$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c4af29e4-5c20-3c16-baa1-a6cbf0619261.roa File: c4af29e4-5c20-3c16-baa1-a6cbf0619261.roa (raw, json) Hash identifier: Gxc0PZkS0+FOtwb6qDxdu2oYACPIcvY/DRn7bddfhVM= Subject key identifier: 10:8C:35:3E:13:1C:5A:C4:AC:16:28:9F:49:01:2E:A5:AC:0D:49:16 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CD0A8413C75648DA870600 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c4af29e4-5c20-3c16-baa1-a6cbf0619261.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 99.197.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:0a:84:13:c7:56:48:da:87:06:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=308887ef-93a8-43b2-8b0b-c500e4407dcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:7e:1b:ef:b0:30:fe:c6:d4:68:86:9f:a6:5d: e3:ab:4c:cc:63:59:bb:cf:97:46:ed:48:f5:7f:a5: b8:b4:7f:09:f9:ed:34:ec:0f:af:2c:cc:23:bc:e1: cb:87:0b:93:e8:b8:c6:d9:4b:23:26:35:e7:f3:a8: 66:36:b7:88:cb:2c:5f:65:a2:44:75:fa:3a:81:ba: a0:41:30:5e:9e:8c:80:0f:88:97:19:0f:a2:10:08: 74:c1:61:17:d5:93:70:1f:eb:17:06:f0:d3:0d:d4: 1d:4a:08:b2:ce:3a:c4:fc:e6:ef:83:dc:60:15:cb: 89:f8:2e:cc:aa:33:0c:e6:5d:ea:3c:f0:e1:30:9d: d6:44:70:67:c0:d7:62:9b:c9:a6:86:5a:9d:7c:48: 4e:b6:72:25:c8:a8:a1:6c:48:9d:d8:14:30:8a:c9: ef:d9:1e:18:d8:45:2f:00:35:72:93:11:15:b9:96: 8e:a1:0e:b0:77:50:6b:cf:e4:ac:22:30:88:b4:86: cb:ee:ae:8d:a1:96:37:da:63:c4:04:21:0b:39:58: e2:32:57:cf:20:b2:01:18:18:77:c7:12:14:c1:2f: 21:f3:a3:ac:8c:08:51:6d:51:27:32:01:35:70:25: 83:29:e1:a0:b7:22:53:f2:be:8f:a4:37:d9:58:f6: 52:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:8C:35:3E:13:1C:5A:C4:AC:16:28:9F:49:01:2E:A5:AC:0D:49:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c4af29e4-5c20-3c16-baa1-a6cbf0619261.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.197.165.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:fe:7e:51:79:83:a7:c0:99:69:56:b3:d0:fd:2a:02:c0:5e: bd:f3:69:0e:9a:33:98:1d:f9:9f:11:98:85:b3:6d:8f:4e:aa: 8c:99:2f:97:ea:11:ce:ef:33:54:c1:88:79:45:75:7c:67:f0: 85:6f:3a:55:16:55:7f:3f:91:a3:1b:98:6c:83:05:bf:07:bf: 7b:fb:0c:77:b1:de:cd:a8:7c:9f:bc:2a:94:2a:a0:60:f6:57: bd:59:83:c5:56:3b:0e:75:08:67:db:b0:cc:62:9a:32:19:30: 3c:a7:20:04:6d:92:fb:ca:83:dd:e9:58:8f:22:14:54:32:14: cf:a2:79:b9:c5:cb:95:e5:64:5b:9a:4a:df:7f:84:b3:43:e7: 00:70:49:6e:cb:9f:60:0e:55:82:05:f3:72:9b:b3:00:27:1c: ae:69:43:2f:cf:3c:13:9b:61:10:8f:c2:46:2b:b6:4b:e2:a7: 2d:45:27:39:24:d6:d9:28:48:f4:78:a1:eb:89:95:e3:41:1d: 05:bb:0e:84:08:06:c6:a7:2b:c7:68:5b:6a:6a:24:f0:41:af: 86:f2:89:89:ae:00:51:3f:13:84:f1:a0:91:9c:d7:70:dc:80: 8a:96:0b:5f:a2:c8:3e:6a:e4:1c:6d:2f:d8:2b:a6:b7:8f:38: 30:77:eb:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzQqEE8dWSNqHBgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk MzA4ODg3ZWYtOTNhOC00M2IyLThiMGItYzUwMGU0NDA3ZGNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlX4b77Aw/sbUaIafpl3jq0zMY1m7z5dG7Uj1 f6W4tH8J+e007A+vLMwjvOHLhwuT6LjG2UsjJjXn86hmNreIyyxfZaJEdfo6gbqg QTBenoyAD4iXGQ+iEAh0wWEX1ZNwH+sXBvDTDdQdSgiyzjrE/Obvg9xgFcuJ+C7M qjMM5l3qPPDhMJ3WRHBnwNdim8mmhlqdfEhOtnIlyKihbEid2BQwisnv2R4Y2EUv ADVykxEVuZaOoQ6wd1Brz+SsIjCItIbL7q6NoZY32mPEBCELOVjiMlfPILIBGBh3 xxIUwS8h86OsjAhRbVEnMgE1cCWDKeGgtyJT8r6PpDfZWPZSkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBCMNT4THFrErBYon0kBLqWsDUkWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYzRhZjI5ZTQtNWMyMC0z YzE2LWJhYTEtYTZjYmYwNjE5MjYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8WlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADL+flF5g6fAmWlWs9D9KgLAXr3zaQ6aM5gd+Z8RmIWzbY9OqoyZL5fq Ec7vM1TBiHlFdXxn8IVvOlUWVX8/kaMbmGyDBb8Hv3v7DHex3s2ofJ+8KpQqoGD2 V71Zg8VWOw51CGfbsMximjIZMDynIARtkvvKg93pWI8iFFQyFM+iebnFy5XlZFua St9/hLND5wBwSW7Ln2AOVYIF83KbswAnHK5pQy/PPBObYRCPwkYrtkvipy1FJzkk 1tkoSPR4oeuJleNBHQW7DoQIBsanK8doW2pqJPBBr4byiYmuAFE/E4TxoJGc13Dc gIqWC1+iyD5q5BxtL9grprePODB363Q= -----END CERTIFICATE-----Generated at Mon Oct 20 07:35:56 2025 by rpki-client