$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f4afae56-3009-3741-963c-1aa30325339f.roa File: f4afae56-3009-3741-963c-1aa30325339f.roa (raw, json) Hash identifier: jY7Jrjj1ISm5iqSDMOfr6369XzVhZiGaKpMn9jIv48E= Subject key identifier: D3:55:77:7A:A0:C6:10:59:AB:D4:3E:B6:D7:DF:3A:29:2B:AD:81:AA Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E0971065DE1CD061EC8200 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f4afae56-3009-3741-963c-1aa30325339f.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 99.197.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:97:10:65:de:1c:d0:61:ec:82:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=b6dd765d-ef2e-4ed9-9299-1af9c33d6291 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:aa:97:c6:f8:99:cf:66:ec:ca:e4:d7:e0:4f: b0:5e:e3:df:fa:7c:f5:05:0e:5d:69:5b:e5:38:41: e2:25:3e:93:ab:bf:30:f8:ec:b9:dd:36:e4:76:3b: 2a:23:85:68:a5:22:48:02:27:6c:08:3d:0e:cf:1e: 59:0d:7f:63:0e:b4:9f:48:f2:dc:5c:cf:fc:27:f8: 61:0a:87:e9:6d:f5:9c:a1:51:08:68:b4:22:28:2f: 98:fa:e7:61:f2:b8:17:8b:af:b8:0e:66:f0:ae:76: 30:e0:5b:1f:ea:52:f1:0a:7d:38:9b:1f:51:2e:ce: 7f:08:72:b5:f0:4b:cb:d6:fd:ef:cc:96:80:06:2f: ac:e8:cc:3d:7e:4e:71:46:6d:16:40:e9:b8:6c:53: b5:32:88:1b:91:3e:fc:7f:83:d1:05:f9:fa:d3:4a: b3:93:34:61:83:b7:fc:23:3a:9d:4b:4a:9f:c6:5c: 5e:53:ae:dc:40:0c:e5:21:51:fa:e7:97:f1:1f:7a: 9a:3a:58:c9:c2:04:0c:d3:26:81:34:e0:e3:bc:f9: e2:8f:b9:ca:21:e4:d9:1b:a6:88:29:39:ec:7f:33: 92:83:5d:76:ff:d7:6c:33:85:68:58:b3:08:c1:d1: 0f:82:65:62:61:0e:2c:54:11:f1:11:78:d6:74:b2: db:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:55:77:7A:A0:C6:10:59:AB:D4:3E:B6:D7:DF:3A:29:2B:AD:81:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f4afae56-3009-3741-963c-1aa30325339f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.197.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:06:b9:df:1f:46:d4:18:9e:87:bd:e5:44:54:b0:55:bf:5b: 8c:c2:f9:69:e5:22:79:41:5f:3c:91:8e:08:eb:6d:c1:85:65: c5:8a:1c:64:44:68:43:8c:77:03:63:55:dc:73:9b:43:ce:b2: d6:dd:59:f9:04:78:1a:06:b9:df:51:83:94:98:fa:ad:fc:b7: 12:08:26:77:43:69:a0:ad:fe:d3:b5:e8:ca:14:2d:d2:4d:69: 2e:c7:fa:f0:0e:53:69:17:55:7a:60:30:34:bf:de:14:63:5e: 2a:65:b8:b6:82:15:0c:85:94:02:1c:9f:c8:da:bb:9f:03:cc: 9f:ac:e4:71:9f:80:72:fe:90:76:76:d0:83:ae:2e:7d:98:72: 0b:bf:4b:dd:b8:8b:af:3d:1a:b6:cb:27:d1:33:5e:25:20:a3: 18:12:a5:4b:01:43:60:60:ee:1d:0d:76:37:55:f3:ca:49:29: e6:a7:53:55:0b:43:d7:6f:1b:a7:11:ba:0c:41:4f:18:ea:b3: ed:47:94:5c:19:f0:53:fb:8c:a7:03:c6:b3:4c:40:2a:29:f7: 46:c1:00:3a:d3:51:a1:6b:d1:00:5c:30:0d:6e:6f:1c:62:36: fc:6a:2e:87:99:ca:d7:5a:12:f2:2c:a7:6e:53:01:cd:1c:45: a6:19:be:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4JcQZd4c0GHsggAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk YjZkZDc2NWQtZWYyZS00ZWQ5LTkyOTktMWFmOWMzM2Q2MjkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqqXxviZz2bsyuTX4E+wXuPf+nz1BQ5daVvl OEHiJT6Tq78w+Oy53TbkdjsqI4VopSJIAidsCD0Ozx5ZDX9jDrSfSPLcXM/8J/hh CofpbfWcoVEIaLQiKC+Y+udh8rgXi6+4DmbwrnYw4Fsf6lLxCn04mx9RLs5/CHK1 8EvL1v3vzJaABi+s6Mw9fk5xRm0WQOm4bFO1MogbkT78f4PRBfn600qzkzRhg7f8 IzqdS0qfxlxeU67cQAzlIVH655fxH3qaOljJwgQM0yaBNODjvPnij7nKIeTZG6aI KTnsfzOSg112/9dsM4VoWLMIwdEPgmViYQ4sVBHxEXjWdLLbJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNNVd3qgxhBZq9Q+ttffOikrrYGqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZjRhZmFlNTYtMzAwOS0z NzQxLTk2M2MtMWFhMzAzMjUzMzlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8U0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIAGud8fRtQYnoe95URUsFW/W4zC+WnlInlBXzyRjgjrbcGFZcWKHGRE aEOMdwNjVdxzm0POstbdWfkEeBoGud9Rg5SY+q38txIIJndDaaCt/tO16MoULdJN aS7H+vAOU2kXVXpgMDS/3hRjXipluLaCFQyFlAIcn8jau58DzJ+s5HGfgHL+kHZ2 0IOuLn2Ycgu/S924i689GrbLJ9EzXiUgoxgSpUsBQ2Bg7h0NdjdV88pJKeanU1UL Q9dvG6cRugxBTxjqs+1HlFwZ8FP7jKcDxrNMQCop90bBADrTUaFr0QBcMA1ubxxi NvxqLoeZytdaEvIsp25TAc0cRaYZvsE= -----END CERTIFICATE-----Generated at Fri Mar 13 05:53:07 2026 by rpki-client