$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5590f1ab-d808-30e6-9a2d-fb3e791a2b19.roa File: 5590f1ab-d808-30e6-9a2d-fb3e791a2b19.roa (raw, json) Hash identifier: 0Ad+2W6Q1Qex9iRAms3+AotJfU0bVFmhyleoCxvA4eA= Subject key identifier: 07:47:4B:59:BE:C8:74:E4:33:46:94:DC:45:B5:C9:45:E0:F9:2B:58 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CD0E64A5D113EBF4EAA4A0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5590f1ab-d808-30e6-9a2d-fb3e791a2b19.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 99.198.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:0e:64:a5:d1:13:eb:f4:ea:a4:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=520d592e-e77a-4a64-87ba-d21a41781c3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:12:ee:e3:e2:a6:f2:d7:cd:e5:35:a2:5c:37: 50:97:3b:0a:51:59:ca:75:67:e8:d6:fb:48:a8:a2: 80:4d:42:a1:3d:bf:ed:14:27:94:a0:3b:a4:cd:e3: 1b:47:bd:cf:c2:b0:da:4b:bc:0a:9f:12:a6:71:9b: bf:b1:4d:fd:e5:b6:53:54:4c:80:f2:fd:3f:c9:38: ca:70:64:9a:08:2e:49:76:d2:9f:4d:6d:9a:d4:92: d7:94:f7:57:5e:d5:fc:f1:1f:91:c3:82:0d:7d:34: 23:40:1f:2b:2a:56:eb:a3:e0:f2:07:8b:56:2a:0b: 15:3f:e9:31:fb:77:72:24:c8:23:06:60:56:98:bc: 9d:61:3f:a4:63:92:81:f9:af:ab:4f:36:c5:ea:39: 17:65:eb:36:68:cf:64:38:6b:9b:82:13:9c:e5:af: 7d:79:72:d2:e8:2e:ec:9f:94:75:12:fe:18:37:e5: 23:04:75:10:7d:5c:67:08:dc:e7:61:58:34:c1:4d: 3e:f8:c4:eb:e7:3e:89:88:71:76:4a:96:8b:01:61: 1a:16:5e:7f:d8:59:5a:02:a2:48:e0:54:c2:39:98: 87:9c:63:e0:43:9f:c4:ad:e0:70:5d:60:d8:6d:43: 3e:5b:5e:c9:11:cc:64:4d:49:15:41:83:c9:27:6a: 6f:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:47:4B:59:BE:C8:74:E4:33:46:94:DC:45:B5:C9:45:E0:F9:2B:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5590f1ab-d808-30e6-9a2d-fb3e791a2b19.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.198.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:a3:f4:fe:39:5f:6b:77:cc:b2:08:6c:00:59:67:e2:03:61: 7a:ae:a5:c9:64:8e:40:a7:39:62:ec:50:59:64:16:87:36:31: 77:c3:f2:3a:e7:de:d9:65:04:01:fb:29:39:5c:6a:6a:91:06: eb:09:4d:67:46:43:bd:b0:df:ef:83:a9:89:ac:67:e1:34:e5: c2:51:4d:6d:16:fd:b4:25:da:66:39:c4:67:f2:d9:3c:01:88: 3e:a2:2b:43:71:d4:7f:16:80:28:70:77:bc:d7:63:4d:79:68: 21:80:a7:9f:8f:77:90:45:0b:58:e7:e6:c1:5c:63:57:9c:fe: f8:31:8f:b8:e7:b4:7f:91:10:d8:17:61:d0:6b:6b:83:82:e4: 37:13:e4:91:b9:9d:cd:53:83:d9:34:da:1e:7c:7b:70:f0:1b: 6c:6f:ee:88:39:85:9e:79:4c:85:70:2f:fc:24:bf:6d:68:cc: c3:ac:26:8f:11:e9:b9:05:20:f4:32:b3:4a:67:aa:67:76:9e: 59:7e:f3:64:4c:74:62:84:f0:82:46:22:4a:bb:85:66:7f:a6: 40:f1:3b:d4:47:57:1f:27:da:de:ee:54:77:92:ca:72:58:f5: 40:78:d7:36:24:ba:6c:9b:56:ef:23:01:d8:cc:b4:bc:66:8b: e3:86:ea:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzQ5kpdET6/TqpKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk NTIwZDU5MmUtZTc3YS00YTY0LTg3YmEtZDIxYTQxNzgxYzNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBLu4+Km8tfN5TWiXDdQlzsKUVnKdWfo1vtI qKKATUKhPb/tFCeUoDukzeMbR73PwrDaS7wKnxKmcZu/sU395bZTVEyA8v0/yTjK cGSaCC5JdtKfTW2a1JLXlPdXXtX88R+Rw4INfTQjQB8rKlbro+DyB4tWKgsVP+kx +3dyJMgjBmBWmLydYT+kY5KB+a+rTzbF6jkXZes2aM9kOGubghOc5a99eXLS6C7s n5R1Ev4YN+UjBHUQfVxnCNznYVg0wU0++MTr5z6JiHF2SpaLAWEaFl5/2FlaAqJI 4FTCOZiHnGPgQ5/EreBwXWDYbUM+W17JEcxkTUkVQYPJJ2pviwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAdHS1m+yHTkM0aU3EW1yUXg+StYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNTU5MGYxYWItZDgwOC0z MGU2LTlhMmQtZmIzZTc5MWEyYjE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8ZCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGSj9P45X2t3zLIIbABZZ+IDYXqupclkjkCnOWLsUFlkFoc2MXfD8jrn 3tllBAH7KTlcamqRBusJTWdGQ72w3++DqYmsZ+E05cJRTW0W/bQl2mY5xGfy2TwB iD6iK0Nx1H8WgChwd7zXY015aCGAp5+Pd5BFC1jn5sFcY1ec/vgxj7jntH+RENgX YdBra4OC5DcT5JG5nc1Tg9k02h58e3DwG2xv7og5hZ55TIVwL/wkv21ozMOsJo8R 6bkFIPQys0pnqmd2nll+82RMdGKE8IJGIkq7hWZ/pkDxO9RHVx8n2t7uVHeSynJY 9UB41zYkumybVu8jAdjMtLxmi+OG6pE= -----END CERTIFICATE-----Generated at Sun Oct 19 23:55:20 2025 by rpki-client