$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/352abffc-a834-3df2-8005-48dd2f5b7be4.roa File: 352abffc-a834-3df2-8005-48dd2f5b7be4.roa (raw, json) Hash identifier: MpWNF8rgpgddUhs6pn6TCvQ7aCDcs8CIygig0eKZOgo= Subject key identifier: 86:37:DC:28:08:A8:36:A6:C2:A8:37:D0:45:AD:39:D1:61:8D:34:23 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584E059C07289A925524555DB800 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/352abffc-a834-3df2-8005-48dd2f5b7be4.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 7155 IP address blocks: 99.197.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9c:07:28:9a:92:55:24:55:5d:b8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=d554621d-a712-4b05-9352-f6ddf4ee5a4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:58:3b:33:ac:46:a5:fd:d9:1f:de:62:a3:73: 70:bd:a4:15:63:c8:bb:1b:7a:59:2e:c8:49:ab:42: e5:87:0a:f6:83:7f:f7:0e:46:bc:c9:52:4c:ab:01: 98:0b:2c:4a:e9:c4:b0:ed:da:06:ca:d9:0d:34:96: e9:97:28:ad:64:60:a8:4b:94:6b:18:61:92:75:00: 71:8a:5b:c1:ef:1c:2e:80:9a:ad:5b:e3:b2:0a:e2: 86:8e:0f:7d:3d:b2:ec:ff:1b:cb:d2:0e:f7:8f:9e: 7e:18:72:50:8e:fb:58:db:fa:24:7d:dc:bf:80:72: c4:24:71:5d:f3:e1:3e:e5:fd:fd:60:a4:6b:3f:3a: bd:0e:6f:7e:e6:59:88:f4:84:ca:b9:a9:29:b3:34: 87:58:c3:53:a1:4b:e0:2e:ce:30:66:1a:39:b6:e5: da:0d:42:14:4e:9b:05:03:cc:45:00:9e:42:8a:aa: 63:fd:15:f0:bb:c7:88:b0:31:6b:63:74:90:04:df: 0d:9d:e3:e3:29:27:03:24:bb:e3:96:49:18:4b:56: 51:ec:a7:47:6d:4a:b7:58:9b:95:a4:81:f4:e7:cf: ee:ee:6c:bc:3f:9d:77:73:73:9d:be:4b:77:cd:3c: c6:20:fb:73:f1:9c:cb:e7:e6:f1:39:b8:dc:54:d5: c7:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:37:DC:28:08:A8:36:A6:C2:A8:37:D0:45:AD:39:D1:61:8D:34:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/352abffc-a834-3df2-8005-48dd2f5b7be4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.197.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:d7:82:33:85:24:9b:3f:c2:f3:9a:7f:a0:9c:22:78:74:91: 2d:00:e2:d8:64:5a:5a:b5:43:f5:1f:2c:97:60:91:8b:9f:3a: 0c:ab:54:a4:78:99:c9:ca:33:2b:e9:63:d7:80:6c:b4:95:74: 66:27:c5:53:52:12:7f:0a:07:43:9e:cd:d7:c2:9b:3a:e8:ae: 0d:b3:17:3f:00:dc:9b:59:83:46:20:91:08:c5:e3:dc:82:17: d3:2e:7a:e2:23:c1:90:5d:d3:d3:03:ec:f8:37:a1:bb:8b:64: d2:e8:52:66:40:ce:e6:ee:3e:fc:d4:b6:8c:9e:ca:50:d1:b6: 61:38:05:52:f2:09:d0:4e:89:8f:5d:d9:91:54:6c:ba:31:cb: d8:0b:33:c3:04:5f:e8:78:3e:4e:2b:d0:1c:4e:5b:c7:ab:99: 1c:b2:ce:2c:15:e0:ab:99:62:0f:1b:10:27:8f:61:37:2f:3f: 48:61:e0:5e:ed:3b:35:17:a4:51:32:be:50:f6:b1:35:c4:6e: 04:55:b4:e3:e3:c4:4a:d9:1a:4c:bc:5f:a5:89:10:21:af:8d: 96:19:89:5a:0a:30:84:e6:09:73:29:63:90:33:18:c1:47:d9: 8c:15:90:f2:c1:8d:a9:ae:6f:52:93:f6:23:51:dd:d8:b4:1a: 55:f0:e7:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4FnAcompJVJFVduAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk ZDU1NDYyMWQtYTcxMi00YjA1LTkzNTItZjZkZGY0ZWU1YTRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVg7M6xGpf3ZH95io3NwvaQVY8i7G3pZLshJ q0Llhwr2g3/3Dka8yVJMqwGYCyxK6cSw7doGytkNNJbplyitZGCoS5RrGGGSdQBx ilvB7xwugJqtW+OyCuKGjg99PbLs/xvL0g73j55+GHJQjvtY2/okfdy/gHLEJHFd 8+E+5f39YKRrPzq9Dm9+5lmI9ITKuakpszSHWMNToUvgLs4wZho5tuXaDUIUTpsF A8xFAJ5Ciqpj/RXwu8eIsDFrY3SQBN8NnePjKScDJLvjlkkYS1ZR7KdHbUq3WJuV pIH058/u7my8P513c3Odvkt3zTzGIPtz8ZzL5+bxObjcVNXH+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIY33CgIqDamwqg30EWtOdFhjTQjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMzUyYWJmZmMtYTgzNC0z ZGYyLTgwMDUtNDhkZDJmNWI3YmU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8VoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAvXgjOFJJs/wvOaf6CcInh0kS0A4thkWlq1Q/UfLJdgkYufOgyrVKR4 mcnKMyvpY9eAbLSVdGYnxVNSEn8KB0OezdfCmzrorg2zFz8A3JtZg0YgkQjF49yC F9MueuIjwZBd09MD7Pg3obuLZNLoUmZAzubuPvzUtoyeylDRtmE4BVLyCdBOiY9d 2ZFUbLoxy9gLM8MEX+h4Pk4r0BxOW8ermRyyziwV4KuZYg8bECePYTcvP0hh4F7t OzUXpFEyvlD2sTXEbgRVtOPjxErZGky8X6WJECGvjZYZiVoKMITmCXMpY5AzGMFH 2YwVkPLBjamub1KT9iNR3di0GlXw52I= -----END CERTIFICATE-----Generated at Sat Jun 13 16:50:43 2026 by rpki-client