$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8f793e83-8224-35d0-b92f-383dd0188e5c.roa File: 8f793e83-8224-35d0-b92f-383dd0188e5c.roa (raw, json) Hash identifier: QO3kTdDVF+cG3JM8nzA1AL63oFGU+2S4LI27wNc9SI4= Subject key identifier: A9:8F:77:97:8B:F9:A2:4B:2A:B7:41:01:9A:FB:AF:DE:E3:6D:9F:2A Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CD0C6F34D8A91B66D7E5E0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8f793e83-8224-35d0-b92f-383dd0188e5c.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 99.197.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:0c:6f:34:d8:a9:1b:66:d7:e5:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=812a29af-1550-47d9-94bf-54fd2d0b99bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b5:af:56:f4:e5:c7:ce:57:26:d9:62:c6:e3: d5:aa:34:cf:8a:33:89:e3:f4:0c:20:d4:dc:04:12: ce:eb:ae:0e:72:72:78:c8:12:f5:6a:4b:43:0d:d3: 34:28:7e:7a:c7:f0:15:73:23:da:ea:98:42:19:59: 44:23:3b:9d:56:8f:56:44:51:23:28:af:ff:db:93: 4d:ca:1a:79:f5:26:7f:39:79:e1:6a:dc:56:1e:70: 4a:9d:14:0e:6d:ad:b9:89:95:3c:5d:2f:6f:0d:4d: 1f:45:0d:80:74:5d:77:1e:0a:0a:0c:d5:98:83:d6: be:c3:2d:bc:28:ca:41:54:63:3d:ac:82:2f:45:eb: 1e:54:99:fc:45:61:85:da:85:db:e9:18:9e:1a:77: 07:f1:a4:cc:3d:ed:ae:e1:3a:b7:ac:30:76:e7:91: e0:26:46:74:11:90:80:87:85:da:45:be:50:af:52: 4c:9b:14:4a:21:fd:1f:96:9f:0d:8e:84:40:22:fd: 3e:32:b0:14:0a:1e:56:c0:6a:77:40:93:d3:1b:21: 97:d7:f8:e5:0f:c1:4c:66:1f:2a:81:0c:54:42:01: 4c:21:da:45:65:2a:32:de:2f:a3:3b:4e:fa:e1:d3: c3:cc:6e:99:6b:77:16:f4:7c:61:bb:fa:eb:c0:b6: 3f:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:8F:77:97:8B:F9:A2:4B:2A:B7:41:01:9A:FB:AF:DE:E3:6D:9F:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8f793e83-8224-35d0-b92f-383dd0188e5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.197.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c6:dc:69:68:e2:5f:36:b5:fb:dc:07:e4:9b:0a:6b:7b:39:8a: 65:96:9c:0a:c9:23:0f:a0:00:82:b4:fc:83:4f:d3:6e:50:9d: 47:d1:b8:77:82:ba:d0:b6:b2:24:9f:0e:db:2d:72:15:df:9f: 04:24:18:10:6d:71:47:54:73:b7:52:e3:6c:b4:7d:92:30:aa: ed:fa:f7:b1:49:78:be:27:19:5e:6c:b2:85:31:42:04:8f:5f: 4e:21:8e:c7:ed:fa:b5:61:b3:89:23:36:9c:09:1d:8b:ab:0a: cb:db:7e:ad:31:54:e9:5d:33:73:11:67:a7:a6:b4:cc:82:a7: 5f:8f:c8:f3:7a:ac:84:4d:ff:e2:04:8e:f5:83:a7:84:57:03: 2e:40:50:d1:a8:80:e8:26:81:6c:29:46:bc:36:e9:b9:43:3c: ce:00:24:8d:73:92:34:c2:36:44:9a:3c:dc:67:a6:00:c3:76: 94:1b:58:de:71:c0:06:7b:e8:e1:53:2a:16:c9:73:e5:6a:99: ed:27:b4:1d:dd:a9:7a:b7:3b:75:2a:89:16:ed:29:1b:72:cf: 0c:71:0b:38:d8:2c:4b:ea:17:59:e5:64:0a:6a:ac:64:eb:c8: 4a:50:ea:6a:b5:21:eb:83:4c:c6:81:a8:f1:4d:55:7a:ff:3a: 40:5a:eb:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzQxvNNipG2bX5eAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk ODEyYTI5YWYtMTU1MC00N2Q5LTk0YmYtNTRmZDJkMGI5OWJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbWvVvTlx85XJtlixuPVqjTPijOJ4/QMINTc BBLO664OcnJ4yBL1aktDDdM0KH56x/AVcyPa6phCGVlEIzudVo9WRFEjKK//25NN yhp59SZ/OXnhatxWHnBKnRQOba25iZU8XS9vDU0fRQ2AdF13HgoKDNWYg9a+wy28 KMpBVGM9rIIvReseVJn8RWGF2oXb6RieGncH8aTMPe2u4Tq3rDB255HgJkZ0EZCA h4XaRb5Qr1JMmxRKIf0flp8NjoRAIv0+MrAUCh5WwGp3QJPTGyGX1/jlD8FMZh8q gQxUQgFMIdpFZSoy3i+jO0764dPDzG6Za3cW9Hxhu/rrwLY/KwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKmPd5eL+aJLKrdBAZr7r97jbZ8qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOGY3OTNlODMtODIyNC0z NWQwLWI5MmYtMzgzZGQwMTg4ZTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8X8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMbcaWjiXza1+9wH5JsKa3s5imWWnArJIw+gAIK0/INP025QnUfRuHeC utC2siSfDtstchXfnwQkGBBtcUdUc7dS42y0fZIwqu3697FJeL4nGV5ssoUxQgSP X04hjsft+rVhs4kjNpwJHYurCsvbfq0xVOldM3MRZ6emtMyCp1+PyPN6rIRN/+IE jvWDp4RXAy5AUNGogOgmgWwpRrw26blDPM4AJI1zkjTCNkSaPNxnpgDDdpQbWN5x wAZ76OFTKhbJc+Vqme0ntB3dqXq3O3UqiRbtKRtyzwxxCzjYLEvqF1nlZApqrGTr yEpQ6mq1IeuDTMaBqPFNVXr/OkBa64o= -----END CERTIFICATE-----Generated at Mon Oct 20 00:05:37 2025 by rpki-client