$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/24538dcc-b074-32f8-b726-fa4dcd42f595.roa File: 24538dcc-b074-32f8-b726-fa4dcd42f595.roa (raw, json) Hash identifier: URhum52UhcJRc27oCncd5+Qto1qr9n4sLwYmnT8omOI= Subject key identifier: 37:40:8A:3E:B1:65:4C:CD:0E:C5:CF:C9:95:5C:48:C6:4A:8D:0F:FD Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CDC99213F00E827B64D000 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/24538dcc-b074-32f8-b726-fa4dcd42f595.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 99.198.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:c9:92:13:f0:0e:82:7b:64:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=ce32347e-c01a-487e-9be1-b42774eb9a18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:ea:3a:0f:86:ef:aa:55:c0:96:af:2c:0b:9d: 82:0b:06:f2:83:2b:e7:97:f2:dd:1b:c2:91:e6:74: 2d:99:23:fb:14:d3:b5:80:7b:2a:9b:21:5d:01:17: 91:26:2c:a8:57:aa:20:e2:50:8c:2f:6d:fe:ae:e3: b4:4e:12:c1:07:af:46:9a:aa:79:72:b6:d6:e4:d0: d1:1e:b5:20:2f:29:ae:ee:38:36:1b:8a:1c:40:a5: f4:1e:22:43:f5:f1:5e:e2:3e:a2:d1:e9:c3:39:0f: 85:ee:a0:2e:c3:17:2f:07:ac:26:b4:09:5a:97:a7: c5:5a:af:07:e3:ac:8d:f3:5e:cd:58:b0:06:47:e9: b7:7c:b4:70:30:00:72:dc:5c:08:d2:71:e7:64:8f: b5:29:1c:dc:4e:34:8b:43:7f:93:da:8f:4d:b8:a4: 2a:ee:2c:3a:cd:ae:b0:38:51:e8:00:c2:5c:7c:e9: dc:9c:ce:81:78:07:9e:e3:5a:dd:75:d7:2c:b8:43: d8:29:9e:df:c4:a4:2c:c6:76:4a:23:fa:4e:25:d4: 1e:bb:bd:08:2a:fa:03:06:00:01:84:c5:5f:f8:83: 37:a3:83:bc:af:f7:79:52:fd:12:0c:15:4d:22:e9: 8a:2d:1a:69:9d:34:ce:89:e2:1e:5c:b3:c4:9d:91: 3a:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:40:8A:3E:B1:65:4C:CD:0E:C5:CF:C9:95:5C:48:C6:4A:8D:0F:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/24538dcc-b074-32f8-b726-fa4dcd42f595.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.198.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:37:52:a2:04:e7:50:ce:3a:c8:9d:ca:ce:2c:2c:16:2e:b6: 68:5e:26:c9:29:2e:28:59:ac:41:97:0d:c9:1a:38:9a:ff:89: 1a:20:cf:df:95:18:ea:55:fa:7b:d4:49:70:a5:11:e1:1b:dd: 4d:65:0f:f8:db:94:69:4f:db:84:35:86:24:80:d8:ef:11:11: b5:9a:53:fb:b0:74:df:60:90:bc:d9:98:68:2f:ed:62:3d:96: ef:0a:56:79:89:3e:d7:63:9d:cd:3e:18:0b:d6:1c:48:a7:da: 81:aa:fd:17:bd:45:af:fb:cd:c3:0f:33:1d:6f:0e:39:49:2d: b5:10:2e:dc:63:dc:3a:e6:41:2a:cf:9c:34:4f:e1:90:61:5a: a7:99:0c:35:cf:71:50:d3:80:6e:88:2d:b3:2a:bf:99:9b:5d: e5:d1:81:c8:89:30:64:54:3a:7b:c3:eb:84:e4:6a:d1:4d:6e: f4:08:0a:29:f6:9c:f6:d0:75:02:89:2e:ba:00:d0:bb:1c:47: 3f:df:7c:98:56:21:9d:d8:00:61:e4:5a:26:cd:66:b4:2e:26: a7:70:a4:ba:3c:5c:aa:ef:59:39:1b:38:40:04:53:83:8c:12: 80:d4:9c:15:ca:d9:85:73:d2:c8:b4:0d:55:81:df:49:7f:9b: e3:60:63:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzcmSE/AOgntk0AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk Y2UzMjM0N2UtYzAxYS00ODdlLTliZTEtYjQyNzc0ZWI5YTE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgOo6D4bvqlXAlq8sC52CCwbygyvnl/LdG8KR 5nQtmSP7FNO1gHsqmyFdAReRJiyoV6og4lCML23+ruO0ThLBB69Gmqp5crbW5NDR HrUgLymu7jg2G4ocQKX0HiJD9fFe4j6i0enDOQ+F7qAuwxcvB6wmtAlal6fFWq8H 46yN817NWLAGR+m3fLRwMABy3FwI0nHnZI+1KRzcTjSLQ3+T2o9NuKQq7iw6za6w OFHoAMJcfOncnM6BeAee41rdddcsuEPYKZ7fxKQsxnZKI/pOJdQeu70IKvoDBgAB hMVf+IM3o4O8r/d5Uv0SDBVNIumKLRppnTTOieIeXLPEnZE6gQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDdAij6xZUzNDsXPyZVcSMZKjQ/9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMjQ1MzhkY2MtYjA3NC0z MmY4LWI3MjYtZmE0ZGNkNDJmNTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8Y4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB43UqIE51DOOsidys4sLBYutmheJskpLihZrEGXDckaOJr/iRogz9+V GOpV+nvUSXClEeEb3U1lD/jblGlP24Q1hiSA2O8REbWaU/uwdN9gkLzZmGgv7WI9 lu8KVnmJPtdjnc0+GAvWHEin2oGq/Re9Ra/7zcMPMx1vDjlJLbUQLtxj3DrmQSrP nDRP4ZBhWqeZDDXPcVDTgG6ILbMqv5mbXeXRgciJMGRUOnvD64TkatFNbvQICin2 nPbQdQKJLroA0LscRz/ffJhWIZ3YAGHkWibNZrQuJqdwpLo8XKrvWTkbOEAEU4OM EoDUnBXK2YVz0si0DVWB30l/m+NgY9g= -----END CERTIFICATE-----Generated at Mon Oct 20 02:08:08 2025 by rpki-client