$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3b9a71f1-2b20-30fe-a914-48be13164a30.roa File: 3b9a71f1-2b20-30fe-a914-48be13164a30.roa (raw, json) Hash identifier: 92Vn5aUEDhwp8tQ+jOgVuYwCeFJA/OhmdttfoAu503I= Subject key identifier: 1C:5A:17:2F:7B:12:8C:BC:D1:CA:4B:C7:51:60:5D:9B:67:71:5C:F1 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CD00D6A8135506AEF2F4D0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3b9a71f1-2b20-30fe-a914-48be13164a30.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 99.196.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:00:d6:a8:13:55:06:ae:f2:f4:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=8fec7df0-8d96-42f1-90b0-83220e9e3678 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:39:9d:30:38:12:78:68:98:b8:3c:fa:5c:b5: 8f:29:47:75:fe:79:4d:93:e4:12:c3:85:0d:83:7a: 7a:18:33:dc:86:93:63:9a:c4:e8:3e:dd:5e:46:59: df:af:f0:b4:d8:7c:25:4a:a7:67:d2:30:68:3d:dd: 81:3d:8b:6c:dc:8a:6f:b9:27:82:2d:6f:f9:5a:a6: 0a:ed:ca:03:df:12:8d:ff:21:9e:7b:4d:ac:86:09: 17:58:5e:57:ce:11:a8:c9:04:25:f1:d5:dc:45:3d: 61:9a:a7:4c:86:48:f5:33:f1:2c:50:d4:99:04:22: 1a:bb:45:47:7f:d7:3a:a2:c6:fa:83:15:9a:28:74: ba:29:a6:bd:fd:ea:a3:c9:e4:ef:3d:2a:bd:73:37: 92:83:eb:6f:39:1d:8a:24:a0:25:72:06:d6:91:ad: c4:b2:51:54:0a:7d:ee:e9:07:42:b2:c3:b9:f5:63: f2:af:52:b3:4b:17:ff:dd:8e:5f:d5:ca:e1:4e:ba: 5f:2b:01:8d:98:c6:01:70:cf:53:49:ea:9d:06:07: 8f:4d:d1:34:ad:59:ce:01:89:7b:ac:9b:99:08:b1: a3:2a:71:69:b1:77:e0:e7:2a:63:c3:06:f1:c8:c2: 06:ff:df:7a:0c:45:c5:53:08:28:33:5c:4d:90:d1: 49:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:5A:17:2F:7B:12:8C:BC:D1:CA:4B:C7:51:60:5D:9B:67:71:5C:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3b9a71f1-2b20-30fe-a914-48be13164a30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.196.110.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:ff:f6:99:59:03:a5:cb:77:d8:df:15:5e:73:69:53:f2:c4: f5:66:27:70:51:91:e5:2c:5a:db:16:86:b4:62:e1:5e:7d:6b: 25:f0:9e:d5:32:58:f0:30:57:f7:e7:d9:c0:0c:64:53:c9:8f: 0f:13:e5:eb:f6:e7:21:b7:08:b8:52:f7:46:33:1b:67:af:c9: c1:85:8f:2d:e2:e1:ea:5b:af:34:51:88:1c:22:27:f1:3c:33: 46:13:d2:ca:d9:5a:45:e5:37:0c:da:b1:75:f2:30:50:fa:8f: a6:e0:7e:82:d1:ae:f7:10:b5:f2:2f:a3:13:04:fc:97:17:30: bf:e1:b2:7a:1e:80:51:8f:4b:ab:59:c6:3b:23:aa:42:bb:56: 84:e3:96:9b:88:35:95:31:f6:67:3c:f1:54:dc:9d:83:c6:a8: 28:9c:76:4f:a5:f0:6a:46:8c:f8:72:3a:f3:37:b6:62:71:9d: 5a:72:7f:a3:e0:a7:9b:67:43:d2:aa:ff:b1:e2:eb:7c:bc:d2: 3b:00:d3:f1:a5:68:91:68:66:a7:d7:b0:11:62:bf:05:15:b7: aa:57:ff:75:b5:dd:63:dc:92:50:62:99:3f:20:3f:64:6f:4b: 39:e0:23:1c:e5:c0:6b:f1:36:b6:8a:ef:36:76:0b:e0:3b:6e: 77:42:c8:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzQDWqBNVBq7y9NAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk OGZlYzdkZjAtOGQ5Ni00MmYxLTkwYjAtODMyMjBlOWUzNjc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTmdMDgSeGiYuDz6XLWPKUd1/nlNk+QSw4UN g3p6GDPchpNjmsToPt1eRlnfr/C02HwlSqdn0jBoPd2BPYts3IpvuSeCLW/5WqYK 7coD3xKN/yGee02shgkXWF5XzhGoyQQl8dXcRT1hmqdMhkj1M/EsUNSZBCIau0VH f9c6osb6gxWaKHS6Kaa9/eqjyeTvPSq9czeSg+tvOR2KJKAlcgbWka3EslFUCn3u 6QdCssO59WPyr1KzSxf/3Y5f1crhTrpfKwGNmMYBcM9TSeqdBgePTdE0rVnOAYl7 rJuZCLGjKnFpsXfg5ypjwwbxyMIG/996DEXFUwgoM1xNkNFJ0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBxaFy97Eoy80cpLx1FgXZtncVzxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvM2I5YTcxZjEtMmIyMC0z MGZlLWE5MTQtNDhiZTEzMTY0YTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8RuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF3/9plZA6XLd9jfFV5zaVPyxPVmJ3BRkeUsWtsWhrRi4V59ayXwntUy WPAwV/fn2cAMZFPJjw8T5ev25yG3CLhS90YzG2evycGFjy3i4epbrzRRiBwiJ/E8 M0YT0srZWkXlNwzasXXyMFD6j6bgfoLRrvcQtfIvoxME/JcXML/hsnoegFGPS6tZ xjsjqkK7VoTjlpuINZUx9mc88VTcnYPGqCicdk+l8GpGjPhyOvM3tmJxnVpyf6Pg p5tnQ9Kq/7Hi63y80jsA0/GlaJFoZqfXsBFivwUVt6pX/3W13WPcklBimT8gP2Rv SzngIxzlwGvxNraK7zZ2C+A7bndCyJ8= -----END CERTIFICATE-----Generated at Mon Oct 20 10:28:48 2025 by rpki-client