$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bbb8337a-8c73-3691-9038-f5a02949da6f.roa File: bbb8337a-8c73-3691-9038-f5a02949da6f.roa (raw, json) Hash identifier: 4EdQTH7tBeQ07XAz/wwswCKI6Pe6NcRQ+A6sUVnW4mE= Subject key identifier: 60:31:AF:BC:CE:85:A9:B8:79:47:14:D1:67:6A:1B:F9:79:B3:2D:9E Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CD0A0BB5916C44C17CC550 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bbb8337a-8c73-3691-9038-f5a02949da6f.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 99.197.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:0a:0b:b5:91:6c:44:c1:7c:c5:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=b7703e0e-9711-4ce8-a46b-417fece8836b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:85:83:1c:fe:1a:57:24:f2:f1:a1:38:2a:39: a2:6a:90:46:76:9f:26:ba:2d:d8:06:80:60:93:0a: e8:ad:33:4d:3b:aa:27:b0:4e:04:9e:30:24:88:2c: 7e:2a:96:e4:40:da:62:f6:46:34:ff:a3:47:1f:b2: e0:ea:79:5b:c6:49:e0:68:28:1b:76:c7:ff:0a:a1: 28:61:26:4d:c4:42:a5:21:ee:71:d6:07:66:33:6e: 45:f9:eb:99:1c:cc:bd:fa:04:2f:90:e5:20:43:cd: 7e:70:7b:82:89:bb:75:83:c2:f0:bc:5f:3b:05:b9: b3:b1:cd:ff:9e:db:eb:c3:cb:e5:2e:af:64:f2:6b: 59:13:e9:16:a6:a5:44:c6:d8:cf:de:d1:bc:95:0f: f3:01:ef:23:09:69:f3:af:4e:de:b0:77:1e:d0:eb: ff:0c:82:ab:21:8e:17:c2:a0:7a:57:f1:27:49:b2: d4:d8:0b:ae:50:08:e7:2f:8b:86:ac:ff:96:5e:b4: 76:4c:22:d9:76:ad:ba:01:19:b7:ba:0a:14:c5:be: f1:e1:88:14:88:94:51:fe:3e:2e:f2:68:1c:e0:f2: 2d:d2:7c:27:32:d5:f1:51:47:29:f8:3e:93:9e:51: 38:70:36:67:ad:ab:cf:c6:b0:37:74:63:72:2e:f7: 3f:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:31:AF:BC:CE:85:A9:B8:79:47:14:D1:67:6A:1B:F9:79:B3:2D:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bbb8337a-8c73-3691-9038-f5a02949da6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.197.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:62:79:ba:cd:3d:81:4a:d2:50:40:b8:c6:ef:e5:26:6d:4e: 75:58:01:68:80:a3:52:57:e6:19:9b:c0:14:26:01:42:34:9f: ba:77:b4:94:9b:83:fb:fd:e1:31:b1:cc:67:66:35:86:77:0e: db:8e:ee:b6:b5:f8:ca:3a:43:2a:da:ee:5e:f8:91:e4:60:c4: 4e:cf:09:ba:6c:19:2e:a3:a4:93:44:e8:23:74:10:1b:f9:ae: 5e:85:ea:19:50:25:ce:7a:b2:33:fe:85:9f:dd:20:8f:12:29: 08:02:7a:10:47:0b:a3:4d:cb:d7:85:a3:94:97:b8:14:a4:1a: 0e:25:3d:d6:fb:39:cd:ec:39:f7:5c:dd:e5:d1:d3:72:28:19: 2f:e2:83:de:58:3f:f3:56:a8:04:6a:7a:01:4d:51:2d:4a:fc: 62:ba:d0:fc:af:64:b3:96:f3:8d:a1:da:05:44:e6:d3:7c:da: 24:24:e5:bf:3a:3a:12:f2:45:d2:be:27:43:9b:40:d7:3d:98: 9e:5c:c0:5e:94:45:e0:42:73:26:ed:d1:64:05:2f:ca:b9:aa: 39:2f:01:63:2a:49:51:9b:11:5a:e5:fc:39:e7:48:4b:38:41: e0:42:1e:44:14:1a:ae:d7:5b:37:8b:54:90:a4:09:85:cf:8a: d0:30:d3:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzQoLtZFsRMF8xVAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk Yjc3MDNlMGUtOTcxMS00Y2U4LWE0NmItNDE3ZmVjZTg4MzZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIWDHP4aVyTy8aE4KjmiapBGdp8mui3YBoBg kwrorTNNO6onsE4EnjAkiCx+KpbkQNpi9kY0/6NHH7Lg6nlbxkngaCgbdsf/CqEo YSZNxEKlIe5x1gdmM25F+euZHMy9+gQvkOUgQ81+cHuCibt1g8LwvF87Bbmzsc3/ ntvrw8vlLq9k8mtZE+kWpqVExtjP3tG8lQ/zAe8jCWnzr07esHce0Ov/DIKrIY4X wqB6V/EnSbLU2AuuUAjnL4uGrP+WXrR2TCLZdq26ARm3ugoUxb7x4YgUiJRR/j4u 8mgc4PIt0nwnMtXxUUcp+D6TnlE4cDZnravPxrA3dGNyLvc/9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGAxr7zOham4eUcU0WdqG/l5sy2eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYmJiODMzN2EtOGM3My0z NjkxLTkwMzgtZjVhMDI5NDlkYTZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8WYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABRiebrNPYFK0lBAuMbv5SZtTnVYAWiAo1JX5hmbwBQmAUI0n7p3tJSb g/v94TGxzGdmNYZ3DtuO7ra1+Mo6Qyra7l74keRgxE7PCbpsGS6jpJNE6CN0EBv5 rl6F6hlQJc56sjP+hZ/dII8SKQgCehBHC6NNy9eFo5SXuBSkGg4lPdb7Oc3sOfdc 3eXR03IoGS/ig95YP/NWqARqegFNUS1K/GK60PyvZLOW842h2gVE5tN82iQk5b86 OhLyRdK+J0ObQNc9mJ5cwF6UReBCcybt0WQFL8q5qjkvAWMqSVGbEVrl/DnnSEs4 QeBCHkQUGq7XWzeLVJCkCYXPitAw0/c= -----END CERTIFICATE-----Generated at Sun Oct 19 23:59:14 2025 by rpki-client