$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8a520675-6613-388a-be6a-1f5023da6b64.roa File: 8a520675-6613-388a-be6a-1f5023da6b64.roa (raw, json) Hash identifier: jsyljpIvLRrpzmmc/J5dOxzmK3H5QTi90EgyJ6pTfww= Subject key identifier: 94:D5:E4:F0:7D:11:5A:5E:45:61:A3:CE:69:A1:8A:F9:35:93:22:AA Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CCFD6648820CACE4027C80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8a520675-6613-388a-be6a-1f5023da6b64.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 99.196.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cc:fd:66:48:82:0c:ac:e4:02:7c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=b8937a78-d243-4fd5-a8de-27351ac04dd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:2f:89:fd:4f:eb:37:91:13:2e:68:d9:29:b7: 49:7b:7a:15:ea:98:ed:f5:18:5c:c6:14:4b:e2:83: 82:65:08:42:5c:62:ad:a2:97:da:66:b1:ac:45:de: 0d:65:ee:c4:0d:5a:7e:ba:a0:29:fd:22:68:fc:66: 3a:55:70:05:94:83:90:cf:eb:d7:71:a4:93:4e:b8: f1:aa:31:3d:68:da:8a:16:c7:ba:95:a9:70:7e:97: 3d:df:8c:b4:1b:e7:a4:e3:06:24:c5:00:93:8c:ed: df:f0:91:69:6e:d0:55:b8:9f:d7:00:3c:1d:94:f8: 4d:f6:a6:5b:f4:f5:a6:e4:ee:34:d9:96:70:1b:34: c7:1f:41:1c:79:28:69:d9:cc:40:f6:55:a3:d7:a9: 43:bf:65:26:8e:cb:b6:94:54:ba:f3:36:3c:35:8d: ac:2a:86:1a:28:af:93:c4:82:ef:b9:4d:86:17:fd: d9:6d:5f:c7:d2:ec:4d:41:4c:c9:a4:5f:79:3a:51: 6c:b0:ba:47:47:42:a7:59:de:bc:ff:5b:ff:c9:c5: 5d:4c:73:a0:ca:04:10:07:03:46:e7:23:11:6e:a9: 9e:b2:6a:93:9d:58:95:a4:3d:b8:a7:e2:8d:2a:b2: 2c:36:62:22:1d:67:64:1c:11:cd:45:fc:c9:cc:ed: df:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:D5:E4:F0:7D:11:5A:5E:45:61:A3:CE:69:A1:8A:F9:35:93:22:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8a520675-6613-388a-be6a-1f5023da6b64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.196.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:8c:a9:e2:4d:9b:51:ca:14:57:fe:29:f7:6e:39:02:ea:d2: d8:2c:04:3d:c6:5c:18:91:a5:77:7f:06:45:6f:a1:a8:b7:0e: 1d:a7:70:83:73:06:5a:04:14:f6:b7:c9:a4:e3:2d:ce:43:c5: 27:23:17:4e:c0:46:b9:63:eb:a4:d3:5f:b0:ca:c5:f8:5a:88: d2:b4:61:60:80:81:80:32:94:af:cb:8f:49:3e:83:78:0b:df: ce:5e:7c:70:58:4d:42:fa:82:d3:8a:71:14:82:dd:f0:81:2f: ea:85:3b:e6:cc:f5:bc:6c:eb:f0:45:46:3b:fe:ce:5b:72:70: cf:f3:df:fd:05:1f:b0:6e:06:78:31:aa:cc:78:e5:94:b4:c4: 14:88:77:74:f7:9d:ef:ce:22:ed:ab:b2:9c:a2:61:bd:fa:a3: ea:5e:a2:9e:00:4e:f7:00:a3:57:62:aa:91:48:8d:6f:66:8d: d5:e0:c6:93:f5:c3:eb:39:61:65:8b:bc:8a:9e:20:ff:e4:11: 10:a6:1c:b7:a5:9d:78:95:d3:ed:3e:25:b1:e3:ff:7b:7f:df: e9:74:2f:b4:57:b1:8f:3d:11:c9:53:33:eb:91:a2:cb:ed:a1: 1a:ba:09:a8:a2:9d:1d:ea:40:29:99:b6:b1:42:eb:22:23:c0: ce:46:d6:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzP1mSIIMrOQCfIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk Yjg5MzdhNzgtZDI0My00ZmQ1LWE4ZGUtMjczNTFhYzA0ZGQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5C+J/U/rN5ETLmjZKbdJe3oV6pjt9RhcxhRL 4oOCZQhCXGKtopfaZrGsRd4NZe7EDVp+uqAp/SJo/GY6VXAFlIOQz+vXcaSTTrjx qjE9aNqKFse6lalwfpc934y0G+ek4wYkxQCTjO3f8JFpbtBVuJ/XADwdlPhN9qZb 9PWm5O402ZZwGzTHH0EceShp2cxA9lWj16lDv2Umjsu2lFS68zY8NY2sKoYaKK+T xILvuU2GF/3ZbV/H0uxNQUzJpF95OlFssLpHR0KnWd68/1v/ycVdTHOgygQQBwNG 5yMRbqmesmqTnViVpD24p+KNKrIsNmIiHWdkHBHNRfzJzO3f/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJTV5PB9EVpeRWGjzmmhivk1kyKqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOGE1MjA2NzUtNjYxMy0z ODhhLWJlNmEtMWY1MDIzZGE2YjY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8QBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGiMqeJNm1HKFFf+KfduOQLq0tgsBD3GXBiRpXd/BkVvoai3Dh2ncINz BloEFPa3yaTjLc5DxScjF07ARrlj66TTX7DKxfhaiNK0YWCAgYAylK/Lj0k+g3gL 385efHBYTUL6gtOKcRSC3fCBL+qFO+bM9bxs6/BFRjv+zltycM/z3/0FH7BuBngx qsx45ZS0xBSId3T3ne/OIu2rspyiYb36o+peop4ATvcAo1diqpFIjW9mjdXgxpP1 w+s5YWWLvIqeIP/kERCmHLelnXiV0+0+JbHj/3t/3+l0L7RXsY89EclTM+uRosvt oRq6CaiinR3qQCmZtrFC6yIjwM5G1lo= -----END CERTIFICATE-----Generated at Mon Oct 20 08:04:43 2025 by rpki-client