$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3f73f6be-cbc3-3833-b4a1-533442804977.roa File: 3f73f6be-cbc3-3833-b4a1-533442804977.roa (raw, json) Hash identifier: +qO2tKJPi8mPH6qBe735b/9NW8BCy5I0H5r5hUAkFxg= Subject key identifier: 67:F9:B1:9A:41:7D:CA:E1:D2:77:49:1B:4A:A0:83:BB:74:6B:36:3B Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CDB7F56887395C400BF640 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3f73f6be-cbc3-3833-b4a1-533442804977.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 99.196.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:b7:f5:68:87:39:5c:40:0b:f6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=0052cbc4-b285-4d22-aa3d-794bb7d0d225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:0b:a3:c4:e7:8a:81:b5:60:1d:07:fb:3e:26: be:cb:1d:60:29:1a:81:5f:e3:fc:f4:ca:e3:51:44: c3:e0:7f:e1:f8:b4:10:94:99:4d:94:a2:66:1d:d7: 22:6a:e7:78:39:fb:6b:51:dd:8d:81:2e:25:fd:5f: 99:69:72:2d:30:b7:5a:d0:1d:7e:57:42:a5:af:39: db:5a:70:fa:47:b6:31:0c:9f:3f:46:ec:3d:58:f8: 71:e8:af:40:13:f1:a1:4e:77:95:18:6f:2f:16:97: 79:7d:e6:0a:9d:8a:bc:10:7e:99:90:f9:78:db:1b: ac:11:48:42:37:3f:31:20:2d:72:f8:bd:1d:05:fc: dc:03:e3:53:f3:40:54:95:4a:cf:da:c6:48:73:f1: 05:57:f9:3e:bd:eb:11:66:b1:67:4a:23:22:9a:96: cc:f3:79:eb:cf:4d:28:99:4f:8f:7f:0a:16:b5:95: 0a:ae:5c:63:f9:05:22:3e:7a:51:86:a5:02:6a:e9: 48:70:84:f8:6a:73:69:d2:6b:99:09:35:5d:a6:bb: 14:cf:7e:44:67:00:b3:92:92:24:dd:71:7f:c1:17: 13:ba:09:26:79:93:c5:be:ec:47:6e:43:04:2e:27: 42:db:aa:d1:74:25:29:7f:57:cd:a7:16:22:84:b0: 79:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:F9:B1:9A:41:7D:CA:E1:D2:77:49:1B:4A:A0:83:BB:74:6B:36:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3f73f6be-cbc3-3833-b4a1-533442804977.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.196.78.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:6b:45:2d:00:ff:fc:90:c9:75:c3:26:a1:13:18:88:d1:e5: 16:4e:50:da:aa:73:a3:5c:b0:28:0f:73:da:c3:8a:b6:62:1d: 9a:5d:90:0a:65:03:5e:9b:83:ba:35:36:b9:ea:85:4d:01:e3: 92:06:2d:40:36:36:83:40:b8:47:6e:75:7a:85:2c:48:0b:fd: 30:59:30:93:e1:66:9e:49:ba:b9:0c:3f:ce:48:a9:d1:0e:c7: 1c:ee:cc:96:4b:86:9a:49:7d:92:6a:19:85:6a:67:90:16:07: 40:17:68:de:81:4d:26:19:f9:d2:4a:ca:6f:c3:bf:c5:46:f0: 86:ce:3a:0a:71:17:df:94:8e:1a:d9:1f:3b:3d:6e:98:71:68: c2:6f:84:73:4e:7c:c2:16:c0:a7:3e:ff:c2:2d:0f:43:d0:e2: 64:0e:8d:98:b0:1e:63:e2:46:97:1c:2f:e2:1d:44:30:83:22: 17:40:b0:50:8d:75:c9:4f:70:04:55:bd:40:d3:73:90:c1:bc: 03:e0:dd:44:18:01:ec:ef:fb:11:f5:83:31:8f:c6:82:83:b3: 61:02:5c:ec:3a:0b:1e:54:8f:88:05:7f:28:f6:17:73:aa:3c: a4:ee:af:f4:40:7d:28:f3:16:ab:ef:29:62:8f:23:74:f6:2e: 1a:d1:86:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzbf1aIc5XEAL9kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk MDA1MmNiYzQtYjI4NS00ZDIyLWFhM2QtNzk0YmI3ZDBkMjI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAujxOeKgbVgHQf7Pia+yx1gKRqBX+P89Mrj UUTD4H/h+LQQlJlNlKJmHdciaud4OftrUd2NgS4l/V+ZaXItMLda0B1+V0Klrznb WnD6R7YxDJ8/Ruw9WPhx6K9AE/GhTneVGG8vFpd5feYKnYq8EH6ZkPl42xusEUhC Nz8xIC1y+L0dBfzcA+NT80BUlUrP2sZIc/EFV/k+vesRZrFnSiMimpbM83nrz00o mU+PfwoWtZUKrlxj+QUiPnpRhqUCaulIcIT4anNp0muZCTVdprsUz35EZwCzkpIk 3XF/wRcTugkmeZPFvuxHbkMELidC26rRdCUpf1fNpxYihLB5rQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGf5sZpBfcrh0ndJG0qgg7t0azY7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvM2Y3M2Y2YmUtY2JjMy0z ODMzLWI0YTEtNTMzNDQyODA0OTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8ROMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAJrRS0A//yQyXXDJqETGIjR5RZOUNqqc6NcsCgPc9rDirZiHZpdkApl A16bg7o1NrnqhU0B45IGLUA2NoNAuEdudXqFLEgL/TBZMJPhZp5JurkMP85IqdEO xxzuzJZLhppJfZJqGYVqZ5AWB0AXaN6BTSYZ+dJKym/Dv8VG8IbOOgpxF9+UjhrZ Hzs9bphxaMJvhHNOfMIWwKc+/8ItD0PQ4mQOjZiwHmPiRpccL+IdRDCDIhdAsFCN dclPcARVvUDTc5DBvAPg3UQYAezv+xH1gzGPxoKDs2ECXOw6Cx5Uj4gFfyj2F3Oq PKTur/RAfSjzFqvvKWKPI3T2LhrRhok= -----END CERTIFICATE-----Generated at Sun Oct 19 23:53:12 2025 by rpki-client