$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/de2b1abf-f12c-38bb-90c9-83ffd6c3465d.roa File: de2b1abf-f12c-38bb-90c9-83ffd6c3465d.roa (raw, json) Hash identifier: /dGqw0hdpGAduOtd8jnfD39uo+uNKlLhlN0b0yIZY98= Subject key identifier: 6C:BA:76:F8:01:23:73:24:19:FE:24:57:56:B6:DE:DE:D3:E6:22:D5 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F49839F4A62F22FD203BB1270 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/de2b1abf-f12c-38bb-90c9-83ffd6c3465d.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 99.197.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:83:9f:4a:62:f2:2f:d2:03:bb:12:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=3946d3bc-8574-43e8-b6ef-16a8b13df527 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:53:86:d1:1f:d3:77:ad:46:02:58:e6:1a:67: 33:dc:5c:c8:40:75:9c:24:be:97:fd:5b:59:66:2a: 4b:92:1a:55:96:83:dc:d0:6a:c0:5a:88:66:6b:7e: 43:b4:b4:dd:8a:0c:ed:36:20:64:08:e6:79:30:0a: ef:88:72:0a:58:60:67:00:6c:56:53:2a:b7:64:ea: de:71:71:8d:dd:d1:c9:4d:8b:c6:e4:05:b9:85:73: 6d:f5:36:e6:8e:f6:a8:9b:ac:9d:0e:b0:83:f9:4a: eb:e2:f0:2a:40:de:cc:be:80:bf:66:ab:f8:ef:0d: f2:2e:dd:09:1c:ea:9d:d4:0e:69:0c:bc:06:e0:42: ad:6d:ae:e9:7e:10:47:8e:e3:c6:32:4f:59:2b:de: 2d:77:2d:bb:88:1c:8b:91:46:80:94:72:49:95:65: a1:8d:af:c2:d1:e5:f0:5a:58:55:72:12:35:0f:51: 6c:dc:fe:5e:a4:69:4c:56:79:7d:1e:ca:e0:30:de: 50:7d:5b:5b:e2:b4:80:8c:6b:ee:59:d2:2b:de:ba: 6d:b9:d6:84:c6:f0:20:2e:ef:aa:f8:db:ea:07:e0: 3d:56:a9:e9:9b:bf:d9:9c:00:d0:9c:9e:25:81:9e: 06:fe:8d:65:43:ad:29:53:0f:9e:a3:50:32:73:21: 0c:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:BA:76:F8:01:23:73:24:19:FE:24:57:56:B6:DE:DE:D3:E6:22:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/de2b1abf-f12c-38bb-90c9-83ffd6c3465d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.197.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:3b:09:be:e8:1d:40:34:41:8b:ec:99:fe:f6:65:ca:39:a9: 57:a5:1e:f3:e1:63:ce:d5:5b:6b:64:3c:c5:9a:88:53:de:72: ac:a4:df:95:53:f0:9c:ff:36:54:48:f0:21:76:e3:35:02:11: 17:19:60:d4:c7:8a:45:e8:76:ff:e9:c2:3a:2a:45:c9:70:9b: 10:d2:ec:35:2e:e5:ee:4b:c4:e5:2f:ab:5b:8b:a1:82:44:55: f6:b9:83:c6:5d:1e:8c:dc:cd:a4:55:1a:c2:f3:a2:26:f8:47: 10:8e:4c:5c:f1:99:90:6d:2a:87:19:77:04:3b:3a:c6:bb:63: c8:67:85:ab:d5:21:eb:ff:b0:08:da:69:89:fc:9e:f2:27:ce: 9c:7f:6b:b5:b8:f8:bd:4f:b4:ad:6a:a2:16:c9:95:3c:ee:e3: aa:48:d6:90:30:0f:cb:ac:87:45:31:72:32:f9:a5:8d:b8:9a: c4:48:84:ad:ef:43:f7:c4:9c:b1:ab:9f:bf:73:28:70:1f:22: 79:6d:36:e5:67:f9:2e:38:dd:fa:9d:33:a6:3a:8a:12:7a:2f: fb:b9:b1:87:e7:07:f4:e6:7f:ba:fd:af:1c:22:ea:53:0b:95: 2a:c1:39:3d:c1:fe:d2:65:78:92:57:f3:3e:da:40:42:df:18: 4d:99:38:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jg59KYvIv0gO7EnAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Mzk0NmQzYmMtODU3NC00M2U4LWI2ZWYtMTZhOGIxM2RmNTI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFOG0R/Td61GAljmGmcz3FzIQHWcJL6X/VtZ ZipLkhpVloPc0GrAWohma35DtLTdigztNiBkCOZ5MArviHIKWGBnAGxWUyq3ZOre cXGN3dHJTYvG5AW5hXNt9Tbmjvaom6ydDrCD+Urr4vAqQN7MvoC/Zqv47w3yLt0J HOqd1A5pDLwG4EKtba7pfhBHjuPGMk9ZK94tdy27iByLkUaAlHJJlWWhja/C0eXw WlhVchI1D1Fs3P5epGlMVnl9HsrgMN5QfVtb4rSAjGvuWdIr3rptudaExvAgLu+q +NvqB+A9Vqnpm7/ZnADQnJ4lgZ4G/o1lQ60pUw+eo1AycyEMBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGy6dvgBI3MkGf4kV1a23t7T5iLVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZGUyYjFhYmYtZjEyYy0z OGJiLTkwYzktODNmZmQ2YzM0NjVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8WfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI07Cb7oHUA0QYvsmf72Zco5qVelHvPhY87VW2tkPMWaiFPecqyk35VT 8Jz/NlRI8CF24zUCERcZYNTHikXodv/pwjoqRclwmxDS7DUu5e5LxOUvq1uLoYJE Vfa5g8ZdHozczaRVGsLzoib4RxCOTFzxmZBtKocZdwQ7Osa7Y8hnhavVIev/sAja aYn8nvInzpx/a7W4+L1PtK1qohbJlTzu46pI1pAwD8ush0UxcjL5pY24msRIhK3v Q/fEnLGrn79zKHAfInltNuVn+S443fqdM6Y6ihJ6L/u5sYfnB/Tmf7r9rxwi6lML lSrBOT3B/tJleJJX8z7aQELfGE2ZOB4= -----END CERTIFICATE-----Generated at Sun Oct 4 17:52:14 2026 by rpki-client