$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f3f6289c-f0cc-33ad-aa09-f64dbe53d039.roa File: f3f6289c-f0cc-33ad-aa09-f64dbe53d039.roa (raw, json) Hash identifier: DCcXcw/H40kByGMQATj8/hRbJ4P0GLog2pgkTLASHZI= Subject key identifier: 57:A3:F8:86:2D:C6:C5:30:40:8C:29:67:0F:07:6E:5D:CC:A0:7D:DF Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E09D831176596D30E577C0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f3f6289c-f0cc-33ad-aa09-f64dbe53d039.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 99.197.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:9d:83:11:76:59:6d:30:e5:77:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=0080643a-4e6d-45e6-bd93-bf2e8b34faf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:e8:f9:96:78:35:5f:19:be:a5:8f:6a:b9:ca: 72:5c:9e:86:08:90:98:7a:78:bf:3c:47:09:d2:6a: c0:ab:06:37:05:ed:f6:0c:72:86:ba:4c:45:4e:3c: 8b:da:72:e3:61:1e:2e:d7:dc:12:98:7a:61:20:18: 15:c7:fd:d6:a3:e9:e8:7b:15:21:3a:45:38:6a:e1: 1c:45:a8:79:6c:17:91:39:ea:b9:66:dc:4e:e7:47: 3e:90:85:34:1a:b3:da:c7:3a:01:a8:32:62:d2:d6: 12:4e:5e:d5:ab:28:da:10:a2:47:a5:31:e6:c8:fb: 7d:95:77:d8:37:12:dd:db:ed:a1:7e:cd:65:7f:75: be:86:b1:dd:02:a1:43:0a:c3:70:86:3c:02:77:41: cd:a8:90:e9:0f:9b:1e:a3:1f:8f:29:68:08:a0:d1: a4:8a:ae:01:44:cd:e3:10:3a:dc:64:1b:f1:ea:b0: 2b:2a:bf:43:70:f6:5a:59:01:7d:9c:a3:3d:b1:c5: 40:ff:6a:21:e9:95:63:81:10:65:34:c1:d7:d8:ba: ce:ff:71:80:08:48:ac:96:d1:ea:2b:82:62:54:b3: ca:57:de:ad:94:ce:29:8f:4a:2a:4a:54:ed:93:5d: 6f:6a:01:bf:b5:94:55:93:6d:b4:af:1e:c6:34:a9: 0c:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:A3:F8:86:2D:C6:C5:30:40:8C:29:67:0F:07:6E:5D:CC:A0:7D:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f3f6289c-f0cc-33ad-aa09-f64dbe53d039.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.197.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d3:60:55:0b:12:4f:01:17:45:df:97:0a:a2:ea:18:a7:e5:96: 8f:7b:15:4a:2f:5b:4a:ea:83:f1:b4:22:9d:db:bf:a5:9a:45: ea:67:a6:73:5d:a1:89:5a:0e:7a:5f:15:20:61:33:3c:46:52: 9f:b9:3b:47:d0:54:e7:5b:0b:42:e3:1e:ca:bc:bb:b8:c2:d8: af:cd:d9:dc:f1:04:50:5f:b9:12:da:b9:26:cf:49:0c:c3:01: 11:e0:fb:e6:41:20:79:b2:dc:6a:b3:37:1f:4c:7c:08:2f:3a: 86:bf:d4:b5:86:e9:4e:09:36:29:b7:1e:de:f8:cc:b9:79:4c: 0b:4d:8b:73:b5:92:1f:47:d7:8c:76:b0:93:20:1d:43:cc:4b: 47:ba:e5:53:dd:c7:82:92:24:47:69:dd:73:d3:e4:9a:15:17: 79:bb:23:0c:54:ca:7c:ce:d2:ea:8b:8e:33:24:b3:b6:1b:04: 69:63:a8:ef:e8:b4:76:7e:14:18:48:9f:36:58:de:84:f6:86: 47:7f:16:bc:e5:57:4f:65:f8:9f:d1:9c:bb:36:b3:df:d8:55: c5:f0:51:96:ff:66:cd:f2:20:7a:be:90:85:6c:63:9f:77:73: 95:3f:ce:74:62:bd:e9:4a:a5:7d:6e:c8:a8:5f:f3:6b:51:55: 8e:22:39:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4J2DEXZZbTDld8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MDA4MDY0M2EtNGU2ZC00NWU2LWJkOTMtYmYyZThiMzRmYWYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhej5lng1Xxm+pY9qucpyXJ6GCJCYeni/PEcJ 0mrAqwY3Be32DHKGukxFTjyL2nLjYR4u19wSmHphIBgVx/3Wo+noexUhOkU4auEc Rah5bBeROeq5ZtxO50c+kIU0GrPaxzoBqDJi0tYSTl7VqyjaEKJHpTHmyPt9lXfY NxLd2+2hfs1lf3W+hrHdAqFDCsNwhjwCd0HNqJDpD5seox+PKWgIoNGkiq4BRM3j EDrcZBvx6rArKr9DcPZaWQF9nKM9scVA/2oh6ZVjgRBlNMHX2LrO/3GACEisltHq K4JiVLPKV96tlM4pj0oqSlTtk11vagG/tZRVk220rx7GNKkMVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFej+IYtxsUwQIwpZw8Hbl3MoH3fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZjNmNjI4OWMtZjBjYy0z M2FkLWFhMDktZjY0ZGJlNTNkMDM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8W9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANNgVQsSTwEXRd+XCqLqGKfllo97FUovW0rqg/G0Ip3bv6WaRepnpnNd oYlaDnpfFSBhMzxGUp+5O0fQVOdbC0LjHsq8u7jC2K/N2dzxBFBfuRLauSbPSQzD ARHg++ZBIHmy3GqzNx9MfAgvOoa/1LWG6U4JNim3Ht74zLl5TAtNi3O1kh9H14x2 sJMgHUPMS0e65VPdx4KSJEdp3XPT5JoVF3m7IwxUynzO0uqLjjMks7YbBGljqO/o tHZ+FBhInzZY3oT2hkd/FrzlV09l+J/RnLs2s9/YVcXwUZb/Zs3yIHq+kIVsY593 c5U/znRivelKpX1uyKhf82tRVY4iOSg= -----END CERTIFICATE-----Generated at Fri Mar 13 05:53:30 2026 by rpki-client