$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bd4f0ff9-a650-38e7-bf43-75822ec0cb69.roa File: bd4f0ff9-a650-38e7-bf43-75822ec0cb69.roa (raw, json) Hash identifier: 4MZgapUT1NbBhL5VrXbeOAehX8bZmn2wKskXwY2gvTY= Subject key identifier: 4E:54:11:0E:09:A4:7B:46:3C:5F:D4:5A:47:14:B9:F1:51:BD:59:5C Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584E059C05284F3E1C35AEF14540 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bd4f0ff9-a650-38e7-bf43-75822ec0cb69.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 7155 IP address blocks: 99.197.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9c:05:28:4f:3e:1c:35:ae:f1:45:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=b23e14de-f1b2-464c-883c-53b8c4a5f5d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:0d:07:c8:2f:02:fb:2c:f3:82:72:18:cd:e0: ee:dc:f3:bc:5a:1f:f3:11:bd:4c:27:c7:b8:e7:79: 5c:1d:32:6d:9e:c6:e5:7e:be:09:56:b0:9b:42:c6: db:ce:90:a9:51:bd:8a:2e:94:b1:90:7a:5c:28:67: b4:fd:e0:2e:64:37:6a:38:6f:80:de:31:7c:e4:42: 31:93:97:23:48:97:7b:3d:ff:0f:fc:2f:28:84:5c: 2a:a6:be:f1:0a:eb:00:9a:3b:4d:25:6a:ac:a0:8f: e6:01:f0:9d:fc:14:ca:b1:1a:27:36:5a:37:28:65: 89:ff:2a:79:3a:c1:c6:e5:fb:4e:eb:d9:4d:93:54: da:1b:b0:89:a8:8e:33:b5:02:46:12:0a:2c:d7:98: 3c:4b:4f:b3:23:51:df:ae:33:da:4f:15:6b:cd:de: 38:0a:1f:94:23:a8:80:5b:ed:6c:e9:a3:28:de:ed: 0a:de:ba:7b:84:e7:8a:45:6f:f9:c7:b3:70:b8:43: ed:03:1a:9a:5f:7f:92:eb:13:32:70:6d:95:5f:6f: 2b:24:39:ce:d8:ef:2d:1e:1d:32:d4:bf:76:8b:ea: 3e:ed:21:d8:f7:23:7b:21:20:ce:22:4e:6d:96:4d: 4d:3c:40:24:95:5c:4f:ec:b0:38:98:84:b0:2c:6c: a5:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:54:11:0E:09:A4:7B:46:3C:5F:D4:5A:47:14:B9:F1:51:BD:59:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bd4f0ff9-a650-38e7-bf43-75822ec0cb69.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.197.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:8d:6c:ec:0d:12:f3:f7:97:f7:c5:2b:13:17:40:a2:d4:d7: 9f:14:0f:2a:07:4e:3a:11:e1:a1:5b:49:6a:90:42:e7:d2:d5: 84:b6:d9:cb:71:bb:3e:91:b3:bc:dd:b4:83:ce:dd:af:7e:7e: 76:a8:58:5c:2e:09:d3:f3:e7:f0:96:ce:6f:bd:17:cb:fd:7c: e8:d2:14:eb:29:f5:17:1c:de:c7:4b:08:a9:f5:64:70:62:79: e5:69:cc:ff:44:59:f4:d7:0e:95:5b:3f:c3:03:6c:c3:b2:2e: 65:49:19:65:a6:b9:ea:94:28:9f:55:bd:be:9e:9c:20:a3:5b: 26:1e:dc:e1:86:8f:b1:84:1e:ec:77:e6:a1:7c:7b:9e:6a:ac: 85:29:87:67:07:b0:cf:76:79:b8:55:e2:b9:6f:45:56:b9:b9: 82:e1:2a:ce:d2:6d:23:67:60:d4:9c:95:69:90:d7:0d:ab:b7: 4f:b3:10:62:6c:c2:7a:87:76:82:14:35:1e:db:ba:80:63:69: 1f:70:3a:b3:fc:e3:df:71:83:38:ab:a3:7e:95:04:55:36:d9: a0:8d:e7:25:46:c9:bd:f7:dd:63:4b:11:45:63:bc:b0:fb:bc: 89:4a:32:ea:89:ad:20:66:4d:1c:88:7c:e9:68:e4:07:8c:57: 59:37:63:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4FnAUoTz4cNa7xRUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk YjIzZTE0ZGUtZjFiMi00NjRjLTg4M2MtNTNiOGM0YTVmNWQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxA0HyC8C+yzzgnIYzeDu3PO8Wh/zEb1MJ8e4 53lcHTJtnsblfr4JVrCbQsbbzpCpUb2KLpSxkHpcKGe0/eAuZDdqOG+A3jF85EIx k5cjSJd7Pf8P/C8ohFwqpr7xCusAmjtNJWqsoI/mAfCd/BTKsRonNlo3KGWJ/yp5 OsHG5ftO69lNk1TaG7CJqI4ztQJGEgos15g8S0+zI1HfrjPaTxVrzd44Ch+UI6iA W+1s6aMo3u0K3rp7hOeKRW/5x7NwuEPtAxqaX3+S6xMycG2VX28rJDnO2O8tHh0y 1L92i+o+7SHY9yN7ISDOIk5tlk1NPEAklVxP7LA4mISwLGyl7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE5UEQ4JpHtGPF/UWkcUufFRvVlcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYmQ0ZjBmZjktYTY1MC0z OGU3LWJmNDMtNzU4MjJlYzBjYjY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8UUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGKNbOwNEvP3l/fFKxMXQKLU158UDyoHTjoR4aFbSWqQQufS1YS22ctx uz6Rs7zdtIPO3a9+fnaoWFwuCdPz5/CWzm+9F8v9fOjSFOsp9Rcc3sdLCKn1ZHBi eeVpzP9EWfTXDpVbP8MDbMOyLmVJGWWmueqUKJ9Vvb6enCCjWyYe3OGGj7GEHux3 5qF8e55qrIUph2cHsM92ebhV4rlvRVa5uYLhKs7SbSNnYNSclWmQ1w2rt0+zEGJs wnqHdoIUNR7buoBjaR9wOrP8499xgziro36VBFU22aCN5yVGyb333WNLEUVjvLD7 vIlKMuqJrSBmTRyIfOlo5AeMV1k3Y2g= -----END CERTIFICATE-----Generated at Sat Jun 13 20:55:03 2026 by rpki-client