$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5259a987-3bc1-32de-9074-94d80fbae32a.roa File: 5259a987-3bc1-32de-9074-94d80fbae32a.roa (raw, json) Hash identifier: VgszQ7B8Ul9yFwhe9o9ZxiAJd+ChbXWbIkVdJnnl3Kw= Subject key identifier: F0:29:37:30:C7:E0:CD:97:86:B9:E4:CA:49:02:B7:3E:28:48:96:EC Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584EA79DFBAED032DD4F9A275F00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5259a987-3bc1-32de-9074-94d80fbae32a.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 7155 IP address blocks: 99.198.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9d:fb:ae:d0:32:dd:4f:9a:27:5f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=8789b945-e42a-413c-81ff-2cf9ecf085a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:7b:eb:4f:a2:e4:5f:4e:45:86:c6:a6:76:11: 22:c5:5f:1d:69:eb:05:94:a6:77:8d:31:dc:0f:86: ca:34:ce:28:3e:12:79:fa:e0:5a:a7:c8:10:ef:cc: 58:40:f2:0f:c4:e7:77:49:2d:c7:80:80:df:72:57: d7:7f:2c:11:2b:7e:2f:c7:ab:5e:95:00:e7:f8:9e: 29:b8:ea:7a:78:85:d7:2c:b5:bb:93:b5:75:47:bf: 3a:4e:62:2d:3a:5d:71:65:f8:17:76:b4:e5:40:bd: ef:90:4d:38:38:1f:05:43:34:15:5d:74:9d:6d:7b: 5e:c6:a2:a7:5c:1b:f9:53:97:46:d8:96:47:8e:f4: dd:af:ae:f6:11:7b:a0:8e:05:a3:2c:7b:8c:dc:79: 7d:c7:64:50:f7:92:89:73:c0:80:40:12:c1:f2:68: 14:e3:63:c1:9c:c5:f1:aa:80:8b:ef:a0:1f:90:43: f1:80:1a:cd:d1:9d:9a:0c:8c:78:91:4b:94:15:aa: 95:0d:e7:52:43:71:b4:c7:a3:ac:4a:ea:1d:74:7a: fd:3d:1c:5b:c5:25:cf:bf:82:c5:f4:2e:d1:23:d0: 2c:86:97:2e:ba:90:96:1b:07:83:77:da:15:13:43: 68:35:72:f1:32:e6:27:49:5c:8e:e5:72:0e:3a:fe: dc:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:29:37:30:C7:E0:CD:97:86:B9:E4:CA:49:02:B7:3E:28:48:96:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5259a987-3bc1-32de-9074-94d80fbae32a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.198.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:76:8d:d8:98:2c:d1:76:c3:6e:52:a3:de:fc:ea:8a:40:9a: bb:54:3f:d9:0d:83:69:11:77:49:7d:30:07:1d:24:e5:1c:cb: 4f:17:2a:97:10:76:5c:f7:63:5e:83:b5:be:ff:ec:1f:37:a5: ee:48:9a:b7:28:a5:87:86:1f:01:05:2e:90:1c:00:c5:54:7f: 97:13:1c:95:3a:9f:5c:46:3b:cc:c8:1b:97:a5:cf:3c:bf:18: 54:f1:e4:7c:2c:96:7e:17:a9:00:f9:37:c2:07:93:e9:82:ab: 43:98:e2:a1:39:91:97:b8:bc:01:97:bf:30:f0:87:70:85:fe: 38:54:e2:a6:59:fc:2f:b4:ba:8a:01:1b:89:45:d8:3a:c5:3f: 67:54:ea:fd:c4:40:c4:5e:09:c3:41:05:80:22:f5:bf:3b:e3: eb:70:7a:9c:7c:95:92:91:0b:1f:10:4a:e6:e8:bd:9c:92:76: e7:7c:3e:91:34:15:09:98:a5:18:5c:a2:85:9d:dd:64:04:e8: 7a:f6:db:8a:83:8d:e6:b0:e3:e2:4d:b7:3a:c1:4c:fe:d6:d7: 16:23:0d:ac:0a:29:e7:3c:45:7a:08:65:e7:6a:58:97:2e:3a: b5:96:a0:7a:7a:79:df:1b:96:c2:a5:74:9f:7a:85:9b:6a:88: db:5f:d9:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnfuu0DLdT5onXwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ODc4OWI5NDUtZTQyYS00MTNjLTgxZmYtMmNmOWVjZjA4NWE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnvrT6LkX05FhsamdhEixV8daesFlKZ3jTHc D4bKNM4oPhJ5+uBap8gQ78xYQPIPxOd3SS3HgIDfclfXfywRK34vx6telQDn+J4p uOp6eIXXLLW7k7V1R786TmItOl1xZfgXdrTlQL3vkE04OB8FQzQVXXSdbXtexqKn XBv5U5dG2JZHjvTdr672EXugjgWjLHuM3Hl9x2RQ95KJc8CAQBLB8mgU42PBnMXx qoCL76AfkEPxgBrN0Z2aDIx4kUuUFaqVDedSQ3G0x6OsSuoddHr9PRxbxSXPv4LF 9C7RI9AshpcuupCWGweDd9oVE0NoNXLxMuYnSVyO5XIOOv7c0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPApNzDH4M2XhrnkykkCtz4oSJbsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNTI1OWE5ODctM2JjMS0z MmRlLTkwNzQtOTRkODBmYmFlMzJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8YVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALV2jdiYLNF2w25So9786opAmrtUP9kNg2kRd0l9MAcdJOUcy08XKpcQ dlz3Y16Dtb7/7B83pe5ImrcopYeGHwEFLpAcAMVUf5cTHJU6n1xGO8zIG5elzzy/ GFTx5Hwsln4XqQD5N8IHk+mCq0OY4qE5kZe4vAGXvzDwh3CF/jhU4qZZ/C+0uooB G4lF2DrFP2dU6v3EQMReCcNBBYAi9b874+twepx8lZKRCx8QSubovZySdud8PpE0 FQmYpRhcooWd3WQE6Hr224qDjeaw4+JNtzrBTP7W1xYjDawKKec8RXoIZedqWJcu OrWWoHp6ed8blsKldJ96hZtqiNtf2XE= -----END CERTIFICATE-----Generated at Thu Sep 10 17:44:46 2026 by rpki-client