$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dfa25c33-69e8-3003-ba71-4a13f38a6d47.roa File: dfa25c33-69e8-3003-ba71-4a13f38a6d47.roa (raw, json) Hash identifier: oc8LC0Nv1PGkly2A5pNwZkuJ02bS8XPst1eDs2vAXNM= Subject key identifier: 49:60:9C:8D:70:C5:49:2D:FE:A0:7B:65:F3:E3:78:DE:4F:B3:5F:42 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F497B6EC028B309BCB0D23C18 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dfa25c33-69e8-3003-ba71-4a13f38a6d47.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 99.197.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7b:6e:c0:28:b3:09:bc:b0:d2:3c:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=7e51e22d-f34a-42a2-8dbd-ea1781f948a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:62:30:86:6e:c7:59:8d:d0:d0:2f:8b:da:32: e9:d0:0a:82:b8:43:15:b3:9e:bc:23:29:8b:6b:db: e9:a6:2e:4b:46:11:27:ae:7f:18:bd:76:25:56:aa: aa:d3:98:4a:21:f8:1d:08:14:32:cd:8d:bf:1d:f7: 1d:c3:17:b2:eb:6e:df:6d:bd:b3:3e:7f:73:e7:d1: ef:fa:fb:04:59:c9:dc:49:d4:aa:d5:f0:3f:40:62: 3d:e8:6b:8a:b8:a0:7a:12:dd:90:99:12:52:f9:67: 0a:b8:a4:e2:db:0a:6a:01:40:e4:80:7f:00:ac:17: b2:bf:2c:08:bd:00:c9:2c:29:6b:5b:74:b4:08:a8: 1d:8d:63:04:b2:7f:e6:89:d8:08:0b:b7:97:84:c9: 8e:3e:5e:e5:53:1f:93:0b:e0:68:8b:b0:6f:f4:55: 5e:05:95:df:ee:64:8f:35:99:22:d0:50:db:4e:d1: 82:bf:e7:7b:d3:ed:39:e0:67:ae:fb:20:9d:9a:a8: 4f:42:77:e4:66:36:18:77:5e:1f:6a:65:51:db:f8: eb:f0:2b:dd:a1:62:de:15:15:1e:53:18:d0:26:9a: 92:58:74:09:e4:c0:b0:89:f4:40:6b:42:d1:98:3a: 59:17:ee:53:4e:78:01:11:6f:c3:3a:dd:3b:38:c5: ad:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:60:9C:8D:70:C5:49:2D:FE:A0:7B:65:F3:E3:78:DE:4F:B3:5F:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dfa25c33-69e8-3003-ba71-4a13f38a6d47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.197.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:3b:e6:38:5b:c1:9f:3b:65:55:01:37:0f:f1:05:3f:06:83: 40:ad:0a:3e:b9:0d:9e:6f:f0:e4:7d:dc:de:d4:11:cc:fe:ce: f9:51:78:58:64:a3:30:17:33:9c:46:18:68:10:24:93:13:56: f6:ca:3d:2d:3c:90:7c:e6:6b:05:a1:eb:7e:b9:46:58:e5:f9: 1c:94:43:2f:8a:5a:93:0e:9b:69:43:2b:1f:65:89:25:d6:94: 7b:60:3d:a5:1b:7c:8a:f3:1c:6f:70:64:d2:1c:6d:b9:6b:aa: 3c:87:e4:83:95:34:9d:92:45:c5:ec:a8:8d:dc:86:4a:cc:3a: db:a2:09:4f:58:3f:8e:da:c5:54:a2:fa:e7:0a:4d:7d:f6:8c: 52:6f:cc:88:71:fe:9b:17:f1:cd:70:de:6a:f4:e0:1c:a0:bd: 15:e0:e7:a7:b7:b4:c0:fe:fe:ff:c1:6c:b7:ae:e7:84:e6:e3: d9:14:43:52:d6:cc:f1:99:bd:d7:f0:20:db:76:9c:96:54:22: f8:32:3e:62:16:31:de:69:cf:30:98:5c:e2:89:16:1b:be:db: 92:34:13:81:3b:8c:88:db:b1:41:70:31:27:59:56:35:f7:a9: 71:ef:62:1f:58:d2:45:ba:87:9b:ab:13:2e:b1:cd:89:92:f9: 9c:40:d6:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Je27AKLMJvLDSPBgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk N2U1MWUyMmQtZjM0YS00MmEyLThkYmQtZWExNzgxZjk0OGExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWIwhm7HWY3Q0C+L2jLp0AqCuEMVs568IymL a9vppi5LRhEnrn8YvXYlVqqq05hKIfgdCBQyzY2/Hfcdwxey627fbb2zPn9z59Hv +vsEWcncSdSq1fA/QGI96GuKuKB6Et2QmRJS+WcKuKTi2wpqAUDkgH8ArBeyvywI vQDJLClrW3S0CKgdjWMEsn/midgIC7eXhMmOPl7lUx+TC+Boi7Bv9FVeBZXf7mSP NZki0FDbTtGCv+d70+054Geu+yCdmqhPQnfkZjYYd14famVR2/jr8CvdoWLeFRUe UxjQJpqSWHQJ5MCwifRAa0LRmDpZF+5TTngBEW/DOt07OMWtlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFElgnI1wxUkt/qB7ZfPjeN5Ps19CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZGZhMjVjMzMtNjllOC0z MDAzLWJhNzEtNGExM2YzOGE2ZDQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8VwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABE75jhbwZ87ZVUBNw/xBT8Gg0CtCj65DZ5v8OR93N7UEcz+zvlReFhk ozAXM5xGGGgQJJMTVvbKPS08kHzmawWh6365Rljl+RyUQy+KWpMOm2lDKx9liSXW lHtgPaUbfIrzHG9wZNIcbblrqjyH5IOVNJ2SRcXsqI3chkrMOtuiCU9YP47axVSi +ucKTX32jFJvzIhx/psX8c1w3mr04BygvRXg56e3tMD+/v/BbLeu54Tm49kUQ1LW zPGZvdfwINt2nJZUIvgyPmIWMd5pzzCYXOKJFhu+25I0E4E7jIjbsUFwMSdZVjX3 qXHvYh9Y0kW6h5urEy6xzYmS+ZxA1oc= -----END CERTIFICATE-----Generated at Sat Sep 26 09:32:09 2026 by rpki-client