$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f028fc9b-c652-335e-8b55-92f8a3ba1fed.roa File: f028fc9b-c652-335e-8b55-92f8a3ba1fed.roa (raw, json) Hash identifier: PWu4qbdlaRBC+QHR/Tk4jI4RgLNAftKLmhcYpfzw1hA= Subject key identifier: 37:C8:EF:7A:4B:92:52:B7:03:D3:85:89:1D:64:8F:0E:A0:D1:5C:A0 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E0A07BA89CA60B5B21B500 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f028fc9b-c652-335e-8b55-92f8a3ba1fed.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 99.198.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:a0:7b:a8:9c:a6:0b:5b:21:b5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=dfc7b025-4a04-4b41-9669-42f3e7c101f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:35:dc:a6:e4:c2:f6:2e:36:43:f1:27:80:8c: a3:f5:f7:f5:90:1d:bf:62:8a:5f:c6:14:fa:72:88: e0:60:b9:67:5c:26:ff:ac:77:b9:f7:4d:25:6c:ba: 36:29:fb:6d:37:d0:a0:bf:bb:eb:ba:15:a1:6d:a3: e6:be:86:9f:58:3a:12:f0:1c:c6:aa:24:08:41:48: 50:73:af:43:1f:40:0c:14:cb:86:13:2f:bb:b2:4e: f2:d9:b8:e3:31:c4:cc:d1:b9:ca:b4:6b:5e:b1:7c: ca:14:50:b3:c6:c4:38:b7:80:b3:a7:fd:c5:af:c9: 4b:ec:a6:4e:e3:64:40:ae:8a:68:62:98:cc:32:ee: 5b:85:0b:3a:c8:67:5a:8b:06:e9:02:06:da:75:84: 79:c3:c1:85:61:20:79:72:76:40:b0:0c:c2:9c:64: e7:2e:2a:3f:6e:2b:67:9c:71:cc:76:20:b2:44:0c: 9f:9e:b0:c2:34:e2:39:c1:12:2c:14:60:a7:ef:7b: b7:73:03:f1:a3:e3:51:eb:2f:67:79:7d:4a:d7:f8: f8:30:9c:66:19:38:18:d6:56:c4:12:95:38:3e:13: 77:ef:f9:4a:ac:a2:94:b0:ea:3b:83:0d:71:c1:4c: 10:e1:e1:8e:d9:bf:e3:b8:07:d0:64:5d:b1:9b:8d: 13:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:C8:EF:7A:4B:92:52:B7:03:D3:85:89:1D:64:8F:0E:A0:D1:5C:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f028fc9b-c652-335e-8b55-92f8a3ba1fed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.198.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d4:40:fc:61:f7:a5:51:51:0d:9d:a5:40:f5:7b:e6:66:71:e2: 33:63:4c:3d:4b:77:d7:d7:53:0d:59:6d:a6:db:96:ec:16:33: a6:45:89:cb:fa:7e:4d:ef:88:7c:6e:7a:a2:5e:98:91:56:25: 40:f4:01:70:6b:1e:b0:d9:54:fb:da:9b:ec:b8:d9:f4:3c:26: da:b7:56:00:13:29:ce:d4:6e:b3:1a:67:32:cf:fe:36:a5:4f: 1d:7a:30:e8:fd:f5:1d:27:b5:91:88:9a:52:12:87:9d:32:c5: 89:23:ff:f2:e9:78:31:4a:be:8d:94:d7:5a:06:54:51:af:bc: ee:48:ce:2e:49:20:d1:06:37:30:63:87:25:7a:96:74:8c:0b: 65:53:7a:3b:d8:94:b8:70:5d:e5:24:03:b2:55:f6:94:7f:20: a1:a4:37:02:99:cb:26:f5:dc:22:80:d6:3f:d6:96:cf:ad:69: b4:37:40:f4:22:e9:c5:85:da:a6:17:26:2f:5c:1e:9c:c1:02: 24:dc:30:15:07:8b:de:0e:8d:3b:66:43:c4:a9:cb:13:1d:10: a0:46:59:5d:44:bf:84:7e:3d:48:00:ac:c3:76:6e:fb:2c:d9: 37:21:80:6b:e6:d2:4e:8e:6f:51:13:7f:a9:ad:d8:9e:21:bc: 11:32:aa:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4KB7qJymC1shtQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ZGZjN2IwMjUtNGEwNC00YjQxLTk2NjktNDJmM2U3YzEwMWY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizXcpuTC9i42Q/EngIyj9ff1kB2/YopfxhT6 cojgYLlnXCb/rHe5900lbLo2KfttN9Cgv7vruhWhbaPmvoafWDoS8BzGqiQIQUhQ c69DH0AMFMuGEy+7sk7y2bjjMcTM0bnKtGtesXzKFFCzxsQ4t4Czp/3Fr8lL7KZO 42RAropoYpjMMu5bhQs6yGdaiwbpAgbadYR5w8GFYSB5cnZAsAzCnGTnLio/bitn nHHMdiCyRAyfnrDCNOI5wRIsFGCn73u3cwPxo+NR6y9neX1K1/j4MJxmGTgY1lbE EpU4PhN37/lKrKKUsOo7gw1xwUwQ4eGO2b/juAfQZF2xm40TtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDfI73pLklK3A9OFiR1kjw6g0VygMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZjAyOGZjOWItYzY1Mi0z MzVlLThiNTUtOTJmOGEzYmExZmVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8YLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANRA/GH3pVFRDZ2lQPV75mZx4jNjTD1Ld9fXUw1ZbabbluwWM6ZFicv6 fk3viHxueqJemJFWJUD0AXBrHrDZVPvam+y42fQ8Jtq3VgATKc7UbrMaZzLP/jal Tx16MOj99R0ntZGImlISh50yxYkj//LpeDFKvo2U11oGVFGvvO5Izi5JINEGNzBj hyV6lnSMC2VTejvYlLhwXeUkA7JV9pR/IKGkNwKZyyb13CKA1j/Wls+tabQ3QPQi 6cWF2qYXJi9cHpzBAiTcMBUHi94OjTtmQ8SpyxMdEKBGWV1Ev4R+PUgArMN2bvss 2TchgGvm0k6Ob1ETf6mt2J4hvBEyqlQ= -----END CERTIFICATE-----Generated at Thu Mar 26 13:42:20 2026 by rpki-client