$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f3f6289c-f0cc-33ad-aa09-f64dbe53d039.roa File: f3f6289c-f0cc-33ad-aa09-f64dbe53d039.roa (raw, json) Hash identifier: IRKAh9U1MqO3Qkb9vdmllnxIbC4HJpCHiL6u8YczO+4= Subject key identifier: AE:BF:A6:E2:BF:8D:4F:96:14:2D:14:E6:A0:57:FB:0F:98:50:70:12 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CDC42059E980FB2C507F80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f3f6289c-f0cc-33ad-aa09-f64dbe53d039.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 99.197.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:c4:20:59:e9:80:fb:2c:50:7f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=3321c65a-d608-49bd-b6ce-2dea4e9239c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:eb:c5:a3:fa:f1:8c:a2:a7:2f:03:81:15:b2: 66:3d:05:49:31:25:0f:b2:22:7e:d9:5d:16:55:02: b6:ed:a9:bd:58:cd:0a:3a:66:0a:72:79:00:08:04: 89:5b:9a:9b:15:f0:4c:bb:38:6e:e1:e9:21:3b:5d: a3:eb:6f:ec:a0:4d:97:37:2b:34:17:4d:c2:4e:77: 0e:f5:17:cc:b7:2f:63:12:b7:4d:bd:ef:cc:1f:55: 69:ee:22:3f:63:69:8d:13:0c:1e:e1:38:94:a5:ab: 40:b3:f2:9a:80:41:9e:0b:e8:40:11:0e:8f:60:e5: f5:38:6b:f7:ff:f4:87:6f:31:19:c6:c5:59:67:fc: 51:a0:45:7a:a1:e7:1f:0f:a2:83:6d:71:9e:b7:1b: 83:fc:79:0d:ef:ee:c2:c0:e1:f9:e3:00:99:b1:bd: 47:96:3b:22:56:1e:96:ab:2b:33:e1:a4:ea:da:ac: ba:5b:17:aa:4e:99:2f:4a:a6:43:cc:76:8c:18:f2: 04:e9:82:17:49:00:ed:22:43:12:21:a9:21:0a:e7: 0f:1a:a2:8e:e5:5c:56:fb:5f:a0:9d:de:94:8f:1f: f8:d9:7e:43:61:96:2f:78:f2:e3:58:26:eb:2a:37: 68:79:55:3f:5f:1a:86:e9:34:0f:25:a8:50:c8:d1: b3:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:BF:A6:E2:BF:8D:4F:96:14:2D:14:E6:A0:57:FB:0F:98:50:70:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f3f6289c-f0cc-33ad-aa09-f64dbe53d039.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.197.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:92:c6:03:1e:ed:ed:61:6c:0b:ab:72:17:62:f6:ec:f9:70: 3d:c0:7c:48:9d:c8:e5:ea:c0:f0:98:81:f1:56:aa:82:df:fc: 4f:40:38:16:d0:52:55:66:69:2d:01:db:a1:8d:ce:eb:41:ec: 32:36:e2:1e:12:be:ac:a6:3a:19:b3:6b:db:e5:66:e9:ae:b2: 72:3b:88:10:26:a0:b1:37:25:4e:89:a0:6b:ed:25:c0:7f:1f: 16:c2:d1:be:e4:ea:50:68:0d:8c:3f:62:35:54:26:b8:08:53: 53:e5:67:b0:5a:5f:2c:71:c7:1a:9a:c0:5f:b5:ed:2e:d0:79: 0a:4e:ed:c5:64:02:9a:01:3e:7c:39:f6:1e:dc:c2:da:fa:05: 2e:11:07:25:69:ab:19:1c:4f:cd:f3:f8:57:18:f8:6b:cc:41: 6c:42:a6:bf:21:a4:9b:68:1d:07:03:47:87:7a:12:91:ff:81: d6:35:07:8c:43:a2:b2:9a:18:e1:97:d9:2f:0c:69:5c:c8:12: c5:f3:15:0a:ad:1e:16:36:59:ea:0e:30:36:5b:2d:b2:55:d4: 3b:77:31:af:3f:75:48:36:1e:60:56:77:22:97:4c:4e:e5:9a: c4:d9:94:e2:22:5d:54:00:0c:73:52:60:e4:82:b6:31:4b:05: 34:77:a4:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzcQgWemA+yxQf4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk MzMyMWM2NWEtZDYwOC00OWJkLWI2Y2UtMmRlYTRlOTIzOWMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6OvFo/rxjKKnLwOBFbJmPQVJMSUPsiJ+2V0W VQK27am9WM0KOmYKcnkACASJW5qbFfBMuzhu4ekhO12j62/soE2XNys0F03CTncO 9RfMty9jErdNve/MH1Vp7iI/Y2mNEwwe4TiUpatAs/KagEGeC+hAEQ6PYOX1OGv3 //SHbzEZxsVZZ/xRoEV6oecfD6KDbXGetxuD/HkN7+7CwOH54wCZsb1HljsiVh6W qysz4aTq2qy6WxeqTpkvSqZDzHaMGPIE6YIXSQDtIkMSIakhCucPGqKO5VxW+1+g nd6Ujx/42X5DYZYvePLjWCbrKjdoeVU/XxqG6TQPJahQyNGzrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK6/puK/jU+WFC0U5qBX+w+YUHASMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZjNmNjI4OWMtZjBjYy0z M2FkLWFhMDktZjY0ZGJlNTNkMDM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8W9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF+SxgMe7e1hbAurchdi9uz5cD3AfEidyOXqwPCYgfFWqoLf/E9AOBbQ UlVmaS0B26GNzutB7DI24h4SvqymOhmza9vlZumusnI7iBAmoLE3JU6JoGvtJcB/ HxbC0b7k6lBoDYw/YjVUJrgIU1PlZ7BaXyxxxxqawF+17S7QeQpO7cVkApoBPnw5 9h7cwtr6BS4RByVpqxkcT83z+FcY+GvMQWxCpr8hpJtoHQcDR4d6EpH/gdY1B4xD orKaGOGX2S8MaVzIEsXzFQqtHhY2WeoOMDZbLbJV1Dt3Ma8/dUg2HmBWdyKXTE7l msTZlOIiXVQADHNSYOSCtjFLBTR3pD0= -----END CERTIFICATE-----Generated at Sun Oct 19 23:40:40 2025 by rpki-client