$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d1e0ccf1-bcb8-3d4a-802f-75236e665e8e.roa File: d1e0ccf1-bcb8-3d4a-802f-75236e665e8e.roa (raw, json) Hash identifier: DTfb5sT+FfVMw0C/Ktd7a1TmT1tLpOYxkX8AaKpjQp0= Subject key identifier: BE:11:CA:E5:BA:74:CF:A4:F7:F5:12:A5:53:EC:20:C7:A3:19:F1:F5 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E0A0BEE1189B37B7B58180 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d1e0ccf1-bcb8-3d4a-802f-75236e665e8e.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 99.198.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:a0:be:e1:18:9b:37:b7:b5:81:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=c049dae8-e1f3-407f-b4da-a9de2dfe1afa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:b1:ac:56:35:39:b0:0c:cc:d2:17:49:78:5f: dd:79:72:82:04:94:a3:b9:98:1d:3e:5f:31:c2:bb: 44:b4:49:d9:2c:8b:d7:2d:32:f7:aa:6a:39:c2:61: 80:28:4b:a6:d2:a1:16:00:f0:af:94:c9:a1:29:be: a7:11:82:87:33:39:df:dd:b7:3f:68:ac:67:fa:36: 63:30:b8:25:fc:4f:f7:06:1c:ca:6f:9b:b1:93:4d: a0:f0:94:a3:72:3d:b9:b8:52:7c:29:94:4b:a6:a4: f5:ed:a7:09:f5:6e:39:ff:da:de:19:17:db:bb:f5: 60:7d:8e:92:1a:e0:79:f8:6c:64:2f:68:67:1d:28: 4d:92:dd:87:d3:b7:66:d1:b1:e3:bc:d1:8d:26:b7: 87:a3:5a:fa:e4:5d:e8:c5:ac:8f:d4:53:a2:54:5e: 29:79:68:40:f0:f2:69:e1:f9:fe:e1:88:f8:6e:04: 2d:1a:e2:81:90:0a:06:b0:c8:c2:ed:28:fa:67:b4: 9f:ac:0b:66:d5:d6:24:94:40:44:09:be:94:59:60: 33:33:c8:46:d9:c1:e0:43:48:46:5a:0e:88:8a:46: ac:26:07:9d:25:68:43:ac:c2:1b:17:cc:86:2a:2e: 6c:55:a6:a7:44:dd:ff:d6:c8:cb:0c:2e:b3:6e:23: a2:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:11:CA:E5:BA:74:CF:A4:F7:F5:12:A5:53:EC:20:C7:A3:19:F1:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d1e0ccf1-bcb8-3d4a-802f-75236e665e8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.198.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:49:ba:ee:0c:34:a2:5a:26:cd:c1:ac:7d:9d:d4:15:57:98: 2d:14:c4:c2:22:2e:56:6b:e3:82:6e:9b:4a:9a:08:8d:da:c6: 38:ee:fb:22:78:f0:20:79:fa:18:8e:1c:74:7c:85:fd:eb:68: 7b:f0:59:bc:be:32:08:4d:4d:94:fe:0e:39:4c:2f:a4:54:f2: 8c:7b:5c:e0:b5:26:b7:1c:4b:f9:c9:cb:1c:73:e5:94:bd:db: 4b:39:5a:7c:0f:29:63:ac:5c:0c:aa:32:c8:a8:2d:c4:ab:2b: 1a:49:44:70:6c:33:66:d0:92:86:ff:76:6f:d8:91:0f:fc:c2: 63:ee:9c:4e:09:5f:84:f3:c2:4b:81:8a:68:bf:8f:18:38:c1: d0:d2:32:fe:ca:f5:69:c6:61:3a:45:6a:e0:c7:c5:6b:dd:2c: b2:4a:c9:aa:49:3a:83:60:ad:17:7c:28:4a:59:04:c5:8d:15: 8c:80:aa:18:20:0f:bf:56:f7:71:fb:2e:38:e8:2b:a2:72:83: c5:6c:58:7d:42:e0:4a:b2:ea:a2:16:20:f5:8b:8d:e1:03:55: d4:14:01:40:f9:64:b7:cc:fe:74:89:41:e5:18:3f:ad:3c:dc: 3e:53:4f:e4:fc:7b:2c:90:07:56:64:0d:f1:c0:3c:28:10:65: 4e:8a:a0:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4KC+4RibN7e1gYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk YzA0OWRhZTgtZTFmMy00MDdmLWI0ZGEtYTlkZTJkZmUxYWZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLGsVjU5sAzM0hdJeF/deXKCBJSjuZgdPl8x wrtEtEnZLIvXLTL3qmo5wmGAKEum0qEWAPCvlMmhKb6nEYKHMznf3bc/aKxn+jZj MLgl/E/3BhzKb5uxk02g8JSjcj25uFJ8KZRLpqT17acJ9W45/9reGRfbu/VgfY6S GuB5+GxkL2hnHShNkt2H07dm0bHjvNGNJreHo1r65F3oxayP1FOiVF4peWhA8PJp 4fn+4Yj4bgQtGuKBkAoGsMjC7Sj6Z7SfrAtm1dYklEBECb6UWWAzM8hG2cHgQ0hG Wg6IikasJgedJWhDrMIbF8yGKi5sVaanRN3/1sjLDC6zbiOiywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL4RyuW6dM+k9/USpVPsIMejGfH1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZDFlMGNjZjEtYmNiOC0z ZDRhLTgwMmYtNzUyMzZlNjY1ZThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8YUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJBJuu4MNKJaJs3BrH2d1BVXmC0UxMIiLlZr44Jum0qaCI3axjju+yJ4 8CB5+hiOHHR8hf3raHvwWby+MghNTZT+DjlML6RU8ox7XOC1JrccS/nJyxxz5ZS9 20s5WnwPKWOsXAyqMsioLcSrKxpJRHBsM2bQkob/dm/YkQ/8wmPunE4JX4TzwkuB imi/jxg4wdDSMv7K9WnGYTpFauDHxWvdLLJKyapJOoNgrRd8KEpZBMWNFYyAqhgg D79W93H7LjjoK6Jyg8VsWH1C4Eqy6qIWIPWLjeEDVdQUAUD5ZLfM/nSJQeUYP608 3D5TT+T8eyyQB1ZkDfHAPCgQZU6KoKs= -----END CERTIFICATE-----Generated at Thu Mar 26 04:27:03 2026 by rpki-client