$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7111cf17-6b3a-354a-81ce-2b231a72d5a6.roa File: 7111cf17-6b3a-354a-81ce-2b231a72d5a6.roa (raw, json) Hash identifier: 8FfPolobru53waWeIVjHdhnxABI182yo7R/jH+ra4GE= Subject key identifier: EC:64:FD:8F:93:A6:91:76:66:61:75:9A:C5:E4:6C:45:EA:73:76:28 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F49838F408CF792951FE00C00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7111cf17-6b3a-354a-81ce-2b231a72d5a6.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 99.196.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:83:8f:40:8c:f7:92:95:1f:e0:0c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=b9c97259-7b0f-45b9-b48f-ceb5f6f8a018 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:43:39:f9:59:f5:cd:d3:e1:c3:df:6b:6a:70: 69:7c:f5:cd:1f:b8:0a:33:b4:20:09:cc:5b:33:46: 14:fc:96:4e:25:44:e3:cd:aa:c2:4d:9d:8a:9b:25: 55:f1:3a:0e:64:9b:dc:4b:d7:91:db:c1:83:32:1d: 59:53:56:66:14:49:18:f9:e1:e1:bf:77:e8:f5:22: 1a:2e:50:85:b1:a3:4a:36:60:8c:57:77:7d:b1:1d: 04:ac:ac:f0:11:2c:bc:7a:45:bc:01:2c:ea:a4:2b: e5:7f:f9:47:df:89:31:74:d5:f2:a9:d4:41:30:87: 61:54:90:bc:6d:93:49:3f:71:cd:2d:6a:49:aa:00: 4f:41:73:2b:7c:ef:d6:6e:36:d1:ac:76:fd:70:a2: 08:31:72:02:f0:1b:23:65:2b:3a:a7:1f:6a:bc:7a: 55:ff:43:a5:56:eb:97:7d:b8:d9:a2:19:a2:20:f5: 4d:0a:8d:30:5a:6f:68:11:9a:70:0d:82:9f:e8:07: c6:01:1b:42:91:ca:10:de:27:1d:25:74:07:ea:e5: 4e:2d:3f:f2:cb:a0:a3:ca:b0:3e:e5:06:ef:55:34: 03:b8:37:b3:e3:0e:20:9d:32:30:4a:f0:a5:a2:c0: cf:63:01:d3:bf:9c:35:db:c2:9d:a7:5d:4b:34:b6: 72:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:64:FD:8F:93:A6:91:76:66:61:75:9A:C5:E4:6C:45:EA:73:76:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7111cf17-6b3a-354a-81ce-2b231a72d5a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.196.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:99:63:a9:25:8a:c5:f1:c5:ed:1e:73:c9:55:50:6a:da:01: fc:f9:aa:5d:ea:83:82:d0:39:b7:53:b3:20:0c:7e:73:c4:50: 56:dd:69:e3:9e:26:72:22:5f:3f:c4:26:61:20:f8:8a:9c:46: d1:e9:2f:7b:e0:d0:5d:05:ec:05:af:4d:1a:4e:3b:3a:2f:f2: db:ab:f7:a9:3d:fe:29:97:e5:d8:23:ec:dc:15:80:cf:ff:da: 06:56:e5:12:eb:8e:ac:d3:a7:22:84:c8:a3:41:99:83:3a:c6: e7:30:3b:fb:94:f5:18:29:45:56:7c:5e:cf:bd:c2:bf:af:5d: 86:d7:98:ab:46:88:ac:1b:73:d0:9f:48:5c:03:b2:e2:ea:e7: 3f:7c:da:6d:5c:7d:59:ae:79:a4:5f:ed:86:0c:fe:22:94:28: e9:66:a7:06:8c:23:b9:21:46:9f:fb:90:00:c5:12:14:08:d5: b8:0a:df:73:70:85:01:32:88:1a:8c:75:ac:57:42:11:61:c7: b9:96:c5:0c:b6:90:d1:78:dd:be:30:16:3f:21:61:54:38:0b: 13:eb:8f:ea:7b:f6:6f:92:89:63:f1:f5:99:5d:7b:23:7e:f0: c3:86:f9:f8:85:3c:fd:45:15:0e:8f:35:03:28:c3:c9:8d:ae: e6:05:fe:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jg49AjPeSlR/gDAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YjljOTcyNTktN2IwZi00NWI5LWI0OGYtY2ViNWY2ZjhhMDE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEM5+Vn1zdPhw99ranBpfPXNH7gKM7QgCcxb M0YU/JZOJUTjzarCTZ2KmyVV8ToOZJvcS9eR28GDMh1ZU1ZmFEkY+eHhv3fo9SIa LlCFsaNKNmCMV3d9sR0ErKzwESy8ekW8ASzqpCvlf/lH34kxdNXyqdRBMIdhVJC8 bZNJP3HNLWpJqgBPQXMrfO/WbjbRrHb9cKIIMXIC8BsjZSs6px9qvHpV/0OlVuuX fbjZohmiIPVNCo0wWm9oEZpwDYKf6AfGARtCkcoQ3icdJXQH6uVOLT/yy6CjyrA+ 5QbvVTQDuDez4w4gnTIwSvClosDPYwHTv5w128Kdp11LNLZyrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOxk/Y+TppF2ZmF1msXkbEXqc3YoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNzExMWNmMTctNmIzYS0z NTRhLTgxY2UtMmIyMzFhNzJkNWE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8TdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKiZY6klisXxxe0ec8lVUGraAfz5ql3qg4LQObdTsyAMfnPEUFbdaeOe JnIiXz/EJmEg+IqcRtHpL3vg0F0F7AWvTRpOOzov8tur96k9/imX5dgj7NwVgM// 2gZW5RLrjqzTpyKEyKNBmYM6xucwO/uU9RgpRVZ8Xs+9wr+vXYbXmKtGiKwbc9Cf SFwDsuLq5z982m1cfVmueaRf7YYM/iKUKOlmpwaMI7khRp/7kADFEhQI1bgK33Nw hQEyiBqMdaxXQhFhx7mWxQy2kNF43b4wFj8hYVQ4CxPrj+p79m+SiWPx9ZldeyN+ 8MOG+fiFPP1FFQ6PNQMow8mNruYF/gA= -----END CERTIFICATE-----Generated at Sun Sep 27 00:57:59 2026 by rpki-client