$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/933d8bbb-69dc-3ccc-aee9-3fcde5168198.roa File: 933d8bbb-69dc-3ccc-aee9-3fcde5168198.roa (raw, json) Hash identifier: MPJ83mR1WLZ1HYIvUPJDhW7LBISpGx6bVYdlu8z0M9s= Subject key identifier: D5:14:C1:92:BA:D2:AD:1E:32:36:9F:A0:AE:52:F3:EE:20:11:D4:86 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584EA79DFD42A62D90D8DD3E7BB0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/933d8bbb-69dc-3ccc-aee9-3fcde5168198.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 7155 IP address blocks: 99.198.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9d:fd:42:a6:2d:90:d8:dd:3e:7b:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=b2d3ddcb-de9d-4291-88d8-c0fe94b82848 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:25:13:8b:bb:38:78:c5:d1:71:34:b2:bc:24: 4b:30:0f:ee:9e:aa:18:c0:3d:1e:03:fe:a4:11:3e: 18:ba:eb:b8:0d:e5:ea:1f:91:0f:35:c3:06:3b:0a: 0a:4f:e2:91:d3:5c:19:6a:e2:02:22:de:01:7a:8b: 58:d4:3f:95:16:1b:71:09:62:ee:fc:ba:92:0c:53: 9b:e6:66:b1:5e:37:44:8b:66:56:a5:a6:d4:d5:06: 6d:32:03:0a:4d:ef:19:98:23:c7:15:04:6e:de:3b: ac:37:75:18:a3:5f:d8:00:e6:52:f7:aa:5e:2b:68: f7:ca:be:24:a0:19:d2:ed:d0:2c:5b:5b:f0:2e:8e: 6f:de:36:63:4c:56:59:89:d7:90:77:39:54:27:e6: 42:13:92:89:3e:bf:3d:9f:df:31:2b:20:2f:f3:5e: bc:c3:9e:56:06:5e:ee:00:62:71:a1:8c:ec:41:01: 73:40:97:a0:10:97:d7:1f:6f:99:74:dd:a4:19:84: 6f:f7:c4:38:67:33:d0:fb:c2:a7:d2:54:c1:a7:77: 43:ef:50:a2:8c:af:38:9e:23:7f:4b:b4:70:be:d5: c1:82:14:9e:3f:f0:c9:77:c1:a1:0f:73:a2:cb:5d: 0b:c8:09:fb:fd:2c:ce:8d:41:3f:5b:64:d7:58:1b: 21:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:14:C1:92:BA:D2:AD:1E:32:36:9F:A0:AE:52:F3:EE:20:11:D4:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/933d8bbb-69dc-3ccc-aee9-3fcde5168198.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.198.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:37:c8:1f:06:96:bf:29:51:15:5c:77:18:69:b8:d2:4d:3d: 02:b7:16:43:4d:a8:c2:a9:55:cf:82:3b:5f:ff:d8:50:20:9c: b5:f4:f4:55:fa:fa:4b:bf:a7:77:c5:94:19:bb:e9:66:4c:f8: 1e:4e:ef:db:62:1e:95:cc:bf:c4:10:ea:d2:24:b0:b2:ed:fd: 6e:c5:2d:44:b7:da:d1:66:4d:09:f0:03:f7:5b:23:0e:0c:e7: 7a:51:a1:95:8f:92:49:7f:ed:ba:bb:67:9a:87:a9:55:cb:86: fb:68:ed:50:c6:d4:cb:45:58:a2:c0:60:45:cb:8c:88:fe:65: 36:a8:0c:b6:50:a7:60:0e:7f:76:d3:76:40:5e:ed:71:51:24: b3:df:33:df:6a:31:48:b1:ad:c5:ae:77:aa:7e:3c:c8:39:fc: 95:d2:d1:92:76:34:9d:f2:e7:17:7d:7d:94:47:f3:f4:85:96: 4d:39:6e:99:df:18:08:04:a8:42:3b:b4:d7:17:3a:19:63:ff: d3:81:bd:fb:57:d1:12:7e:1d:d4:0b:63:08:aa:18:17:2f:9a: bd:3f:28:0b:5a:e3:f3:26:a1:e8:8f:28:b8:ef:a2:e3:a2:a4: fd:e8:74:d7:8a:42:cc:70:ec:aa:46:6e:ce:69:89:0f:f2:78: 6d:3e:39:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnf1Cpi2Q2N0+e7AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YjJkM2RkY2ItZGU5ZC00MjkxLTg4ZDgtYzBmZTk0YjgyODQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6CUTi7s4eMXRcTSyvCRLMA/unqoYwD0eA/6k ET4Yuuu4DeXqH5EPNcMGOwoKT+KR01wZauICIt4BeotY1D+VFhtxCWLu/LqSDFOb 5maxXjdEi2ZWpabU1QZtMgMKTe8ZmCPHFQRu3jusN3UYo1/YAOZS96peK2j3yr4k oBnS7dAsW1vwLo5v3jZjTFZZideQdzlUJ+ZCE5KJPr89n98xKyAv8168w55WBl7u AGJxoYzsQQFzQJegEJfXH2+ZdN2kGYRv98Q4ZzPQ+8Kn0lTBp3dD71CijK84niN/ S7RwvtXBghSeP/DJd8GhD3Oiy10LyAn7/SzOjUE/W2TXWBshJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNUUwZK60q0eMjafoK5S8+4gEdSGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOTMzZDhiYmItNjlkYy0z Y2NjLWFlZTktM2ZjZGU1MTY4MTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8YrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGE3yB8Glr8pURVcdxhpuNJNPQK3FkNNqMKpVc+CO1//2FAgnLX09FX6 +ku/p3fFlBm76WZM+B5O79tiHpXMv8QQ6tIksLLt/W7FLUS32tFmTQnwA/dbIw4M 53pRoZWPkkl/7bq7Z5qHqVXLhvto7VDG1MtFWKLAYEXLjIj+ZTaoDLZQp2AOf3bT dkBe7XFRJLPfM99qMUixrcWud6p+PMg5/JXS0ZJ2NJ3y5xd9fZRH8/SFlk05bpnf GAgEqEI7tNcXOhlj/9OBvftX0RJ+HdQLYwiqGBcvmr0/KAta4/MmoeiPKLjvouOi pP3odNeKQsxw7KpGbs5piQ/yeG0+OTg= -----END CERTIFICATE-----Generated at Thu Sep 10 15:37:14 2026 by rpki-client