$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/40e56bb5-7c62-38ce-950c-83934d1d3c1b.roa File: 40e56bb5-7c62-38ce-950c-83934d1d3c1b.roa (raw, json) Hash identifier: MGcLbAWlLaJvyipRiBsVXetoE/m8/quj3qMVFciPCFU= Subject key identifier: 91:C7:FC:1E:6D:49:1A:2B:E3:72:DC:65:DA:B1:B3:E0:74:D7:46:1E Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584EA79F91965DE2E65ECBFC7940 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/40e56bb5-7c62-38ce-950c-83934d1d3c1b.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 7155 IP address blocks: 99.197.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9f:91:96:5d:e2:e6:5e:cb:fc:79:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=42ae1878-d9a8-4c48-bc1d-7438528ff92c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:79:e1:0b:47:5d:04:e5:c2:8f:44:08:e2:b7: c3:a3:14:3f:77:b6:70:86:c7:22:2d:a9:b2:4c:07: 94:b4:84:78:21:a6:53:5e:27:a8:ff:6d:d7:9a:78: 3e:7d:0f:26:60:dc:f6:0f:78:ec:72:7a:7a:60:25: c7:69:30:2b:73:4c:b1:a3:d2:d1:89:63:e4:79:e2: 88:ce:56:b6:88:b4:aa:56:54:93:e6:34:8b:ec:39: 14:67:33:35:75:89:f3:23:f3:be:5e:12:75:a0:00: 1f:e6:76:a6:ef:53:7e:b6:2d:2c:cc:6c:ee:8b:69: 5b:d8:b4:b3:9f:91:c6:44:11:75:8a:d9:52:21:9d: 0b:74:c1:df:b1:14:1e:75:63:b1:c0:d9:05:93:e1: 6a:d1:0a:ce:fb:07:44:60:dc:c6:9c:f4:1f:8e:3f: 30:44:56:47:8e:ad:8c:fb:25:96:28:78:66:f4:5e: f3:8e:17:b5:18:77:87:86:91:46:11:b8:05:eb:1b: 60:08:77:c5:a6:3e:f9:82:8c:42:55:39:97:06:f3: 7f:08:ff:83:08:de:16:50:7a:2b:4b:30:dd:bb:b2: d2:85:05:10:3d:73:68:9c:85:ea:f1:22:ef:d9:12: e3:c6:ac:76:b5:f3:97:55:d8:9c:15:df:cd:d7:9e: df:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:C7:FC:1E:6D:49:1A:2B:E3:72:DC:65:DA:B1:B3:E0:74:D7:46:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/40e56bb5-7c62-38ce-950c-83934d1d3c1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.197.224.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:11:5e:82:60:ac:fc:c4:31:35:0a:01:ed:e6:bd:43:5b:5c: 6e:99:3a:d9:6c:5e:85:51:85:f5:89:ae:f3:99:06:f2:f0:9e: ef:2e:76:f6:ee:96:04:69:23:09:c4:9b:d9:a3:15:e0:1a:54: 48:66:e2:54:14:f5:e1:5e:b1:2c:9f:8d:f2:74:cc:4f:3c:60: ac:e8:e0:1a:7e:91:b1:db:0a:af:7d:80:08:ed:db:0c:bb:7a: a5:ce:41:8b:56:22:29:ff:57:a6:ac:ef:b8:52:85:81:fc:53: 8a:18:a3:2b:14:c7:dc:2f:cd:12:a8:16:5f:8a:25:b2:aa:71: 67:99:04:a5:5c:6c:7c:6a:5d:6d:aa:fc:c5:e4:85:a0:a6:29: b1:46:36:52:f7:fa:22:64:25:62:92:ce:b7:73:af:f9:a5:8c: 05:96:58:b7:2c:58:dc:54:ff:a4:e0:92:1b:6a:94:c7:f1:32: 81:23:7e:0d:90:f7:93:4f:10:1d:f5:da:53:2a:fd:a0:1a:9e: 2b:91:a0:52:3b:20:d3:4c:62:0a:5d:aa:e0:b6:cf:f1:b6:d3: 89:d5:b3:ad:84:2f:6e:27:67:9c:b7:f5:c7:c4:b7:da:b3:2b: 38:87:8b:f2:71:e8:99:97:2a:3d:0e:dd:61:8c:12:6c:c7:c4: 8f:88:31:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nn5GWXeLmXsv8eUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NDJhZTE4NzgtZDlhOC00YzQ4LWJjMWQtNzQzODUyOGZmOTJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0XnhC0ddBOXCj0QI4rfDoxQ/d7ZwhsciLamy TAeUtIR4IaZTXieo/23Xmng+fQ8mYNz2D3jscnp6YCXHaTArc0yxo9LRiWPkeeKI zla2iLSqVlST5jSL7DkUZzM1dYnzI/O+XhJ1oAAf5nam71N+ti0szGzui2lb2LSz n5HGRBF1itlSIZ0LdMHfsRQedWOxwNkFk+Fq0QrO+wdEYNzGnPQfjj8wRFZHjq2M +yWWKHhm9F7zjhe1GHeHhpFGEbgF6xtgCHfFpj75goxCVTmXBvN/CP+DCN4WUHor SzDdu7LShQUQPXNonIXq8SLv2RLjxqx2tfOXVdicFd/N157fmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJHH/B5tSRor43LcZdqxs+B010YeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNDBlNTZiYjUtN2M2Mi0z OGNlLTk1MGMtODM5MzRkMWQzYzFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8XgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJARXoJgrPzEMTUKAe3mvUNbXG6ZOtlsXoVRhfWJrvOZBvLwnu8udvbu lgRpIwnEm9mjFeAaVEhm4lQU9eFesSyfjfJ0zE88YKzo4Bp+kbHbCq99gAjt2wy7 eqXOQYtWIin/V6as77hShYH8U4oYoysUx9wvzRKoFl+KJbKqcWeZBKVcbHxqXW2q /MXkhaCmKbFGNlL3+iJkJWKSzrdzr/mljAWWWLcsWNxU/6TgkhtqlMfxMoEjfg2Q 95NPEB312lMq/aAaniuRoFI7INNMYgpdquC2z/G204nVs62EL24nZ5y39cfEt9qz KziHi/Jx6JmXKj0O3WGMEmzHxI+IMSE= -----END CERTIFICATE-----Generated at Thu Sep 10 14:53:07 2026 by rpki-client