$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f3a8c3d2-1cd0-3a75-8a01-a08f98321a53.roa File: f3a8c3d2-1cd0-3a75-8a01-a08f98321a53.roa (raw, json) Hash identifier: xz2DKYQ9YrBqnvOaBUiK6jYwTtDqj07Hk0i3h1oC8ZQ= Subject key identifier: CC:53:ED:49:EF:9F:1E:8C:4C:9B:A1:28:C1:96:10:8C:21:26:AB:14 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CDC414EDC92DD4B5E11A20 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f3a8c3d2-1cd0-3a75-8a01-a08f98321a53.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 99.197.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:c4:14:ed:c9:2d:d4:b5:e1:1a:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=8f121728-f836-4cd3-b880-ab4bc4caede6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ea:7c:da:47:33:91:8c:93:fb:9e:0f:60:9e: 21:dc:cb:eb:b7:4d:4c:dd:23:fc:05:e2:2e:83:fc: 64:e0:f0:d2:75:20:e9:25:da:f1:04:6b:b5:0a:0e: 85:eb:2e:3d:9b:df:5b:44:a2:4e:66:27:65:2a:73: 2b:43:d4:67:08:a0:60:f3:af:06:1a:d1:c5:37:0b: 81:21:d2:f8:6b:2b:97:9f:42:45:fb:4e:6a:fe:5a: ba:e1:df:d7:8b:ee:b4:4a:79:9d:1f:bd:11:62:a9: d0:fa:f1:d5:64:f8:1f:e0:12:29:c9:41:7e:4c:d2: 85:f7:0f:2b:4f:1e:a9:03:e0:f9:af:50:1a:2a:fc: 42:40:ef:4e:07:03:dc:fd:d0:9c:d8:2a:ff:ef:5e: 8b:91:81:dd:4b:bf:b1:37:9f:5c:07:b1:05:4f:aa: 3d:72:0d:90:60:7f:2c:67:66:96:9f:59:74:fe:dd: 24:54:6c:81:4f:00:e7:59:f2:c3:34:5c:68:3f:28: ea:30:ab:7d:9d:e2:e8:81:77:23:1e:12:59:ca:f5: 00:d4:11:85:6d:06:e5:09:f6:a8:e9:27:2f:c7:fa: 6a:10:d6:9e:9e:aa:78:28:be:68:87:de:aa:2f:5f: 8f:e1:3e:48:43:4e:01:e6:b1:92:c2:ee:cb:23:b0: f4:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:53:ED:49:EF:9F:1E:8C:4C:9B:A1:28:C1:96:10:8C:21:26:AB:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f3a8c3d2-1cd0-3a75-8a01-a08f98321a53.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.197.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:2c:09:53:10:bc:d5:4b:a6:d5:fd:01:9b:3f:a9:a1:bd:ea: 3f:81:4c:27:4f:03:6d:92:37:dc:99:28:06:3e:c8:d8:62:d1: 6f:c3:70:82:04:5a:c7:ed:ce:c0:47:9e:2d:dd:3e:e8:8b:37: 21:bf:99:0c:7c:30:9c:34:10:22:db:bf:bb:65:6f:b1:df:43: 8d:2f:d0:a9:27:b5:70:e9:ea:f8:90:5f:a0:29:3d:2c:de:b8: 95:3a:cd:da:06:c3:0c:11:19:f4:7d:ff:17:3f:9d:80:a7:c3: 00:27:67:15:f2:86:63:86:ba:56:0f:f7:fe:99:50:15:fd:6b: 96:db:9a:a9:18:39:88:81:86:31:e3:b5:5f:87:a0:63:a1:e4: d9:c6:e8:6c:05:0d:e3:38:9f:7c:f2:f3:83:de:13:5e:ca:15: cb:36:c1:41:9b:9b:b7:e2:01:03:28:4d:ec:6e:e2:f1:f4:46: bf:9a:da:36:47:f9:a8:08:25:91:23:17:66:5a:89:e3:f0:4d: 37:38:1c:2e:9d:94:4f:0e:3c:61:2c:dd:7c:46:73:09:bd:a5: ff:f1:17:54:2d:01:8a:29:a0:82:e4:33:f5:cc:e0:74:8c:fb: 7a:5d:70:ad:00:fc:e6:60:bf:96:70:10:f2:04:40:b3:b4:6a: 2e:a5:04:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzcQU7ckt1LXhGiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk OGYxMjE3MjgtZjgzNi00Y2QzLWI4ODAtYWI0YmM0Y2FlZGU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoup82kczkYyT+54PYJ4h3Mvrt01M3SP8BeIu g/xk4PDSdSDpJdrxBGu1Cg6F6y49m99bRKJOZidlKnMrQ9RnCKBg868GGtHFNwuB IdL4ayuXn0JF+05q/lq64d/Xi+60SnmdH70RYqnQ+vHVZPgf4BIpyUF+TNKF9w8r Tx6pA+D5r1AaKvxCQO9OBwPc/dCc2Cr/716LkYHdS7+xN59cB7EFT6o9cg2QYH8s Z2aWn1l0/t0kVGyBTwDnWfLDNFxoPyjqMKt9neLogXcjHhJZyvUA1BGFbQblCfao 6Scvx/pqENaenqp4KL5oh96qL1+P4T5IQ04B5rGSwu7LI7D09QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMxT7Unvnx6MTJuhKMGWEIwhJqsUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZjNhOGMzZDItMWNkMC0z YTc1LThhMDEtYTA4Zjk4MzIxYTUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8W8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHosCVMQvNVLptX9AZs/qaG96j+BTCdPA22SN9yZKAY+yNhi0W/DcIIE WsftzsBHni3dPuiLNyG/mQx8MJw0ECLbv7tlb7HfQ40v0KkntXDp6viQX6ApPSze uJU6zdoGwwwRGfR9/xc/nYCnwwAnZxXyhmOGulYP9/6ZUBX9a5bbmqkYOYiBhjHj tV+HoGOh5NnG6GwFDeM4n3zy84PeE17KFcs2wUGbm7fiAQMoTexu4vH0Rr+a2jZH +agIJZEjF2ZaiePwTTc4HC6dlE8OPGEs3XxGcwm9pf/xF1QtAYopoILkM/XM4HSM +3pdcK0A/OZgv5ZwEPIEQLO0ai6lBAk= -----END CERTIFICATE-----Generated at Mon Oct 20 07:41:40 2025 by rpki-client