bb:70:3b:64:3b:72:1b:c8:e7:9a:94: 73:db:35:f5:35:63:6a:85:97:a6:6b:38:ff:5f:ca:52:7a:f4: a8:5f:0d:86:39:af:81:ad:36:73:17:9b:f2:1c:57:40:93:13: a6:ba:f9:45:03:da:ae:92:ee:b0:b1:81:cb:2e:27:94:06:65: 61:08:1b:f4:4e:b8:81:90:a3:9e:02:ba:95:15:d4:fa:dd:4c: f9:fd:22:05:9a:c6:5c:60:d8:e0:89:1e:31:74:15:6d:dd:c6: 9b:19:f3:86:2d:45:e4:4e:6a:cc:8f:89:a8:f7:60:70:01:b3: a2:08:24:2d:ba:d4:2d:6b:8e:c3:8a:48:78:0b:d6:4e:8d:c8: 3c:45:c7:05:dc:f2:bc:52:86:8e:a8:c3:72:b7:b5:a6:77:d3: d2:5b:b7:cc:38:8d:69:f8:39:f4:a0:6c:76:d2:1c:e9:e4:e5: dd:bc:f4:cb:34:58:7b:b8:32:65:8d:d9:f9:d6:2d:be:fe:06: 23:76:86:38:11:06:e5:69:56:cf:0d:aa:25:eb:f1:66:7d:2b: 35:a0:09:18:a7:f7:6d:1f:54:29:18:ae:10:35:b2:2c:0a:1b: 83:51:c9:83:67:73:a6:c6:d7:1f:d0:1f:c5:b9:30:f4:54:84: 14:a4:75:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4Jc7NrgnM9oPuYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MWYwY2U2NGYtYzMzYy00NjFhLTlhNmQtOWQ5YjQ2M2EyNWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6CkeR08kc+jTwrJ27SScEt/LgpPgXFiN9H5 Rphh1JbtYvZO2vPvUOLRLUFlMxCPCacAzmDJlNZ4tknxUVflxubGdFE4/oPbTXMm ptwPSO3WwfHSV9aT1wumWmmpeM/xYCQqPi4J0LhjjAVYPnDhXo8OyAfRyOwDWyPf 6aAOtD/cFosP8EQDG4Tk07UoNeYYqvAt8ds3vVTWJkoIgr/5f3u/Npksk47Qq5LT JX3275MqNDxicRPAs6lTWcoin0yzrl1udaG6pOtUim++FWD/bdVyZulwSW3DundN RCpQ6zN3DKVW3KnpvthMndMNmF3RMH9FDsaj6CR+S4d5+2UhlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJZhzKv3OIHE8nK+HtoaJe9VktcZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvY2JhMzUyZTItZTRkNC0z YzViLWI5YzAtOTM1NzAzNzc5NjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8U5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACYHLqI0keC7cDtkO3IbyOealHPbNfU1Y2qFl6ZrOP9fylJ69KhfDYY5 r4GtNnMXm/IcV0CTE6a6+UUD2q6S7rCxgcsuJ5QGZWEIG/ROuIGQo54CupUV1Prd TPn9IgWaxlxg2OCJHjF0FW3dxpsZ84YtReROasyPiaj3YHABs6IIJC261C1rjsOK SHgL1k6NyDxFxwXc8rxSho6ow3K3taZ309Jbt8w4jWn4OfSgbHbSHOnk5d289Ms0 WHu4MmWN2fnWLb7+BiN2hjgRBuVpVs8NqiXr8WZ9KzWgCRin920fVCkYrhA1siwK G4NRyYNnc6bG1x/QH8W5MPRUhBSkdVM= -----END CERTIFICATE-----Generated at Thu Mar 26 13:08:30 2026 by rpki-client