$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cb111f55-6e3e-3cb7-a064-c87841a0e1ea.roa File: cb111f55-6e3e-3cb7-a064-c87841a0e1ea.roa (raw, json) Hash identifier: ZRvQskPqDzfr2juFFtjNVbZnsQzEa5IfLU9yuwQNTGw= Subject key identifier: D6:8C:FB:27:B5:F4:5B:78:F4:21:47:A2:EC:40:F9:D8:17:6F:F1:31 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F49839C5FF1829DF2DC6CC880 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cb111f55-6e3e-3cb7-a064-c87841a0e1ea.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 99.197.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:83:9c:5f:f1:82:9d:f2:dc:6c:c8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=a579c85c-e8f0-44e2-851e-ecc0aa40beb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:33:0c:a3:1c:d2:8c:ac:95:bb:15:9a:bc:7d: 23:49:d7:a2:ca:ce:e9:4e:ad:13:44:1d:8e:e8:35: 62:8c:ee:ed:9c:0b:69:78:3b:96:fc:6c:e7:0b:c1: 1a:0a:2c:41:fc:22:90:27:b4:65:cd:40:80:71:73: 07:c0:ef:91:4f:98:0a:5f:a1:fb:96:bc:49:c7:fa: 1d:34:43:cc:f8:a6:eb:18:5b:27:16:2a:47:50:6c: 39:99:83:df:24:e9:1c:71:9a:5b:2a:d8:c2:4e:e7: a0:ef:3b:14:bc:8d:c3:c8:8c:72:6d:86:6a:78:9b: ca:ac:06:61:56:7e:72:44:cc:95:b5:c8:ab:66:71: 88:f0:70:df:eb:db:55:cd:6a:a3:18:72:74:ff:92: eb:f8:a8:a1:f2:4b:ac:94:6f:1a:3e:fe:f8:fc:8e: d3:42:66:c8:ed:22:fe:b4:04:51:18:62:d3:cb:e0: 4d:96:73:32:a0:cd:3f:ed:11:bb:41:b4:b8:02:48: be:3f:92:5a:28:db:cc:41:56:90:90:d7:1a:3f:50: d4:90:ec:c6:22:0b:ba:54:d7:34:13:33:39:a1:ba: 5e:9a:99:a2:b4:b6:81:32:40:d4:1b:5d:7b:aa:cc: ba:46:39:2c:3b:68:9c:10:4f:69:fd:eb:80:f7:44: 18:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:8C:FB:27:B5:F4:5B:78:F4:21:47:A2:EC:40:F9:D8:17:6F:F1:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cb111f55-6e3e-3cb7-a064-c87841a0e1ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.197.118.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ce:97:30:d5:b8:81:8f:bd:74:e3:00:f2:ae:9d:7e:26:17:82: 97:5c:9d:c6:46:a8:3e:29:20:65:d5:9b:a6:eb:d6:a3:7e:53: 60:d4:16:d7:b3:d2:9c:63:e2:52:b3:dd:21:8d:d9:f9:a3:0a: ad:d8:cd:a0:05:17:7f:c2:87:f0:23:a5:63:d7:ae:bb:72:2e: d0:cc:ea:20:01:5d:e4:66:ef:32:ea:1c:bd:43:74:82:e7:5f: e9:6b:40:d9:1e:ef:67:3a:8a:9d:e7:78:90:de:3f:05:b8:64: a1:63:6c:90:ed:62:ce:12:4f:52:a7:e6:e6:79:bf:20:ca:7d: 73:29:bb:5b:29:8d:51:d4:2b:18:04:d2:48:3f:b7:63:0e:14: 0f:a2:d9:91:ca:42:6c:9b:b5:83:70:69:b9:c6:23:d8:ce:12: b4:88:ae:fd:10:af:be:81:33:94:a9:84:19:b8:d5:7d:85:8f: 79:b6:03:fa:7a:e7:e5:2f:b4:3e:be:51:64:7e:ac:7d:86:c8: d5:79:8a:66:0c:b3:c1:72:54:00:3e:15:55:9b:f1:c2:b9:5b: fc:57:57:36:63:81:06:c9:79:21:9a:28:4b:e9:d2:fc:c5:a8: 15:d1:dc:21:86:15:46:3f:45:47:d0:e3:e5:75:2f:a0:cf:cd: 71:fb:28:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jg5xf8YKd8txsyIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YTU3OWM4NWMtZThmMC00NGUyLTg1MWUtZWNjMGFhNDBiZWI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDMMoxzSjKyVuxWavH0jSdeiys7pTq0TRB2O 6DVijO7tnAtpeDuW/GznC8EaCixB/CKQJ7RlzUCAcXMHwO+RT5gKX6H7lrxJx/od NEPM+KbrGFsnFipHUGw5mYPfJOkccZpbKtjCTueg7zsUvI3DyIxybYZqeJvKrAZh Vn5yRMyVtcirZnGI8HDf69tVzWqjGHJ0/5Lr+Kih8kuslG8aPv74/I7TQmbI7SL+ tARRGGLTy+BNlnMyoM0/7RG7QbS4Aki+P5JaKNvMQVaQkNcaP1DUkOzGIgu6VNc0 EzM5obpempmitLaBMkDUG117qsy6RjksO2icEE9p/euA90QYUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNaM+ye19Ft49CFHouxA+dgXb/ExMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvY2IxMTFmNTUtNmUzZS0z Y2I3LWEwNjQtYzg3ODQxYTBlMWVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8V2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM6XMNW4gY+9dOMA8q6dfiYXgpdcncZGqD4pIGXVm6br1qN+U2DUFtez 0pxj4lKz3SGN2fmjCq3YzaAFF3/Ch/AjpWPXrrtyLtDM6iABXeRm7zLqHL1DdILn X+lrQNke72c6ip3neJDePwW4ZKFjbJDtYs4ST1Kn5uZ5vyDKfXMpu1spjVHUKxgE 0kg/t2MOFA+i2ZHKQmybtYNwabnGI9jOErSIrv0Qr76BM5SphBm41X2Fj3m2A/p6 5+UvtD6+UWR+rH2GyNV5imYMs8FyVAA+FVWb8cK5W/xXVzZjgQbJeSGaKEvp0vzF qBXR3CGGFUY/RUfQ4+V1L6DPzXH7KHg= -----END CERTIFICATE-----Generated at Mon Sep 28 19:23:34 2026 by rpki-client