$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/33bc5938-81f2-3e9c-8f5f-7e497558b442.roa File: 33bc5938-81f2-3e9c-8f5f-7e497558b442.roa (raw, json) Hash identifier: YOTerLf7wmbCgoG55/7/xPaRXhzdaa1yBaa3rTMq358= Subject key identifier: 87:4D:A8:3F:39:C6:D9:94:85:D5:2D:60:1F:1F:A2:7A:F1:E8:23:80 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CD06B10BAD9A3F8CC332C0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/33bc5938-81f2-3e9c-8f5f-7e497558b442.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 99.197.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:06:b1:0b:ad:9a:3f:8c:c3:32:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=7f18774d-e03e-49f6-b2ea-f87f78ea2e0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e2:27:39:6c:37:1f:e7:af:00:9f:e4:71:ad: 14:d5:be:cb:b6:76:05:18:89:20:49:0e:78:56:7e: b8:72:64:81:dd:15:9a:a7:6d:72:0c:09:c1:ec:2c: fd:64:d6:a3:2d:f0:80:8e:73:cb:d4:11:65:31:da: 4f:85:67:22:23:94:2f:6b:1d:f6:4e:3f:ee:a6:92: ca:70:b4:3f:8f:94:2e:20:1e:e2:ec:fb:a6:0d:c9: fa:c6:22:a9:3f:0e:15:2c:10:b8:79:3d:95:a8:14: 71:bc:1d:90:da:80:e5:05:54:6c:c3:76:32:6a:df: 85:23:cb:b1:03:fd:62:1a:e5:66:42:55:8f:f3:7d: 57:03:c8:80:04:b2:6e:8e:76:a1:1e:05:43:6a:33: d2:24:6a:2f:7c:96:de:37:e3:de:c5:49:cd:96:29: 52:50:05:95:ae:6b:8d:c2:4c:77:e3:a8:3c:55:b2: 7d:b1:c2:79:54:20:00:1e:54:9b:0a:92:54:a0:8a: ac:4d:79:7f:d8:99:6e:d4:fb:88:13:5f:34:9a:85: c0:c0:41:89:e2:94:8f:34:58:a6:b2:ce:92:8b:81: e8:47:23:fb:de:9d:a3:15:08:82:f8:0f:a4:21:0f: 66:0a:6d:9e:bb:59:46:1b:87:2a:77:d0:f4:7c:a4: 9f:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:4D:A8:3F:39:C6:D9:94:85:D5:2D:60:1F:1F:A2:7A:F1:E8:23:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/33bc5938-81f2-3e9c-8f5f-7e497558b442.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.197.31.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:e4:ca:ce:be:07:91:24:df:aa:22:bf:78:50:4b:0c:51:25: 54:fa:d9:da:b6:14:ef:71:db:c3:24:3b:fe:eb:0b:df:73:fa: bb:a1:89:39:e6:87:d5:bb:a3:04:a3:44:ab:bd:5b:f8:06:f5: 63:0f:c1:15:df:51:c5:26:62:8f:74:60:05:51:89:b5:2e:2d: 8a:59:f2:af:74:c0:88:5c:6e:15:95:df:89:2d:99:71:72:60: 00:37:a2:6c:b7:1f:5b:08:c7:79:05:ea:60:48:91:6c:84:95: ab:b8:0a:d9:a0:2a:cd:3a:5f:01:21:6f:37:72:c5:c3:43:48: ee:ae:d4:4a:37:7c:1a:e7:1d:14:77:90:64:0c:38:44:c2:97: ef:e0:80:ee:5e:bb:bf:02:49:c2:2a:66:97:1e:16:bf:2c:3d: ca:63:97:fd:06:49:c3:2a:7b:20:d2:8b:06:76:11:4b:e4:df: aa:79:9d:98:13:59:fe:c7:aa:84:43:07:23:b0:8e:70:6c:99: a5:c3:ae:68:a2:c6:e1:2c:59:db:fa:1f:46:6d:cb:fe:3e:11: 8e:7c:53:b5:05:53:89:a7:7e:05:aa:8e:88:46:77:20:6b:7f: c1:48:a5:79:b4:22:61:29:3c:08:be:ee:70:3f:1c:6e:f5:33: 59:19:d0:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzQaxC62aP4zDMsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk N2YxODc3NGQtZTAzZS00OWY2LWIyZWEtZjg3Zjc4ZWEyZTBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOInOWw3H+evAJ/kca0U1b7LtnYFGIkgSQ54 Vn64cmSB3RWap21yDAnB7Cz9ZNajLfCAjnPL1BFlMdpPhWciI5Qvax32Tj/uppLK cLQ/j5QuIB7i7PumDcn6xiKpPw4VLBC4eT2VqBRxvB2Q2oDlBVRsw3Yyat+FI8ux A/1iGuVmQlWP831XA8iABLJujnahHgVDajPSJGovfJbeN+PexUnNlilSUAWVrmuN wkx346g8VbJ9scJ5VCAAHlSbCpJUoIqsTXl/2Jlu1PuIE180moXAwEGJ4pSPNFim ss6Si4HoRyP73p2jFQiC+A+kIQ9mCm2eu1lGG4cqd9D0fKSfkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIdNqD85xtmUhdUtYB8fonrx6COAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMzNiYzU5MzgtODFmMi0z ZTljLThmNWYtN2U0OTc1NThiNDQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8UfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAHkys6+B5Ek36oiv3hQSwxRJVT62dq2FO9x28MkO/7rC99z+ruhiTnm h9W7owSjRKu9W/gG9WMPwRXfUcUmYo90YAVRibUuLYpZ8q90wIhcbhWV34ktmXFy YAA3omy3H1sIx3kF6mBIkWyElau4CtmgKs06XwEhbzdyxcNDSO6u1Eo3fBrnHRR3 kGQMOETCl+/ggO5eu78CScIqZpceFr8sPcpjl/0GScMqeyDSiwZ2EUvk36p5nZgT Wf7HqoRDByOwjnBsmaXDrmiixuEsWdv6H0Zty/4+EY58U7UFU4mnfgWqjohGdyBr f8FIpXm0ImEpPAi+7nA/HG71M1kZ0PI= -----END CERTIFICATE-----Generated at Mon Oct 20 06:46:47 2025 by rpki-client