$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4599d9d3-f0aa-3734-aff1-21a5f1fcbba2.roa File: 4599d9d3-f0aa-3734-aff1-21a5f1fcbba2.roa (raw, json) Hash identifier: Vb+i46EfrquRXAdCrBJaY5BvMYmZlBRDni0IQKq4S/o= Subject key identifier: 10:39:DF:EF:E8:A0:C8:AF:FA:8F:2C:64:18:59:E9:13:2E:A1:77:54 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CDC6634AA40EC8FDF93440 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4599d9d3-f0aa-3734-aff1-21a5f1fcbba2.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 99.197.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:c6:63:4a:a4:0e:c8:fd:f9:34:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=8772e62f-b78e-4542-91e7-de0c92be1feb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:ea:c8:41:93:c6:15:6c:85:d6:bc:d0:96:77: c2:10:d7:5c:1c:80:7e:9c:e4:f1:4c:37:cc:82:fa: 2f:7d:3f:da:b2:90:12:65:77:a3:38:99:76:04:11: a7:9b:99:97:25:75:f6:63:36:6c:5d:f0:a4:08:81: ab:b4:33:78:52:72:e2:60:c4:02:c3:6e:14:b8:44: 3b:10:75:d0:e5:85:62:18:6f:c5:bc:ea:6e:f1:42: ea:a2:99:41:53:58:a1:52:16:f2:04:30:f0:3a:f4: 3c:1c:ea:72:26:4c:ed:56:45:49:c3:7f:92:6a:3e: 6b:d2:59:37:62:e0:b5:d6:d3:3e:cd:62:4e:71:4d: cc:16:e0:95:c2:87:17:dd:84:6d:48:af:27:4b:52: 54:f2:90:e0:73:c8:5a:7a:26:c1:9d:55:48:20:1c: 28:8f:8d:88:23:86:b7:33:f6:d0:80:e5:99:8f:a1: 4e:10:3f:79:df:cb:a0:e3:a8:a2:89:70:a8:5f:a5: 04:ca:16:78:94:9b:a3:cb:bc:6a:d8:26:24:4d:48: c0:6b:c8:c2:eb:56:f8:e1:89:2f:d2:5e:f5:a5:45: 9e:b4:86:c9:46:dd:8b:0d:f9:f2:7a:bf:f3:fe:83: dc:1e:43:dc:db:20:b5:f5:ff:2b:54:97:87:c0:3e: f0:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:39:DF:EF:E8:A0:C8:AF:FA:8F:2C:64:18:59:E9:13:2E:A1:77:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4599d9d3-f0aa-3734-aff1-21a5f1fcbba2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.197.246.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:f2:ce:ae:64:f3:44:da:fa:ea:98:b1:aa:a0:54:88:ab:42: 72:db:f7:85:57:38:08:f8:2c:82:b1:d8:89:3a:75:5d:66:49: 00:08:be:69:41:7f:9e:db:02:55:f1:f8:8a:07:9a:fa:d2:b1: 06:86:35:77:7a:1e:1b:f1:d5:1f:72:bc:e5:67:72:ee:da:50: 46:6c:f8:a8:2c:24:48:5c:c0:11:c0:c8:eb:18:c9:ad:84:72: f9:de:cd:1a:b4:ce:db:83:6d:11:d0:e0:45:c9:30:b5:89:b3: 12:47:c8:87:6e:ae:4f:48:06:42:d1:84:a9:4f:9d:8f:31:6e: fe:dc:0d:55:10:5b:ee:b5:2e:d6:cd:8b:d6:7a:fc:31:d7:19: d0:be:54:6a:74:91:c7:59:0d:97:03:35:25:26:ff:5a:4a:92: 2b:1a:7b:49:f7:41:88:54:12:05:2c:42:2f:d0:c8:6f:51:0d: 93:5c:07:69:20:3d:c5:b3:82:b0:24:e2:6d:17:6a:a7:23:9f: 93:e3:7f:0e:c9:12:a4:d0:11:1b:71:ee:8c:74:2a:cf:6d:83: b7:01:88:73:87:5c:0c:3f:bd:c2:e5:b8:72:74:e5:11:ef:77: 02:4f:63:35:40:34:c1:d8:7c:da:1b:f2:a5:47:dd:7c:dd:ce: 10:a8:3e:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzcZjSqQOyP35NEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk ODc3MmU2MmYtYjc4ZS00NTQyLTkxZTctZGUwYzkyYmUxZmViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7OrIQZPGFWyF1rzQlnfCENdcHIB+nOTxTDfM gvovfT/aspASZXejOJl2BBGnm5mXJXX2YzZsXfCkCIGrtDN4UnLiYMQCw24UuEQ7 EHXQ5YViGG/FvOpu8ULqoplBU1ihUhbyBDDwOvQ8HOpyJkztVkVJw3+Saj5r0lk3 YuC11tM+zWJOcU3MFuCVwocX3YRtSK8nS1JU8pDgc8haeibBnVVIIBwoj42II4a3 M/bQgOWZj6FOED9538ug46iiiXCoX6UEyhZ4lJujy7xq2CYkTUjAa8jC61b44Ykv 0l71pUWetIbJRt2LDfnyer/z/oPcHkPc2yC19f8rVJeHwD7wSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBA53+/ooMiv+o8sZBhZ6RMuoXdUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNDU5OWQ5ZDMtZjBhYS0z NzM0LWFmZjEtMjFhNWYxZmNiYmEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8X2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAELyzq5k80Ta+uqYsaqgVIirQnLb94VXOAj4LIKx2Ik6dV1mSQAIvmlB f57bAlXx+IoHmvrSsQaGNXd6Hhvx1R9yvOVncu7aUEZs+KgsJEhcwBHAyOsYya2E cvnezRq0ztuDbRHQ4EXJMLWJsxJHyIdurk9IBkLRhKlPnY8xbv7cDVUQW+61LtbN i9Z6/DHXGdC+VGp0kcdZDZcDNSUm/1pKkisae0n3QYhUEgUsQi/QyG9RDZNcB2kg PcWzgrAk4m0Xaqcjn5Pjfw7JEqTQERtx7ox0Ks9tg7cBiHOHXAw/vcLluHJ05RHv dwJPYzVANMHYfNob8qVH3XzdzhCoPgo= -----END CERTIFICATE-----Generated at Mon Oct 20 07:54:50 2025 by rpki-client