$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/41b2d9c1-5ef1-34ae-95f8-7d84b3d5741e.roa File: 41b2d9c1-5ef1-34ae-95f8-7d84b3d5741e.roa (raw, json) Hash identifier: SCKutkh4havMbMUy22h8D3tUSJEhsedgj18wjdGpv5c= Subject key identifier: B7:D4:1A:69:A2:63:B3:8A:8A:D7:A2:33:B6:A5:9C:09:4D:83:AE:DD Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F4983AD4FA7E9743AB6A99600 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/41b2d9c1-5ef1-34ae-95f8-7d84b3d5741e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 99.198.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:83:ad:4f:a7:e9:74:3a:b6:a9:96:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=65b0c5b5-43ba-4232-b808-ee1434a6f97b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:93:cb:de:14:9a:a8:8d:96:29:17:eb:60:89: 82:e0:4d:f6:2f:c2:33:87:d0:9b:6e:d3:55:59:ab: 3c:db:62:d8:fa:7a:ea:7c:5f:51:b2:50:35:4c:e9: 12:08:b3:d2:51:dd:8c:40:bf:a2:ee:83:7b:81:34: 5b:c6:28:f0:ed:b7:aa:4d:be:11:61:96:f8:e6:90: f0:9b:6d:30:f5:28:db:cb:58:9f:92:33:54:ef:b4: fb:89:4d:66:9c:1a:b7:9d:1d:53:ed:6d:25:20:e3: b4:79:70:d4:ec:75:bb:60:b1:8f:5a:54:70:21:57: 2f:d6:06:45:3b:b3:d4:51:9f:98:ce:8b:25:33:e6: 4a:22:99:78:fa:af:7e:26:fc:07:e2:85:f7:66:bd: 4f:e6:1a:9c:bd:33:dd:cd:83:ca:fa:58:3e:ec:76: 33:c9:78:6a:bc:15:a5:01:a0:b5:27:a0:25:94:bf: cb:4f:fd:13:9e:bb:84:34:39:7d:ad:df:e7:1a:a5: 3d:23:bb:e2:67:36:56:6c:b4:a1:8c:b4:a8:66:57: da:bd:e0:bb:90:86:ed:49:19:f1:06:d4:2a:1c:fe: 64:dd:1d:fe:e3:e4:f5:e3:0b:52:10:17:9e:1c:1d: 30:2d:bf:f4:ff:89:c2:06:33:a9:ed:ec:8e:1f:37: 48:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:D4:1A:69:A2:63:B3:8A:8A:D7:A2:33:B6:A5:9C:09:4D:83:AE:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/41b2d9c1-5ef1-34ae-95f8-7d84b3d5741e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.198.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:7d:4f:be:27:02:af:ed:7a:90:4b:e4:b9:5b:f0:4b:1b:ee: 20:cc:cf:b4:2e:9b:e5:2a:d6:b7:40:3a:26:a0:37:4e:61:85: 29:04:e2:4a:c3:7d:03:43:da:f2:a6:d6:77:09:12:c0:57:b5: 7b:f1:10:66:75:5f:c1:0b:24:6b:b3:3d:3f:fa:1d:aa:61:3f: e0:e7:30:66:23:0b:1f:14:4c:59:90:1a:bb:cb:24:8b:8d:bd: ca:aa:8c:19:59:52:9e:33:87:6a:1b:f7:81:87:d5:97:77:06: 39:2f:5c:0a:ee:8c:1b:4e:f1:5b:9a:3b:8d:a8:77:ba:49:46: 8b:32:14:32:42:18:b2:6d:c9:2d:1f:c1:43:d4:30:35:6c:61: e7:4d:a6:ba:00:1f:99:9c:fa:e4:c6:2f:7a:02:7c:03:c4:8d: 1b:86:4c:71:95:30:fa:f7:d9:4a:c8:7b:23:7a:b1:54:8d:bb: 0b:d1:3c:3b:9c:da:92:b8:9b:28:da:f3:3d:33:ad:e2:44:48: 9c:fc:1c:ea:19:32:4a:16:f8:39:2f:9a:26:5a:8d:a5:d4:63: b4:e1:3d:23:3e:5e:0f:3e:76:8c:78:9b:be:05:fd:cc:f6:0c: 36:ea:31:91:40:bd:76:b6:9e:ca:3f:c6:9b:81:97:a4:2d:e3: de:ee:26:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jg61Pp+l0OraplgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NjViMGM1YjUtNDNiYS00MjMyLWI4MDgtZWUxNDM0YTZmOTdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5PL3hSaqI2WKRfrYImC4E32L8Izh9CbbtNV Was822LY+nrqfF9RslA1TOkSCLPSUd2MQL+i7oN7gTRbxijw7beqTb4RYZb45pDw m20w9Sjby1ifkjNU77T7iU1mnBq3nR1T7W0lIOO0eXDU7HW7YLGPWlRwIVcv1gZF O7PUUZ+YzoslM+ZKIpl4+q9+JvwH4oX3Zr1P5hqcvTPdzYPK+lg+7HYzyXhqvBWl AaC1J6AllL/LT/0TnruENDl9rd/nGqU9I7viZzZWbLShjLSoZlfaveC7kIbtSRnx BtQqHP5k3R3+4+T14wtSEBeeHB0wLb/0/4nCBjOp7eyOHzdI9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLfUGmmiY7OKiteiM7alnAlNg67dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNDFiMmQ5YzEtNWVmMS0z NGFlLTk1ZjgtN2Q4NGIzZDU3NDFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8YcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAF9T74nAq/tepBL5Llb8Esb7iDMz7Qum+Uq1rdAOiagN05hhSkE4krD fQND2vKm1ncJEsBXtXvxEGZ1X8ELJGuzPT/6HaphP+DnMGYjCx8UTFmQGrvLJIuN vcqqjBlZUp4zh2ob94GH1Zd3BjkvXArujBtO8VuaO42od7pJRosyFDJCGLJtyS0f wUPUMDVsYedNproAH5mc+uTGL3oCfAPEjRuGTHGVMPr32UrIeyN6sVSNuwvRPDuc 2pK4myja8z0zreJESJz8HOoZMkoW+DkvmiZajaXUY7ThPSM+Xg8+dox4m74F/cz2 DDbqMZFAvXa2nso/xpuBl6Qt497uJkg= -----END CERTIFICATE-----Generated at Mon Sep 28 22:57:41 2026 by rpki-client