$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8f34fc7d-d61e-3cf3-817b-eb04f4475ded.roa File: 8f34fc7d-d61e-3cf3-817b-eb04f4475ded.roa (raw, json) Hash identifier: MIg3nWVhgkrYG12TI1zVTtV2FQyVZDmor5GWZITaZOc= Subject key identifier: BA:98:17:96:20:50:1A:67:8D:9C:55:AF:29:3C:1F:0B:23:76:83:F5 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584E059C0CF797D589092F50D980 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8f34fc7d-d61e-3cf3-817b-eb04f4475ded.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 7155 IP address blocks: 99.198.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9c:0c:f7:97:d5:89:09:2f:50:d9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=f4f7ebbe-84e4-41c3-a9fe-f10c947b1827 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:7f:7a:f9:cd:73:97:6c:c4:c3:4f:a4:bd:2e: 53:0b:4f:b3:58:d9:64:a3:08:18:27:ef:ec:49:02: b8:3c:6f:e5:cc:31:8c:c4:f1:45:5e:a4:cb:be:7f: c3:e3:2e:f9:d1:43:76:42:91:d2:94:98:c4:c3:d9: 2b:ef:31:7f:3e:cf:6f:9e:32:99:d2:d2:4a:0d:88: e7:12:b7:6c:a4:3b:2d:da:db:b2:2b:31:4c:02:2d: a0:74:ca:da:6e:c7:34:3d:77:bd:d7:fb:1a:c0:a5: 46:85:82:bb:15:20:bf:ba:db:91:0e:c8:83:bc:76: 4b:5c:7a:4d:c0:b9:7c:6a:10:b9:d5:03:3e:01:fb: 64:08:6a:28:e2:9b:c5:b9:54:6c:c1:fa:71:8b:80: 42:da:fa:d5:9d:b1:e3:42:fb:53:c5:b1:50:72:e7: a6:06:45:5e:f3:70:20:70:7c:1b:63:90:c0:0e:6d: 7f:6a:06:23:a1:31:95:cd:14:a6:39:3f:62:05:52: aa:72:ac:00:12:12:9c:31:a7:62:ab:24:3e:11:b1: b1:e9:86:1f:86:7e:9f:45:23:10:6a:99:90:2e:54: 67:38:96:35:d9:7c:85:d4:79:84:4e:98:6c:ac:69: 1b:be:f3:04:f7:30:7b:56:13:ea:a2:30:22:35:61: 2f:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:98:17:96:20:50:1A:67:8D:9C:55:AF:29:3C:1F:0B:23:76:83:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8f34fc7d-d61e-3cf3-817b-eb04f4475ded.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.198.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:f7:74:1d:32:c5:86:0f:ff:7e:15:37:60:92:2b:0b:e4:98: 40:89:88:2e:c2:ff:1e:5d:7e:e9:e6:be:62:ad:19:1a:c3:27: fe:e8:3a:04:19:93:4e:c3:6e:b1:04:44:a5:b0:42:21:0c:58: dd:a9:21:52:a2:7d:16:87:3f:c0:70:29:51:1a:76:ca:47:3e: 26:ce:28:29:9c:e5:da:ef:59:aa:91:ef:28:00:63:0b:a4:0f: 4a:8d:fc:3d:44:a4:32:65:86:fb:cb:93:18:5e:8e:54:0b:c4: 75:9f:92:fb:c1:2b:00:1f:67:86:a3:9d:ae:10:05:b3:4d:64: 9a:6c:78:c9:da:10:97:7c:7e:ce:c8:d6:f4:d8:76:7e:a9:37: 24:8c:28:f3:13:b9:cb:9d:27:c8:8f:fb:6a:00:6e:4f:8d:f1: cb:a1:49:ec:d1:35:66:7c:76:a8:a8:40:61:f3:73:f9:51:53: a6:19:d1:e5:5c:91:2e:94:ff:22:cc:3f:9c:1c:de:dd:46:0d: 0c:20:21:e3:fc:30:68:48:63:47:8a:17:9c:4a:6d:72:1f:5b: b0:b3:e1:3b:24:0b:f9:f3:98:d3:1e:18:3b:69:62:91:91:c9: c2:22:09:fb:cc:9b:16:85:2b:69:2c:6d:65:2f:b9:6a:0e:12: 8c:d4:50:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4FnAz3l9WJCS9Q2YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk ZjRmN2ViYmUtODRlNC00MWMzLWE5ZmUtZjEwYzk0N2IxODI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnX96+c1zl2zEw0+kvS5TC0+zWNlkowgYJ+/s SQK4PG/lzDGMxPFFXqTLvn/D4y750UN2QpHSlJjEw9kr7zF/Ps9vnjKZ0tJKDYjn ErdspDst2tuyKzFMAi2gdMrabsc0PXe91/sawKVGhYK7FSC/utuRDsiDvHZLXHpN wLl8ahC51QM+AftkCGoo4pvFuVRswfpxi4BC2vrVnbHjQvtTxbFQcuemBkVe83Ag cHwbY5DADm1/agYjoTGVzRSmOT9iBVKqcqwAEhKcMadiqyQ+EbGx6YYfhn6fRSMQ apmQLlRnOJY12XyF1HmETphsrGkbvvME9zB7VhPqojAiNWEv+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLqYF5YgUBpnjZxVryk8HwsjdoP1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOGYzNGZjN2QtZDYxZS0z Y2YzLTgxN2ItZWIwNGY0NDc1ZGVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8ZEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJr3dB0yxYYP/34VN2CSKwvkmECJiC7C/x5dfunmvmKtGRrDJ/7oOgQZ k07DbrEERKWwQiEMWN2pIVKifRaHP8BwKVEadspHPibOKCmc5drvWaqR7ygAYwuk D0qN/D1EpDJlhvvLkxhejlQLxHWfkvvBKwAfZ4ajna4QBbNNZJpseMnaEJd8fs7I 1vTYdn6pNySMKPMTucudJ8iP+2oAbk+N8cuhSezRNWZ8dqioQGHzc/lRU6YZ0eVc kS6U/yLMP5wc3t1GDQwgIeP8MGhIY0eKF5xKbXIfW7Cz4TskC/nzmNMeGDtpYpGR ycIiCfvMmxaFK2ksbWUvuWoOEozUUP4= -----END CERTIFICATE-----Generated at Sat Jun 13 18:00:35 2026 by rpki-client