$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/aaab4cf9-a704-3b55-a783-40328265eeef.roa File: aaab4cf9-a704-3b55-a783-40328265eeef.roa (raw, json) Hash identifier: A8cCr5Rkwd/+HGbDkXbLhR27tyN0vZwwTY7EEVL0JV8= Subject key identifier: 42:EE:05:75:2F:49:53:2C:9F:11:11:7C:88:6B:1C:9D:41:F3:85:75 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584EA79DE84AD0372D677AE72000 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/aaab4cf9-a704-3b55-a783-40328265eeef.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 7155 IP address blocks: 99.196.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9d:e8:4a:d0:37:2d:67:7a:e7:20:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=ebe5b79e-86e3-4bfe-9f6f-6c246811470e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:8a:fc:0e:57:f1:f6:72:be:ed:07:b7:76:74: a0:96:90:2c:46:89:73:1b:68:84:63:05:eb:cb:cc: a1:e8:3a:cf:8f:d6:df:6c:94:90:4f:8e:65:23:82: a3:d0:6b:1c:24:44:5b:a8:95:32:61:c9:af:40:d4: e8:06:ab:0b:10:70:72:b9:09:2e:93:9d:79:75:02: 82:87:e5:50:3e:45:45:c7:d3:ed:61:c8:f8:30:43: cd:41:9b:c0:08:4d:48:3c:a8:e5:e5:09:f3:73:63: 7c:a3:17:1f:c2:01:9a:2f:da:da:d5:24:39:80:94: cd:45:3c:bd:32:4d:a4:f9:39:9f:4c:8d:d1:d7:fd: 7c:b7:6c:e1:db:51:95:fa:44:00:c8:9a:ff:13:6d: cc:e4:57:1b:7e:ea:24:61:dc:18:7f:16:8a:6d:e9: fc:1f:f5:d1:f0:75:0a:82:44:41:59:c7:48:9e:ad: 99:46:e6:8b:03:8a:69:77:45:04:cc:30:d9:c2:69: f2:ad:86:24:8c:0d:93:ea:e8:ac:e5:19:4b:96:b6: 7d:5c:64:2c:90:1d:fd:23:bd:46:bf:a9:1c:18:d0: ea:79:b4:d5:66:98:15:57:ba:00:77:7c:44:d2:d1: 6d:01:15:06:c2:9e:a7:2f:54:7b:ea:f9:00:c4:33: b7:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:EE:05:75:2F:49:53:2C:9F:11:11:7C:88:6B:1C:9D:41:F3:85:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/aaab4cf9-a704-3b55-a783-40328265eeef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.196.215.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:db:13:b8:d9:7f:4a:83:73:1d:63:9b:ee:9b:a1:97:a4:d1: ed:ab:39:64:26:20:33:0f:e2:53:85:1d:d6:a0:7b:87:cd:8a: d8:e6:94:73:16:b7:91:a4:f6:56:23:d8:ac:70:6d:5b:bf:b6: a6:63:47:18:30:8e:31:e6:2c:81:1b:0c:35:71:bd:f0:73:a3: 6e:38:2d:f9:e3:48:9e:37:54:77:fa:73:a9:2d:b1:71:6d:8d: 7c:32:2b:8e:de:e0:a6:fc:29:9a:9d:30:bb:63:05:f0:7e:bb: 00:dd:9d:9a:c9:d5:42:7b:a8:53:2c:e8:e1:39:a4:3a:d5:35: db:ba:ff:a3:80:be:db:b7:55:a6:cd:33:17:98:6f:01:73:76: 3a:98:32:c6:3f:cc:1f:aa:d8:11:b5:02:d4:e3:35:b9:20:51: b2:e2:f1:8e:3e:66:3e:73:69:bd:d0:31:67:92:16:0e:f3:fc: f2:23:d6:9d:80:9d:24:8e:88:91:3d:1d:ff:80:0e:98:6f:01: f6:89:a9:3b:dc:f8:e9:df:c7:1d:22:02:eb:64:f6:19:a5:b2: d2:da:6d:00:fe:5f:ee:40:83:71:4c:85:49:db:46:9e:94:8e: b0:3a:f7:6a:ac:2b:9b:58:db:17:fc:6d:34:f4:90:08:d2:ad: ab:d3:9b:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnehK0DctZ3rnIAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZWJlNWI3OWUtODZlMy00YmZlLTlmNmYtNmMyNDY4MTE0NzBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIr8Dlfx9nK+7Qe3dnSglpAsRolzG2iEYwXr y8yh6DrPj9bfbJSQT45lI4Kj0GscJERbqJUyYcmvQNToBqsLEHByuQkuk515dQKC h+VQPkVFx9PtYcj4MEPNQZvACE1IPKjl5Qnzc2N8oxcfwgGaL9ra1SQ5gJTNRTy9 Mk2k+TmfTI3R1/18t2zh21GV+kQAyJr/E23M5FcbfuokYdwYfxaKben8H/XR8HUK gkRBWcdInq2ZRuaLA4ppd0UEzDDZwmnyrYYkjA2T6uis5RlLlrZ9XGQskB39I71G v6kcGNDqebTVZpgVV7oAd3xE0tFtARUGwp6nL1R76vkAxDO3fQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFELuBXUvSVMsnxERfIhrHJ1B84V1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYWFhYjRjZjktYTcwNC0z YjU1LWE3ODMtNDAzMjgyNjVlZWVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8TXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF3bE7jZf0qDcx1jm+6boZek0e2rOWQmIDMP4lOFHdage4fNitjmlHMW t5Gk9lYj2KxwbVu/tqZjRxgwjjHmLIEbDDVxvfBzo244LfnjSJ43VHf6c6ktsXFt jXwyK47e4Kb8KZqdMLtjBfB+uwDdnZrJ1UJ7qFMs6OE5pDrVNdu6/6OAvtu3VabN MxeYbwFzdjqYMsY/zB+q2BG1AtTjNbkgUbLi8Y4+Zj5zab3QMWeSFg7z/PIj1p2A nSSOiJE9Hf+ADphvAfaJqTvc+Onfxx0iAutk9hmlstLabQD+X+5Ag3FMhUnbRp6U jrA692qsK5tY2xf8bTT0kAjSravTmx0= -----END CERTIFICATE-----Generated at Thu Sep 10 13:23:16 2026 by rpki-client