$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2a2e920b-8af2-3da5-a0ac-9b8ffa86c438.roa File: 2a2e920b-8af2-3da5-a0ac-9b8ffa86c438.roa (raw, json) Hash identifier: l+tVSiWzwSm8QiBipvGHZUASSrOd+WUpICMt0SmCtGs= Subject key identifier: CE:CE:F8:C6:81:0F:37:B5:FD:B3:1E:1E:DC:98:CF:B7:26:DE:85:56 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A8411E5B3950A2CEDBEB60280 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2a2e920b-8af2-3da5-a0ac-9b8ffa86c438.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 99.196.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:e5:b3:95:0a:2c:ed:be:b6:02:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=6371c393-885c-4d30-89a4-0b56f9b4c860 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:97:08:ee:e0:b9:f6:67:a9:7d:55:5f:56:5e: 05:12:6d:57:49:ee:39:ef:fe:90:27:ac:b3:8c:c6: 76:dd:13:28:33:0d:00:54:a4:4b:1e:cd:e9:41:41: 57:7d:c4:e6:f5:68:f3:90:c0:94:42:c7:3a:61:9b: e4:d0:5a:26:33:5c:00:38:36:d1:f5:d4:27:ff:81: a3:8c:a5:43:bb:fc:0d:9d:aa:25:f7:0d:7e:ef:67: eb:ed:6d:b2:14:b3:71:37:3e:76:f3:d8:83:01:ad: 1b:ab:59:d7:b2:96:02:9c:9e:62:20:d1:ad:6f:56: 0a:60:eb:a5:c0:61:c6:46:c1:0f:69:ec:a3:df:c2: ee:e9:1e:b5:ca:eb:4b:15:83:35:21:18:5d:0a:b5: 08:c6:e0:b4:3b:fa:22:3e:38:68:86:93:42:f3:8d: 88:16:e9:59:cd:69:c9:18:c4:0a:43:a7:92:82:d1: 80:3a:45:17:cc:c0:e1:ca:b7:71:6d:93:69:c5:87: 5b:23:07:9c:60:7b:4b:ce:0a:e8:77:44:8b:93:8f: 3d:22:d9:86:34:fa:b0:d0:af:e4:0e:b1:f8:4d:ba: d0:34:6f:e0:6a:03:0a:87:6a:cc:f1:2c:b2:65:af: 37:b2:64:20:c6:7f:3d:1a:dd:3c:a9:00:ca:32:2b: 38:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:CE:F8:C6:81:0F:37:B5:FD:B3:1E:1E:DC:98:CF:B7:26:DE:85:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2a2e920b-8af2-3da5-a0ac-9b8ffa86c438.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.196.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:9d:4f:90:01:a7:33:69:b7:3f:4f:68:7a:1e:1d:70:0c:57: 03:23:92:3f:69:c6:67:e4:e6:91:cb:ab:ad:48:24:8b:d0:88: e8:9f:83:41:63:a4:33:77:df:67:a9:41:bf:41:85:4d:3f:c1: 80:f1:26:51:43:6f:c2:21:56:41:de:51:3a:be:e8:c3:c3:32: 9d:9a:a6:25:c4:35:48:db:a7:5d:3e:b2:d7:6a:84:78:ae:f7: 02:80:8e:c2:36:3c:16:48:cf:aa:3d:6d:2b:4d:be:c8:f5:95: ad:33:a2:83:40:0e:fa:c8:a3:06:df:17:81:a7:e7:40:4e:21: 46:05:70:7d:18:48:8d:e7:21:a5:97:d2:fa:ac:b6:36:9d:b4: 53:98:98:1d:bf:17:b1:8a:fd:dd:8a:e1:dc:7b:59:c5:6f:48: 9b:16:1f:46:59:fb:12:07:c2:5b:07:83:42:bf:46:00:e1:c1: 95:77:c6:fc:7c:09:85:5f:8e:61:37:c0:d3:70:a3:5d:2a:88: fc:91:29:69:d0:6b:13:20:0d:99:db:6e:88:4f:b4:d3:9f:75: b5:63:6d:97:97:c5:41:70:75:df:5c:fb:8c:60:1c:b1:42:43: 5d:95:77:31:6e:1d:9c:96:b6:c3:d5:86:8f:09:91:90:66:12: 57:09:c8:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEeWzlQos7b62AoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk NjM3MWMzOTMtODg1Yy00ZDMwLTg5YTQtMGI1NmY5YjRjODYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZcI7uC59mepfVVfVl4FEm1XSe457/6QJ6yz jMZ23RMoMw0AVKRLHs3pQUFXfcTm9WjzkMCUQsc6YZvk0FomM1wAODbR9dQn/4Gj jKVDu/wNnaol9w1+72fr7W2yFLNxNz5289iDAa0bq1nXspYCnJ5iINGtb1YKYOul wGHGRsEPaeyj38Lu6R61yutLFYM1IRhdCrUIxuC0O/oiPjhohpNC842IFulZzWnJ GMQKQ6eSgtGAOkUXzMDhyrdxbZNpxYdbIwecYHtLzgrod0SLk489ItmGNPqw0K/k DrH4TbrQNG/gagMKh2rM8SyyZa83smQgxn89Gt08qQDKMis41QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM7O+MaBDze1/bMeHtyYz7cm3oVWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMmEyZTkyMGItOGFmMi0z ZGE1LWEwYWMtOWI4ZmZhODZjNDM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8SJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADydT5ABpzNptz9PaHoeHXAMVwMjkj9pxmfk5pHLq61IJIvQiOifg0Fj pDN332epQb9BhU0/wYDxJlFDb8IhVkHeUTq+6MPDMp2apiXENUjbp10+stdqhHiu 9wKAjsI2PBZIz6o9bStNvsj1la0zooNADvrIowbfF4Gn50BOIUYFcH0YSI3nIaWX 0vqstjadtFOYmB2/F7GK/d2K4dx7WcVvSJsWH0ZZ+xIHwlsHg0K/RgDhwZV3xvx8 CYVfjmE3wNNwo10qiPyRKWnQaxMgDZnbbohPtNOfdbVjbZeXxUFwdd9c+4xgHLFC Q12VdzFuHZyWtsPVho8JkZBmElcJyAA= -----END CERTIFICATE-----Generated at Fri Jul 25 23:59:55 2025 by rpki-client