$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6dfcfc30-f66a-3988-87f6-750e9a15f01d.roa File: 6dfcfc30-f66a-3988-87f6-750e9a15f01d.roa (raw, json) Hash identifier: BQK+qUXQohKg2CptY7iDDGrk/Eh+YTDP/gI1wyrN4GE= Subject key identifier: F7:45:A0:8D:33:5B:1D:5F:49:1F:D2:6C:B5:58:1F:17:C5:44:9B:06 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584E059B883CAFDE2E367FA21F80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6dfcfc30-f66a-3988-87f6-750e9a15f01d.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 7155 IP address blocks: 99.196.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Jun 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9b:88:3c:af:de:2e:36:7f:a2:1f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=3d5b9ab9-ff7b-4d07-8f99-89e780776420 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:28:49:b8:fe:de:b6:88:50:d9:45:ab:e4:7a: c6:22:41:2c:5e:9b:c0:08:8c:38:fb:9b:99:e8:a8: 6f:48:58:a3:37:04:94:ef:a6:8d:7e:6d:5d:19:6f: a5:80:76:d0:9f:12:b8:6b:da:fb:57:d9:c5:9f:11: ea:a1:cc:0b:36:82:46:b6:9e:55:28:fd:11:2a:05: a1:a1:c8:f5:a7:1a:db:e2:7d:64:2a:4d:46:d7:ff: 8c:55:4b:ec:92:7d:df:6a:a8:a0:21:da:18:11:56: 3d:de:57:79:84:a8:a6:18:c0:ec:bb:4b:b1:1f:fb: f8:d4:87:81:3c:82:c0:50:64:25:a3:99:57:50:95: 89:f2:8c:87:dc:bd:83:34:01:8f:3f:b2:4f:a2:e5: 2f:2c:ba:b6:1b:f4:86:45:72:92:3a:cd:53:19:89: b2:61:29:f1:f7:89:dd:00:b6:1d:9f:2b:9a:51:0c: 9a:77:70:bd:a6:ea:5b:20:f2:4d:1b:ed:cf:de:55: 80:00:b8:2a:05:b4:65:e3:81:89:e7:f1:08:e1:71: c0:50:b9:47:2f:b1:32:34:ac:92:8f:64:71:c3:8c: 1d:39:3e:c1:9f:95:da:08:9b:72:0f:e1:d6:24:04: 92:bc:5d:e2:d8:a3:0a:78:b0:2a:d8:16:41:c0:e0: 90:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:45:A0:8D:33:5B:1D:5F:49:1F:D2:6C:B5:58:1F:17:C5:44:9B:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6dfcfc30-f66a-3988-87f6-750e9a15f01d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.196.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:48:69:a5:d3:5a:2b:76:0c:1a:1b:ef:0b:ad:41:70:56:74: 07:9f:58:14:64:37:a0:aa:bb:7c:96:80:9c:d7:0c:4e:56:57: a4:eb:cd:ef:e5:46:a7:e4:6a:e9:d8:df:bb:01:77:cc:c0:48: d0:3e:fc:a3:99:45:aa:70:35:a1:0e:6f:f3:b0:00:56:bc:18: da:b3:bb:b0:26:a6:dd:31:6a:32:2f:ca:66:74:58:00:92:1a: 9f:f2:65:46:e6:bf:62:a7:39:2e:e1:ee:0b:e1:1c:22:3a:ff: 56:50:3d:81:cb:99:c7:00:d9:4f:cc:76:17:64:a1:0a:91:f0: 22:2f:c8:77:70:3f:26:4a:e7:e4:c7:b2:6d:b6:6e:0a:ee:61: ce:39:c6:ea:39:38:a1:9d:53:a6:62:36:d0:a1:9f:34:1a:d5: 95:0e:b0:68:be:cb:cf:b0:fd:87:c1:fa:b9:f4:11:cf:13:10: 56:92:02:2c:cc:1f:6f:1b:85:12:dc:12:9d:da:7d:3b:f9:0c: 5c:33:29:db:d9:0b:c7:61:52:fc:2a:61:9c:aa:f3:b7:9e:79: 46:8d:4d:6e:7c:5f:a3:cc:b5:3d:64:d9:15:30:fb:66:1b:09: 27:bf:13:53:55:98:45:80:71:a2:f5:b7:55:42:9d:7b:18:ad: f6:71:85:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Fm4g8r94uNn+iH4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk M2Q1YjlhYjktZmY3Yi00ZDA3LThmOTktODllNzgwNzc2NDIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyhJuP7etohQ2UWr5HrGIkEsXpvACIw4+5uZ 6KhvSFijNwSU76aNfm1dGW+lgHbQnxK4a9r7V9nFnxHqocwLNoJGtp5VKP0RKgWh ocj1pxrb4n1kKk1G1/+MVUvskn3faqigIdoYEVY93ld5hKimGMDsu0uxH/v41IeB PILAUGQlo5lXUJWJ8oyH3L2DNAGPP7JPouUvLLq2G/SGRXKSOs1TGYmyYSnx94nd ALYdnyuaUQyad3C9pupbIPJNG+3P3lWAALgqBbRl44GJ5/EI4XHAULlHL7EyNKyS j2Rxw4wdOT7Bn5XaCJtyD+HWJASSvF3i2KMKeLAq2BZBwOCQ4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPdFoI0zWx1fSR/SbLVYHxfFRJsGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNmRmY2ZjMzAtZjY2YS0z OTg4LTg3ZjYtNzUwZTlhMTVmMDFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8TeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKZIaaXTWit2DBob7wutQXBWdAefWBRkN6Cqu3yWgJzXDE5WV6Trze/l RqfkaunY37sBd8zASNA+/KOZRapwNaEOb/OwAFa8GNqzu7Ampt0xajIvymZ0WACS Gp/yZUbmv2KnOS7h7gvhHCI6/1ZQPYHLmccA2U/MdhdkoQqR8CIvyHdwPyZK5+TH sm22bgruYc45xuo5OKGdU6ZiNtChnzQa1ZUOsGi+y8+w/YfB+rn0Ec8TEFaSAizM H28bhRLcEp3afTv5DFwzKdvZC8dhUvwqYZyq87eeeUaNTW58X6PMtT1k2RUw+2Yb CSe/E1NVmEWAcaL1t1VCnXsYrfZxhYE= -----END CERTIFICATE-----Generated at Thu Jun 11 21:27:21 2026 by rpki-client