$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/bcc973e1-9d01-3d4e-85af-27d694043429.roa File: bcc973e1-9d01-3d4e-85af-27d694043429.roa (raw, json) Hash identifier: UYF5sp5+13c7eIVyEQvf66vX3oy1r5VgrBnh95YTJVM= Subject key identifier: 34:2D:5C:FD:D1:40:41:11:5C:19:5B:AC:B6:67:BA:08:32:3A:35:A9 Certificate issuer: /CN=96aa12fd-20f6-4f37-aab7-a27391ae096e Certificate serial: 010D0C9F4328584CC777416E0F66109DE1459A40 Authority key identifier: 64:2E:31:9D:C5:17:1B:E0:F6:CD:30:94:51:D8:10:99:B1:1D:AE:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/bcc973e1-9d01-3d4e-85af-27d694043429.roa Signing time: Sat 07 Feb 2026 02:00:31 +0000 ROA not before: Sat 07 Feb 2026 02:00:31 +0000 ROA not after: Fri 08 May 2026 01:00:31 +0000 asID: 396982 IP address blocks: 199.47.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/96aa12fd-20f6-4f37-aab7-a27391ae096e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/96aa12fd-20f6-4f37-aab7-a27391ae096e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:c7:77:41:6e:0f:66:10:9d:e1:45:9a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96aa12fd-20f6-4f37-aab7-a27391ae096e Validity Not Before: Feb 7 02:00:31 2026 GMT Not After : May 8 01:00:31 2026 GMT Subject: CN=db60e3a6-b6c9-4475-b5a6-810e2091a9e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:12:ec:8f:4b:65:72:86:58:7c:a4:62:96:d9: 6b:c2:1c:99:99:90:da:4b:3f:e8:a9:6a:47:76:a4: 9f:2f:6d:cb:21:df:25:6a:da:36:3c:8c:b6:a6:11: 9c:5d:e2:45:09:44:fa:3b:b1:49:c9:2b:6a:a0:59: a5:99:f5:0a:30:51:34:43:8f:1a:82:42:86:f0:54: 7b:46:68:a6:54:c4:68:b4:69:5b:d7:0a:68:d6:2c: 37:b1:f3:ab:16:a9:f6:96:0e:ee:f3:6f:b1:d1:f2: 0c:16:44:e4:28:aa:6e:83:e5:9a:ed:0e:2b:a3:fb: 98:e1:d0:d5:fa:72:02:b6:65:00:26:2c:d7:7d:39: ed:6e:1c:d9:2e:08:43:9d:c6:2e:b8:25:fd:a0:01: 7b:ab:6b:e0:3e:38:d1:14:b1:8d:a0:1d:c6:e9:59: f2:56:fe:c3:98:aa:df:84:b0:f8:9e:44:b3:19:de: 99:7d:d9:7d:e7:eb:09:bf:b8:33:d9:14:73:46:b5: 72:91:16:91:36:a4:f2:53:27:45:39:3d:af:07:8d: 37:d4:52:b8:73:d1:f3:8e:39:b3:04:7e:de:cb:3b: bf:b5:65:0e:c5:11:06:c3:04:15:e0:74:a8:76:50: 4d:6f:e1:0d:28:45:95:7d:6f:1a:69:08:1e:df:86: fe:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:2D:5C:FD:D1:40:41:11:5C:19:5B:AC:B6:67:BA:08:32:3A:35:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/bcc973e1-9d01-3d4e-85af-27d694043429.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/96aa12fd-20f6-4f37-aab7-a27391ae096e.crl X509v3 Authority Key Identifier: keyid:64:2E:31:9D:C5:17:1B:E0:F6:CD:30:94:51:D8:10:99:B1:1D:AE:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e.cer sbgp-ipAddrBlock: critical IPv4: 199.47.