$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ef394d57-0687-370d-912e-e8e79f3741c9.roa File: ef394d57-0687-370d-912e-e8e79f3741c9.roa (raw, json) Hash identifier: hTE+mXXalo7m3wWphj8QwWixyrFygSCtF82URJU+JrI= Subject key identifier: FD:6F:A5:4C:64:D0:4A:7A:9F:38:D2:28:DD:21:1C:E3:90:63:D3:80 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F497B790190F4A87BD4710560 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ef394d57-0687-370d-912e-e8e79f3741c9.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 99.198.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7b:79:01:90:f4:a8:7b:d4:71:05:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=90faaadf-4211-4564-8e47-637452091bab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:46:73:a0:01:1d:40:44:87:47:0e:d5:9a:3f: ac:22:10:f1:09:72:1a:8b:78:2c:20:84:ca:7c:eb: ec:13:19:6c:ce:66:5a:4a:43:e5:74:90:3d:54:59: d0:90:f1:07:34:76:c0:35:04:22:e9:4a:ce:34:6b: e6:28:1c:5b:e7:62:1d:f0:dd:5c:1f:76:87:6a:2b: 84:bd:35:f6:05:00:f0:7a:df:ea:c6:1b:33:ac:8a: dc:ef:4a:a8:06:e2:b7:4a:f1:82:27:08:04:e1:d1: d9:10:f9:a0:df:51:7d:84:7f:cc:f3:be:c6:a6:6f: 9e:56:80:ac:57:88:70:06:0d:ba:15:09:fb:fe:28: 65:c0:81:d3:a9:fb:b3:44:c9:36:9d:ad:4a:79:66: d9:0e:99:33:0f:e2:42:71:34:cf:82:31:c6:80:11: d6:01:92:2d:97:aa:0d:0e:9c:4b:62:0b:67:d1:21: 06:a0:b8:45:ca:97:ce:9f:87:9a:e0:21:91:cb:75: 2c:52:84:34:f0:e2:98:cc:25:7b:92:df:e1:03:a5: d2:a9:5d:c1:00:36:53:84:a5:5a:9d:69:9a:fe:7d: 23:9b:aa:81:82:ad:12:0b:4f:ff:6f:25:88:10:81: 9b:06:93:e2:f0:8a:df:aa:ce:78:7f:e4:49:b9:6d: 59:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:6F:A5:4C:64:D0:4A:7A:9F:38:D2:28:DD:21:1C:E3:90:63:D3:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ef394d57-0687-370d-912e-e8e79f3741c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.198.30.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:de:0c:f7:ef:73:d2:a7:24:e7:39:ba:64:b1:e3:bc:0f:27: 4f:41:e7:c2:80:7a:d3:79:b0:0a:f8:47:52:88:58:f7:be:e4: 7a:a7:36:6d:01:2c:71:0f:73:ca:be:2c:18:62:f7:bc:be:a1: b8:9d:bd:e8:ed:89:4e:64:75:1a:39:b1:a8:1e:78:f3:bc:15: 88:b9:60:91:22:7f:c4:ea:1b:56:74:ce:4b:dd:cf:8e:1f:11: 25:8a:cc:6e:70:a8:98:03:12:83:c2:0c:b0:36:ce:4f:f9:ab: 6e:10:02:97:04:bf:75:63:f8:8e:d3:31:19:db:fb:9e:93:62: 2b:ba:e9:ff:5c:ee:b0:78:ef:40:33:5b:9c:f1:61:bb:17:33: 67:c3:79:0b:48:50:81:b2:c1:c1:90:51:fc:80:99:6e:68:05: b1:ac:bf:17:37:dc:3e:4b:76:bd:33:5f:fa:fd:22:f5:ab:6f: ac:cb:27:42:0a:e7:a0:78:41:1f:53:b4:bd:e7:04:97:05:68: a1:7c:5e:6d:39:5b:63:41:b6:84:63:cf:e1:e9:42:65:42:ea: 1e:f7:17:87:94:fb:e9:2b:cf:ed:dd:f2:62:2e:c1:5d:b7:a9: e6:03:d1:a5:06:53:28:4b:74:38:1e:fe:a4:24:f5:07:c0:1c: 7e:cc:f2:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Je3kBkPSoe9RxBWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OTBmYWFhZGYtNDIxMS00NTY0LThlNDctNjM3NDUyMDkxYmFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0EZzoAEdQESHRw7Vmj+sIhDxCXIai3gsIITK fOvsExlszmZaSkPldJA9VFnQkPEHNHbANQQi6UrONGvmKBxb52Id8N1cH3aHaiuE vTX2BQDwet/qxhszrIrc70qoBuK3SvGCJwgE4dHZEPmg31F9hH/M877Gpm+eVoCs V4hwBg26FQn7/ihlwIHTqfuzRMk2na1KeWbZDpkzD+JCcTTPgjHGgBHWAZItl6oN DpxLYgtn0SEGoLhFypfOn4ea4CGRy3UsUoQ08OKYzCV7kt/hA6XSqV3BADZThKVa nWma/n0jm6qBgq0SC0//byWIEIGbBpPi8Irfqs54f+RJuW1ZLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP1vpUxk0Ep6nzjSKN0hHOOQY9OAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZWYzOTRkNTctMDY4Ny0z NzBkLTkxMmUtZThlNzlmMzc0MWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8YeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC/eDPfvc9KnJOc5umSx47wPJ09B58KAetN5sAr4R1KIWPe+5HqnNm0B LHEPc8q+LBhi97y+obidvejtiU5kdRo5sageePO8FYi5YJEif8TqG1Z0zkvdz44f ESWKzG5wqJgDEoPCDLA2zk/5q24QApcEv3Vj+I7TMRnb+56TYiu66f9c7rB470Az W5zxYbsXM2fDeQtIUIGywcGQUfyAmW5oBbGsvxc33D5Ldr0zX/r9IvWrb6zLJ0IK 56B4QR9TtL3nBJcFaKF8Xm05W2NBtoRjz+HpQmVC6h73F4eU++krz+3d8mIuwV23 qeYD0aUGUyhLdDge/qQk9QfAHH7M8l4= -----END CERTIFICATE-----Generated at Wed Oct 28 16:35:46 2026 by rpki-client