$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/785099d3-c1d1-383e-be2a-70aaccc93a19.roa File: 785099d3-c1d1-383e-be2a-70aaccc93a19.roa (raw, json) Hash identifier: 6/y5lcJqaFDxrBrKZS6iwfvfs3573sXIHetEqFiOyhI= Subject key identifier: 37:17:62:02:19:1D:4F:7E:8C:63:5A:95:44:CC:42:BC:D0:84:28:03 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584EA79F8F5256AA7CAF27CF5D00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/785099d3-c1d1-383e-be2a-70aaccc93a19.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 7155 IP address blocks: 99.197.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9f:8f:52:56:aa:7c:af:27:cf:5d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=d22b125a-9842-4880-bbe2-08c0d7d7d44c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:a0:6a:a8:c8:b0:9b:f9:3f:ea:cb:9c:0a:ab: 2b:25:c8:b5:76:b9:12:86:30:91:c7:21:34:51:6e: be:3f:4a:f8:cf:0b:65:35:9a:72:74:52:25:b1:a2: 88:ee:95:8b:44:61:b7:4e:32:f2:38:c8:8e:18:f4: 34:48:aa:4f:be:ff:58:82:ac:a5:ea:a1:59:d6:81: 76:43:a5:ed:51:61:cf:22:ff:7a:5a:46:ce:63:aa: aa:87:59:ba:f5:b9:c3:c5:ca:4a:da:4f:bc:f8:90: ec:57:45:3c:64:34:a9:c5:77:03:19:2f:13:35:d4: fe:36:b6:26:c8:98:7c:a0:85:ed:93:75:41:cb:6b: 66:11:75:dc:4a:c9:f4:9f:57:54:f4:64:b6:1a:29: fa:35:64:4e:68:76:66:88:c8:01:4b:78:55:05:24: a5:15:80:3c:0c:d6:95:7b:74:90:b3:08:56:16:d1: 35:68:90:ab:f7:e4:bb:72:08:b3:9b:1b:21:c5:eb: 96:66:a1:48:86:4d:4f:e3:5f:03:ed:5c:e0:a0:ed: fc:cd:47:a6:e0:b2:09:b4:14:2f:98:92:7c:be:c6: 45:5e:75:07:e5:a1:0a:c2:0c:a5:2d:b8:3b:d8:32: 1c:dc:44:42:2c:52:af:39:26:cd:bf:4e:77:9b:b9: ea:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:17:62:02:19:1D:4F:7E:8C:63:5A:95:44:CC:42:BC:D0:84:28:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/785099d3-c1d1-383e-be2a-70aaccc93a19.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.197.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:5e:38:17:b7:05:bd:50:24:77:35:c2:99:89:27:f3:2a:f8: ad:2b:08:ab:4e:4f:9a:ab:6d:ad:0c:8f:53:67:eb:c5:32:c1: 50:6e:ee:2e:7c:ed:52:58:97:5e:77:af:8d:91:ed:23:62:b5: bb:6c:ee:25:1a:32:f9:3d:53:00:b4:c4:55:8c:50:b6:b7:96: 63:6d:2d:72:d8:56:bd:1a:1a:a0:75:0d:6c:2f:b6:39:e0:60: b4:0f:59:f1:c2:de:8e:4a:dd:9b:44:43:78:12:7b:ea:e3:a9: be:f3:73:ec:b9:2a:34:dd:eb:ed:36:a8:e9:4c:dd:ef:6b:e9: 55:0a:e2:68:ab:c0:ea:bc:d4:8b:9d:b0:d0:b5:e7:37:eb:4a: 66:9f:0f:7c:57:97:f8:d6:56:57:c3:ca:2f:f5:5d:35:30:a1: a0:b2:3d:72:ff:c3:57:82:b1:34:8a:16:73:1a:4b:62:ce:61: ea:11:9c:4f:ef:d7:62:2a:9e:45:45:93:e5:27:30:29:e0:2f: b9:fe:e3:f9:5a:fe:7d:b0:98:43:7c:df:39:a0:e2:6b:56:19: b1:9a:9d:10:c6:5c:cf:75:4d:50:a5:8d:86:01:6f:71:f7:7d: 9b:ec:6f:cc:2a:e8:80:fa:d1:22:4e:31:e0:c8:c7:ea:a3:b6: c8:2a:ae:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nn49SVqp8ryfPXQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZDIyYjEyNWEtOTg0Mi00ODgwLWJiZTItMDhjMGQ3ZDdkNDRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKBqqMiwm/k/6sucCqsrJci1drkShjCRxyE0 UW6+P0r4zwtlNZpydFIlsaKI7pWLRGG3TjLyOMiOGPQ0SKpPvv9Ygqyl6qFZ1oF2 Q6XtUWHPIv96WkbOY6qqh1m69bnDxcpK2k+8+JDsV0U8ZDSpxXcDGS8TNdT+NrYm yJh8oIXtk3VBy2tmEXXcSsn0n1dU9GS2Gin6NWROaHZmiMgBS3hVBSSlFYA8DNaV e3SQswhWFtE1aJCr9+S7cgizmxshxeuWZqFIhk1P418D7VzgoO38zUem4LIJtBQv mJJ8vsZFXnUH5aEKwgylLbg72DIc3ERCLFKvOSbNv053m7nq3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDcXYgIZHU9+jGNalUTMQrzQhCgDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNzg1MDk5ZDMtYzFkMS0z ODNlLWJlMmEtNzBhYWNjYzkzYTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8W/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHReOBe3Bb1QJHc1wpmJJ/Mq+K0rCKtOT5qrba0Mj1Nn68UywVBu7i58 7VJYl153r42R7SNitbts7iUaMvk9UwC0xFWMULa3lmNtLXLYVr0aGqB1DWwvtjng YLQPWfHC3o5K3ZtEQ3gSe+rjqb7zc+y5KjTd6+02qOlM3e9r6VUK4mirwOq81Iud sNC15zfrSmafD3xXl/jWVlfDyi/1XTUwoaCyPXL/w1eCsTSKFnMaS2LOYeoRnE/v 12IqnkVFk+UnMCngL7n+4/la/n2wmEN83zmg4mtWGbGanRDGXM91TVCljYYBb3H3 fZvsb8wq6ID60SJOMeDIx+qjtsgqrts= -----END CERTIFICATE-----Generated at Thu Sep 10 12:44:59 2026 by rpki-client