$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b573865c-3e79-30e1-9f03-72fc0a1173bd.roa File: b573865c-3e79-30e1-9f03-72fc0a1173bd.roa (raw, json) Hash identifier: /EYB2DqkFFiSLe9LvslA+SodBYtCXxiYl5fa63zJ9Ts= Subject key identifier: CA:C0:3A:FB:7C:8E:87:33:3C:7E:FE:25:43:89:C9:9E:2F:20:8D:36 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584EA79D628644D99AF2B11BAA80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b573865c-3e79-30e1-9f03-72fc0a1173bd.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 40306 IP address blocks: 99.196.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9d:62:86:44:d9:9a:f2:b1:1b:aa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=4f0fd4b9-2fa5-4ed3-b0b7-60007a72bd9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:38:ac:99:9b:a6:ba:00:e3:5a:95:72:16:93: 53:35:fa:04:4e:58:e0:3b:d9:e3:26:3b:c6:8d:2d: 6a:21:17:d0:7b:18:c6:3c:d3:20:a6:e7:3d:6a:c1: 04:83:5a:ff:3a:aa:1e:d9:be:ec:ce:c4:87:3a:c0: 02:5c:67:01:ea:57:2e:7c:fe:d0:4d:f2:79:41:80: c7:19:0d:55:e1:9e:c2:62:1d:1e:d5:da:d4:df:99: aa:9e:fe:96:04:42:78:5b:40:32:7d:31:03:34:9f: 8a:20:7b:a6:8c:8e:2b:94:18:e8:c4:5e:82:be:ac: ff:38:01:a3:98:1b:7e:2e:dc:53:fa:bc:26:63:b1: ba:29:6b:0a:d3:b4:d8:0a:d7:c1:9a:b1:5c:ff:36: 94:6d:97:10:4d:c9:2c:87:4d:17:3c:f5:58:94:2d: 23:63:07:b7:56:a6:b2:1b:d7:46:dc:a1:82:9a:03: 75:df:ed:5d:78:b1:73:91:37:75:18:ec:f5:21:e8: aa:8a:2d:ef:da:89:56:ab:9a:b9:74:cb:30:8b:4d: 44:8e:2f:4a:be:93:e7:fc:ec:f9:38:84:32:52:3c: d5:0c:fd:0e:58:a9:ff:79:2c:ae:ff:9e:02:3a:f9: 4e:5d:fc:92:e2:20:01:b1:0f:20:52:da:c4:58:f2: 70:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:C0:3A:FB:7C:8E:87:33:3C:7E:FE:25:43:89:C9:9E:2F:20:8D:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b573865c-3e79-30e1-9f03-72fc0a1173bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.196.122.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:b3:14:9e:15:69:b1:89:be:c8:f1:dd:9b:b5:2c:39:d3:b6: 3b:d0:f7:a5:b6:38:57:ef:33:52:22:eb:45:a3:3d:fa:14:05: 17:2a:c8:b0:56:a3:67:49:79:b7:9a:01:4c:58:2d:8f:0f:f6: d7:eb:75:f8:03:a6:6f:6f:d1:3d:d4:4b:a1:16:59:a4:2c:0e: b9:04:a6:d9:4d:04:60:47:1e:a9:4b:d1:16:bf:d8:ad:56:b7: b7:3d:00:4d:db:9c:0c:b6:c6:55:5f:14:e9:e9:c4:ea:1d:28: f9:d1:c5:69:5c:d3:3b:f6:d6:55:e4:cc:75:69:07:cc:b6:56: df:f0:d9:a0:1d:f9:9c:bd:f6:38:f1:3e:6e:bc:c2:d8:c1:d8: 22:f0:3c:91:52:32:ca:90:22:64:bd:68:a3:b2:66:21:c9:eb: 53:08:72:3c:02:d2:48:34:f2:37:a5:01:b2:6e:c0:67:31:f3: 6b:72:0e:81:8a:94:9d:59:26:79:62:81:a1:bb:be:8f:22:79: bf:08:1b:6b:fb:23:91:8b:e0:7e:d9:12:fd:57:dd:52:b6:04: fd:bb:0d:63:1d:13:3f:5d:6a:60:98:a7:35:a9:1e:13:57:cc: a7:09:de:08:4b:7b:b8:0f:8b:53:0a:78:e9:38:97:0b:23:a7: 4b:e6:89:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnWKGRNma8rEbqoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NGYwZmQ0YjktMmZhNS00ZWQzLWIwYjctNjAwMDdhNzJiZDliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTismZumugDjWpVyFpNTNfoETljgO9njJjvG jS1qIRfQexjGPNMgpuc9asEEg1r/Oqoe2b7szsSHOsACXGcB6lcufP7QTfJ5QYDH GQ1V4Z7CYh0e1drU35mqnv6WBEJ4W0AyfTEDNJ+KIHumjI4rlBjoxF6Cvqz/OAGj mBt+LtxT+rwmY7G6KWsK07TYCtfBmrFc/zaUbZcQTcksh00XPPVYlC0jYwe3Vqay G9dG3KGCmgN13+1deLFzkTd1GOz1Ieiqii3v2olWq5q5dMswi01Eji9KvpPn/Oz5 OIQyUjzVDP0OWKn/eSyu/54COvlOXfyS4iABsQ8gUtrEWPJwgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMrAOvt8joczPH7+JUOJyZ4vII02MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYjU3Mzg2NWMtM2U3OS0z MGUxLTlmMDMtNzJmYzBhMTE3M2JkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8R6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHWzFJ4VabGJvsjx3Zu1LDnTtjvQ96W2OFfvM1Ii60WjPfoUBRcqyLBW o2dJebeaAUxYLY8P9tfrdfgDpm9v0T3US6EWWaQsDrkEptlNBGBHHqlL0Ra/2K1W t7c9AE3bnAy2xlVfFOnpxOodKPnRxWlc0zv21lXkzHVpB8y2Vt/w2aAd+Zy99jjx Pm68wtjB2CLwPJFSMsqQImS9aKOyZiHJ61MIcjwC0kg08jelAbJuwGcx82tyDoGK lJ1ZJnligaG7vo8ieb8IG2v7I5GL4H7ZEv1X3VK2BP27DWMdEz9damCYpzWpHhNX zKcJ3ghLe7gPi1MKeOk4lwsjp0vmiWA= -----END CERTIFICATE-----Generated at Wed Jul 29 10:13:30 2026 by rpki-client