$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7c9c8c1a-ef91-3ba2-9b8e-aa821022ac73.roa File: 7c9c8c1a-ef91-3ba2-9b8e-aa821022ac73.roa (raw, json) Hash identifier: 1L6Co7FSZxiXQKMxps8jY5VOEa5ZFj7kYQlhQOlrQsw= Subject key identifier: 1B:BF:41:75:11:AF:B1:10:A4:8E:34:78:8C:B8:BF:22:5B:3D:7F:46 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F497B797EC78BFEEAFCCC41D0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7c9c8c1a-ef91-3ba2-9b8e-aa821022ac73.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 99.198.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7b:79:7e:c7:8b:fe:ea:fc:cc:41:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=78c9db14-e94c-44d8-92e1-9672e268a25a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:bf:80:d1:7e:bd:a6:17:96:e8:f6:a5:11:0f: a8:b8:a9:4f:89:78:27:38:0c:7a:81:2d:3f:2a:8b: e1:e9:3d:c0:fd:09:f9:62:81:47:3c:df:fe:fc:5f: 74:86:7c:a7:5b:ab:4a:9d:1a:d6:cc:f8:d4:99:cb: b1:c9:85:de:10:d3:3e:4b:c6:13:c3:c8:ba:c2:f2: 1e:92:f1:2b:67:b9:e7:11:ff:33:6b:f6:6b:a4:c2: e9:6e:49:e1:de:0f:2c:51:d0:b4:ee:4e:eb:b0:47: fa:80:04:ea:7c:c7:f7:75:d9:bc:e4:ad:29:2b:5c: 90:40:b5:79:95:ba:5c:88:e7:bf:0b:a5:57:64:b5: a9:c6:2a:1d:d9:26:d1:d2:75:dc:7b:75:06:18:5d: 3d:03:11:0e:1f:75:22:fa:21:09:79:4e:4e:1b:02: 10:d6:18:fd:6a:94:02:27:8c:e1:06:a8:a3:61:75: 72:9d:2a:0a:6c:d1:9a:45:16:4f:4f:3f:86:92:79: 40:ee:da:db:cd:ef:cc:0a:1e:48:2b:d5:2b:68:8b: 0e:c4:95:8a:a0:59:3f:94:30:aa:90:16:57:bd:77: 8d:94:05:d9:65:56:d7:04:50:39:fc:55:a7:84:10: 21:0e:eb:f3:21:87:e7:86:59:8e:f6:6c:d6:07:f8: bb:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:BF:41:75:11:AF:B1:10:A4:8E:34:78:8C:B8:BF:22:5B:3D:7F:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7c9c8c1a-ef91-3ba2-9b8e-aa821022ac73.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.198.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:b8:ef:c0:60:a6:96:69:2e:9a:5e:3b:ed:08:99:d5:57:12: 0a:c2:48:b8:ae:35:1d:1c:bb:5d:b9:68:fb:a5:b2:2d:a9:50: 3a:e6:9f:a4:fe:aa:0e:d8:6a:ff:c4:56:98:61:34:ea:11:5b: 09:f5:4a:c2:63:56:36:4c:9e:ca:3a:10:b1:23:b1:5c:70:26: b1:b5:64:88:fa:f1:7c:ad:0b:ab:d5:45:37:4c:bc:c2:52:05: d6:0c:ab:33:90:4e:bd:a9:eb:1d:1a:ba:a2:d5:00:cc:3a:4e: 06:f5:68:f4:02:69:bd:2e:08:e4:82:09:a6:32:be:5e:eb:f7: e9:3d:b4:9b:93:21:3a:fa:42:9a:21:73:f7:17:90:22:d8:85: 4f:c2:d0:3b:e5:54:fd:80:3d:54:3e:fd:0b:51:d4:76:4a:92: 2d:9c:74:20:a6:f2:84:be:cc:1b:1b:80:47:c8:66:47:17:05: ee:fb:aa:48:27:4a:ca:c7:9a:ac:0f:6a:7a:60:a8:92:bc:98: 49:ee:65:1a:01:46:e7:7b:4d:2c:5f:77:93:87:93:34:0c:51: 46:e6:ef:61:6a:a1:31:9d:31:e2:15:d4:63:4d:97:c6:a6:c5: f9:bd:b1:cc:6e:ee:fc:b5:f2:da:3b:ef:ae:66:7c:80:1d:8f: 38:ff:cc:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Je3l+x4v+6vzMQdAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NzhjOWRiMTQtZTk0Yy00NGQ4LTkyZTEtOTY3MmUyNjhhMjVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgr+A0X69pheW6PalEQ+ouKlPiXgnOAx6gS0/ Kovh6T3A/Qn5YoFHPN/+/F90hnynW6tKnRrWzPjUmcuxyYXeENM+S8YTw8i6wvIe kvErZ7nnEf8za/ZrpMLpbknh3g8sUdC07k7rsEf6gATqfMf3ddm85K0pK1yQQLV5 lbpciOe/C6VXZLWpxiod2SbR0nXce3UGGF09AxEOH3Ui+iEJeU5OGwIQ1hj9apQC J4zhBqijYXVynSoKbNGaRRZPTz+GknlA7trbze/MCh5IK9UraIsOxJWKoFk/lDCq kBZXvXeNlAXZZVbXBFA5/FWnhBAhDuvzIYfnhlmO9mzWB/i73QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBu/QXURr7EQpI40eIy4vyJbPX9GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvN2M5YzhjMWEtZWY5MS0z YmEyLTliOGUtYWE4MjEwMjJhYzczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8YgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADW478BgppZpLppeO+0ImdVXEgrCSLiuNR0cu125aPulsi2pUDrmn6T+ qg7Yav/EVphhNOoRWwn1SsJjVjZMnso6ELEjsVxwJrG1ZIj68XytC6vVRTdMvMJS BdYMqzOQTr2p6x0auqLVAMw6Tgb1aPQCab0uCOSCCaYyvl7r9+k9tJuTITr6Qpoh c/cXkCLYhU/C0DvlVP2APVQ+/QtR1HZKki2cdCCm8oS+zBsbgEfIZkcXBe77qkgn SsrHmqwPanpgqJK8mEnuZRoBRud7TSxfd5OHkzQMUUbm72FqoTGdMeIV1GNNl8am xfm9scxu7vy18to7765mfIAdjzj/zE0= -----END CERTIFICATE-----Generated at Sat Sep 26 23:17:02 2026 by rpki-client