$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f50fc562-f7f3-3883-b8bd-8c90956f9054.roa File: f50fc562-f7f3-3883-b8bd-8c90956f9054.roa (raw, json) Hash identifier: b2fRTb5B4zFtheRWG/RwHRdryX7FnSwL2fBpfMfh4Us= Subject key identifier: 39:86:C8:1F:9D:66:E6:FC:C4:6E:AC:C8:77:4A:9F:99:8B:B0:61:50 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CDC9A02DB05415CE252180 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f50fc562-f7f3-3883-b8bd-8c90956f9054.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 99.198.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:c9:a0:2d:b0:54:15:ce:25:21:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=ecc3297a-91b5-4045-951c-87be0cfe7046 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:38:cb:53:f2:43:45:a5:b4:10:4e:8b:a1:e5: 6a:91:6e:a1:9d:61:ce:33:c8:25:10:f2:6f:7a:51: 89:f8:d0:a0:1c:72:94:66:be:cc:e1:80:d8:ad:e1: c7:aa:99:08:ed:7e:14:be:69:d3:fa:f7:27:c6:c6: d2:79:ef:4d:ad:57:93:a0:be:4d:db:ba:7f:38:0a: a6:41:7d:6f:40:22:7d:be:58:54:91:b8:10:65:bf: e3:7f:5e:83:3a:45:42:a8:24:a1:b9:cd:fd:59:c5: 18:d5:b1:1a:df:9a:a6:1d:f9:56:a6:21:e0:90:cc: df:7a:02:e5:5b:08:76:e4:c3:5c:38:78:d3:1d:96: 54:d4:15:cf:0b:25:d1:17:7e:5e:95:f0:4b:61:6f: 4f:b1:39:26:2d:ff:34:0c:fe:97:07:65:56:5d:b4: cd:20:3d:89:a8:09:13:a6:8b:25:46:4a:45:a7:91: ec:93:9b:b0:0f:07:5b:fa:ef:49:63:90:3d:16:12: ef:f0:3c:f5:64:68:a9:1c:2e:cf:6f:7f:5e:fb:79: 78:3d:ee:3b:f7:13:d2:0f:9e:ef:99:65:01:28:e8: d8:ca:34:5d:bb:80:18:bd:35:6f:4a:de:6c:66:de: 52:6e:0b:7b:6a:6b:cf:7d:76:0a:af:e6:5e:d8:99: 1e:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:86:C8:1F:9D:66:E6:FC:C4:6E:AC:C8:77:4A:9F:99:8B:B0:61:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f50fc562-f7f3-3883-b8bd-8c90956f9054.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.198.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:3b:dd:ff:f5:0d:36:b9:fb:5e:78:b8:fa:e1:68:ae:1d:44: 1b:73:df:6c:99:75:59:6a:c1:e7:21:57:24:43:8e:9d:1e:90: 73:f0:46:ba:98:9c:c4:f6:59:fb:4e:79:a3:91:7e:9c:17:5a: c0:d5:1f:ab:2f:8b:3b:2f:54:d7:ec:98:e8:61:47:7a:cf:8a: 0e:ab:34:98:06:02:b6:14:f7:1b:4b:4f:69:9f:45:f7:f4:46: fc:3c:31:a3:a8:21:55:aa:55:18:5c:08:6c:db:d3:4b:a0:19: 8a:9f:10:7a:8d:8a:8c:59:56:48:5d:c3:99:27:f0:cc:71:5b: 7b:25:25:70:47:1f:45:e1:7b:9b:00:39:7e:fb:3e:3c:e8:fb: ac:7b:fe:74:33:a0:5d:5c:9a:4c:79:cf:9a:10:68:df:fc:da: 7e:fd:8e:e3:ce:02:ae:bd:ec:ce:ec:9b:01:d8:60:be:39:bd: 2f:9d:b9:c5:b1:7e:f4:6e:d7:88:9f:76:90:ff:19:ef:06:3e: 76:c2:40:ef:53:7a:40:82:b3:38:f1:47:d5:78:69:85:05:99: e7:e7:61:63:31:53:a7:f6:e1:54:26:e2:2c:56:e3:b8:6a:4e: f6:0a:b2:2f:7e:ae:ca:54:20:ef:74:3d:eb:56:11:cb:10:f2: dd:53:70:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzcmgLbBUFc4lIYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk ZWNjMzI5N2EtOTFiNS00MDQ1LTk1MWMtODdiZTBjZmU3MDQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTjLU/JDRaW0EE6LoeVqkW6hnWHOM8glEPJv elGJ+NCgHHKUZr7M4YDYreHHqpkI7X4UvmnT+vcnxsbSee9NrVeToL5N27p/OAqm QX1vQCJ9vlhUkbgQZb/jf16DOkVCqCShuc39WcUY1bEa35qmHflWpiHgkMzfegLl Wwh25MNcOHjTHZZU1BXPCyXRF35elfBLYW9PsTkmLf80DP6XB2VWXbTNID2JqAkT poslRkpFp5Hsk5uwDwdb+u9JY5A9FhLv8Dz1ZGipHC7Pb39e+3l4Pe479xPSD57v mWUBKOjYyjRdu4AYvTVvSt5sZt5Sbgt7amvPfXYKr+Ze2JkeDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDmGyB+dZub8xG6syHdKn5mLsGFQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZjUwZmM1NjItZjdmMy0z ODgzLWI4YmQtOGM5MDk1NmY5MDU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8Y6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKA73f/1DTa5+154uPrhaK4dRBtz32yZdVlqwechVyRDjp0ekHPwRrqY nMT2WftOeaORfpwXWsDVH6svizsvVNfsmOhhR3rPig6rNJgGArYU9xtLT2mfRff0 Rvw8MaOoIVWqVRhcCGzb00ugGYqfEHqNioxZVkhdw5kn8MxxW3slJXBHH0Xhe5sA OX77Pjzo+6x7/nQzoF1cmkx5z5oQaN/82n79juPOAq697M7smwHYYL45vS+ducWx fvRu14ifdpD/Ge8GPnbCQO9TekCCszjxR9V4aYUFmefnYWMxU6f24VQm4ixW47hq TvYKsi9+rspUIO90PetWEcsQ8t1TcCw= -----END CERTIFICATE-----Generated at Mon Oct 20 08:03:14 2025 by rpki-client