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:36:8e:ea:11:4a:5b:be:32:b6:42:cb:0a:90:6c:34:f4:a1: f4:8b:cc:19:82:57:ee:11:e3:79:8d:6e:8c:79:9c:a0:2e:c2: c3:df:8a:51:69:f4:9c:28:cf:50:ea:b1:60:7c:1e:ed:03:6b: 33:cd:d1:58:b0:4f:d6:1a:4f:5a:e2:63:47:fd:84:98:06:3d: 0e:98:96:e7:39:26:b4:6f:05:01:91:ee:d8:d1:7b:a0:d3:67: 10:36:4d:dd:7b:c9:05:f5:a7:fe:6c:8d:40:70:b7:fe:c2:62: 0b:9e:92:5c:86:f7:d4:68:ba:dd:cc:fe:31:89:4f:0a:72:4f: 07:98:c4:6d:21:59:5e:0c:ca:f3:30:5b:72:cb:f9:00:92:95: 1a:6e:68:4d:43:fa:6b:65:f5:d1:f6:6e:34:af:ac:e2:a1:4b: 00:15:e0:b2:5f:93:3f:5c:91:eb:3c:37:c9:db:72:38:f4:aa: 1e:a2:99:a4:e4:da:48:60:37:05:13:e4:63:ee:27:a5:8f:f2: 14:fe:d4:df:8c:25:cc:bc:0b:ed:6c:c1:5c:e4:f8:94:33:ab: 48:a9:f3:0c:42:dd:e0:e1:11:a4:49:66:e4:f4:76:e1:cb:1e: de:75:9f:81:37:b9:38:e8:5b:d0:9a:bc:fa:1c:3d:4e:18:dd: ed:40:cb:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzHd0FuD2YQneFFmkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTZhYTEyZmQtMjBmNi00ZjM3LWFhYjctYTI3MzkxYWUw OTZlMB4XDTI2MDIwNzAyMDAzMVoXDTI2MDUwODAxMDAzMVowLzEtMCsGA1UEAxMk ZGI2MGUzYTYtYjZjOS00NDc1LWI1YTYtODEwZTIwOTFhOWU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBLsj0tlcoZYfKRiltlrwhyZmZDaSz/oqWpH dqSfL23LId8lato2PIy2phGcXeJFCUT6O7FJyStqoFmlmfUKMFE0Q48agkKG8FR7 RmimVMRotGlb1wpo1iw3sfOrFqn2lg7u82+x0fIMFkTkKKpug+Wa7Q4ro/uY4dDV +nICtmUAJizXfTntbhzZLghDncYuuCX9oAF7q2vgPjjRFLGNoB3G6VnyVv7DmKrf hLD4nkSzGd6Zfdl95+sJv7gz2RRzRrVykRaRNqTyUydFOT2vB4031FK4c9Hzjjmz BH7eyzu/tWUOxREGwwQV4HSodlBNb+ENKEWVfW8aaQge34b+IwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDQtXP3RQEERXBlbrLZnuggyOjWpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS85NmFh MTJmZC0yMGY2LTRmMzctYWFiNy1hMjczOTFhZTA5NmUvYmNjOTczZTEtOWQwMS0z ZDRlLTg1YWYtMjdkNjk0MDQzNDI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvOTZhYTEyZmQtMjBmNi00ZjM3LWFh YjctYTI3MzkxYWUwOTZlLzk2YWExMmZkLTIwZjYtNGYzNy1hYWI3LWEyNzM5MWFl MDk2ZS5jcmwwHwYDVR0jBBgwFoAUZC4xncUXG+D2zTCUUdgQmbEdrl8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS85NmFhMTJmZC0yMGY2LTRmMzctYWFiNy1hMjcz OTFhZTA5NmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxy9sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJo2juoRSlu+MrZCywqQbDT0ofSLzBmCV+4R43mNbox5nKAuwsPfilFp 9Jwoz1DqsWB8Hu0DazPN0ViwT9YaT1riY0f9hJgGPQ6Yluc5JrRvBQGR7tjRe6DT ZxA2Td17yQX1p/5sjUBwt/7CYgueklyG99Rout3M/jGJTwpyTweYxG0hWV4MyvMw W3LL+QCSlRpuaE1D+mtl9dH2bjSvrOKhSwAV4LJfkz9ckes8N8nbcjj0qh6imaTk 2khgNwUT5GPuJ6WP8hT+1N+MJcy8C+1swVzk+JQzq0ip8wxC3eDhEaRJZuT0duHL Ht51n4E3uTjoW9CavPocPU4Y3e1Ayyc= -----END CERTIFICATE-----Generated at Mon Mar 2 06:26:48 2026 by rpki-client