$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2a2e920b-8af2-3da5-a0ac-9b8ffa86c438.roa File: 2a2e920b-8af2-3da5-a0ac-9b8ffa86c438.roa (raw, json) Hash identifier: QzFulKknn93fcljHClMutKIeSLE36QxmhyZ10cfPFnw= Subject key identifier: E6:B4:D3:21:CD:C3:54:11:E3:0D:59:C0:A6:E7:14:F5:D5:10:EE:6B Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F49838901DE4B8B16A86B0DC0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2a2e920b-8af2-3da5-a0ac-9b8ffa86c438.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 99.196.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:83:89:01:de:4b:8b:16:a8:6b:0d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=ff5563dd-f6f3-47b2-8a0e-100733978dd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:b1:79:64:1d:33:02:da:20:9c:63:dc:e9:49: b0:5b:35:10:71:03:76:6c:6f:2c:15:89:2f:9b:bb: 2d:a4:9f:6d:5f:9d:9c:0e:95:f1:98:d9:74:aa:1f: 52:9d:cd:e2:3e:6a:e6:26:a7:b6:13:c0:87:62:ff: 1c:81:1c:c9:e3:f9:4c:1a:44:67:ec:97:d2:18:99: 8c:b9:76:45:d5:e3:61:da:29:12:a6:9a:02:4d:16: cf:12:ea:ea:df:9e:58:7e:61:42:bc:48:90:90:0c: 0f:9f:32:99:3e:20:83:95:e5:1f:58:c7:8b:47:e5: 28:44:d6:60:ca:13:94:11:49:f6:68:34:0f:6e:25: 6c:c4:23:f2:2c:d3:ff:70:32:69:c6:b4:92:62:a9: d2:b1:aa:c2:d5:75:95:ff:fc:64:70:85:fc:f5:ba: 45:ee:2b:20:d5:4f:30:4b:1a:29:7d:ba:50:1f:00: f1:e3:05:9a:20:20:7d:8b:a2:13:99:f2:33:0f:b3: f1:21:49:73:c9:4e:3c:92:69:a6:7f:d5:36:60:d7: d9:a4:65:f8:a4:ea:9e:77:e1:d0:56:ac:4c:78:5a: b9:f9:2f:97:f0:43:fb:18:81:d8:1d:34:b4:11:86: 23:4a:50:c8:9c:58:d8:4a:4c:55:ad:f8:79:f4:2f: a6:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:B4:D3:21:CD:C3:54:11:E3:0D:59:C0:A6:E7:14:F5:D5:10:EE:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2a2e920b-8af2-3da5-a0ac-9b8ffa86c438.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.196.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:7c:ae:42:61:e1:4b:20:f1:89:12:96:61:88:ce:6c:c0:0e: 1f:d6:fd:58:4c:ce:52:f4:25:2f:f9:37:06:20:c3:8b:c6:34: 68:57:f3:98:04:99:9c:56:6f:6d:e1:35:73:b2:09:ac:af:58: a3:70:54:b8:2a:7f:1f:1b:a2:4b:e6:6b:6f:08:44:66:0f:60: 07:89:66:1c:2c:6d:0e:99:b0:0e:ef:57:33:a6:de:33:13:3e: 6b:74:29:47:ec:de:3a:0e:3d:75:37:68:5f:58:2a:24:ab:45: 67:9b:2a:69:2f:42:7c:7c:7b:22:14:ae:cd:9e:91:78:b0:87: 11:c2:ed:bb:24:0d:8b:c2:28:4f:3a:52:94:8f:88:12:cf:5c: 0b:08:64:6a:dc:95:7c:6b:8c:ab:38:71:e1:f6:df:a2:be:cd: d7:27:a1:7a:aa:8a:63:e4:7a:64:77:f4:99:b2:0d:97:0f:cc: 91:56:a1:b6:d9:26:b9:aa:b0:ed:84:5e:56:70:78:13:39:55: a0:99:f4:d0:d6:ca:98:0f:63:aa:0d:fb:9f:05:c9:88:de:8a: bf:18:5c:4c:04:ae:58:69:d1:4f:64:80:74:cf:f9:65:3f:c7: d0:02:97:fe:df:54:16:35:4f:7b:03:94:f9:91:2f:cc:55:4c: 7f:9b:93:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jg4kB3kuLFqhrDcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZmY1NTYzZGQtZjZmMy00N2IyLThhMGUtMTAwNzMzOTc4ZGQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7F5ZB0zAtognGPc6UmwWzUQcQN2bG8sFYkv m7stpJ9tX52cDpXxmNl0qh9Snc3iPmrmJqe2E8CHYv8cgRzJ4/lMGkRn7JfSGJmM uXZF1eNh2ikSppoCTRbPEurq355YfmFCvEiQkAwPnzKZPiCDleUfWMeLR+UoRNZg yhOUEUn2aDQPbiVsxCPyLNP/cDJpxrSSYqnSsarC1XWV//xkcIX89bpF7isg1U8w SxopfbpQHwDx4wWaICB9i6ITmfIzD7PxIUlzyU48kmmmf9U2YNfZpGX4pOqed+HQ VqxMeFq5+S+X8EP7GIHYHTS0EYYjSlDInFjYSkxVrfh59C+mhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOa00yHNw1QR4w1ZwKbnFPXVEO5rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMmEyZTkyMGItOGFmMi0z ZGE1LWEwYWMtOWI4ZmZhODZjNDM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8SJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHl8rkJh4Usg8YkSlmGIzmzADh/W/VhMzlL0JS/5NwYgw4vGNGhX85gE mZxWb23hNXOyCayvWKNwVLgqfx8bokvma28IRGYPYAeJZhwsbQ6ZsA7vVzOm3jMT Pmt0KUfs3joOPXU3aF9YKiSrRWebKmkvQnx8eyIUrs2ekXiwhxHC7bskDYvCKE86 UpSPiBLPXAsIZGrclXxrjKs4ceH236K+zdcnoXqqimPkemR39JmyDZcPzJFWobbZ JrmqsO2EXlZweBM5VaCZ9NDWypgPY6oN+58FyYjeir8YXEwErlhp0U9kgHTP+WU/ x9ACl/7fVBY1T3sDlPmRL8xVTH+bk+g= -----END CERTIFICATE-----Generated at Fri Sep 25 22:32:51 2026 by rpki-client