$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/620c9921-4f80-34dd-840e-1c36b07b9504.roa File: 620c9921-4f80-34dd-840e-1c36b07b9504.roa (raw, json) Hash identifier: gkd62A8IR1I4K7FUJjYOeye0Wi+p38NB+I0swbuFnNw= Subject key identifier: 3B:3D:4B:1F:3C:05:17:6D:14:60:34:E5:35:C2:A1:FA:6D:F1:E4:17 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F4983A7861D512BEEF67D5600 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/620c9921-4f80-34dd-840e-1c36b07b9504.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 99.197.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:83:a7:86:1d:51:2b:ee:f6:7d:56:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=6f83f1a4-3df1-4ea2-b98c-fe9667a016ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:eb:de:92:47:57:40:dc:c3:9b:fd:c5:fb:60: d7:50:fd:7d:00:72:ee:fa:4f:37:62:6e:1f:d4:91: d6:71:3f:50:8e:1a:4e:10:45:d3:54:3c:33:98:cb: e9:a5:21:4a:81:aa:0a:97:e5:78:06:b5:39:3e:27: 1c:b3:31:c7:a8:d1:e5:02:42:0a:68:54:03:77:69: 1d:95:1a:d8:66:21:ab:10:a3:d7:39:a8:31:d6:c5: ce:94:c8:44:7f:3f:bd:12:92:50:28:a6:8d:60:e5: 33:a3:12:e3:d1:13:d0:a0:7f:51:00:43:db:ed:f5: be:2c:59:8e:9a:45:4b:00:7c:4d:f1:95:bf:33:30: 8e:15:3d:fd:64:c2:9b:63:51:dc:74:12:48:93:d5: 98:bc:a7:d3:5b:14:9e:4e:7a:4d:83:68:1a:21:55: 80:67:8d:ff:0c:dc:be:a4:86:8e:cf:20:54:62:c3: 19:a0:59:d4:e6:18:43:a0:e8:24:9d:8c:b4:0e:54: 93:d3:98:84:39:8c:40:c6:00:13:2c:9c:b1:15:0e: 71:d2:b3:9e:fe:6c:51:48:1a:3c:c0:bc:ce:9e:20: ca:16:42:3b:d7:ce:55:45:40:df:96:53:ab:2f:48: a2:b0:f6:e0:c2:40:de:f0:96:8e:b1:50:66:65:29: 7e:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:3D:4B:1F:3C:05:17:6D:14:60:34:E5:35:C2:A1:FA:6D:F1:E4:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/620c9921-4f80-34dd-840e-1c36b07b9504.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.197.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:db:b1:a2:99:ff:dd:92:a7:05:31:a6:55:14:63:38:60:b8: 5b:dc:69:5d:5e:8d:fd:8a:a3:ef:c5:47:48:b8:3e:0f:af:5d: bc:8c:55:f3:32:dc:15:1c:1e:9b:15:ce:06:74:49:72:2d:7b: 97:a2:c3:2a:22:a1:b4:ed:be:ad:4c:c0:87:b8:67:d7:15:59: d7:f3:51:1f:f0:3e:64:67:5b:f1:56:c8:e8:98:04:d4:f5:d4: af:e8:50:c7:17:60:d0:33:9b:45:57:67:fa:b6:bd:22:1d:56: 2b:c7:db:30:b6:17:19:c5:51:29:83:3c:77:b3:42:3f:91:24: e6:5e:7f:ab:66:0c:45:43:a1:12:46:81:7f:76:f0:33:91:10: 5e:bc:cc:71:fa:ff:27:e2:02:6f:7b:de:e0:12:17:32:4d:61: fe:e2:75:2d:54:79:5d:7d:f4:f8:48:9d:70:6d:31:15:60:3d: b3:9b:c6:dc:39:e1:af:05:37:71:c9:79:95:e9:1d:75:9c:ae: 93:33:f5:a9:a5:18:51:f5:b6:49:99:fc:54:e8:84:d5:12:d4: 58:a9:fe:05:70:66:6d:0d:03:b5:3d:56:90:0e:ec:53:f0:71: 16:e7:ba:b3:15:6d:45:9f:66:c5:6c:2e:fc:d8:76:66:3d:f5: cf:8f:ec:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jg6eGHVEr7vZ9VgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NmY4M2YxYTQtM2RmMS00ZWEyLWI5OGMtZmU5NjY3YTAxNmFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhOvekkdXQNzDm/3F+2DXUP19AHLu+k83Ym4f 1JHWcT9QjhpOEEXTVDwzmMvppSFKgaoKl+V4BrU5PiccszHHqNHlAkIKaFQDd2kd lRrYZiGrEKPXOagx1sXOlMhEfz+9EpJQKKaNYOUzoxLj0RPQoH9RAEPb7fW+LFmO mkVLAHxN8ZW/MzCOFT39ZMKbY1HcdBJIk9WYvKfTWxSeTnpNg2gaIVWAZ43/DNy+ pIaOzyBUYsMZoFnU5hhDoOgknYy0DlST05iEOYxAxgATLJyxFQ5x0rOe/mxRSBo8 wLzOniDKFkI7185VRUDfllOrL0iisPbgwkDe8JaOsVBmZSl+ywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDs9Sx88BRdtFGA05TXCofpt8eQXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNjIwYzk5MjEtNGY4MC0z NGRkLTg0MGUtMWMzNmIwN2I5NTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8XzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALTbsaKZ/92SpwUxplUUYzhguFvcaV1ejf2Ko+/FR0i4Pg+vXbyMVfMy 3BUcHpsVzgZ0SXIte5eiwyoiobTtvq1MwIe4Z9cVWdfzUR/wPmRnW/FWyOiYBNT1 1K/oUMcXYNAzm0VXZ/q2vSIdVivH2zC2FxnFUSmDPHezQj+RJOZef6tmDEVDoRJG gX928DOREF68zHH6/yfiAm973uASFzJNYf7idS1UeV199PhInXBtMRVgPbObxtw5 4a8FN3HJeZXpHXWcrpMz9amlGFH1tkmZ/FTohNUS1Fip/gVwZm0NA7U9VpAO7FPw cRbnurMVbUWfZsVsLvzYdmY99c+P7PQ= -----END CERTIFICATE-----Generated at Sat Oct 3 08:30:37 2026 by rpki-client