$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7111cf17-6b3a-354a-81ce-2b231a72d5a6.roa File: 7111cf17-6b3a-354a-81ce-2b231a72d5a6.roa (raw, json) Hash identifier: 3NgyKpGzAzxsL+DvmccJ+GjvSJwXwu22k3SPn0bK6Zc= Subject key identifier: 07:21:D2:05:70:D3:98:72:1E:56:41:96:3C:F3:86:1D:32:E1:97:4C Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CDBBDFBD00BD30CAC691C0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7111cf17-6b3a-354a-81ce-2b231a72d5a6.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 99.196.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:bb:df:bd:00:bd:30:ca:c6:91:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=29a5a2a7-dfc7-488c-84e4-a542718ff7fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:c6:4f:5f:6a:6e:7b:31:99:01:d4:cd:fb:7e: c9:52:62:90:dd:d9:bf:f0:92:c1:bd:a5:ab:94:e8: b2:9a:72:28:0e:55:f3:52:75:f1:97:6c:d0:86:00: cf:cc:23:a3:a2:eb:f2:0f:4c:44:9d:ea:90:b4:d2: 73:09:eb:bf:4f:97:f1:51:d4:f6:e3:7c:4b:78:f8: 05:1d:e5:0e:5b:d8:f3:51:83:3d:03:15:15:7e:44: 28:8b:20:a3:60:eb:45:1c:1f:03:7d:7a:bf:ee:cc: 6e:22:8c:9b:73:f1:8a:c9:7a:fc:ce:fc:82:7e:f5: 7c:84:20:5b:9e:39:37:84:12:ee:c8:a1:0d:1e:af: bf:71:e4:ed:35:5d:44:00:81:b1:f4:03:6c:2b:e0: 26:be:35:cc:55:4b:c2:8a:2a:7f:42:a5:23:62:6e: 1e:92:b1:30:3d:fc:8f:81:c6:b5:c7:61:26:d6:32: b7:94:fa:25:b4:9a:7c:e0:37:b5:c7:e6:4e:c0:33: 4c:59:de:42:e7:42:4c:cd:b9:e4:52:f2:c1:da:64: f8:25:6b:20:f3:10:3a:bc:0c:c4:37:6a:43:ea:e6: 7a:84:19:6c:fa:8e:9b:21:fc:ec:03:9a:b3:f2:16: ba:26:dd:61:44:30:54:ee:56:c3:91:04:28:08:e3: 87:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:21:D2:05:70:D3:98:72:1E:56:41:96:3C:F3:86:1D:32:E1:97:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7111cf17-6b3a-354a-81ce-2b231a72d5a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.196.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:2e:68:df:d9:dd:54:25:3e:ac:1b:55:2e:5c:35:a5:9b:7b: 66:64:d3:f7:a7:35:a2:aa:bd:c2:95:d5:74:d2:51:5d:fb:f4: a2:cc:3e:cc:0e:75:86:4a:6d:75:88:58:58:43:05:d6:91:17: 15:66:f8:2f:b1:46:01:9f:77:66:0d:d2:9f:8d:e8:f5:9e:95: 3a:08:4b:5c:8e:ff:9d:92:0c:fe:2d:d1:83:88:79:be:a7:e9: 41:f4:ab:fc:5f:24:6a:40:c6:b4:b4:0e:b6:39:20:93:5b:97: cf:60:c1:cc:b3:fa:3e:b2:29:d7:6a:20:7d:89:92:ee:62:22: 66:5c:43:03:c3:03:e5:05:1d:42:ad:01:b7:32:d6:15:0e:93: 71:cf:65:11:25:05:83:e0:ac:c2:c2:bc:7b:3a:2d:18:32:cc: 6e:b2:bd:79:71:60:2a:97:c1:ea:50:8f:80:65:8a:e4:96:94: b2:9a:45:6c:2f:42:0c:92:5c:41:7a:e1:79:51:9f:5a:cd:6b: da:53:81:74:6d:53:31:49:7e:df:14:93:16:6e:95:92:8d:83: a8:a9:a0:3c:8a:32:cd:ef:47:9c:b9:74:c4:89:e1:e8:fe:b0: 6b:c0:7e:6b:6a:8f:4f:21:3b:a8:af:a9:3b:3f:df:83:04:28: c7:d8:f8:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzbvfvQC9MMrGkcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk MjlhNWEyYTctZGZjNy00ODhjLTg0ZTQtYTU0MjcxOGZmN2ZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7MZPX2puezGZAdTN+37JUmKQ3dm/8JLBvaWr lOiymnIoDlXzUnXxl2zQhgDPzCOjouvyD0xEneqQtNJzCeu/T5fxUdT243xLePgF HeUOW9jzUYM9AxUVfkQoiyCjYOtFHB8DfXq/7sxuIoybc/GKyXr8zvyCfvV8hCBb njk3hBLuyKENHq+/ceTtNV1EAIGx9ANsK+AmvjXMVUvCiip/QqUjYm4ekrEwPfyP gca1x2Em1jK3lPoltJp84De1x+ZOwDNMWd5C50JMzbnkUvLB2mT4JWsg8xA6vAzE N2pD6uZ6hBls+o6bIfzsA5qz8ha6Jt1hRDBU7lbDkQQoCOOHowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAch0gVw05hyHlZBljzzhh0y4ZdMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNzExMWNmMTctNmIzYS0z NTRhLTgxY2UtMmIyMzFhNzJkNWE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8TdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALUuaN/Z3VQlPqwbVS5cNaWbe2Zk0/enNaKqvcKV1XTSUV379KLMPswO dYZKbXWIWFhDBdaRFxVm+C+xRgGfd2YN0p+N6PWelToIS1yO/52SDP4t0YOIeb6n 6UH0q/xfJGpAxrS0DrY5IJNbl89gwcyz+j6yKddqIH2Jku5iImZcQwPDA+UFHUKt Abcy1hUOk3HPZRElBYPgrMLCvHs6LRgyzG6yvXlxYCqXwepQj4BliuSWlLKaRWwv QgySXEF64XlRn1rNa9pTgXRtUzFJft8UkxZulZKNg6ipoDyKMs3vR5y5dMSJ4ej+ sGvAfmtqj08hO6ivqTs/34MEKMfY+K8= -----END CERTIFICATE-----Generated at Mon Oct 20 02:51:09 2025 by rpki-client