$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4599d9d3-f0aa-3734-aff1-21a5f1fcbba2.roa File: 4599d9d3-f0aa-3734-aff1-21a5f1fcbba2.roa (raw, json) Hash identifier: QrTfDOELK+m28NKXtZS3pMCh6Z2aXb360QuD5UKzBL4= Subject key identifier: C5:D2:92:A2:E5:68:BC:6D:9B:55:03:07:A1:B9:DB:FF:6C:9C:C8:61 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F4983A83C39525C55293FF540 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4599d9d3-f0aa-3734-aff1-21a5f1fcbba2.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 99.197.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:83:a8:3c:39:52:5c:55:29:3f:f5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=fe16025f-3ba8-4931-a62b-e4809216fc38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ef:00:1c:03:56:f6:34:54:50:a3:60:99:36: 7d:20:4e:17:72:18:46:82:85:e5:ad:6b:dd:f5:6f: 72:f2:26:e3:e2:da:b8:33:69:2e:08:e8:9f:74:0f: 76:c7:6a:f9:3a:e8:3f:eb:91:14:d0:40:f1:b0:72: 19:8a:0d:75:5a:50:0d:f9:92:52:e6:3a:35:88:b2: b9:4d:22:ab:21:26:fd:95:b1:0d:fa:d8:3f:e9:47: 70:e2:34:a4:ef:93:20:c7:28:9d:b1:9d:82:38:8a: c2:b8:45:9b:a4:3a:9b:ac:e7:be:8b:93:fa:76:e0: ff:7a:c7:41:41:f6:8a:b6:34:63:e1:b3:02:eb:46: 1b:78:cc:ec:13:fb:41:ba:a8:f8:a5:3f:c8:fe:c0: 25:59:61:6a:5a:cc:a3:f6:e5:f3:9c:84:cd:87:bf: fe:a3:5f:ec:2c:54:b6:52:10:19:9e:f8:51:6f:56: 1f:0e:43:0c:c9:5f:47:cd:50:05:3f:c5:34:f9:3c: e4:7a:e7:64:95:c6:43:0e:51:10:fa:ab:37:e3:fe: f2:c8:89:3c:b3:23:be:d4:a2:03:d0:ca:5d:fb:50: 7f:29:40:14:45:70:2e:70:64:a4:6d:0c:0d:94:d5: 0d:22:57:05:b3:26:ad:e2:4f:4b:6d:77:eb:7f:bc: d9:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:D2:92:A2:E5:68:BC:6D:9B:55:03:07:A1:B9:DB:FF:6C:9C:C8:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4599d9d3-f0aa-3734-aff1-21a5f1fcbba2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.197.246.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:5e:a6:e0:44:d6:56:3e:8c:29:bf:dc:3c:32:c2:1c:70:cc: 2e:3d:f1:da:47:49:a1:72:9d:6d:55:73:38:57:1d:a9:50:86: 41:a7:84:bd:b4:48:4f:d8:19:ab:4a:43:2a:6f:05:e7:49:99: 21:4c:02:00:d1:47:9d:5e:02:91:ee:f8:05:a8:c0:84:60:b7: 11:94:02:52:3e:a8:12:c2:93:8a:2d:92:a3:60:23:81:f7:74: 20:fb:9c:c1:2c:1f:42:0c:00:16:aa:0d:dc:16:90:cd:27:7c: 16:99:ce:a5:f5:57:78:7b:b5:06:57:a0:6b:21:5b:08:2e:05: be:c7:71:ec:44:d4:f0:25:37:76:15:0a:2e:53:ff:e7:99:9e: f6:77:c5:40:cd:23:dc:d7:de:5c:6f:1b:7c:a7:7c:3c:4e:9e: 7f:75:ec:b5:95:fb:86:67:4e:02:91:7e:ea:ba:1d:a3:7a:ca: 11:23:53:db:5e:1b:76:d4:37:26:fc:ae:eb:c1:5d:03:8a:cb: 75:95:46:c9:98:53:2c:49:66:8b:16:d0:04:02:3d:25:ad:f8: c4:03:59:a0:8b:f4:1d:51:bd:ab:a0:26:6a:b2:5a:54:0b:dd: 8d:ad:f2:3b:c8:c6:f7:db:c9:f1:40:e5:10:44:ef:b1:69:af: 6d:75:c2:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jg6g8OVJcVSk/9UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZmUxNjAyNWYtM2JhOC00OTMxLWE2MmItZTQ4MDkyMTZmYzM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+8AHANW9jRUUKNgmTZ9IE4XchhGgoXlrWvd 9W9y8ibj4tq4M2kuCOifdA92x2r5Oug/65EU0EDxsHIZig11WlAN+ZJS5jo1iLK5 TSKrISb9lbEN+tg/6Udw4jSk75MgxyidsZ2COIrCuEWbpDqbrOe+i5P6duD/esdB QfaKtjRj4bMC60YbeMzsE/tBuqj4pT/I/sAlWWFqWsyj9uXznITNh7/+o1/sLFS2 UhAZnvhRb1YfDkMMyV9HzVAFP8U0+TzkeudklcZDDlEQ+qs34/7yyIk8syO+1KID 0Mpd+1B/KUAURXAucGSkbQwNlNUNIlcFsyat4k9LbXfrf7zZVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMXSkqLlaLxtm1UDB6G52/9snMhhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNDU5OWQ5ZDMtZjBhYS0z NzM0LWFmZjEtMjFhNWYxZmNiYmEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8X2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAhepuBE1lY+jCm/3DwywhxwzC498dpHSaFynW1VczhXHalQhkGnhL20 SE/YGatKQypvBedJmSFMAgDRR51eApHu+AWowIRgtxGUAlI+qBLCk4otkqNgI4H3 dCD7nMEsH0IMABaqDdwWkM0nfBaZzqX1V3h7tQZXoGshWwguBb7HcexE1PAlN3YV Ci5T/+eZnvZ3xUDNI9zX3lxvG3ynfDxOnn917LWV+4ZnTgKRfuq6HaN6yhEjU9te G3bUNyb8ruvBXQOKy3WVRsmYUyxJZosW0AQCPSWt+MQDWaCL9B1RvaugJmqyWlQL 3Y2t8jvIxvfbyfFA5RBE77Fpr211wuM= -----END CERTIFICATE-----Generated at Sat Oct 10 13:35:36 2026 by rpki-client