$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a5e98e24-967c-3d8d-8474-f7382cfb7a2b.roa File: a5e98e24-967c-3d8d-8474-f7382cfb7a2b.roa (raw, json) Hash identifier: hY/g+ljeZrIQYXLiYLDZcdEzxP7Q4i5YUkEG4oJsFS8= Subject key identifier: D1:93:99:1E:26:7A:51:1D:64:22:D3:8D:98:43:E2:04:4D:DB:CE:0B Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CDC129F06D3FAD7A809A80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a5e98e24-967c-3d8d-8474-f7382cfb7a2b.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 99.197.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:c1:29:f0:6d:3f:ad:7a:80:9a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=39169624-23e0-4a86-90b0-db673ac15580 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:7f:c6:5f:69:bc:91:d0:4b:dc:f2:39:20:cb: df:33:98:c7:f1:dc:60:94:9e:c6:69:1f:f2:17:7c: d8:cb:cc:47:bf:be:76:2d:78:6d:33:00:ad:71:d2: de:f9:2b:b2:71:94:dd:d0:d2:71:e4:15:b4:71:2a: 4f:59:c4:27:84:40:27:34:e7:14:1c:20:7d:f1:3c: 28:e3:01:78:48:55:f7:f8:fd:65:51:a1:53:4d:08: 8c:e0:99:60:51:a9:45:cc:0b:18:4f:4a:00:25:d5: 82:c8:dc:35:c8:84:e4:84:20:12:76:7d:6b:ac:8f: 3a:d5:4c:69:9c:23:fd:05:a6:ba:d2:3b:af:7d:e7: ca:36:7b:f4:2b:59:46:ba:41:49:32:07:41:d2:16: 22:cf:6a:06:aa:3c:80:92:cc:b6:55:8a:ce:bf:2b: c8:0b:d2:17:12:1f:65:f3:f5:c1:34:e7:af:61:d7: f4:5b:eb:bc:db:39:62:37:45:42:17:a1:08:1f:73: 0c:2c:34:15:36:5f:d9:47:37:ce:2f:f7:e8:03:1e: f6:6e:af:ba:8c:3c:a3:bc:08:4c:18:f3:45:d0:f8: 0c:4e:d0:8b:c1:12:be:f3:6f:cc:0b:55:b1:34:49: ca:00:37:79:ad:05:a5:57:70:9e:6d:6e:4e:bd:32: 32:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:93:99:1E:26:7A:51:1D:64:22:D3:8D:98:43:E2:04:4D:DB:CE:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a5e98e24-967c-3d8d-8474-f7382cfb7a2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.197.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:a8:82:7c:94:81:e5:8d:be:9f:ff:72:2b:60:18:ab:21:d6: 0e:a9:cb:85:51:58:06:0e:c3:3e:45:df:ef:8e:72:b5:cf:1a: bb:c6:19:82:78:20:3c:be:76:7e:c6:31:60:82:96:72:a8:5e: 36:51:ff:3e:d3:b0:da:1f:54:e0:b9:0f:af:ad:cb:51:a1:ea: a8:3d:39:62:4d:48:6e:cd:09:a8:88:b7:68:8e:6b:71:ff:b6: ed:90:eb:39:e7:25:76:d6:77:3b:48:f8:45:0a:64:cd:8a:db: db:14:d0:aa:be:e3:4e:d7:c7:74:e8:9b:44:a4:8d:89:fd:21: 65:84:02:20:2d:ef:0f:9c:96:c1:8f:e5:3b:40:4f:42:55:78: 58:90:13:f2:ca:92:b4:2c:1e:a5:fd:28:44:9a:54:6b:c2:48: d3:ec:25:d5:45:2c:3c:87:c4:04:85:08:62:35:00:85:01:ae: 6e:0b:e8:87:3d:f2:cf:ae:17:ce:a3:72:99:98:e6:e4:90:d5: b0:a5:a4:f2:78:93:e1:be:c9:93:9c:45:4b:b7:cd:66:5e:bf: c0:73:e8:0b:78:b6:5c:61:24:9c:d5:57:6d:84:f1:9d:44:f6: 71:0e:f3:22:16:f4:22:c4:0e:3f:60:42:4f:0c:f9:ba:97:de: 07:37:d1:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzcEp8G0/rXqAmoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk MzkxNjk2MjQtMjNlMC00YTg2LTkwYjAtZGI2NzNhYzE1NTgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5H/GX2m8kdBL3PI5IMvfM5jH8dxglJ7GaR/y F3zYy8xHv752LXhtMwCtcdLe+SuycZTd0NJx5BW0cSpPWcQnhEAnNOcUHCB98Two 4wF4SFX3+P1lUaFTTQiM4JlgUalFzAsYT0oAJdWCyNw1yITkhCASdn1rrI861Uxp nCP9Baa60juvfefKNnv0K1lGukFJMgdB0hYiz2oGqjyAksy2VYrOvyvIC9IXEh9l 8/XBNOevYdf0W+u82zliN0VCF6EIH3MMLDQVNl/ZRzfOL/foAx72bq+6jDyjvAhM GPNF0PgMTtCLwRK+82/MC1WxNEnKADd5rQWlV3CebW5OvTIyMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNGTmR4melEdZCLTjZhD4gRN284LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYTVlOThlMjQtOTY3Yy0z ZDhkLTg0NzQtZjczODJjZmI3YTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8VsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEeognyUgeWNvp//citgGKsh1g6py4VRWAYOwz5F3++OcrXPGrvGGYJ4 IDy+dn7GMWCClnKoXjZR/z7TsNofVOC5D6+ty1Gh6qg9OWJNSG7NCaiIt2iOa3H/ tu2Q6znnJXbWdztI+EUKZM2K29sU0Kq+407Xx3Tom0SkjYn9IWWEAiAt7w+clsGP 5TtAT0JVeFiQE/LKkrQsHqX9KESaVGvCSNPsJdVFLDyHxASFCGI1AIUBrm4L6Ic9 8s+uF86jcpmY5uSQ1bClpPJ4k+G+yZOcRUu3zWZev8Bz6At4tlxhJJzVV22E8Z1E 9nEO8yIW9CLEDj9gQk8M+bqX3gc30TQ= -----END CERTIFICATE-----Generated at Sun Oct 19 23:41:30 2025 by rpki-client