$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fc16991d-c9bf-3d15-b3b1-efea754d9e26.roa File: fc16991d-c9bf-3d15-b3b1-efea754d9e26.roa (raw, json) Hash identifier: ucJGBUUOellR9PubUHPw5OGlrfh77dBpd/CPdHxD8do= Subject key identifier: 2B:17:B0:35:F9:99:98:D8:25:F6:40:DC:EB:D3:EA:52:52:49:CB:94 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F497B618C33A4AFDDDC099580 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fc16991d-c9bf-3d15-b3b1-efea754d9e26.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 99.196.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7b:61:8c:33:a4:af:dd:dc:09:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=97ad88d5-e9d4-4169-9c79-8660a7a176e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:93:55:68:3d:10:f6:87:20:92:10:28:30:1b: 4a:b7:c0:d6:12:11:fa:d5:c7:7e:c4:6e:9a:c9:7a: 5e:74:73:45:7e:e4:20:4a:51:36:78:a6:82:65:5c: 21:32:0d:af:af:96:68:f9:a1:94:ae:44:26:64:09: 59:49:d3:04:a5:13:e3:8c:e8:9f:6c:67:88:a7:17: 79:37:a2:88:76:d1:07:42:96:a4:75:db:8a:87:0d: 3a:48:a2:fb:36:b9:1a:49:61:0f:19:fa:7d:33:71: c9:b1:f7:76:bf:5a:10:82:e6:1e:e5:b6:eb:ab:10: 14:7e:ed:0d:54:90:67:75:d6:fd:72:9a:be:e3:e5: db:12:30:78:3b:67:1e:97:66:7a:bd:29:68:c2:e3: 05:b5:c4:a9:dc:cf:e0:9e:0e:1b:b0:33:f6:98:9b: 0e:3d:8f:45:89:a1:80:b4:33:d9:10:e5:78:79:b6: 84:60:64:a0:e3:dd:36:17:1a:77:bf:d3:53:db:66: 2c:15:1a:0d:c0:00:aa:0b:fa:21:8b:dd:c4:3b:60: 0d:84:50:4e:46:e5:8b:72:59:f1:5a:d4:c1:24:93: cc:db:92:02:a7:bb:6b:9c:f9:b5:cc:8b:05:06:69: 39:b2:8a:d5:3c:d2:fc:06:4b:e4:78:63:fe:28:f7: ab:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:17:B0:35:F9:99:98:D8:25:F6:40:DC:EB:D3:EA:52:52:49:CB:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fc16991d-c9bf-3d15-b3b1-efea754d9e26.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.196.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:95:a6:fe:f5:39:3a:3c:ca:8d:17:36:85:b3:f6:d1:5c:c1: bc:46:71:51:8c:87:63:62:d3:51:c1:02:be:8c:4d:b0:8f:fb: 69:79:d6:53:49:ef:66:cc:2a:27:a8:2e:97:95:7a:65:52:10: a9:9e:c2:31:6e:20:f0:de:c7:8d:1b:e7:22:f1:db:e8:52:d2: ba:32:7e:63:96:90:9c:90:ed:29:3c:85:4b:17:3f:be:d0:b2: d5:e0:4c:63:c7:2d:7b:e5:e7:9d:fd:23:47:25:7a:fb:90:d6: f6:19:8e:23:b4:87:5f:34:22:bc:c5:54:c5:66:76:b2:86:db: d2:7b:8d:74:61:61:ca:a0:c4:f3:82:a0:4e:35:27:18:66:51: bc:78:f4:70:bf:d4:89:b9:ff:1b:ac:a3:46:b8:a0:03:91:22: 04:18:a4:12:87:f4:ef:ab:28:cc:5a:6c:b8:29:89:2d:89:b4: 4f:3d:22:64:ee:d8:cb:0a:c2:41:ae:ec:ba:84:3f:fc:1c:ea: c2:9c:9a:52:95:e9:a1:23:ee:8e:06:9f:00:bb:ec:d9:95:ce: 3f:a1:da:6e:60:43:ab:f3:22:c4:a9:f4:d4:0c:bd:04:2d:46: 47:89:60:8d:69:ec:a6:69:0e:51:62:79:36:f5:7f:2e:48:5a: 4b:de:41:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Je2GMM6Sv3dwJlYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OTdhZDg4ZDUtZTlkNC00MTY5LTljNzktODY2MGE3YTE3NmUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJNVaD0Q9ocgkhAoMBtKt8DWEhH61cd+xG6a yXpedHNFfuQgSlE2eKaCZVwhMg2vr5Zo+aGUrkQmZAlZSdMEpRPjjOifbGeIpxd5 N6KIdtEHQpakdduKhw06SKL7NrkaSWEPGfp9M3HJsfd2v1oQguYe5bbrqxAUfu0N VJBnddb9cpq+4+XbEjB4O2cel2Z6vSlowuMFtcSp3M/gng4bsDP2mJsOPY9FiaGA tDPZEOV4ebaEYGSg4902Fxp3v9NT22YsFRoNwACqC/ohi93EO2ANhFBORuWLclnx WtTBJJPM25ICp7trnPm1zIsFBmk5sorVPNL8BkvkeGP+KPerzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCsXsDX5mZjYJfZA3OvT6lJSScuUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZmMxNjk5MWQtYzliZi0z ZDE1LWIzYjEtZWZlYTc1NGQ5ZTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8ScMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAqVpv71OTo8yo0XNoWz9tFcwbxGcVGMh2Ni01HBAr6MTbCP+2l51lNJ 72bMKieoLpeVemVSEKmewjFuIPDex40b5yLx2+hS0royfmOWkJyQ7Sk8hUsXP77Q stXgTGPHLXvl5539I0clevuQ1vYZjiO0h180IrzFVMVmdrKG29J7jXRhYcqgxPOC oE41JxhmUbx49HC/1Im5/xuso0a4oAORIgQYpBKH9O+rKMxabLgpiS2JtE89ImTu 2MsKwkGu7LqEP/wc6sKcmlKV6aEj7o4GnwC77NmVzj+h2m5gQ6vzIsSp9NQMvQQt RkeJYI1p7KZpDlFieTb1fy5IWkveQSY= -----END CERTIFICATE-----Generated at Sat Sep 26 15:24:55 2026 by rpki-client