$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/270f78b9-9244-3e39-b348-8849b9e99259.roa File: 270f78b9-9244-3e39-b348-8849b9e99259.roa (raw, json) Hash identifier: 0gklPoDIDeNlhFnDk0jAC55rx71l6KqSIaH/RjL2LyA= Subject key identifier: 2E:50:AD:E7:0F:FD:82:B4:9D:77:F8:B8:13:B5:33:34:F6:E9:1F:6C Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A84113B085D107EDC121B7420 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/270f78b9-9244-3e39-b348-8849b9e99259.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 99.198.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:3b:08:5d:10:7e:dc:12:1b:74:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=be2dbd46-9d9a-434b-a387-5d3629f3ceda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:4c:fa:82:44:9d:8a:80:ad:d3:80:f1:e5:f3: 46:5e:f0:9d:29:d6:77:9c:1a:21:d5:d0:09:c9:34: 5f:39:5e:b0:b1:f7:ae:8b:2d:c9:70:68:66:f9:09: 87:c8:41:73:fd:8d:e6:7e:a1:dc:33:69:a0:ec:25: ac:75:83:69:3e:cb:59:02:d2:aa:ca:35:f2:f3:b3: 76:e0:76:c1:6a:9c:a4:f5:c1:de:e8:40:b0:d1:d2: 08:77:ba:d2:62:54:8d:68:a5:99:cc:7e:19:7d:1c: 2b:99:cc:8e:4e:6b:66:1b:3d:44:b4:d4:e6:ee:74: 4f:e0:4e:5b:4a:1d:36:89:aa:23:e2:28:4c:e1:3e: c6:ca:9f:60:39:dd:f0:5c:3f:ca:0a:71:9f:b5:21: d1:65:cb:d4:f3:b4:47:02:ff:48:6f:47:05:b6:c6: 7c:69:b1:81:86:07:9e:45:ec:b9:db:2b:4b:83:45: 96:6c:b5:7b:52:10:24:d4:cb:88:e3:1c:e9:cf:27: 2b:ed:62:0f:87:91:e5:7a:63:8a:d2:60:3c:67:67: 84:89:ee:c5:5e:cb:01:cf:6f:12:58:c0:0b:7a:a3: ce:f8:b4:b6:d1:0b:54:d0:55:d5:a9:a9:08:ea:ea: e7:a4:e2:68:e2:f8:3d:c8:19:45:b5:50:45:d9:ec: 1f:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:50:AD:E7:0F:FD:82:B4:9D:77:F8:B8:13:B5:33:34:F6:E9:1F:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/270f78b9-9244-3e39-b348-8849b9e99259.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.198.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:3c:94:cb:6d:99:15:db:bc:61:7e:33:d6:0e:6d:83:5f:3c: 52:5c:15:62:6b:51:52:6b:56:2a:2c:a1:49:e7:c4:5c:1e:68: 7b:c4:3f:28:62:fd:75:6b:3e:08:48:63:60:26:8c:7f:fa:15: 9b:5b:65:4c:f4:6f:99:79:57:c4:71:7d:ce:67:3f:04:2f:69: b7:97:1e:e8:ce:5c:99:15:c3:17:93:6e:9e:65:5d:76:63:d1: 5b:5b:f7:b8:bb:dd:cd:2e:f1:15:c4:6c:dc:1c:e3:13:56:79: e7:69:fe:37:af:21:9e:c5:8c:de:3a:a3:31:77:c8:9f:2f:32: e9:1d:61:04:08:e6:47:84:04:f2:11:95:74:c5:b6:1c:4e:72: 09:41:6b:20:f6:d2:ca:b2:0d:56:6e:09:fc:26:29:f8:4b:cd: 9e:be:e4:bf:9f:9a:5a:f4:b6:f5:7b:e7:0c:dc:33:5c:32:bd: ea:b7:5b:f5:37:9c:a7:78:3f:ea:ea:50:91:19:94:7b:ec:56: 72:03:80:83:d7:8d:5b:c9:fd:c1:90:88:09:21:43:38:90:4a: eb:25:9c:79:be:b0:8b:6e:59:c8:cb:5a:45:58:e4:2a:9a:97: 9b:d9:77:57:85:76:d6:ab:4e:ec:2b:b0:9b:19:44:3f:0f:e1: d4:a8:62:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEETsIXRB+3BIbdCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk YmUyZGJkNDYtOWQ5YS00MzRiLWEzODctNWQzNjI5ZjNjZWRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUz6gkSdioCt04Dx5fNGXvCdKdZ3nBoh1dAJ yTRfOV6wsfeuiy3JcGhm+QmHyEFz/Y3mfqHcM2mg7CWsdYNpPstZAtKqyjXy87N2 4HbBapyk9cHe6ECw0dIId7rSYlSNaKWZzH4ZfRwrmcyOTmtmGz1EtNTm7nRP4E5b Sh02iaoj4ihM4T7Gyp9gOd3wXD/KCnGftSHRZcvU87RHAv9Ib0cFtsZ8abGBhgee Rey52ytLg0WWbLV7UhAk1MuI4xzpzycr7WIPh5HlemOK0mA8Z2eEie7FXssBz28S WMALeqPO+LS20QtU0FXVqakI6urnpOJo4vg9yBlFtVBF2ewfDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC5QrecP/YK0nXf4uBO1MzT26R9sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMjcwZjc4YjktOTI0NC0z ZTM5LWIzNDgtODg0OWI5ZTk5MjU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8YIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKQ8lMttmRXbvGF+M9YObYNfPFJcFWJrUVJrViosoUnnxFweaHvEPyhi /XVrPghIY2AmjH/6FZtbZUz0b5l5V8Rxfc5nPwQvabeXHujOXJkVwxeTbp5lXXZj 0Vtb97i73c0u8RXEbNwc4xNWeedp/jevIZ7FjN46ozF3yJ8vMukdYQQI5keEBPIR lXTFthxOcglBayD20sqyDVZuCfwmKfhLzZ6+5L+fmlr0tvV75wzcM1wyveq3W/U3 nKd4P+rqUJEZlHvsVnIDgIPXjVvJ/cGQiAkhQziQSuslnHm+sItuWcjLWkVY5Cqa l5vZd1eFdtarTuwrsJsZRD8P4dSoYvM= -----END CERTIFICATE-----Generated at Sat Jul 26 00:10:05 2025 by rpki-client