$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7c4e93d8-eeca-3f3d-8092-bc77f8238d20.roa File: 7c4e93d8-eeca-3f3d-8092-bc77f8238d20.roa (raw, json) Hash identifier: G5hwzr7O3y7E8xqbXkvSMvkpMiINNN9FQRNGTvtdSts= Subject key identifier: 70:31:4F:5B:28:05:A8:EB:20:9B:C4:66:66:55:6B:BD:52:75:51:9E Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CDC25F7619A8DC21940A80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7c4e93d8-eeca-3f3d-8092-bc77f8238d20.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 99.197.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:c2:5f:76:19:a8:dc:21:94:0a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=43c8dd93-a74d-4cf2-86cf-c249c453a3f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ba:fa:c4:7d:f1:98:30:ed:df:4f:50:8b:89: ef:24:84:4d:9f:af:b4:7f:bf:d3:df:12:89:40:2e: 79:dd:ff:c3:5a:0a:de:7c:a0:2a:22:b9:ad:65:fd: c6:5e:59:e5:41:f1:f4:b0:2a:da:87:83:7b:34:e8: 55:7a:a6:e7:39:dc:d0:cf:09:da:5b:ca:0a:d3:04: 13:e7:fb:39:a5:aa:a7:cd:70:26:bb:3e:3b:56:5e: cb:76:bc:19:a2:12:2a:88:bd:55:ed:96:17:1a:1b: 25:18:96:7c:8d:69:5c:1c:24:8c:63:fd:96:57:1c: b3:6a:43:4c:ea:d2:7f:57:85:80:92:ca:36:ca:ed: fc:d9:6e:c1:0a:d1:03:0a:12:d6:7f:c4:75:f5:2c: 0d:94:b2:07:09:76:74:60:c9:ab:9e:e6:e6:d7:65: 6d:ac:e7:1e:9e:53:e9:8a:3f:d6:f3:dc:c8:3a:3d: e1:0d:0f:5f:2a:c3:03:e2:09:50:e1:06:13:c1:e1: af:94:dd:e7:5d:0b:fb:8f:fa:ea:69:56:b0:ef:08: ec:5f:3e:ec:40:49:a0:68:11:e1:9b:14:64:63:af: e4:50:78:34:7c:2a:22:81:a3:12:0d:39:05:e0:8c: bc:f1:1e:a8:e9:f9:be:8a:0a:2f:9a:0b:07:78:95: 89:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:31:4F:5B:28:05:A8:EB:20:9B:C4:66:66:55:6B:BD:52:75:51:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7c4e93d8-eeca-3f3d-8092-bc77f8238d20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.197.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:a4:00:34:fd:6c:d6:f3:d5:38:90:a7:a4:6a:6c:f2:07:d4: da:22:65:cb:fc:24:0b:02:04:96:7b:26:9e:12:d2:79:eb:56: 23:70:0e:40:d2:84:8e:45:6e:96:04:cc:d6:af:5a:ce:b8:a3: 2e:e5:c8:da:cb:5e:aa:4d:6e:8e:d3:69:f6:42:00:8c:9d:3d: 0d:ef:ba:f4:a9:34:bf:12:26:df:0c:7a:6a:93:20:b3:0b:84: c8:ad:6b:6e:28:e6:5a:ee:6e:ee:4a:3c:7c:f0:08:c3:17:ac: ab:77:66:e5:fd:a1:77:e6:1f:7a:e5:da:7b:68:e9:45:4d:c1: 90:af:cf:07:47:be:a2:46:e9:fc:5c:4b:44:6b:cc:9d:b7:aa: 46:ef:3b:b4:c4:7a:58:cc:d3:c9:2f:ae:61:c8:15:75:2e:88: 51:44:bc:7b:ac:02:4a:7f:09:56:ba:7a:e9:5c:14:e2:7e:83: 1b:e9:af:39:89:e1:81:8d:4f:38:df:88:36:fd:47:78:e2:4d: db:c2:33:13:76:65:94:a1:ed:dc:87:2c:5f:a8:8e:86:d0:e9: 89:aa:5d:61:3e:93:3b:57:5e:84:8c:d5:0d:73:02:a4:8b:4b: 48:5c:5a:3b:5f:65:48:59:8d:b8:5c:76:15:e9:0b:5d:a4:53: 25:e9:5e:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzcJfdhmo3CGUCoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk NDNjOGRkOTMtYTc0ZC00Y2YyLTg2Y2YtYzI0OWM0NTNhM2Y5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrr6xH3xmDDt309Qi4nvJIRNn6+0f7/T3xKJ QC553f/DWgrefKAqIrmtZf3GXlnlQfH0sCrah4N7NOhVeqbnOdzQzwnaW8oK0wQT 5/s5paqnzXAmuz47Vl7LdrwZohIqiL1V7ZYXGhslGJZ8jWlcHCSMY/2WVxyzakNM 6tJ/V4WAkso2yu382W7BCtEDChLWf8R19SwNlLIHCXZ0YMmrnubm12VtrOcenlPp ij/W89zIOj3hDQ9fKsMD4glQ4QYTweGvlN3nXQv7j/rqaVaw7wjsXz7sQEmgaBHh mxRkY6/kUHg0fCoigaMSDTkF4Iy88R6o6fm+igovmgsHeJWJ5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHAxT1soBajrIJvEZmZVa71SdVGeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvN2M0ZTkzZDgtZWVjYS0z ZjNkLTgwOTItYmM3N2Y4MjM4ZDIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8WLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEKkADT9bNbz1TiQp6RqbPIH1NoiZcv8JAsCBJZ7Jp4S0nnrViNwDkDS hI5FbpYEzNavWs64oy7lyNrLXqpNbo7TafZCAIydPQ3vuvSpNL8SJt8MemqTILML hMita24o5lrubu5KPHzwCMMXrKt3ZuX9oXfmH3rl2nto6UVNwZCvzwdHvqJG6fxc S0RrzJ23qkbvO7TEeljM08kvrmHIFXUuiFFEvHusAkp/CVa6eulcFOJ+gxvprzmJ 4YGNTzjfiDb9R3jiTdvCMxN2ZZSh7dyHLF+ojobQ6YmqXWE+kztXXoSM1Q1zAqSL S0hcWjtfZUhZjbhcdhXpC12kUyXpXsY= -----END CERTIFICATE-----Generated at Mon Oct 20 02:23:49 2025 by rpki-client