$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3c0d486a-4a09-3bed-899e-883b26ee4492.roa File: 3c0d486a-4a09-3bed-899e-883b26ee4492.roa (raw, json) Hash identifier: KYJ6aMrT8yOp9ysdCSgKpzVQ1lEMfONw2VNp3IUAh8Q= Subject key identifier: 89:69:2D:4E:9F:A0:3E:AD:1B:D3:C8:09:DC:6A:BB:C9:6E:A4:2E:06 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CDB639FA8E1E809947AB80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3c0d486a-4a09-3bed-899e-883b26ee4492.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 99.196.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:b6:39:fa:8e:1e:80:99:47:ab:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=eda7c7a2-bfaf-4c11-9a45-cea6ae7d3573 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:7d:46:46:03:44:3a:cd:e7:27:d2:17:44:4b: 0e:41:b6:22:28:23:c2:cc:2e:be:f2:3e:41:e7:38: 00:49:a8:7b:59:07:82:0f:a6:28:f2:03:b4:07:d7: 11:60:63:bb:5c:82:68:04:dc:7a:4b:13:8d:b1:1b: 29:27:b3:8a:b5:6f:0b:17:2f:71:cd:95:1a:74:a3: 14:c1:b5:5f:d3:59:6a:8b:cd:5e:9b:04:a5:be:10: 99:fd:b3:da:87:21:89:e3:82:d7:c2:9a:52:db:c4: 87:ea:ca:ac:90:26:b5:67:2b:3c:a7:2e:68:76:c7: 83:5f:93:8f:d3:67:e7:3a:16:85:fb:08:fc:f5:ca: 72:da:4d:3d:23:d6:a9:82:c1:08:dd:a2:f6:cd:5a: b1:aa:c1:06:30:63:13:00:4d:a2:58:39:b1:7c:65: 07:01:e6:3f:49:6f:5b:55:e1:2d:69:3f:41:e6:88: 55:57:43:4a:d5:1e:84:bc:60:c7:b6:8e:c2:87:b8: 64:a7:2b:9d:b2:ab:58:7b:d2:7a:db:e8:a1:d5:ff: c3:47:e3:d8:1f:68:85:83:05:d7:58:1c:9c:3e:82: 4a:5e:8c:73:65:fb:e6:11:fe:a4:40:d9:5c:98:25: 68:66:ca:11:d0:22:94:1b:6a:4f:48:a3:55:4a:6e: 60:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:69:2D:4E:9F:A0:3E:AD:1B:D3:C8:09:DC:6A:BB:C9:6E:A4:2E:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3c0d486a-4a09-3bed-899e-883b26ee4492.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.196.30.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:3f:af:30:a4:ad:c4:51:a4:d4:52:e5:90:75:06:ff:01:15: 58:3a:41:8c:8e:2e:b1:6f:43:77:69:7b:8f:4f:1b:df:7a:02: 35:4f:93:31:60:88:fa:65:18:45:47:4d:6b:43:12:76:2e:52: cd:4c:a7:da:ea:ee:05:7d:f2:3d:f9:1a:d1:1f:fa:63:7d:75: 10:2d:98:2f:a4:14:83:8d:97:7c:55:c4:57:59:6c:73:5e:ec: 6a:33:1d:ef:6a:55:bf:bc:e6:fe:a2:36:ab:8e:f8:7f:92:05: 48:d9:ce:d3:5c:1c:64:f7:c7:f6:14:b1:fc:44:ab:77:76:b6: e9:64:64:52:ed:c4:c4:2b:e1:fa:74:a6:9a:dc:08:37:63:c7: c2:63:25:39:5f:e6:94:a8:21:55:aa:0f:25:e5:a9:a3:45:35: 9d:fb:38:69:94:d1:89:67:f2:6e:61:c0:52:0b:82:dc:6e:28: 03:d0:a0:23:da:a8:1a:b6:0b:a1:14:01:45:4b:b2:56:b4:67: 86:c8:3d:26:a1:ff:b3:3f:7b:5d:4b:dd:dd:f3:78:6f:73:97: 9a:df:0a:06:0d:32:2e:4c:6a:95:e6:db:d4:e6:fd:e9:aa:7a: c5:d4:0e:6e:d3:f9:12:40:45:2c:0a:c3:97:b0:c3:2d:92:e5: b9:ff:6a:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzbY5+o4egJlHq4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk ZWRhN2M3YTItYmZhZi00YzExLTlhNDUtY2VhNmFlN2QzNTczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA631GRgNEOs3nJ9IXREsOQbYiKCPCzC6+8j5B 5zgASah7WQeCD6Yo8gO0B9cRYGO7XIJoBNx6SxONsRspJ7OKtW8LFy9xzZUadKMU wbVf01lqi81emwSlvhCZ/bPahyGJ44LXwppS28SH6sqskCa1Zys8py5odseDX5OP 02fnOhaF+wj89cpy2k09I9apgsEI3aL2zVqxqsEGMGMTAE2iWDmxfGUHAeY/SW9b VeEtaT9B5ohVV0NK1R6EvGDHto7Ch7hkpyudsqtYe9J62+ih1f/DR+PYH2iFgwXX WBycPoJKXoxzZfvmEf6kQNlcmCVoZsoR0CKUG2pPSKNVSm5ghQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIlpLU6foD6tG9PICdxqu8lupC4GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvM2MwZDQ4NmEtNGEwOS0z YmVkLTg5OWUtODgzYjI2ZWU0NDkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8QeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABk/rzCkrcRRpNRS5ZB1Bv8BFVg6QYyOLrFvQ3dpe49PG996AjVPkzFg iPplGEVHTWtDEnYuUs1Mp9rq7gV98j35GtEf+mN9dRAtmC+kFIONl3xVxFdZbHNe 7GozHe9qVb+85v6iNquO+H+SBUjZztNcHGT3x/YUsfxEq3d2tulkZFLtxMQr4fp0 pprcCDdjx8JjJTlf5pSoIVWqDyXlqaNFNZ37OGmU0Yln8m5hwFILgtxuKAPQoCPa qBq2C6EUAUVLsla0Z4bIPSah/7M/e11L3d3zeG9zl5rfCgYNMi5MapXm29Tm/emq esXUDm7T+RJARSwKw5ewwy2S5bn/aic= -----END CERTIFICATE-----Generated at Mon Oct 20 05:28:11 2025 by rpki-client