$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d64ce4a9-c5f2-3922-a83f-ceaa96fd4294.roa File: d64ce4a9-c5f2-3922-a83f-ceaa96fd4294.roa (raw, json) Hash identifier: MOIx4UC7tISLbA6wpNrIEDs60hSAtO21W5GXdo6+UNU= Subject key identifier: F8:BD:90:42:EE:40:04:9A:68:05:13:C5:1B:AE:34:A5:83:F8:CB:28 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24DFEB092A78658F959039C0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d64ce4a9-c5f2-3922-a83f-ceaa96fd4294.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 99.197.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:eb:09:2a:78:65:8f:95:90:39:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=34f0a405-91b1-4a0d-bb07-0e9bfd440850 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:e4:8d:fb:cb:cb:b7:11:bf:12:1e:54:f6:e0: 95:b9:5d:6d:1d:16:40:a9:cc:4c:d0:15:7a:35:d7: ca:3b:ad:ec:f0:b3:82:a7:5e:16:53:c7:e6:77:58: c1:07:45:46:9c:3c:fd:ad:a6:1a:e6:8d:0e:d6:70: 8c:16:9f:d8:aa:26:1c:60:07:ff:10:86:a3:0b:eb: 57:b8:09:b0:ee:28:86:29:f3:21:61:94:4d:62:4d: 5e:93:35:3e:66:4f:98:7e:b3:f2:6c:ba:79:ad:fd: 20:20:67:88:33:77:a1:d2:ea:7a:8d:34:8e:11:38: fc:62:20:ce:54:72:27:3d:e2:07:5d:ab:f7:48:22: 4c:ad:7c:9b:06:85:52:84:27:07:81:8d:07:9b:ea: c1:90:40:c4:c0:db:75:10:87:31:a0:af:1a:3b:06: 8c:16:d9:9f:07:fc:bb:82:2d:7c:34:a7:9d:d2:1c: 94:cb:ee:57:b1:68:8d:32:0f:cc:82:ff:32:c4:fc: cd:f4:cf:db:6c:e8:83:aa:f2:4a:eb:c5:cd:f4:0d: b4:30:5c:65:45:80:32:79:e1:bc:cd:40:ec:6f:f6: 40:91:b0:af:73:2a:44:f9:b8:92:bc:6a:02:be:5c: 98:15:17:68:ce:e8:8d:06:30:b6:c4:28:0a:62:59: 7b:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:BD:90:42:EE:40:04:9A:68:05:13:C5:1B:AE:34:A5:83:F8:CB:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d64ce4a9-c5f2-3922-a83f-ceaa96fd4294.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.197.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:94:a6:6f:51:6a:57:69:66:f5:d8:e5:23:fa:ce:3d:99:82: 47:2b:14:bb:67:43:55:e4:ba:c0:8b:39:da:70:d9:62:1c:6e: c5:65:ce:9a:f0:95:04:ba:41:2f:bf:24:01:54:84:d8:ca:e5: 1b:be:b5:18:e0:d7:22:f9:85:c0:7c:8d:d1:c3:7e:fd:6a:52: a7:14:82:80:08:4a:1e:5c:ab:f5:e0:9a:7c:e7:30:59:d4:de: 04:63:35:27:08:b1:9d:61:e2:ff:1e:00:f1:85:17:02:6c:b4: 4b:c2:3f:54:90:62:25:b1:2f:50:67:fa:8a:3e:53:06:44:36: 89:4f:74:03:c3:9a:86:6a:0c:bc:75:48:d1:7e:ec:6f:48:7b: 43:95:73:bb:fa:47:05:e7:87:de:f4:53:5f:5c:4a:95:04:cd: 03:68:21:b7:c3:a4:68:b7:07:8c:2d:d3:c1:69:38:28:16:f2: 8f:28:d1:02:c1:46:59:3a:54:24:80:0c:21:cb:80:7d:44:2e: ba:d0:61:77:d1:f9:2d:68:d8:7a:0b:6a:3c:db:b2:82:99:39: cd:aa:9b:5f:40:05:6e:a9:b1:20:3c:33:16:98:61:9b:52:6a: 08:59:8e:1e:79:1c:83:82:22:4e:5c:b0:ee:f9:bb:09:65:79: a5:a3:15:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k3+sJKnhlj5WQOcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MzRmMGE0MDUtOTFiMS00YTBkLWJiMDctMGU5YmZkNDQwODUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0OSN+8vLtxG/Eh5U9uCVuV1tHRZAqcxM0BV6 NdfKO63s8LOCp14WU8fmd1jBB0VGnDz9raYa5o0O1nCMFp/YqiYcYAf/EIajC+tX uAmw7iiGKfMhYZRNYk1ekzU+Zk+YfrPybLp5rf0gIGeIM3eh0up6jTSOETj8YiDO VHInPeIHXav3SCJMrXybBoVShCcHgY0Hm+rBkEDEwNt1EIcxoK8aOwaMFtmfB/y7 gi18NKed0hyUy+5XsWiNMg/Mgv8yxPzN9M/bbOiDqvJK68XN9A20MFxlRYAyeeG8 zUDsb/ZAkbCvcypE+biSvGoCvlyYFRdozuiNBjC2xCgKYll7RwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPi9kELuQASaaAUTxRuuNKWD+MsoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZDY0Y2U0YTktYzVmMi0z OTIyLWE4M2YtY2VhYTk2ZmQ0Mjk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8WAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADGUpm9RaldpZvXY5SP6zj2ZgkcrFLtnQ1XkusCLOdpw2WIcbsVlzprw lQS6QS+/JAFUhNjK5Ru+tRjg1yL5hcB8jdHDfv1qUqcUgoAISh5cq/XgmnznMFnU 3gRjNScIsZ1h4v8eAPGFFwJstEvCP1SQYiWxL1Bn+oo+UwZENolPdAPDmoZqDLx1 SNF+7G9Ie0OVc7v6RwXnh970U19cSpUEzQNoIbfDpGi3B4wt08FpOCgW8o8o0QLB Rlk6VCSADCHLgH1ELrrQYXfR+S1o2HoLajzbsoKZOc2qm19ABW6psSA8MxaYYZtS aghZjh55HIOCIk5csO75uwlleaWjFYE= -----END CERTIFICATE-----Generated at Fri Mar 27 01:13:09 2026 by rpki-client