$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2991af10-861f-3a38-8974-9b0cca545c15.roa File: 2991af10-861f-3a38-8974-9b0cca545c15.roa (raw, json) Hash identifier: FFhQ0dWK/e3PsTfDc41JjBeBvmS/I2lFthkmcyWmOKk= Subject key identifier: 88:0D:83:02:D8:DE:7E:33:02:C8:9E:56:45:16:C9:01:7D:CF:71:23 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A8411EBC1FB9CFF5516FA6680 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2991af10-861f-3a38-8974-9b0cca545c15.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 99.197.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:eb:c1:fb:9c:ff:55:16:fa:66:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=aa0b3660-6eef-492e-a127-1b809c1383e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ef:d3:cd:29:8c:54:55:e9:26:50:30:50:31: c4:a6:09:a0:6e:c4:90:49:29:cf:c8:47:f4:75:17: f0:6e:70:75:c8:98:89:ec:16:39:9b:03:96:e6:3b: 01:3d:10:36:84:97:36:79:c1:53:c4:a2:e0:a8:56: 42:10:9e:01:22:31:3e:53:1d:3c:03:ae:d8:e1:ab: 9a:26:a3:f8:f4:32:da:44:d0:cc:fe:77:f9:67:67: 97:39:42:29:e7:6d:ee:e3:42:5e:53:4a:b8:49:bd: ae:f3:50:31:82:fa:bc:40:e0:14:bf:0d:00:e7:e0: 04:8b:bc:ca:aa:ca:62:90:7d:5f:3e:2f:09:c1:d3: 19:38:8a:2c:cb:2a:54:8b:08:be:c4:2c:47:89:9c: e0:70:61:00:87:25:de:1c:07:46:0b:de:68:15:e0: 91:de:f3:80:83:48:e9:4e:9e:c4:d2:f4:11:71:35: 40:61:0f:5e:03:70:33:db:2c:d4:57:cf:0c:47:bf: 9f:c6:95:af:5b:b0:79:ae:7e:18:af:dd:dc:90:43: 88:4e:df:a7:ec:02:59:22:74:0d:df:4b:e9:71:15: ae:af:64:09:d4:cf:d9:b2:51:13:48:56:f5:e1:d7: d4:22:87:37:cc:bd:d8:ff:96:06:58:a1:55:17:03: 6e:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:0D:83:02:D8:DE:7E:33:02:C8:9E:56:45:16:C9:01:7D:CF:71:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2991af10-861f-3a38-8974-9b0cca545c15.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.197.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:e8:e5:2e:dd:2b:53:71:f7:cf:4c:e5:4a:5f:7a:a5:1a:39: 3d:54:f5:12:e2:fb:e6:b3:7e:36:25:aa:0d:3d:d4:4e:78:46: bf:28:56:b4:bc:92:02:23:2d:99:60:a9:83:d0:36:8c:2d:d9: 40:97:79:49:b1:7f:b9:55:3f:3c:5b:55:61:8d:8c:0c:52:bf: 12:16:7e:7f:9b:e0:0f:49:e8:a4:4e:6d:63:67:dc:32:ba:1f: ec:f1:cb:a5:9e:b2:29:c3:32:11:1b:ee:fa:da:83:e2:ff:62: 2b:d1:ed:37:17:c0:7c:43:ec:9d:a3:5f:e7:ce:a4:33:db:4b: c6:cd:ca:ec:b5:25:07:65:72:53:e4:61:a2:a1:56:61:7f:52: d8:4c:44:84:17:54:f4:51:bc:76:bb:21:13:17:f9:43:e6:6e: fd:1a:3b:1a:b8:4a:2c:dd:b3:f2:51:3d:0c:7f:89:06:ee:f8: 46:f8:73:36:1f:dd:59:55:ae:7c:cd:b6:36:91:c5:04:d6:e8: a9:30:78:0c:e7:40:5e:6a:d7:27:a5:b5:55:41:2d:c5:2f:5a: aa:87:af:35:a5:ef:f4:a8:bd:00:cf:54:9f:ad:43:f9:dc:e9: 11:15:ad:8c:24:2b:cf:f2:d6:62:cd:d5:3e:f5:a6:4d:1c:da: a4:c2:a3:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEevB+5z/VRb6ZoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk YWEwYjM2NjAtNmVlZi00OTJlLWExMjctMWI4MDljMTM4M2U2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+/TzSmMVFXpJlAwUDHEpgmgbsSQSSnPyEf0 dRfwbnB1yJiJ7BY5mwOW5jsBPRA2hJc2ecFTxKLgqFZCEJ4BIjE+Ux08A67Y4aua JqP49DLaRNDM/nf5Z2eXOUIp523u40JeU0q4Sb2u81Axgvq8QOAUvw0A5+AEi7zK qspikH1fPi8JwdMZOIosyypUiwi+xCxHiZzgcGEAhyXeHAdGC95oFeCR3vOAg0jp Tp7E0vQRcTVAYQ9eA3Az2yzUV88MR7+fxpWvW7B5rn4Yr93ckEOITt+n7AJZInQN 30vpcRWur2QJ1M/ZslETSFb14dfUIoc3zL3Y/5YGWKFVFwNuRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIgNgwLY3n4zAsieVkUWyQF9z3EjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMjk5MWFmMTAtODYxZi0z YTM4LTg5NzQtOWIwY2NhNTQ1YzE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8V7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAILo5S7dK1Nx989M5UpfeqUaOT1U9RLi++azfjYlqg091E54Rr8oVrS8 kgIjLZlgqYPQNowt2UCXeUmxf7lVPzxbVWGNjAxSvxIWfn+b4A9J6KRObWNn3DK6 H+zxy6WesinDMhEb7vrag+L/YivR7TcXwHxD7J2jX+fOpDPbS8bNyuy1JQdlclPk YaKhVmF/UthMRIQXVPRRvHa7IRMX+UPmbv0aOxq4Sizds/JRPQx/iQbu+Eb4czYf 3VlVrnzNtjaRxQTW6KkweAznQF5q1yeltVVBLcUvWqqHrzWl7/SovQDPVJ+tQ/nc 6REVrYwkK8/y1mLN1T71pk0c2qTCo3Y= -----END CERTIFICATE-----Generated at Sat Jul 26 11:38:27 2025 by rpki-client