$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/50c6c70a-4eec-3e0f-95f6-71a7ac9c892f.roa File: 50c6c70a-4eec-3e0f-95f6-71a7ac9c892f.roa (raw, json) Hash identifier: UD8FFs8ziauIFQ/IleBhw+clyGU3NFDo9HX8anCHvE4= Subject key identifier: AA:08:57:A8:04:A0:DF:6B:B2:88:E6:66:34:D8:B7:06:EF:D7:1A:1D Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F497B786E208EA53DE7670600 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/50c6c70a-4eec-3e0f-95f6-71a7ac9c892f.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 99.198.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7b:78:6e:20:8e:a5:3d:e7:67:06:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=cf010c80-a0d5-4e22-a72c-1a90d3cc2ac4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:5f:e9:7d:94:ca:22:41:52:22:7f:df:aa:6a: 4d:c7:e3:4a:ca:8e:90:e4:ce:1f:f7:ac:30:66:aa: 2d:c3:7b:44:85:f0:36:91:6a:e9:3b:ba:1e:3c:56: f0:2f:09:fe:31:a6:e7:d8:50:ae:38:29:60:33:c9: b2:db:1a:03:4b:63:d0:f7:12:77:7c:4f:75:e8:86: 28:80:4b:25:af:d7:17:ff:5c:05:4e:9d:2c:54:1a: 05:ae:60:7e:59:f4:79:a6:0a:1c:8d:27:42:9f:e3: 40:55:72:f2:4b:57:f2:4f:3f:a6:fb:0b:13:e2:f0: 07:e1:d2:9a:2d:98:10:93:6b:33:24:b1:0c:c7:84: fc:5a:5c:95:db:4a:8b:76:94:ea:12:9c:70:0e:a7: 10:f2:1f:64:02:49:9e:ef:32:c2:6e:c0:f3:6d:a6: 23:75:c9:b5:a4:a0:ef:28:d6:54:90:d8:ab:96:b5: 6e:8a:a5:83:a7:14:f8:9a:2f:cb:70:26:40:1c:39: 38:f5:0d:04:ee:42:cc:ba:ef:ba:3c:c9:df:0b:e1: 2b:0f:6c:14:78:5d:ae:51:4e:1b:1d:83:97:f1:d0: e4:a6:8d:52:11:a1:ff:a0:f3:f2:bf:74:49:07:a8: 95:64:42:9e:18:eb:86:de:67:d2:c3:4b:29:8e:43: f4:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:08:57:A8:04:A0:DF:6B:B2:88:E6:66:34:D8:B7:06:EF:D7:1A:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/50c6c70a-4eec-3e0f-95f6-71a7ac9c892f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.198.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:b2:d8:5f:5d:85:33:90:9e:bd:dc:f9:7d:c5:65:5e:7b:a8: 2c:a5:08:a4:2e:70:36:e9:55:33:03:1a:30:35:41:bb:60:47: 93:6c:e3:20:d0:bb:a0:87:8f:dd:dd:57:98:71:a6:a2:3b:25: 3e:99:c2:b8:5f:91:19:c1:27:a9:49:9f:2e:85:08:17:52:c1: 87:8b:31:44:8f:52:19:ca:4d:4b:88:22:fc:1f:87:ff:f2:d0: 63:cd:49:47:90:68:8f:55:9b:d0:e3:a8:7d:09:84:63:07:6f: 31:1e:b2:dc:8b:2a:81:d9:03:7d:77:35:dd:a9:c9:85:07:a7: bc:3c:8c:47:c5:86:5f:50:39:8b:eb:79:94:13:12:bf:b7:b3: 6c:2a:49:f6:9a:20:e6:e8:cc:0a:08:56:a6:b9:7c:54:cb:e9: 06:5c:ff:e5:f8:ff:91:58:ca:a9:e8:16:36:76:26:97:37:40: 28:60:45:de:6c:3e:5a:76:91:80:b5:5d:69:0f:7e:08:a6:b4: 53:38:e0:e5:45:c7:31:a4:43:f6:ff:af:6a:0a:06:b9:74:f1: 47:e4:f5:3e:33:46:39:d8:13:e6:12:d6:9b:8d:4d:a9:90:f6: c8:72:3a:8b:60:43:e0:35:d2:70:2e:32:92:b7:92:3e:71:f4: 4e:12:bc:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Je3huII6lPednBgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Y2YwMTBjODAtYTBkNS00ZTIyLWE3MmMtMWE5MGQzY2MyYWM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqV/pfZTKIkFSIn/fqmpNx+NKyo6Q5M4f96ww Zqotw3tEhfA2kWrpO7oePFbwLwn+Mabn2FCuOClgM8my2xoDS2PQ9xJ3fE916IYo gEslr9cX/1wFTp0sVBoFrmB+WfR5pgocjSdCn+NAVXLyS1fyTz+m+wsT4vAH4dKa LZgQk2szJLEMx4T8WlyV20qLdpTqEpxwDqcQ8h9kAkme7zLCbsDzbaYjdcm1pKDv KNZUkNirlrVuiqWDpxT4mi/LcCZAHDk49Q0E7kLMuu+6PMnfC+ErD2wUeF2uUU4b HYOX8dDkpo1SEaH/oPPyv3RJB6iVZEKeGOuG3mfSw0spjkP0YQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKoIV6gEoN9rsojmZjTYtwbv1xodMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNTBjNmM3MGEtNGVlYy0z ZTBmLTk1ZjYtNzFhN2FjOWM4OTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8YXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGqy2F9dhTOQnr3c+X3FZV57qCylCKQucDbpVTMDGjA1QbtgR5Ns4yDQ u6CHj93dV5hxpqI7JT6ZwrhfkRnBJ6lJny6FCBdSwYeLMUSPUhnKTUuIIvwfh//y 0GPNSUeQaI9Vm9DjqH0JhGMHbzEestyLKoHZA313Nd2pyYUHp7w8jEfFhl9QOYvr eZQTEr+3s2wqSfaaIObozAoIVqa5fFTL6QZc/+X4/5FYyqnoFjZ2Jpc3QChgRd5s Plp2kYC1XWkPfgimtFM44OVFxzGkQ/b/r2oKBrl08Ufk9T4zRjnYE+YS1puNTamQ 9shyOotgQ+A10nAuMpK3kj5x9E4SvBo= -----END CERTIFICATE-----Generated at Tue Sep 29 03:01:59 2026 by rpki-client