$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/da23e1f8-f0dc-391d-b86d-a240967db45e.roa File: da23e1f8-f0dc-391d-b86d-a240967db45e.roa (raw, json) Hash identifier: OpwOVpDkoe2ogtUVoF+AmMC7kmlHkC9HyEQL3Z+rbCE= Subject key identifier: 14:F6:EB:9B:65:9A:4E:16:74:BF:2B:BC:A4:BC:42:A0:13:75:B5:52 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24DFED3E0AED8773C9E736C0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/da23e1f8-f0dc-391d-b86d-a240967db45e.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 99.197.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:ed:3e:0a:ed:87:73:c9:e7:36:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=c8622a0f-7e59-4598-aaf3-93d0e3610297 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:66:87:73:e9:46:da:ad:65:ec:e1:77:79:67: 8b:6e:f6:01:81:8e:25:c0:c6:c3:c9:d1:47:fa:2e: 65:a5:c9:42:c6:08:0c:22:87:eb:fa:44:c0:26:96: ca:f3:83:55:55:ac:2a:74:b0:dc:51:d0:ad:cc:16: 31:0d:7a:35:ee:68:1f:5f:cc:65:1e:4d:d3:f5:9e: ed:4c:37:67:2b:1e:54:dd:88:5d:a2:f3:c2:36:78: a9:bb:23:e4:b6:41:fa:fa:46:43:38:8e:d9:f4:02: 94:89:e2:65:88:d4:e3:05:6b:79:7e:1a:2f:66:b4: 9b:17:85:d0:3c:e6:5f:3e:2c:5d:33:35:3c:04:d5: e2:3c:7a:4e:44:38:08:35:f3:bf:4f:49:7b:3e:41: 3c:7f:f1:45:9c:37:55:72:b4:ad:d7:2e:a0:cd:a1: e4:bb:20:3b:87:92:6d:6e:68:fa:2f:4e:86:2c:9f: 05:cb:4b:f9:38:75:60:a8:73:1a:30:85:5c:21:47: c7:b4:11:04:39:43:ee:c9:8d:e6:fd:7d:80:aa:cf: 26:9d:bd:02:90:db:f2:8b:23:b3:be:0e:f7:c5:7c: 62:d3:3c:30:d1:a7:36:ea:99:e8:5c:99:6d:0f:9e: 98:dd:dc:12:12:93:ca:b3:46:5c:cb:7c:40:95:0c: 3a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:F6:EB:9B:65:9A:4E:16:74:BF:2B:BC:A4:BC:42:A0:13:75:B5:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/da23e1f8-f0dc-391d-b86d-a240967db45e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.197.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:33:90:68:c1:10:76:70:c4:a7:e4:f9:53:29:f8:94:4d:f8: e4:12:88:ee:38:98:cd:0a:6c:f2:f3:32:7a:27:df:34:43:7b: 7b:8b:41:89:84:3b:ea:24:81:8d:0d:65:c9:b1:93:94:29:17: 74:47:17:8c:e4:88:ad:f6:61:e1:d5:49:a1:e2:96:e2:64:07: f2:02:bf:b5:a3:f7:ab:dd:42:c7:2f:39:e8:46:32:e0:26:b9: d6:69:dd:6a:b5:95:52:56:fa:c3:01:cb:57:90:9a:5f:a4:3f: ed:89:30:9e:db:79:20:4e:0f:ba:d9:4f:14:39:b2:21:fb:93: 7a:b3:6f:4b:5a:6a:07:8e:87:60:f2:5e:5a:42:f1:bd:2d:df: b5:8f:c7:29:f0:a9:09:c6:d5:be:6c:71:eb:e7:a9:ba:65:83: c0:84:85:e9:1c:f7:ac:cb:a4:5e:d2:6b:f4:fd:41:04:73:3a: 05:63:26:fa:21:42:e2:20:63:04:36:9c:2f:36:40:58:24:53: 1a:20:f7:71:d2:99:f1:12:23:c4:ac:bc:9b:88:7b:9b:45:c5: 7d:fb:96:02:fe:1e:56:2d:15:2d:ee:25:c4:a7:5b:8c:00:05: 8b:cd:da:2f:94:56:03:a1:f8:16:a8:62:d9:4f:6f:b5:50:7d: e5:a6:ad:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k3+0+Cu2Hc8nnNsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk Yzg2MjJhMGYtN2U1OS00NTk4LWFhZjMtOTNkMGUzNjEwMjk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWaHc+lG2q1l7OF3eWeLbvYBgY4lwMbDydFH +i5lpclCxggMIofr+kTAJpbK84NVVawqdLDcUdCtzBYxDXo17mgfX8xlHk3T9Z7t TDdnKx5U3YhdovPCNnipuyPktkH6+kZDOI7Z9AKUieJliNTjBWt5fhovZrSbF4XQ POZfPixdMzU8BNXiPHpORDgINfO/T0l7PkE8f/FFnDdVcrSt1y6gzaHkuyA7h5Jt bmj6L06GLJ8Fy0v5OHVgqHMaMIVcIUfHtBEEOUPuyY3m/X2Aqs8mnb0CkNvyiyOz vg73xXxi0zww0ac26pnoXJltD56Y3dwSEpPKs0Zcy3xAlQw6uQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBT265tlmk4WdL8rvKS8QqATdbVSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZGEyM2UxZjgtZjBkYy0z OTFkLWI4NmQtYTI0MDk2N2RiNDVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8XZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAgzkGjBEHZwxKfk+VMp+JRN+OQSiO44mM0KbPLzMnon3zRDe3uLQYmE O+okgY0NZcmxk5QpF3RHF4zkiK32YeHVSaHiluJkB/ICv7Wj96vdQscvOehGMuAm udZp3Wq1lVJW+sMBy1eQml+kP+2JMJ7beSBOD7rZTxQ5siH7k3qzb0taageOh2Dy XlpC8b0t37WPxynwqQnG1b5scevnqbplg8CEhekc96zLpF7Sa/T9QQRzOgVjJvoh QuIgYwQ2nC82QFgkUxog93HSmfESI8SsvJuIe5tFxX37lgL+HlYtFS3uJcSnW4wA BYvN2i+UVgOh+BaoYtlPb7VQfeWmrao= -----END CERTIFICATE-----Generated at Thu Mar 26 19:30:41 2026 by rpki-client