$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f12603f8-1037-3dbe-85e6-a1c173ed8d3e.roa File: f12603f8-1037-3dbe-85e6-a1c173ed8d3e.roa (raw, json) Hash identifier: zMWI6NQaeGasr5re05QOjBNMqTW3idwQChcdmnB8g5c= Subject key identifier: 28:40:D0:23:FE:78:A4:25:02:3C:FC:F4:56:8A:04:8C:C9:68:BC:D6 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F497B5EAD12E62930BB172560 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f12603f8-1037-3dbe-85e6-a1c173ed8d3e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 99.196.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7b:5e:ad:12:e6:29:30:bb:17:25:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=bf064f88-7694-47f1-8081-cd07bebaf97f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fe:5d:c5:61:dd:5a:d8:6a:e5:fe:6c:7d:c0:24: 4d:f5:8e:7b:09:90:33:96:e7:f1:a6:14:ec:05:6e: 1a:2a:8d:c0:a4:a5:79:56:46:40:71:a0:9c:2c:24: d7:e0:5b:b2:16:bd:b0:a6:c2:a8:d5:80:9d:e1:d5: f7:57:2a:6e:a5:f2:4c:d0:82:29:0f:db:77:e4:e1: 4e:44:53:d5:fd:40:aa:e0:59:79:9f:2c:2d:2d:e6: 15:dc:d4:5e:c1:83:82:ab:75:3b:f0:61:6c:57:e3: 1e:b3:4b:22:45:8c:14:03:9c:f8:57:b9:99:23:55: 42:28:e1:b7:fa:a6:37:01:a7:cb:a4:25:98:b8:7e: 56:85:33:e0:23:65:3d:29:69:30:9c:04:74:5d:74: 11:f3:94:70:8b:15:37:f4:da:c2:80:80:27:98:68: 69:79:d7:dc:75:e3:5a:50:10:68:1e:38:d6:2f:a2: 1c:e8:d1:4b:01:1e:7c:a3:d1:86:04:00:e2:cd:78: 46:6f:6e:91:29:0f:fe:5a:66:be:46:d4:f1:19:67: 23:2e:56:99:f9:9e:e2:75:df:18:9f:6e:63:20:c3: 2e:72:00:3d:f5:ad:bb:ee:de:21:e8:15:d0:49:aa: ba:e2:e0:de:ff:44:a8:9d:37:d8:14:e8:fc:90:79: 4b:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:40:D0:23:FE:78:A4:25:02:3C:FC:F4:56:8A:04:8C:C9:68:BC:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f12603f8-1037-3dbe-85e6-a1c173ed8d3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.196.90.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:7d:02:17:ad:d6:22:0f:56:68:e4:80:77:9e:27:63:34:82: fb:42:f2:67:af:13:99:bc:3e:17:d4:47:a4:2c:f6:1a:18:0a: fc:db:21:60:66:a8:9d:9c:e2:98:56:b5:54:22:08:38:6f:7a: 1d:12:f9:e3:85:29:ef:94:18:5c:da:e1:5d:c5:78:59:14:3f: 21:91:93:6c:cc:17:42:b4:94:f0:c9:8b:64:2f:f2:19:9d:1b: 8b:6b:f8:1f:ae:64:5d:9f:a0:f1:1b:32:8b:04:80:bc:b8:43: 0f:3c:11:c7:ca:27:d1:a7:ee:6c:ee:73:e2:c5:a5:97:f6:b3: d8:b6:ec:79:f5:35:9c:eb:b5:bc:5d:0f:38:cb:29:7b:73:3a: bd:3d:ff:91:54:88:ea:8a:a0:93:04:c1:b2:4e:73:69:9e:96: 65:60:c7:1d:c6:23:0e:7b:79:71:56:bf:db:a3:21:ec:3d:29: 79:3b:2d:c8:01:92:dc:4f:60:70:1a:39:81:07:f0:3e:c2:a5: e4:93:40:35:0e:72:42:61:db:87:83:e1:e3:57:f5:0e:78:fe: 7c:0c:cf:95:36:4a:d8:48:b9:f9:38:8a:29:1c:9b:5c:7e:b6: fe:94:be:f9:39:b9:3b:e2:47:90:9e:b0:64:f9:ca:34:99:d1: 40:69:00:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Je16tEuYpMLsXJWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YmYwNjRmODgtNzY5NC00N2YxLTgwODEtY2QwN2JlYmFmOTdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/l3FYd1a2Grl/mx9wCRN9Y57CZAzlufxphTs BW4aKo3ApKV5VkZAcaCcLCTX4FuyFr2wpsKo1YCd4dX3VypupfJM0IIpD9t35OFO RFPV/UCq4Fl5nywtLeYV3NRewYOCq3U78GFsV+Mes0siRYwUA5z4V7mZI1VCKOG3 +qY3AafLpCWYuH5WhTPgI2U9KWkwnAR0XXQR85RwixU39NrCgIAnmGhpedfcdeNa UBBoHjjWL6Ic6NFLAR58o9GGBADizXhGb26RKQ/+Wma+RtTxGWcjLlaZ+Z7idd8Y n25jIMMucgA99a277t4h6BXQSaq64uDe/0SonTfYFOj8kHlLkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFChA0CP+eKQlAjz89FaKBIzJaLzWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZjEyNjAzZjgtMTAzNy0z ZGJlLTg1ZTYtYTFjMTczZWQ4ZDNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8RaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACh9Ahet1iIPVmjkgHeeJ2M0gvtC8mevE5m8PhfUR6Qs9hoYCvzbIWBm qJ2c4phWtVQiCDhveh0S+eOFKe+UGFza4V3FeFkUPyGRk2zMF0K0lPDJi2Qv8hmd G4tr+B+uZF2foPEbMosEgLy4Qw88EcfKJ9Gn7mzuc+LFpZf2s9i27Hn1NZzrtbxd DzjLKXtzOr09/5FUiOqKoJMEwbJOc2melmVgxx3GIw57eXFWv9ujIew9KXk7LcgB ktxPYHAaOYEH8D7CpeSTQDUOckJh24eD4eNX9Q54/nwMz5U2SthIufk4iikcm1x+ tv6Uvvk5uTviR5CesGT5yjSZ0UBpAD8= -----END CERTIFICATE-----Generated at Sun Oct 4 17:49:19 2026 by rpki-client