$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0531c40d-6627-3df7-aa03-1912e1e99642.roa File: 0531c40d-6627-3df7-aa03-1912e1e99642.roa (raw, json) Hash identifier: ZtWRawxs5iHiK28mScxH0iOdwojg6ZGCuzCb7ZyIUrE= Subject key identifier: D1:1B:C7:FE:6E:28:31:2F:0D:ED:D7:F4:EE:AB:EA:C8:63:33:C5:E7 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584EA79F9A91F52D303855C32C40 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0531c40d-6627-3df7-aa03-1912e1e99642.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 7155 IP address blocks: 99.198.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9f:9a:91:f5:2d:30:38:55:c3:2c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=23acbc71-9e6a-4fa3-86d6-44e2ce67c8b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:3f:c3:4a:15:06:2d:6c:f9:c6:db:d4:58:af: b9:e4:f7:d6:c5:fe:c4:6c:6c:09:03:79:69:1a:6f: 1f:d2:42:9d:86:d2:76:dc:ba:69:59:55:1f:82:4e: 5c:b9:99:da:1b:53:e6:b7:fc:d9:20:af:46:bb:04: 88:ae:33:d0:a0:30:36:2d:1b:b0:97:be:22:20:9b: 34:09:97:f6:30:9c:2c:95:bd:79:3f:b7:73:0e:16: ff:1a:eb:8b:9c:95:97:93:1d:7c:3d:22:e0:bd:f4: 16:7b:73:7e:7a:af:9e:7b:77:4c:89:db:c0:67:6b: 96:47:a5:70:00:59:29:e6:c6:be:a9:7f:6b:21:53: f1:ad:0e:55:f5:3a:21:7d:f8:a5:c4:de:1e:3b:9e: 88:26:70:66:89:02:4c:e7:8f:43:c5:78:a4:ac:17: fb:09:d1:3f:c8:bc:21:7d:55:e3:85:24:10:29:99: c8:07:52:e0:2b:81:27:56:96:79:c6:6c:d2:e1:a5: 5d:b4:c7:ba:f7:27:2f:9c:8a:fa:7c:ca:03:0b:f8: 40:06:95:de:d7:ee:26:cc:35:e3:ea:9a:d5:06:97: 9e:01:03:cb:74:ae:a4:65:5f:21:74:38:c9:43:95: 33:05:b1:59:85:d2:55:79:ae:f6:c7:80:9e:cf:53: ac:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:1B:C7:FE:6E:28:31:2F:0D:ED:D7:F4:EE:AB:EA:C8:63:33:C5:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0531c40d-6627-3df7-aa03-1912e1e99642.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.198.62.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:e3:d2:3b:e3:3f:4b:d5:0c:f9:86:47:5b:52:3f:a7:c4:7e: 5d:37:56:3b:0a:a6:28:56:0d:8d:a6:28:15:31:76:2b:b1:b3: 0d:34:1d:ad:e0:cc:92:c5:61:25:33:7d:ed:43:7f:cb:cf:56: 0b:c0:82:e2:59:dd:9e:76:04:b2:9e:13:9d:d0:75:ba:21:c7: 20:8f:f7:b3:76:62:87:d0:51:ca:91:8e:9b:1e:f9:25:3b:8a: c6:45:79:b7:dd:25:66:82:76:a8:85:f8:ce:3e:51:f4:fa:b1: 02:8a:c5:46:f0:6b:7f:ac:0b:84:86:51:36:ab:a5:1e:1b:a2: 34:2d:4c:c7:18:6f:44:66:25:0d:d7:95:b3:54:4a:80:c1:ef: ee:4f:6e:ff:61:1b:ce:d1:1b:10:e9:a2:c8:59:f5:6d:be:80: 9c:5c:58:41:82:4e:9d:ef:fb:04:56:c8:eb:e0:f7:cf:fc:35: d7:3e:b6:e5:97:f6:e7:fb:5e:3f:f0:55:18:c4:fb:15:48:79: b0:5f:27:e7:db:ff:d2:ed:84:a2:ab:e2:3a:84:49:f1:21:89: 6f:6f:08:4c:97:18:bf:d1:d0:0f:30:bb:3f:cf:65:c8:2d:72: 5f:04:6c:5f:8e:c5:81:1c:29:df:4c:44:17:9c:96:69:ff:95: e2:26:1c:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nn5qR9S0wOFXDLEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MjNhY2JjNzEtOWU2YS00ZmEzLTg2ZDYtNDRlMmNlNjdjOGI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5T/DShUGLWz5xtvUWK+55PfWxf7EbGwJA3lp Gm8f0kKdhtJ23LppWVUfgk5cuZnaG1Pmt/zZIK9GuwSIrjPQoDA2LRuwl74iIJs0 CZf2MJwslb15P7dzDhb/GuuLnJWXkx18PSLgvfQWe3N+eq+ee3dMidvAZ2uWR6Vw AFkp5sa+qX9rIVPxrQ5V9TohffilxN4eO56IJnBmiQJM549DxXikrBf7CdE/yLwh fVXjhSQQKZnIB1LgK4EnVpZ5xmzS4aVdtMe69ycvnIr6fMoDC/hABpXe1+4mzDXj 6prVBpeeAQPLdK6kZV8hdDjJQ5UzBbFZhdJVea72x4Cez1OsCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNEbx/5uKDEvDe3X9O6r6shjM8XnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMDUzMWM0MGQtNjYyNy0z ZGY3LWFhMDMtMTkxMmUxZTk5NjQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8Y+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD3j0jvjP0vVDPmGR1tSP6fEfl03VjsKpihWDY2mKBUxdiuxsw00Ha3g zJLFYSUzfe1Df8vPVgvAguJZ3Z52BLKeE53QdbohxyCP97N2YofQUcqRjpse+SU7 isZFebfdJWaCdqiF+M4+UfT6sQKKxUbwa3+sC4SGUTarpR4bojQtTMcYb0RmJQ3X lbNUSoDB7+5Pbv9hG87RGxDposhZ9W2+gJxcWEGCTp3v+wRWyOvg98/8Ndc+tuWX 9uf7Xj/wVRjE+xVIebBfJ+fb/9LthKKr4jqESfEhiW9vCEyXGL/R0A8wuz/PZcgt cl8EbF+OxYEcKd9MRBeclmn/leImHIg= -----END CERTIFICATE-----Generated at Thu Sep 10 11:34:37 2026 by rpki-client