$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d3f2aa8c-63ba-3ee4-b5d1-d7d2c08f145b.roa File: d3f2aa8c-63ba-3ee4-b5d1-d7d2c08f145b.roa (raw, json) Hash identifier: waWtr0yVnfUXjKxBZnjcQyhxOq9gyWHAIBIMSTCAe5o= Subject key identifier: 58:D3:39:CA:D3:62:4B:C7:C0:6D:97:68:61:D8:F9:73:73:CE:B8:00 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F498398BF4BF21C53CA88D460 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d3f2aa8c-63ba-3ee4-b5d1-d7d2c08f145b.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 99.197.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:83:98:bf:4b:f2:1c:53:ca:88:d4:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=ff3b7477-75c4-478c-9ffb-39d8f5ce17b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:25:9e:37:4e:bf:0f:47:31:02:e4:6d:e6:e0: 27:d8:4f:fd:5c:11:64:a9:45:48:b0:18:e7:16:ed: f1:f5:e9:d8:53:8b:40:e8:0c:24:0f:ae:a5:73:ef: e8:b0:b1:a6:b0:89:19:07:f4:05:b7:12:13:e9:e2: bc:bf:2b:82:11:d7:dd:94:a1:ee:e9:71:3c:52:6d: b7:37:38:eb:36:1a:0e:a0:2c:49:f1:bd:9b:d3:c8: 9f:f9:fb:8c:b3:fd:da:48:cc:51:13:84:84:a2:0e: 4d:fe:5e:30:b0:6e:10:a2:ae:59:be:7b:11:70:c2: 71:4e:8a:0c:18:ec:cf:31:19:d3:a9:be:8d:1a:bf: c0:26:bf:ef:a2:2f:9a:73:d3:c0:1b:31:52:e2:8f: bd:fd:67:8a:a1:a9:65:6f:fc:1d:11:ca:e1:16:01: 91:f2:cf:97:70:15:2a:03:d1:9c:06:9f:b4:01:c2: 3c:1d:e9:c2:7d:79:30:0b:f3:06:e4:8e:8b:01:52: 9b:8a:6d:73:9a:b2:df:9a:23:07:85:8a:57:14:71: 19:7f:20:0d:c6:49:b6:49:fd:d9:96:0f:03:18:ec: eb:c4:3f:4b:97:d3:12:da:43:2e:17:a9:80:66:ac: 1a:38:b9:7e:cf:0a:19:7b:6d:e2:b6:4b:0c:67:49: 29:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:D3:39:CA:D3:62:4B:C7:C0:6D:97:68:61:D8:F9:73:73:CE:B8:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d3f2aa8c-63ba-3ee4-b5d1-d7d2c08f145b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.197.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:8b:b9:61:61:71:90:ac:50:1d:dc:f8:58:ec:49:5d:3f:38: 92:bc:ca:22:01:9a:f1:9c:ac:c9:9c:95:d8:44:3f:c5:fc:c1: 9e:88:22:ee:a5:6e:5f:05:81:db:68:0c:f6:d8:fe:e8:41:48: 85:39:5a:90:77:2e:f2:8b:e9:1f:9a:e0:cb:66:12:34:07:9a: 2d:d5:75:0b:32:5c:c0:9b:c4:95:11:87:8b:36:4e:68:13:26: 1f:12:84:9f:2c:7d:10:ed:6c:3c:80:84:38:f3:45:a0:44:ff: 6c:34:58:0c:9a:b3:35:27:57:6d:f4:54:19:0f:05:63:8b:bf: 64:76:9f:98:e4:56:3e:1d:3a:6c:50:29:e7:a0:c1:e4:94:9d: 83:30:d4:d1:d1:1f:f0:d9:c4:fb:bc:06:ec:02:fe:e2:22:c5: 77:4b:ac:27:4e:fb:db:11:05:89:66:a0:e7:1f:89:81:0e:07: ae:87:99:55:45:ee:a5:49:e9:6a:ad:72:67:5d:ef:79:bd:07: a7:c7:b2:ea:0f:f4:50:e7:cd:3a:80:0b:47:98:93:c5:83:85: a6:6c:fa:ea:cd:cb:28:3a:a3:a1:53:51:41:49:83:bd:4d:f3: f9:db:00:e0:65:62:f8:43:6a:8d:cb:87:a4:df:ee:f5:3b:a4: ac:25:04:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jg5i/S/IcU8qI1GAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZmYzYjc0NzctNzVjNC00NzhjLTlmZmItMzlkOGY1Y2UxN2I0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4CWeN06/D0cxAuRt5uAn2E/9XBFkqUVIsBjn Fu3x9enYU4tA6AwkD66lc+/osLGmsIkZB/QFtxIT6eK8vyuCEdfdlKHu6XE8Um23 NzjrNhoOoCxJ8b2b08if+fuMs/3aSMxRE4SEog5N/l4wsG4Qoq5ZvnsRcMJxTooM GOzPMRnTqb6NGr/AJr/voi+ac9PAGzFS4o+9/WeKoallb/wdEcrhFgGR8s+XcBUq A9GcBp+0AcI8HenCfXkwC/MG5I6LAVKbim1zmrLfmiMHhYpXFHEZfyANxkm2Sf3Z lg8DGOzrxD9Ll9MS2kMuF6mAZqwaOLl+zwoZe23itksMZ0kpAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFjTOcrTYkvHwG2XaGHY+XNzzrgAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZDNmMmFhOGMtNjNiYS0z ZWU0LWI1ZDEtZDdkMmMwOGYxNDViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8VfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALSLuWFhcZCsUB3c+FjsSV0/OJK8yiIBmvGcrMmcldhEP8X8wZ6IIu6l bl8FgdtoDPbY/uhBSIU5WpB3LvKL6R+a4MtmEjQHmi3VdQsyXMCbxJURh4s2TmgT Jh8ShJ8sfRDtbDyAhDjzRaBE/2w0WAyaszUnV230VBkPBWOLv2R2n5jkVj4dOmxQ KeegweSUnYMw1NHRH/DZxPu8BuwC/uIixXdLrCdO+9sRBYlmoOcfiYEOB66HmVVF 7qVJ6Wqtcmdd73m9B6fHsuoP9FDnzTqAC0eYk8WDhaZs+urNyyg6o6FTUUFJg71N 8/nbAOBlYvhDao3Lh6Tf7vU7pKwlBEw= -----END CERTIFICATE-----Generated at Tue Oct 27 22:37:58 2026 by rpki-client