$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/da23e1f8-f0dc-391d-b86d-a240967db45e.roa File: da23e1f8-f0dc-391d-b86d-a240967db45e.roa (raw, json) Hash identifier: 6TUstZ/unZ/tGOvsDiGqR4Y0sGKVvQUe3SFQsFp0E8s= Subject key identifier: E7:AA:8B:CC:9A:E1:73:11:B2:F2:A4:E1:AF:FC:AB:69:C1:4C:41:E2 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584E059B8D2542844127F75E1800 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/da23e1f8-f0dc-391d-b86d-a240967db45e.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 7155 IP address blocks: 99.197.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9b:8d:25:42:84:41:27:f7:5e:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=4fc9e7fc-8813-4301-bcc8-6d72835e0238 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:cd:9d:11:65:7a:7e:05:34:02:60:63:67:de: 37:71:c2:ba:dc:ed:2f:31:94:d7:35:67:89:e0:e6: 75:7f:7c:88:d3:0b:e8:21:fd:24:78:aa:e9:6f:99: d6:1a:28:ff:d8:cd:09:b5:99:10:fe:6c:b0:8a:c6: 1d:0c:0a:23:da:a7:1d:45:5d:18:da:63:47:66:d9: aa:e7:08:9a:f6:c3:8d:37:07:45:42:e4:ac:62:67: e2:e7:50:7e:2a:e4:51:a5:e1:d8:ad:de:62:67:34: 0c:b9:bd:e2:23:01:f6:77:d1:28:82:58:12:c5:99: 20:ba:70:a7:5f:bf:75:05:14:79:ad:15:ac:07:fc: 3b:6d:46:93:84:7f:2f:4d:10:5e:c9:a9:33:40:9a: 5f:67:cc:85:ea:9f:12:64:f1:fd:14:2b:16:73:f6: 21:86:30:b9:d1:8f:1e:8e:c0:f6:4b:a3:2d:98:f6: 5b:11:cc:c8:53:1b:73:2a:81:13:61:87:c4:3c:d6: 9f:f9:60:91:20:a9:86:88:fa:de:89:3e:6b:30:29: 8d:ea:a0:43:ee:a0:49:01:35:a2:08:4f:27:b2:3a: 07:c3:bb:6f:b6:37:e6:3a:eb:dc:46:4b:ea:4e:9f: f8:1c:51:de:92:a9:bb:21:37:80:76:f4:4b:9c:71: 8a:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:AA:8B:CC:9A:E1:73:11:B2:F2:A4:E1:AF:FC:AB:69:C1:4C:41:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/da23e1f8-f0dc-391d-b86d-a240967db45e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.197.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:5e:68:50:eb:0d:16:9f:fc:5d:5f:3d:c8:d9:e6:29:d0:b3: 29:55:11:f5:82:54:31:f0:dd:b9:7e:24:e0:2e:56:f8:00:a2: 76:90:08:f1:58:f8:99:2a:25:9a:da:92:3b:c7:ea:3e:f7:a0: a9:fc:77:4c:9e:1d:97:54:27:73:f5:c0:fb:39:d1:26:b2:a5: 99:2d:05:10:e1:8b:51:82:85:70:66:20:2b:14:7c:99:0a:df: 27:08:38:b8:aa:9a:42:b3:a2:80:e5:a6:4b:9f:05:63:64:82: 29:d3:e3:7e:a7:80:6a:b0:33:0d:3b:6f:14:88:dc:a0:8b:b6: df:54:3a:7f:51:19:7a:49:ac:27:75:34:f3:fe:ff:27:cc:d6: ad:a8:88:16:e8:8b:4b:ea:9a:05:2f:56:41:b6:13:4f:44:3d: 48:d1:0a:14:54:29:7b:64:d4:04:85:65:5c:1f:2d:fb:05:84: e5:7f:ff:aa:ff:c4:ca:95:6b:43:d9:56:80:c9:31:e0:6c:49: 20:20:67:7a:0c:be:e9:32:23:ea:7d:cb:0d:2c:81:e1:64:a7: de:ed:58:a8:c9:25:73:23:54:b2:bb:c0:75:ac:df:3b:e7:97: dc:49:72:b6:47:19:64:3b:75:29:5b:1b:53:4d:11:d9:17:24: 3d:29:ce:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Fm40lQoRBJ/deGAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk NGZjOWU3ZmMtODgxMy00MzAxLWJjYzgtNmQ3MjgzNWUwMjM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7s2dEWV6fgU0AmBjZ943ccK63O0vMZTXNWeJ 4OZ1f3yI0wvoIf0keKrpb5nWGij/2M0JtZkQ/mywisYdDAoj2qcdRV0Y2mNHZtmq 5wia9sONNwdFQuSsYmfi51B+KuRRpeHYrd5iZzQMub3iIwH2d9EoglgSxZkgunCn X791BRR5rRWsB/w7bUaThH8vTRBeyakzQJpfZ8yF6p8SZPH9FCsWc/YhhjC50Y8e jsD2S6MtmPZbEczIUxtzKoETYYfEPNaf+WCRIKmGiPreiT5rMCmN6qBD7qBJATWi CE8nsjoHw7tvtjfmOuvcRkvqTp/4HFHekqm7ITeAdvRLnHGKJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOeqi8ya4XMRsvKk4a/8q2nBTEHiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZGEyM2UxZjgtZjBkYy0z OTFkLWI4NmQtYTI0MDk2N2RiNDVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8XZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKNeaFDrDRaf/F1fPcjZ5inQsylVEfWCVDHw3bl+JOAuVvgAonaQCPFY +JkqJZrakjvH6j73oKn8d0yeHZdUJ3P1wPs50SaypZktBRDhi1GChXBmICsUfJkK 3ycIOLiqmkKzooDlpkufBWNkginT436ngGqwMw07bxSI3KCLtt9UOn9RGXpJrCd1 NPP+/yfM1q2oiBboi0vqmgUvVkG2E09EPUjRChRUKXtk1ASFZVwfLfsFhOV//6r/ xMqVa0PZVoDJMeBsSSAgZ3oMvukyI+p9yw0sgeFkp97tWKjJJXMjVLK7wHWs3zvn l9xJcrZHGWQ7dSlbG1NNEdkXJD0pzlU= -----END CERTIFICATE-----Generated at Sat Jun 13 23:33:10 2026 by rpki-client