$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cd4af05c-0dd4-3496-a5d5-ff7f4ae7f375.roa File: cd4af05c-0dd4-3496-a5d5-ff7f4ae7f375.roa (raw, json) Hash identifier: 6Ra+cXHtmn3v4g4WkURo/KlknBOk+HiyTNX6UBFQxMU= Subject key identifier: 64:67:FE:A0:3C:80:8F:81:41:9B:2C:6E:4C:65:1B:E4:D2:BF:99:F5 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24DFE79D2A46F47D120BE380 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cd4af05c-0dd4-3496-a5d5-ff7f4ae7f375.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 99.197.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:e7:9d:2a:46:f4:7d:12:0b:e3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=34fa1778-89cc-46a2-9431-63de9e6d195c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:c0:5e:f6:f0:19:2a:ec:3e:95:5e:d1:a8:8e: bd:1f:05:f5:04:f2:b6:73:88:46:c9:d2:ee:85:14: 38:46:64:cb:d4:0f:37:6a:ea:b5:bd:64:b0:08:ec: 8f:2a:12:ec:a7:a9:54:46:bf:be:e3:0f:3f:36:ac: 8e:73:c6:42:f8:17:4f:a5:13:bf:26:f4:14:ae:2d: 9f:a6:ab:5d:d8:64:ac:81:5a:b8:23:c4:2f:c0:45: 13:5d:67:9a:3e:ef:d1:7d:ab:99:53:d2:1d:88:0f: 2c:19:d3:29:24:8e:72:ca:67:91:e9:8b:8e:25:7a: 6d:c3:d0:8a:35:d5:33:b2:05:81:58:4c:ae:f9:94: 7c:df:c3:c1:ad:2f:e2:c0:9e:0c:b4:ca:a0:69:cc: 57:65:0b:59:83:6c:b1:6f:e2:0f:c1:8a:68:02:a0: 2a:42:2d:ab:66:ce:6b:80:a7:fb:4e:82:a8:5d:9b: 1f:c2:00:88:1b:ba:13:e2:06:7f:10:be:6c:5d:60: d5:d6:1c:b0:de:15:5b:d8:10:14:86:44:fb:d3:2b: c3:df:94:02:ea:ff:12:89:2c:96:a8:90:ed:89:02: 06:1a:68:06:98:78:08:3c:2b:1f:d6:23:f1:74:46: 65:52:5b:f1:73:84:82:76:13:c6:04:5c:c4:af:e1: 88:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:67:FE:A0:3C:80:8F:81:41:9B:2C:6E:4C:65:1B:E4:D2:BF:99:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cd4af05c-0dd4-3496-a5d5-ff7f4ae7f375.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.197.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption be:6c:83:71:56:ca:9c:ff:98:7a:72:6f:c3:b2:7c:ad:df:cb: cb:85:39:4b:fb:14:75:17:ce:ec:49:e7:f3:56:41:3a:c0:22: a9:e5:17:70:74:91:22:af:41:e5:66:41:9c:1c:d4:cc:0e:ca: ab:b5:70:25:64:f6:3c:65:b3:92:34:56:64:0a:4b:3a:cb:3c: 19:f2:35:19:4a:b8:07:02:56:2d:57:37:aa:72:33:92:3d:b8: c5:65:63:02:04:f1:c4:5a:c3:77:3a:23:47:7d:d9:f8:de:b3: 32:6b:71:d4:ee:4d:e8:47:a3:92:1e:55:f0:0c:21:2c:2c:79: b2:fc:93:c1:1c:b1:c3:44:f2:94:80:9a:ff:ad:e4:36:cc:27: c6:c2:8b:d3:90:37:56:8e:2b:7e:84:6d:40:54:89:13:8c:b8: 76:d1:2f:a2:29:50:a6:74:c3:42:17:42:ed:cf:78:0f:3d:75: 0d:ec:1b:f7:fd:5a:a7:38:d3:2e:17:b4:42:9d:62:f5:f7:76: 34:bf:22:0b:a4:46:11:18:1f:e1:3f:0b:b2:1c:92:8a:73:df: 47:b5:95:a2:6a:1a:7c:c3:9b:7d:34:76:01:81:68:af:df:e5: f3:a6:13:89:1a:ff:1b:e2:57:cb:a4:f7:e4:e0:8c:e1:d3:46: 1c:96:fb:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k3+edKkb0fRIL44AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MzRmYTE3NzgtODljYy00NmEyLTk0MzEtNjNkZTllNmQxOTVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAicBe9vAZKuw+lV7RqI69HwX1BPK2c4hGydLu hRQ4RmTL1A83auq1vWSwCOyPKhLsp6lURr++4w8/NqyOc8ZC+BdPpRO/JvQUri2f pqtd2GSsgVq4I8QvwEUTXWeaPu/RfauZU9IdiA8sGdMpJI5yymeR6YuOJXptw9CK NdUzsgWBWEyu+ZR838PBrS/iwJ4MtMqgacxXZQtZg2yxb+IPwYpoAqAqQi2rZs5r gKf7ToKoXZsfwgCIG7oT4gZ/EL5sXWDV1hyw3hVb2BAUhkT70yvD35QC6v8SiSyW qJDtiQIGGmgGmHgIPCsf1iPxdEZlUlvxc4SCdhPGBFzEr+GIqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGRn/qA8gI+BQZssbkxlG+TSv5n1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvY2Q0YWYwNWMtMGRkNC0z NDk2LWE1ZDUtZmY3ZjRhZTdmMzc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8UJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL5sg3FWypz/mHpyb8OyfK3fy8uFOUv7FHUXzuxJ5/NWQTrAIqnlF3B0 kSKvQeVmQZwc1MwOyqu1cCVk9jxls5I0VmQKSzrLPBnyNRlKuAcCVi1XN6pyM5I9 uMVlYwIE8cRaw3c6I0d92fjeszJrcdTuTehHo5IeVfAMISwsebL8k8EcscNE8pSA mv+t5DbMJ8bCi9OQN1aOK36EbUBUiROMuHbRL6IpUKZ0w0IXQu3PeA89dQ3sG/f9 Wqc40y4XtEKdYvX3djS/IgukRhEYH+E/C7Ickopz30e1laJqGnzDm300dgGBaK/f 5fOmE4ka/xviV8uk9+TgjOHTRhyW+9E= -----END CERTIFICATE-----Generated at Thu Mar 26 16:54:50 2026 by rpki-client