$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/40c62178-a332-376a-a2c2-eb2182bfc98b.roa File: 40c62178-a332-376a-a2c2-eb2182bfc98b.roa (raw, json) Hash identifier: mCFQowaRE+V2j1tbWmX5YkuRH4bme8gA7/W77TsOFJE= Subject key identifier: 77:0E:72:F5:C8:2E:2C:A6:07:78:F0:51:F3:57:72:3C:C0:44:C2:3E Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F4983A364799A8BC525127E00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/40c62178-a332-376a-a2c2-eb2182bfc98b.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 99.197.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 30 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:83:a3:64:79:9a:8b:c5:25:12:7e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=1f7cfe85-dc62-48a7-8ef8-f6e65156b1a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a4:06:34:6a:eb:bb:db:81:68:e7:43:bd:92: 19:2e:40:7b:17:31:b5:64:1b:73:ae:2d:f4:0b:e2: fd:8f:4f:70:6a:a8:c7:f1:cc:b0:78:a3:a2:75:45: c6:51:7a:44:a2:3f:b8:41:1c:93:a5:4f:51:16:00: 4b:fa:9e:99:04:d0:8f:17:7e:f6:4f:11:52:8d:87: 72:09:8e:2b:6f:ea:5d:5b:98:98:f3:61:c6:c8:9a: 47:33:4d:8c:29:1e:61:10:8d:1e:21:d9:8e:4b:a8: 86:bb:a0:03:1a:5e:a9:19:85:23:4e:f5:fe:df:82: 36:33:59:2a:6c:6a:33:1d:c0:e2:23:0d:99:70:9e: f1:0a:39:47:50:aa:c8:e5:52:43:ef:50:f1:22:95: b6:2c:ac:25:9a:4a:1f:55:6e:ec:1b:00:79:e5:11: 8c:d5:5a:cd:61:44:7f:de:1a:d9:b7:b6:15:02:e5: 18:03:92:e4:19:23:7e:bd:67:d8:d3:3a:fd:e7:f4: 30:37:ee:89:05:7d:14:ec:9c:0f:4d:95:1d:8f:ca: 34:6d:7a:17:0f:b8:e2:b7:58:a2:52:b2:ea:03:ca: 0d:72:90:0c:8a:01:6f:25:e9:72:8f:fa:ed:6d:ba: c5:7e:6b:13:7e:9e:90:6d:26:4d:b6:20:65:55:40: a5:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:0E:72:F5:C8:2E:2C:A6:07:78:F0:51:F3:57:72:3C:C0:44:C2:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/40c62178-a332-376a-a2c2-eb2182bfc98b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.197.205.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:21:b6:24:33:56:48:da:19:34:04:f8:b8:34:b0:66:c5:14: c9:b3:a3:a3:42:68:aa:3f:12:0b:5c:f2:2d:1b:07:92:90:2c: fd:da:b5:ed:87:af:f1:a5:7e:f0:d0:37:68:62:a2:c9:4b:63: 40:3f:7a:f5:1a:ee:fc:12:bf:f6:77:80:99:51:a4:49:f3:c1: 94:9d:c8:5a:0d:e3:91:cb:33:48:69:e8:3f:8b:ca:e3:60:1a: df:1f:66:e1:34:c3:00:a1:8a:52:85:22:12:d6:43:37:92:90: df:25:65:05:dd:ec:00:0f:a5:62:c6:3d:ba:84:94:83:83:59: c9:9d:af:ba:81:47:17:e9:2c:1a:50:4f:42:d8:17:60:8d:0c: 06:a6:db:fb:43:b7:d5:a5:ec:b8:e3:1d:b5:2c:d1:47:40:c5: 9d:17:d1:7c:db:87:2b:b5:96:c4:7a:31:5b:e0:38:75:6b:7f: 0f:cf:51:11:9e:ed:b7:25:12:b5:d0:70:3f:9f:7e:d4:0b:52: 51:28:84:66:fb:70:23:5a:cb:a0:1a:6e:a2:a1:d1:7a:24:55: 87:aa:ad:dc:e7:75:58:3b:bd:df:08:c0:69:3b:34:64:24:1d: 59:1e:28:f3:76:82:d6:d8:ad:ec:ce:cf:1e:67:87:94:96:8d: 41:f4:67:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jg6NkeZqLxSUSfgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MWY3Y2ZlODUtZGM2Mi00OGE3LThlZjgtZjZlNjUxNTZiMWE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKQGNGrru9uBaOdDvZIZLkB7FzG1ZBtzri30 C+L9j09waqjH8cyweKOidUXGUXpEoj+4QRyTpU9RFgBL+p6ZBNCPF372TxFSjYdy CY4rb+pdW5iY82HGyJpHM02MKR5hEI0eIdmOS6iGu6ADGl6pGYUjTvX+34I2M1kq bGozHcDiIw2ZcJ7xCjlHUKrI5VJD71DxIpW2LKwlmkofVW7sGwB55RGM1VrNYUR/ 3hrZt7YVAuUYA5LkGSN+vWfY0zr95/QwN+6JBX0U7JwPTZUdj8o0bXoXD7jit1ii UrLqA8oNcpAMigFvJelyj/rtbbrFfmsTfp6QbSZNtiBlVUCl0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHcOcvXILiymB3jwUfNXcjzARMI+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNDBjNjIxNzgtYTMzMi0z NzZhLWEyYzItZWIyMTgyYmZjOThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8XNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA0htiQzVkjaGTQE+Lg0sGbFFMmzo6NCaKo/Egtc8i0bB5KQLP3ate2H r/GlfvDQN2hioslLY0A/evUa7vwSv/Z3gJlRpEnzwZSdyFoN45HLM0hp6D+LyuNg Gt8fZuE0wwChilKFIhLWQzeSkN8lZQXd7AAPpWLGPbqElIODWcmdr7qBRxfpLBpQ T0LYF2CNDAam2/tDt9Wl7LjjHbUs0UdAxZ0X0Xzbhyu1lsR6MVvgOHVrfw/PURGe 7bclErXQcD+fftQLUlEohGb7cCNay6AabqKh0XokVYeqrdzndVg7vd8IwGk7NGQk HVkeKPN2gtbYrezOzx5nh5SWjUH0Z1c= -----END CERTIFICATE-----Generated at Wed Oct 28 22:17:24 2026 by rpki-client