$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/948404ee-1bb7-3b0a-8e46-108cec6dd5cf.roa File: 948404ee-1bb7-3b0a-8e46-108cec6dd5cf.roa (raw, json) Hash identifier: 3SdWQDMI7cXlko3NidK+lxFU+O++mBYivL4lorPOA1E= Subject key identifier: 8D:55:90:4F:A6:93:22:62:8C:CA:3E:01:EB:27:2B:E4:D4:72:BA:98 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CD0C209E4F090909141280 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/948404ee-1bb7-3b0a-8e46-108cec6dd5cf.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 99.197.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:0c:20:9e:4f:09:09:09:14:12:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=0bb1f6a5-150d-45d6-bd29-ca561931ba95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:fa:5c:4d:37:07:eb:ef:3a:7c:e9:ff:11:c8: c3:e7:ed:fc:80:0d:9e:06:62:cd:27:3d:9d:30:a7: f9:3e:64:c1:04:c8:62:d0:d5:cc:2c:19:25:c3:7f: 88:2f:17:f4:ed:65:6f:b0:97:63:11:95:dd:67:cb: a7:53:85:e8:1a:81:42:9e:a0:6e:a8:60:c8:e6:c4: e1:71:c6:fa:2b:9c:6a:07:8f:cb:d9:e7:dc:8d:74: 89:5d:77:33:44:bf:37:45:4c:10:84:2e:b8:a9:9d: bb:24:54:03:7e:99:4a:05:04:ef:ba:e8:8d:5c:30: ee:d0:bc:dc:a7:a7:d6:16:25:ed:7b:ac:54:7d:26: 21:c3:54:ed:a5:7d:3f:a5:86:74:c3:cd:bb:e5:f8: c8:58:56:c8:63:72:8e:d0:20:a0:c0:18:2b:f7:ca: 0f:a2:d1:d4:fb:42:17:1f:37:9f:92:ee:fa:76:42: d7:35:89:b8:a7:df:58:88:50:b8:4d:66:b5:fd:d1: 1f:c8:2d:df:ed:49:96:a7:0f:9b:5e:5d:49:b4:7b: 68:1e:29:09:25:11:9f:54:1a:27:8c:de:6d:39:78: c5:69:55:e8:ca:40:07:d9:98:cb:14:52:0a:dd:e3: c3:b4:53:4f:82:37:4c:33:d0:74:ea:d1:e7:ff:d8: c7:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:55:90:4F:A6:93:22:62:8C:CA:3E:01:EB:27:2B:E4:D4:72:BA:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/948404ee-1bb7-3b0a-8e46-108cec6dd5cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.197.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:6c:c1:65:e9:50:4d:b5:e2:e9:fb:ef:c8:86:04:af:71:0c: 73:55:e7:dc:11:ee:80:43:a0:93:e4:6c:16:7e:0b:36:db:a7: 5a:6d:a6:33:16:44:05:48:58:14:32:0e:d3:c3:45:a6:77:23: 43:55:73:67:be:2d:9b:b5:0f:dd:52:f5:0b:a7:5a:ca:7d:2c: 09:f5:de:6d:38:47:6e:7b:71:95:d4:3d:06:a4:93:44:85:71: 78:d1:93:e3:8a:80:11:34:d1:8a:2c:02:84:e7:0b:d3:b6:6b: 68:44:df:21:f6:29:c2:26:c7:78:12:bd:26:8e:16:6a:f3:98: b9:6b:1f:1b:c6:0e:75:ab:03:3d:da:b2:ae:64:11:7f:db:9f: bd:0e:ca:3f:fd:d8:13:ce:3f:0b:83:66:2e:41:67:2a:37:07: a2:f1:87:f5:c9:61:37:57:1a:af:87:cc:bc:5e:21:16:f9:f0: d4:9e:a1:9e:99:49:41:c3:3f:4e:96:93:da:cc:14:d4:72:67: 9a:9e:a8:8e:7c:b6:92:41:27:3c:b5:89:ff:1d:74:67:7b:27: 1e:5b:7f:32:3e:71:ab:93:1c:db:64:c3:18:46:19:67:3c:42: 12:48:83:e9:d5:86:6c:16:1e:df:9e:d3:92:96:e3:2d:1d:92: 52:a9:04:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzQwgnk8JCQkUEoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk MGJiMWY2YTUtMTUwZC00NWQ2LWJkMjktY2E1NjE5MzFiYTk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/pcTTcH6+86fOn/EcjD5+38gA2eBmLNJz2d MKf5PmTBBMhi0NXMLBklw3+ILxf07WVvsJdjEZXdZ8unU4XoGoFCnqBuqGDI5sTh ccb6K5xqB4/L2efcjXSJXXczRL83RUwQhC64qZ27JFQDfplKBQTvuuiNXDDu0Lzc p6fWFiXte6xUfSYhw1TtpX0/pYZ0w8275fjIWFbIY3KO0CCgwBgr98oPotHU+0IX Hzefku76dkLXNYm4p99YiFC4TWa1/dEfyC3f7UmWpw+bXl1JtHtoHikJJRGfVBon jN5tOXjFaVXoykAH2ZjLFFIK3ePDtFNPgjdMM9B06tHn/9jHxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI1VkE+mkyJijMo+AesnK+TUcrqYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOTQ4NDA0ZWUtMWJiNy0z YjBhLThlNDYtMTA4Y2VjNmRkNWNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8XpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAlswWXpUE214un778iGBK9xDHNV59wR7oBDoJPkbBZ+Czbbp1ptpjMW RAVIWBQyDtPDRaZ3I0NVc2e+LZu1D91S9QunWsp9LAn13m04R257cZXUPQakk0SF cXjRk+OKgBE00YosAoTnC9O2a2hE3yH2KcImx3gSvSaOFmrzmLlrHxvGDnWrAz3a sq5kEX/bn70Oyj/92BPOPwuDZi5BZyo3B6Lxh/XJYTdXGq+HzLxeIRb58NSeoZ6Z SUHDP06Wk9rMFNRyZ5qeqI58tpJBJzy1if8ddGd7Jx5bfzI+cauTHNtkwxhGGWc8 QhJIg+nVhmwWHt+e05KW4y0dklKpBJ8= -----END CERTIFICATE-----Generated at Mon Oct 20 02:39:42 2025 by rpki-client