$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/238bfe04-4cf5-3527-a289-b0f0ac6c86af.roa File: 238bfe04-4cf5-3527-a289-b0f0ac6c86af.roa (raw, json) Hash identifier: F2JzGKDYmw8sBC8Xf/8bzhT5ozTZVt40o3XZj7kzywI= Subject key identifier: 70:F9:57:A1:B4:07:2E:99:06:E1:A7:AB:30:A4:9A:35:25:2F:85:CB Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584EA79F9343BB9CFCD9A0D44400 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/238bfe04-4cf5-3527-a289-b0f0ac6c86af.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 7155 IP address blocks: 99.197.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9f:93:43:bb:9c:fc:d9:a0:d4:44:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=e20da51b-5d68-406b-a214-d57113277aa0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:31:d2:f7:3d:c0:09:45:e5:91:b3:1b:21:c8: 29:18:4b:94:5e:0c:4a:86:30:00:a8:3d:a9:f1:26: c5:a2:c4:db:d9:65:d4:20:47:82:65:0c:99:f0:6a: 7b:d1:05:f5:0f:0a:20:27:1f:76:78:e3:cb:32:f7: 9c:f4:1b:90:04:23:79:1e:af:8b:02:bb:3a:75:be: 75:1a:84:ce:64:3c:f0:b8:08:2a:7f:00:b9:0e:ed: a5:e2:35:04:b4:1e:9b:fe:e1:39:08:7c:3c:4c:7a: 4a:4b:44:04:8f:15:9c:f9:45:15:b5:a7:75:db:78: 10:79:94:36:23:d0:d0:99:de:0f:40:55:fd:3c:79: e0:2b:8c:91:78:00:23:6b:46:f1:ce:69:b0:6b:6a: 54:8e:8e:c7:8d:b1:6c:84:31:c5:f9:a8:b5:76:4c: ea:fa:01:c5:8d:c8:39:a7:6b:70:47:7d:8b:c5:76: 0c:43:76:4a:76:82:96:7d:ba:6a:94:fe:3c:6d:39: 9e:1d:25:78:ef:15:48:92:ac:91:6c:21:8d:7f:2c: 1b:35:9f:a5:df:0e:b4:4b:ec:f5:64:b2:e4:b0:22: 16:8a:c7:64:eb:63:e7:59:cb:f2:b2:98:18:52:ba: 9d:d5:ad:f7:54:29:a6:1c:4a:69:9c:89:80:80:e7: 2c:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:F9:57:A1:B4:07:2E:99:06:E1:A7:AB:30:A4:9A:35:25:2F:85:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/238bfe04-4cf5-3527-a289-b0f0ac6c86af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.197.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:76:59:76:50:1b:bb:aa:35:a1:74:5b:98:f1:27:63:40:0a: 00:7c:57:59:a9:b9:c3:4c:64:8c:d8:7f:f5:74:95:1a:91:46: 8f:07:cd:5d:c4:01:0b:75:cb:62:54:aa:de:2f:67:54:1b:32: de:c6:e7:fd:ec:d1:31:f9:1b:09:ea:93:5b:7e:98:5f:41:0e: f7:fa:b3:cc:69:87:99:30:d9:56:91:9e:9a:5d:ae:bd:40:b1: 68:66:b2:17:d2:e7:af:b3:b6:fd:69:fd:3b:dc:9b:12:b7:83: 22:bc:8a:9f:b2:e0:34:62:4c:c6:96:7d:81:58:f2:59:5a:9e: 1c:16:ee:71:da:ef:f4:44:c6:e6:5d:10:3f:94:a8:f4:87:ac: 8c:25:7c:81:a0:fe:f1:99:e5:0b:3a:73:6d:ad:51:f2:9e:71: 43:23:40:bf:59:41:ea:39:df:5b:6d:56:ba:10:2b:a4:31:91: a7:a5:6e:ea:fd:71:2b:90:07:a0:fc:81:59:4c:7b:21:e9:71: be:55:df:82:81:1e:0d:98:5a:41:94:7a:a6:92:7e:24:be:a5: 99:09:65:0b:17:24:cc:5e:fd:b4:b9:75:d0:05:d9:f7:f1:e8: 0b:ca:a5:2f:76:91:4b:d3:a4:04:0f:e9:08:81:db:cf:25:20: 97:63:24:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nn5NDu5z82aDURAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZTIwZGE1MWItNWQ2OC00MDZiLWEyMTQtZDU3MTEzMjc3YWEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujHS9z3ACUXlkbMbIcgpGEuUXgxKhjAAqD2p 8SbFosTb2WXUIEeCZQyZ8Gp70QX1DwogJx92eOPLMvec9BuQBCN5Hq+LArs6db51 GoTOZDzwuAgqfwC5Du2l4jUEtB6b/uE5CHw8THpKS0QEjxWc+UUVtad123gQeZQ2 I9DQmd4PQFX9PHngK4yReAAja0bxzmmwa2pUjo7HjbFshDHF+ai1dkzq+gHFjcg5 p2twR32LxXYMQ3ZKdoKWfbpqlP48bTmeHSV47xVIkqyRbCGNfywbNZ+l3w60S+z1 ZLLksCIWisdk62PnWcvyspgYUrqd1a33VCmmHEppnImAgOcsXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHD5V6G0By6ZBuGnqzCkmjUlL4XLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMjM4YmZlMDQtNGNmNS0z NTI3LWEyODktYjBmMGFjNmM4NmFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8X1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKJ2WXZQG7uqNaF0W5jxJ2NACgB8V1mpucNMZIzYf/V0lRqRRo8HzV3E AQt1y2JUqt4vZ1QbMt7G5/3s0TH5Gwnqk1t+mF9BDvf6s8xph5kw2VaRnppdrr1A sWhmshfS56+ztv1p/TvcmxK3gyK8ip+y4DRiTMaWfYFY8llanhwW7nHa7/RExuZd ED+UqPSHrIwlfIGg/vGZ5Qs6c22tUfKecUMjQL9ZQeo531ttVroQK6Qxkaelbur9 cSuQB6D8gVlMeyHpcb5V34KBHg2YWkGUeqaSfiS+pZkJZQsXJMxe/bS5ddAF2ffx 6AvKpS92kUvTpAQP6QiB288lIJdjJAM= -----END CERTIFICATE-----Generated at Wed Jul 29 06:14:28 2026 by rpki-client