$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d036b30b-496f-319b-833a-2f0f9bf3fd27.roa File: d036b30b-496f-319b-833a-2f0f9bf3fd27.roa (raw, json) Hash identifier: oBu6cHHrtNNowPmmNcfPyc7hLc+jGkzLj1dXzeUL81E= Subject key identifier: 57:09:39:B1:1B:60:43:2D:8E:FC:71:E0:1D:88:DE:C7:A2:F6:C2:82 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24DFEF44D6E37FD8C1C7DDC0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d036b30b-496f-319b-833a-2f0f9bf3fd27.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 99.198.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:ef:44:d6:e3:7f:d8:c1:c7:dd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=873b8fde-32e4-44ec-ae1f-a12bf7f26487 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:e3:29:4f:78:3a:ce:b8:47:52:ea:50:2b:ca: 61:b6:e1:d4:d4:98:e8:25:f6:90:e8:a6:58:9c:ca: 5e:ee:7b:17:b8:2a:35:11:20:56:06:63:20:3a:5c: 56:61:23:f0:a8:27:3f:00:a3:b6:e2:87:46:ee:75: a0:c3:5d:12:19:da:f6:a3:6b:f4:a3:df:7b:a1:ec: 8e:ad:86:0f:2c:d6:e2:64:2b:6e:bd:1b:f6:fa:cc: d2:35:7e:b7:f8:4d:c0:58:9a:5a:ab:b9:10:5f:89: d2:90:11:eb:78:b2:08:44:cd:6e:04:da:b2:1e:00: 53:32:59:ae:be:59:79:72:70:14:93:23:d8:19:a8: 5d:f8:41:a3:ee:a1:8f:59:44:05:74:a1:ba:5e:75: 9a:08:67:07:62:b2:9b:05:cb:2e:f6:0f:2b:43:f6: 55:e3:83:b6:3d:bc:6f:fe:75:62:ec:52:2c:0c:94: 7d:94:d7:02:9f:4c:9a:87:45:86:ab:37:c4:91:e2: db:dc:67:a0:2c:46:ea:9a:21:96:94:78:0b:20:3e: 3d:ee:3b:7f:df:9d:26:16:eb:48:99:f3:b6:b3:66: 9d:50:fe:50:a5:3e:2b:29:c1:ab:ad:88:03:9b:85: cc:6e:79:d7:5a:ed:0e:21:be:c9:46:61:e2:58:a7: 94:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:09:39:B1:1B:60:43:2D:8E:FC:71:E0:1D:88:DE:C7:A2:F6:C2:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d036b30b-496f-319b-833a-2f0f9bf3fd27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.198.45.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:8a:ca:56:67:a4:d3:1c:d2:d6:1d:f6:89:03:a7:6c:ff:47: d0:d1:83:a9:29:e4:97:cb:81:77:f9:58:dc:89:03:d6:83:b2: 43:f5:01:ef:78:b3:9f:bb:6d:6b:23:3c:44:f5:b0:c5:5e:20: d9:ce:5f:bc:e2:17:85:a3:88:b9:33:97:ab:11:fd:32:4f:c1: 3d:29:0a:b6:77:56:b6:d2:57:ee:48:a8:0f:6c:3c:52:07:33: ef:63:7a:32:db:c5:d4:c8:8d:55:1c:22:7b:82:39:26:2b:bc: 3a:78:d2:df:2b:a9:92:05:a1:ef:e9:10:64:e3:e8:e8:bd:de: 9b:00:b7:7f:5e:e5:ad:0b:38:82:0f:5b:d9:c4:f2:43:76:27: dc:b2:68:fa:23:93:11:87:ca:9b:89:57:c7:fe:ff:49:28:ac: 55:12:9b:70:01:75:35:b6:77:0d:0a:b3:95:07:1f:70:72:53: b4:50:ec:ee:f1:d7:e1:ff:3d:39:0f:25:90:10:ae:2c:3d:0d: 88:f2:b0:5c:ea:9d:34:9e:a5:b4:8e:2e:cd:de:b7:4e:bf:97: 33:ce:e1:37:bd:2f:a3:fb:61:6c:5f:ce:06:2e:be:54:cd:b5: e2:99:2f:62:12:f1:14:aa:fa:5c:d0:93:89:f6:74:f8:11:fe: 16:a5:09:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k3+9E1uN/2MHH3cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ODczYjhmZGUtMzJlNC00NGVjLWFlMWYtYTEyYmY3ZjI2NDg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjOMpT3g6zrhHUupQK8phtuHU1JjoJfaQ6KZY nMpe7nsXuCo1ESBWBmMgOlxWYSPwqCc/AKO24odG7nWgw10SGdr2o2v0o997oeyO rYYPLNbiZCtuvRv2+szSNX63+E3AWJpaq7kQX4nSkBHreLIIRM1uBNqyHgBTMlmu vll5cnAUkyPYGahd+EGj7qGPWUQFdKG6XnWaCGcHYrKbBcsu9g8rQ/ZV44O2Pbxv /nVi7FIsDJR9lNcCn0yah0WGqzfEkeLb3GegLEbqmiGWlHgLID497jt/350mFutI mfO2s2adUP5QpT4rKcGrrYgDm4XMbnnXWu0OIb7JRmHiWKeUpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFcJObEbYEMtjvxx4B2I3sei9sKCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZDAzNmIzMGItNDk2Zi0z MTliLTgzM2EtMmYwZjliZjNmZDI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8YtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEWKylZnpNMc0tYd9okDp2z/R9DRg6kp5JfLgXf5WNyJA9aDskP1Ae94 s5+7bWsjPET1sMVeINnOX7ziF4WjiLkzl6sR/TJPwT0pCrZ3VrbSV+5IqA9sPFIH M+9jejLbxdTIjVUcInuCOSYrvDp40t8rqZIFoe/pEGTj6Oi93psAt39e5a0LOIIP W9nE8kN2J9yyaPojkxGHypuJV8f+/0korFUSm3ABdTW2dw0Ks5UHH3ByU7RQ7O7x 1+H/PTkPJZAQriw9DYjysFzqnTSepbSOLs3et06/lzPO4Te9L6P7YWxfzgYuvlTN teKZL2IS8RSq+lzQk4n2dPgR/halCcY= -----END CERTIFICATE-----Generated at Thu Mar 26 16:05:48 2026 by rpki-client