$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cc9d7011-71a1-3180-aab5-f01eb8c9b5a9.roa File: cc9d7011-71a1-3180-aab5-f01eb8c9b5a9.roa (raw, json) Hash identifier: BcV45GVps0xy9YNVQx0HMuZiYUF9l46Jvk0RQE7hTXA= Subject key identifier: D5:DF:5C:DA:51:6D:2A:0C:64:09:D9:8E:C7:17:72:B4:48:BB:E0:E2 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CD0E0D69AC2A2625D9FF00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cc9d7011-71a1-3180-aab5-f01eb8c9b5a9.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 99.198.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:0e:0d:69:ac:2a:26:25:d9:ff:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=43f1b841-a1d6-4ef8-86e5-06d6204b08b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:97:8a:13:71:e5:53:35:b5:99:dd:4e:5c:37: 65:7d:bc:ef:18:ac:92:e2:64:0a:29:aa:38:e0:23: ce:41:16:8e:9a:b4:b0:95:59:ff:e9:cb:83:96:5d: 94:56:18:13:1c:38:29:3f:34:00:87:40:b6:a4:1e: 00:23:83:fd:c7:ef:dc:15:71:50:d5:1d:f2:05:a9: 3d:27:bb:af:2d:33:4c:e5:ca:4e:c6:26:10:71:db: 92:1a:5a:fc:a1:31:ea:0b:0b:ec:36:51:e0:9f:3c: 11:02:6d:46:1f:a0:57:72:32:34:10:a7:92:78:56: 08:5c:fa:4c:0a:0d:4d:03:67:0a:1a:d8:62:c6:5b: 1f:59:11:f1:6c:25:b6:e1:c5:3e:36:e6:9b:14:51: 4d:e1:86:d2:5d:cf:2b:f0:3d:f1:bf:04:c8:8d:3d: 4e:28:be:3d:03:05:21:66:be:ab:8b:ad:a6:47:f9: 86:88:78:19:96:ba:3d:9a:8c:44:72:59:37:7a:27: a2:96:2e:6e:bb:06:c7:61:f4:df:f0:f2:16:02:57: 8a:92:9a:74:07:d1:d4:b4:ec:68:35:08:83:b2:c9: 60:6e:1a:70:f1:f1:bf:67:36:c3:b0:ba:24:4b:62: c8:dd:3e:16:32:01:8a:a2:d1:dc:e2:dc:a4:17:78: f9:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:DF:5C:DA:51:6D:2A:0C:64:09:D9:8E:C7:17:72:B4:48:BB:E0:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cc9d7011-71a1-3180-aab5-f01eb8c9b5a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.198.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c7:ea:21:5a:bb:94:2a:78:13:37:45:bd:b5:23:d5:58:16:42: 6e:67:7c:1b:52:d5:77:ff:a3:63:f3:8d:7e:29:f4:12:5c:fe: 05:8d:6e:fe:63:59:30:50:79:65:ea:94:f1:83:72:4e:6b:e0: 96:4c:b6:a8:53:9b:fe:46:1d:55:a5:9a:52:d9:7d:54:c7:58: ae:0a:25:57:60:e8:8f:3d:b7:e5:81:24:23:16:6c:9a:5a:6e: c5:32:3e:8f:85:c5:10:91:29:58:59:22:cb:33:11:e3:c5:f4: b2:11:21:5a:c2:a0:5e:24:2f:db:9c:93:d6:9c:c6:ac:08:12: be:c1:b3:e9:70:b2:91:07:a1:6b:50:86:f7:9d:1d:08:e2:d0: 56:b5:f3:30:5e:07:0c:2e:ad:05:96:18:b4:cc:dd:a7:6a:93: 14:1b:38:46:0f:b7:9c:f9:1e:c2:d9:76:d2:89:76:80:d7:a8: e6:27:03:08:d1:56:ea:ec:80:91:d6:43:cb:ed:43:89:33:1b: fd:56:87:ba:81:1e:f9:70:4e:50:93:82:42:29:f3:5e:aa:fa: e3:42:98:98:c0:bd:04:e0:e3:dc:95:db:7b:34:14:48:7c:e6: 8c:d9:c7:11:f8:41:b8:20:d9:64:4b:70:0d:18:05:8e:d4:af: 8e:5a:cf:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzQ4NaawqJiXZ/wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk NDNmMWI4NDEtYTFkNi00ZWY4LTg2ZTUtMDZkNjIwNGIwOGIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5eKE3HlUzW1md1OXDdlfbzvGKyS4mQKKao4 4CPOQRaOmrSwlVn/6cuDll2UVhgTHDgpPzQAh0C2pB4AI4P9x+/cFXFQ1R3yBak9 J7uvLTNM5cpOxiYQcduSGlr8oTHqCwvsNlHgnzwRAm1GH6BXcjI0EKeSeFYIXPpM Cg1NA2cKGthixlsfWRHxbCW24cU+NuabFFFN4YbSXc8r8D3xvwTIjT1OKL49AwUh Zr6ri62mR/mGiHgZlro9moxEclk3eieili5uuwbHYfTf8PIWAleKkpp0B9HUtOxo NQiDsslgbhpw8fG/ZzbDsLokS2LI3T4WMgGKotHc4tykF3j51wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNXfXNpRbSoMZAnZjscXcrRIu+DiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvY2M5ZDcwMTEtNzFhMS0z MTgwLWFhYjUtZjAxZWI4YzliNWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8Y0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMfqIVq7lCp4EzdFvbUj1VgWQm5nfBtS1Xf/o2PzjX4p9BJc/gWNbv5j WTBQeWXqlPGDck5r4JZMtqhTm/5GHVWlmlLZfVTHWK4KJVdg6I89t+WBJCMWbJpa bsUyPo+FxRCRKVhZIsszEePF9LIRIVrCoF4kL9uck9acxqwIEr7Bs+lwspEHoWtQ hvedHQji0Fa18zBeBwwurQWWGLTM3adqkxQbOEYPt5z5HsLZdtKJdoDXqOYnAwjR VursgJHWQ8vtQ4kzG/1Wh7qBHvlwTlCTgkIp816q+uNCmJjAvQTg49yV23s0FEh8 5ozZxxH4Qbgg2WRLcA0YBY7Ur45az70= -----END CERTIFICATE-----Generated at Sun Oct 19 23:41:28 2025 by rpki-client