$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bd2b18aa-d46b-3e03-96d3-5d3b8be4dca1.roa File: bd2b18aa-d46b-3e03-96d3-5d3b8be4dca1.roa (raw, json) Hash identifier: cAoPG6WfSaEkQ9rSAOzVEprRTfY4UaVWHYAoxNcSFhY= Subject key identifier: F6:C7:05:69:6B:0B:DE:B8:03:9C:38:AD:39:E3:D5:99:BD:A7:6E:FF Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584EA79DF82D9B458B2D4DA35DD8 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bd2b18aa-d46b-3e03-96d3-5d3b8be4dca1.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 7155 IP address blocks: 99.197.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9d:f8:2d:9b:45:8b:2d:4d:a3:5d:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=c534c735-9a05-4b8e-aa7d-5813b2510477 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:5f:c7:52:83:21:14:88:3b:0a:89:ba:f1:3f: 72:73:79:34:94:8f:b0:4d:76:62:c0:b6:c2:0d:64: c0:21:6a:53:b9:93:ce:8a:1f:77:b3:91:7f:52:fd: e0:c5:03:d5:55:8e:c5:a4:88:5a:2e:0a:5a:7d:e1: 32:0d:a0:ff:35:8b:44:a4:14:f4:a1:7b:8c:4c:1c: ed:a3:55:89:dc:18:6c:8e:bb:2e:aa:67:80:dd:20: 96:f0:94:09:ff:8d:aa:b1:4a:21:72:ac:c6:7d:29: 69:1d:4d:97:22:af:44:4a:66:37:0b:fe:5d:b3:a0: b5:d9:6e:85:8c:21:4f:9e:05:3d:62:af:2c:82:38: da:58:17:b9:fd:0e:12:4e:63:3d:50:06:a3:20:6a: df:18:26:ac:ec:33:8f:fd:21:c2:95:af:69:07:49: 92:f4:37:2e:2c:22:36:59:b0:00:e2:95:01:2f:a8: c1:9b:e8:ef:4f:e2:a4:c3:f8:39:e9:07:02:63:f6: 79:17:58:21:ee:99:e4:cf:bc:cd:60:37:0e:f6:0c: 67:43:c8:7f:58:9b:4b:69:bb:23:2a:2b:54:db:69: b7:76:7a:52:6d:35:ae:a1:56:c0:df:12:02:d8:31: 26:7f:0b:36:c3:78:b8:62:d2:13:27:07:9e:00:f8: 0f:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:C7:05:69:6B:0B:DE:B8:03:9C:38:AD:39:E3:D5:99:BD:A7:6E:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bd2b18aa-d46b-3e03-96d3-5d3b8be4dca1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.197.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:c5:5b:c4:08:48:ab:e2:5c:be:25:9a:c7:df:7b:ac:28:36: 02:ee:b6:5b:67:6b:b7:f7:b2:af:f5:6a:a0:7d:ca:7d:93:e5: 4d:0e:52:54:80:a1:ec:41:9d:9d:70:ff:89:e7:47:0b:52:f5: eb:0d:1c:3c:50:4d:cb:a9:9a:d5:53:b4:d8:92:7a:12:da:1d: db:06:8a:6d:e0:a6:bb:7d:13:70:0b:8f:23:04:d1:93:34:7e: da:d3:a6:23:5a:ef:ff:71:ca:d2:e1:0e:90:8f:b0:3b:39:ce: 81:d6:48:84:fe:b8:1f:28:70:01:00:65:bd:73:f7:1f:9b:da: 71:3a:52:73:3e:de:68:33:43:e3:73:85:53:ca:73:c0:66:25: 8b:fb:18:34:03:b4:e1:6b:2e:9f:b8:6b:ec:e7:6f:0d:8a:d5: 01:46:6c:de:e0:72:f5:52:49:67:a1:39:9d:9a:d4:26:30:6d: 13:81:61:38:18:6f:bc:0b:be:19:1f:d2:f7:48:5e:08:be:90: df:7a:33:a9:81:11:83:83:2e:8f:62:7a:0b:50:f9:68:92:fa: fd:4a:5b:f1:2c:49:2d:e7:07:26:96:1a:60:68:50:8c:86:77: 97:23:ca:f2:14:c9:8e:8d:8e:a4:9d:74:6f:25:a7:5d:9d:9c: 3e:1c:00:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnfgtm0WLLU2jXdgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YzUzNGM3MzUtOWEwNS00YjhlLWFhN2QtNTgxM2IyNTEwNDc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqV/HUoMhFIg7Com68T9yc3k0lI+wTXZiwLbC DWTAIWpTuZPOih93s5F/Uv3gxQPVVY7FpIhaLgpafeEyDaD/NYtEpBT0oXuMTBzt o1WJ3BhsjrsuqmeA3SCW8JQJ/42qsUohcqzGfSlpHU2XIq9ESmY3C/5ds6C12W6F jCFPngU9Yq8sgjjaWBe5/Q4STmM9UAajIGrfGCas7DOP/SHCla9pB0mS9DcuLCI2 WbAA4pUBL6jBm+jvT+Kkw/g56QcCY/Z5F1gh7pnkz7zNYDcO9gxnQ8h/WJtLabsj KitU22m3dnpSbTWuoVbA3xIC2DEmfws2w3i4YtITJweeAPgPBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPbHBWlrC964A5w4rTnj1Zm9p27/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYmQyYjE4YWEtZDQ2Yi0z ZTAzLTk2ZDMtNWQzYjhiZTRkY2ExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8XfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAETFW8QISKviXL4lmsffe6woNgLutltna7f3sq/1aqB9yn2T5U0OUlSA oexBnZ1w/4nnRwtS9esNHDxQTcupmtVTtNiSehLaHdsGim3gprt9E3ALjyME0ZM0 ftrTpiNa7/9xytLhDpCPsDs5zoHWSIT+uB8ocAEAZb1z9x+b2nE6UnM+3mgzQ+Nz hVPKc8BmJYv7GDQDtOFrLp+4a+znbw2K1QFGbN7gcvVSSWehOZ2a1CYwbROBYTgY b7wLvhkf0vdIXgi+kN96M6mBEYODLo9iegtQ+WiS+v1KW/EsSS3nByaWGmBoUIyG d5cjyvIUyY6NjqSddG8lp12dnD4cAMQ= -----END CERTIFICATE-----Generated at Thu Sep 10 10:53:05 2026 by rpki-client