$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c99c4d9f-f0ab-3550-9179-58553c298e1c.roa File: c99c4d9f-f0ab-3550-9179-58553c298e1c.roa (raw, json) Hash identifier: FoOhq4esVDvoojst9dBh/RaSryzJmlAo9j4VsejMWjw= Subject key identifier: 6B:6F:6A:72:E9:B6:78:69:D6:FA:9B:18:F5:43:EC:5E:18:16:C5:26 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CDB4673D40AF4991438400 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c99c4d9f-f0ab-3550-9179-58553c298e1c.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 75.107.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:b4:67:3d:40:af:49:91:43:84:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=225d9dd1-b9d4-41c5-beae-7dda3fb9e98d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:57:3d:48:a8:c3:36:d4:f6:8f:91:e5:e1:79: 8e:64:ba:1c:5e:ae:0e:0f:ea:06:cd:ea:3d:51:b3: 15:8d:6f:2a:ed:aa:2f:f2:ab:6d:42:0f:8d:25:b2: 51:01:ff:c9:51:94:13:75:83:b7:d7:a1:05:29:1d: 8c:53:52:61:8e:77:16:97:c6:17:27:68:41:db:02: 45:b5:0d:3f:8b:a2:64:2f:53:37:4e:96:2c:11:35: a5:26:91:fa:6e:c3:f0:7c:32:eb:f1:bb:80:41:94: 31:bc:37:58:73:b7:f8:3b:bd:a0:59:ed:e0:25:1a: f2:47:1c:ad:bb:e1:b7:5f:74:54:c4:ba:07:28:e8: 19:2c:b8:c9:75:df:c8:c5:56:ac:bd:8b:df:32:48: 20:1e:c6:d5:13:95:e8:46:12:3f:b3:50:eb:08:ee: d8:d8:3f:45:fa:0c:55:2c:7f:22:5b:bf:cd:03:70: 2d:ba:f8:0e:a6:28:af:c3:fe:60:1f:2d:77:8a:f7: 70:19:f5:c9:bd:ab:9d:60:b4:75:69:a7:a0:55:ae: 64:60:12:cd:76:f2:68:b7:9c:41:ca:6d:2d:55:35: 7e:84:9a:e6:7a:15:e0:ba:72:7a:be:6d:bd:f4:84: 46:78:9a:a7:b4:ba:11:e4:d1:59:58:19:b4:f5:b2: 48:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:6F:6A:72:E9:B6:78:69:D6:FA:9B:18:F5:43:EC:5E:18:16:C5:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c99c4d9f-f0ab-3550-9179-58553c298e1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 75.107.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ce:2b:e8:c9:05:7f:a7:74:75:13:ce:89:8e:a6:c2:33:b3:db: 01:f7:34:3c:a7:a2:be:d9:4f:95:1c:09:62:65:d0:0f:38:fe: de:2d:32:8f:bc:bb:71:6c:6e:c2:19:24:64:f7:16:a4:10:57: b8:83:46:c1:b0:0d:fd:a0:ad:b2:99:1c:5e:98:b4:91:8e:a9: af:ec:69:ef:04:57:96:99:84:56:7d:12:b3:68:bd:86:93:a3: b2:8c:81:ff:cf:7d:03:f2:c9:89:2d:40:e3:9f:a6:88:91:51: 2d:f4:3e:41:c0:37:91:a4:5a:b8:3c:e4:91:c3:38:3a:d2:49: 3a:af:64:5e:93:6b:2c:e0:81:e5:b6:5e:9c:2c:8b:84:c0:a6: 8e:6d:df:dc:3b:18:f9:36:8e:05:bd:ed:fa:c7:30:7c:2f:60: f0:e0:d8:9d:be:d7:ca:3d:43:07:10:62:07:af:4e:a4:d2:1b: 56:f5:b5:65:ec:ac:d1:88:dd:28:97:0d:89:02:67:39:a9:0e: 4e:72:b9:92:13:e6:be:a6:39:65:8a:d9:24:ff:03:86:dd:c7: 3f:cc:4f:41:fc:36:fe:4f:15:ce:88:ab:92:31:6c:b0:b1:f7: 1a:36:7c:b5:3c:27:72:e3:28:a5:ad:d4:20:a5:3e:3c:03:d9: af:4e:9f:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzbRnPUCvSZFDhAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk MjI1ZDlkZDEtYjlkNC00MWM1LWJlYWUtN2RkYTNmYjllOThkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhFc9SKjDNtT2j5Hl4XmOZLocXq4OD+oGzeo9 UbMVjW8q7aov8qttQg+NJbJRAf/JUZQTdYO316EFKR2MU1JhjncWl8YXJ2hB2wJF tQ0/i6JkL1M3TpYsETWlJpH6bsPwfDLr8buAQZQxvDdYc7f4O72gWe3gJRryRxyt u+G3X3RUxLoHKOgZLLjJdd/IxVasvYvfMkggHsbVE5XoRhI/s1DrCO7Y2D9F+gxV LH8iW7/NA3AtuvgOpiivw/5gHy13ivdwGfXJvaudYLR1aaegVa5kYBLNdvJot5xB ym0tVTV+hJrmehXgunJ6vm299IRGeJqntLoR5NFZWBm09bJIbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGtvanLptnhp1vqbGPVD7F4YFsUmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYzk5YzRkOWYtZjBhYi0z NTUwLTkxNzktNTg1NTNjMjk4ZTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS2vqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM4r6MkFf6d0dRPOiY6mwjOz2wH3NDynor7ZT5UcCWJl0A84/t4tMo+8 u3FsbsIZJGT3FqQQV7iDRsGwDf2grbKZHF6YtJGOqa/sae8EV5aZhFZ9ErNovYaT o7KMgf/PfQPyyYktQOOfpoiRUS30PkHAN5GkWrg85JHDODrSSTqvZF6TayzggeW2 Xpwsi4TApo5t39w7GPk2jgW97frHMHwvYPDg2J2+18o9QwcQYgevTqTSG1b1tWXs rNGI3SiXDYkCZzmpDk5yuZIT5r6mOWWK2ST/A4bdxz/MT0H8Nv5PFc6Iq5IxbLCx 9xo2fLU8J3LjKKWt1CClPjwD2a9OnxQ= -----END CERTIFICATE-----Generated at Sun Oct 19 23:55:13 2025 by rpki-client