$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/72a70cba-3e79-3091-9028-5a95c5891014.roa File: 72a70cba-3e79-3091-9028-5a95c5891014.roa (raw, json) Hash identifier: yd9aZqlSt+kq4PfkEPCjxgiZdCTDoRHDcnuS3pFHgGM= Subject key identifier: E0:6F:2A:09:C3:61:73:76:81:7B:D0:A9:08:26:BC:A9:80:4E:EB:9C Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F49839818E7DB48CC59DEF900 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/72a70cba-3e79-3091-9028-5a95c5891014.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 99.197.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:83:98:18:e7:db:48:cc:59:de:f9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=7a1b1ccb-6d25-44c1-9244-82aa38f79b6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:62:3b:cb:73:d4:46:0b:b2:d7:2a:c4:d2:4f: eb:52:98:fd:65:3e:78:fd:a3:0b:fd:3f:37:e1:27: e5:c4:49:e5:6f:c4:9e:ba:55:8f:9e:f7:b5:83:cf: 13:06:c9:c7:17:f7:10:4d:cc:84:3b:c0:95:12:fd: 41:ce:cb:a2:47:4b:56:8b:20:d0:5f:e9:8a:6a:a6: 5f:01:33:d8:f4:e1:4a:ac:ad:4a:18:ba:91:1c:88: 69:ba:80:2e:f3:f4:3b:b3:f2:c8:19:56:c1:b8:41: d2:5a:cc:8e:2d:b0:5f:d0:4b:86:b7:00:5e:7d:be: 6f:df:a0:fa:ab:10:f7:d3:04:19:68:57:6c:96:aa: ab:b5:04:3b:de:89:7a:12:94:ef:75:c8:1b:ec:46: fc:b1:25:b0:1d:82:d8:33:1f:03:b2:ff:6b:80:5a: a3:05:36:1c:59:8e:4b:ac:01:80:ac:9c:ea:23:b6: c3:cd:47:b0:09:09:cb:4d:0b:1f:fa:8f:38:8a:99: 12:de:19:e1:7f:14:89:bc:34:8d:cd:5a:94:e8:35: 4f:8e:70:e5:ae:7f:4f:2a:5e:48:d5:45:4d:d5:35: 96:89:6e:d6:08:d3:4f:af:16:18:64:d7:0b:b0:62: 34:8d:39:a7:34:d8:72:8e:c9:ca:eb:d1:fd:c2:24: cd:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:6F:2A:09:C3:61:73:76:81:7B:D0:A9:08:26:BC:A9:80:4E:EB:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/72a70cba-3e79-3091-9028-5a95c5891014.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.197.87.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:12:71:db:c6:6a:b0:a5:33:8b:c8:3b:24:b4:18:b4:6f:bc: 2b:c7:cc:6e:25:cb:3a:2d:09:50:87:77:16:f3:57:67:47:27: 43:6a:38:dc:47:dc:08:3a:43:5e:74:2c:02:20:77:2a:34:e7: 24:59:ea:31:90:5d:e5:45:22:48:73:ba:85:e3:07:66:71:c6: 46:52:b3:15:b1:0b:4d:b3:de:6b:ea:9b:91:99:06:87:d7:58: 92:44:6d:47:6b:ae:67:64:3f:e8:de:50:a4:30:8c:e5:3e:94: 68:6b:6a:5c:01:09:66:f0:15:46:1a:94:82:4f:9a:58:3f:85: 18:5c:34:0f:9b:30:8b:d1:97:10:7d:24:4a:74:dc:c1:d9:f0: dc:c3:4d:98:06:a8:5d:bb:aa:2d:40:5d:7f:7e:6c:ae:1e:b2: ea:73:fd:13:de:ee:08:89:91:ea:7f:18:53:8e:93:4c:f7:4b: 84:b2:80:a7:75:71:78:26:c4:16:5c:d6:28:6b:c5:a8:7a:87: 82:9d:db:72:73:0b:9f:57:3b:04:f0:1f:54:1b:6e:3d:8a:d0: 1f:32:7e:e8:c4:a6:db:25:4a:8e:ec:0f:0e:3b:30:82:36:d2: a5:be:93:97:40:79:d8:f0:d0:0d:8f:7c:0b:d8:0e:be:a6:b4: 90:fa:2d:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jg5gY59tIzFne+QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk N2ExYjFjY2ItNmQyNS00NGMxLTkyNDQtODJhYTM4Zjc5YjZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWI7y3PURguy1yrE0k/rUpj9ZT54/aML/T83 4SflxEnlb8SeulWPnve1g88TBsnHF/cQTcyEO8CVEv1BzsuiR0tWiyDQX+mKaqZf ATPY9OFKrK1KGLqRHIhpuoAu8/Q7s/LIGVbBuEHSWsyOLbBf0EuGtwBefb5v36D6 qxD30wQZaFdslqqrtQQ73ol6EpTvdcgb7Eb8sSWwHYLYMx8Dsv9rgFqjBTYcWY5L rAGArJzqI7bDzUewCQnLTQsf+o84ipkS3hnhfxSJvDSNzVqU6DVPjnDlrn9PKl5I 1UVN1TWWiW7WCNNPrxYYZNcLsGI0jTmnNNhyjsnK69H9wiTN1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOBvKgnDYXN2gXvQqQgmvKmATuucMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNzJhNzBjYmEtM2U3OS0z MDkxLTkwMjgtNWE5NWM1ODkxMDE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8VXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJUScdvGarClM4vIOyS0GLRvvCvHzG4lyzotCVCHdxbzV2dHJ0NqONxH 3Ag6Q150LAIgdyo05yRZ6jGQXeVFIkhzuoXjB2ZxxkZSsxWxC02z3mvqm5GZBofX WJJEbUdrrmdkP+jeUKQwjOU+lGhralwBCWbwFUYalIJPmlg/hRhcNA+bMIvRlxB9 JEp03MHZ8NzDTZgGqF27qi1AXX9+bK4esupz/RPe7giJkep/GFOOk0z3S4SygKd1 cXgmxBZc1ihrxah6h4Kd23JzC59XOwTwH1Qbbj2K0B8yfujEptslSo7sDw47MII2 0qW+k5dAedjw0A2PfAvYDr6mtJD6LWc= -----END CERTIFICATE-----Generated at Sat Oct 10 16:27:48 2026 by rpki-client