$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cf51676e-908e-3239-8c39-d639532ade54.roa File: cf51676e-908e-3239-8c39-d639532ade54.roa (raw, json) Hash identifier: aoknSu7CzwP1RShppGd8QMtmr1+ra3Pdokkq+/6k/KM= Subject key identifier: 71:9B:40:66:D3:7C:2F:83:5B:0E:D0:AB:CD:7D:A8:9B:48:76:EE:3F Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584EA79F99389E87C317235F8C0C Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cf51676e-908e-3239-8c39-d639532ade54.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 7155 IP address blocks: 99.198.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9f:99:38:9e:87:c3:17:23:5f:8c:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=8017cda6-f856-4264-ab73-1d46c7cd8674 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:c8:a2:10:7c:44:a3:49:f6:01:7d:14:03:f2: 7c:c1:6c:99:6c:9e:74:55:86:7b:77:0b:25:bf:eb: 8f:fc:74:13:7e:31:da:f9:72:a0:24:32:83:65:51: d9:61:fa:22:fe:c9:75:02:bd:1b:7b:66:f6:23:fd: 38:8e:ec:25:e7:43:66:9d:a3:2c:52:d1:b0:a2:67: de:a7:1c:ad:b0:a9:28:5e:80:df:30:3c:e5:f7:c7: 8a:24:93:3e:2f:37:96:bb:23:df:d4:35:75:3d:fc: 5f:33:8e:36:b6:34:fa:af:1a:29:aa:b3:3c:a3:c8: f7:7c:3e:49:28:53:a1:fe:c5:2e:e6:44:ea:35:12: 6b:38:60:58:88:2d:04:23:f2:a1:60:57:4a:7b:45: ab:38:ff:e7:2f:f8:0f:46:3d:9c:14:f7:d5:2f:0d: 73:5e:47:d5:13:4f:2c:d9:ea:c2:74:ae:8f:54:82: d3:f4:36:95:87:3f:70:84:8e:bc:60:ae:a4:ad:db: 18:2c:b3:96:7f:be:1d:65:4c:e2:0c:f8:ca:5f:97: 59:83:12:2f:1e:86:8f:8f:de:93:3b:04:e9:d5:81: 9d:27:98:17:84:06:ae:04:87:f7:cf:3b:be:12:ef: 71:5b:05:42:68:4d:37:79:ad:89:7f:d2:e0:6c:3e: d3:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:9B:40:66:D3:7C:2F:83:5B:0E:D0:AB:CD:7D:A8:9B:48:76:EE:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cf51676e-908e-3239-8c39-d639532ade54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.198.39.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:ff:e5:57:20:bd:1e:95:9c:c4:1f:69:41:d2:dc:f8:17:df: 72:7e:cd:61:ff:7f:14:57:87:d2:b0:ce:a5:a7:9b:28:4d:d4: e5:5b:fa:0e:bd:e0:ce:e0:2a:30:2e:65:76:46:a0:15:fe:dc: f6:c8:2e:50:6b:cd:6d:b2:da:37:23:2f:40:3d:0a:49:ad:6c: e3:0a:fc:cc:29:1f:f0:7d:cd:1d:45:44:f4:e0:2c:f1:af:ac: f2:0f:e0:e1:eb:01:c1:18:d8:62:1c:c5:47:40:ae:db:52:a9: ed:0e:6a:fa:07:1a:56:d5:c3:ba:cd:ed:c7:86:d3:99:5d:3f: ef:7c:c6:c7:74:ed:6a:df:54:b0:17:43:18:32:b7:f6:73:bd: fc:15:85:4c:52:66:8a:d5:a4:23:c7:90:41:05:3d:09:08:a8: d9:19:9b:de:77:36:a6:8d:73:4c:12:1e:17:ac:af:37:c4:97: 1c:f4:d0:ca:c6:45:12:59:45:8c:8d:74:fe:46:8d:73:3e:e4: 58:50:0f:d0:27:9b:4a:c5:49:cc:0e:90:03:22:49:73:8c:86: 84:1b:8c:ec:7a:6f:e0:53:b1:9d:84:9c:49:60:4a:db:e8:f7: a0:2a:6e:63:c5:ea:23:ce:d6:cd:fb:94:4b:78:2a:5c:32:34: 95:e8:10:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nn5k4nofDFyNfjAwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ODAxN2NkYTYtZjg1Ni00MjY0LWFiNzMtMWQ0NmM3Y2Q4Njc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ciiEHxEo0n2AX0UA/J8wWyZbJ50VYZ7dwsl v+uP/HQTfjHa+XKgJDKDZVHZYfoi/sl1Ar0be2b2I/04juwl50NmnaMsUtGwomfe pxytsKkoXoDfMDzl98eKJJM+LzeWuyPf1DV1PfxfM442tjT6rxopqrM8o8j3fD5J KFOh/sUu5kTqNRJrOGBYiC0EI/KhYFdKe0WrOP/nL/gPRj2cFPfVLw1zXkfVE08s 2erCdK6PVILT9DaVhz9whI68YK6krdsYLLOWf74dZUziDPjKX5dZgxIvHoaPj96T OwTp1YGdJ5gXhAauBIf3zzu+Eu9xWwVCaE03ea2Jf9LgbD7TewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHGbQGbTfC+DWw7Qq819qJtIdu4/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvY2Y1MTY3NmUtOTA4ZS0z MjM5LThjMzktZDYzOTUzMmFkZTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8YnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC3/5VcgvR6VnMQfaUHS3PgX33J+zWH/fxRXh9KwzqWnmyhN1OVb+g69 4M7gKjAuZXZGoBX+3PbILlBrzW2y2jcjL0A9CkmtbOMK/MwpH/B9zR1FRPTgLPGv rPIP4OHrAcEY2GIcxUdArttSqe0OavoHGlbVw7rN7ceG05ldP+98xsd07WrfVLAX Qxgyt/ZzvfwVhUxSZorVpCPHkEEFPQkIqNkZm953NqaNc0wSHhesrzfElxz00MrG RRJZRYyNdP5GjXM+5FhQD9Anm0rFScwOkAMiSXOMhoQbjOx6b+BTsZ2EnElgStvo 96AqbmPF6iPO1s37lEt4KlwyNJXoENk= -----END CERTIFICATE-----Generated at Thu Sep 10 14:53:01 2026 by rpki-client