$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3f96cca6-faa5-3c1c-a9cd-4378000ccf27.roa File: 3f96cca6-faa5-3c1c-a9cd-4378000ccf27.roa (raw, json) Hash identifier: /jDm1JVlNK2z1ZD/xu2+sjmenMQccvwEFiWPzw1s5FI= Subject key identifier: 32:4E:0C:3E:C5:4C:59:1F:A4:99:28:00:25:7D:40:8D:04:05:A3:20 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A84113B54417A30E369A51280 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3f96cca6-faa5-3c1c-a9cd-4378000ccf27.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 99.198.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:3b:54:41:7a:30:e3:69:a5:12:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=38f493a6-98fe-4201-b34c-692736a11847 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:3f:1a:7c:b2:42:eb:7b:c2:12:50:98:6e:c9: 34:b2:02:f9:dc:06:42:9b:62:5f:c0:c8:ea:48:95: 57:55:30:f5:60:ad:4e:01:19:2c:47:62:3e:d5:6b: 5e:8c:43:2f:08:60:65:9a:d6:1c:d3:07:12:e5:14: d8:29:e5:f6:26:b3:c3:5b:59:66:54:63:0d:bb:be: b6:e6:0d:d9:6c:02:7d:01:84:89:0f:81:ff:83:09: ed:72:06:6c:57:d4:cb:22:cf:a1:40:3d:a4:11:66: 05:73:84:2d:c8:06:a0:14:e4:18:53:f6:c3:37:f5: 82:8f:dd:07:d1:10:f9:af:c0:45:08:51:ca:d4:c9: 8e:e3:1e:ec:71:bd:82:94:4a:3e:e0:88:20:5a:2d: bb:0d:ee:53:0f:ae:43:ce:48:c0:de:33:17:fe:c1: 5b:04:5b:89:87:62:c7:c6:4a:8a:7c:db:e5:bf:6c: 47:47:7f:1b:73:f2:2f:c6:f7:1f:18:56:1b:73:bd: 94:57:d1:04:d7:20:a4:4b:72:f0:48:c9:5e:d7:a1: aa:5e:e1:b9:4b:3e:9a:f0:6d:62:ee:42:c7:bb:5f: ad:32:0e:15:f8:da:37:54:a1:d6:17:eb:56:ea:5f: fd:f7:3b:5a:48:31:d4:46:a0:69:9e:e2:28:bd:10: 61:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:4E:0C:3E:C5:4C:59:1F:A4:99:28:00:25:7D:40:8D:04:05:A3:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3f96cca6-faa5-3c1c-a9cd-4378000ccf27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.198.19.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:5d:83:1d:7a:4d:1c:22:cd:f1:6d:da:63:b8:f6:4d:37:8e: 6a:83:b8:24:03:df:f0:7f:d7:77:bc:db:f4:97:2e:89:cd:97: f0:c0:bf:c4:f3:47:4f:eb:a0:db:d2:6f:89:30:11:e9:ff:50: d1:a0:d1:20:d5:c5:18:01:dd:ab:4a:8b:8e:53:60:1c:24:c5: 54:5d:c5:6e:b2:86:4a:83:4a:5e:ac:ec:28:6f:b6:f6:cb:1a: 1f:f5:7b:68:14:1f:4a:2b:f1:53:23:d0:55:27:b4:16:d1:b9: cc:0c:1a:b2:95:af:c9:cb:c5:8a:7b:22:b6:d0:8a:ee:19:b5: 31:44:2b:56:eb:d2:43:d8:24:7f:b6:ce:82:e5:bc:d2:34:f3: ca:86:1a:5e:81:73:91:7b:04:fb:2e:14:6a:3e:58:dd:c5:9d: 80:98:1b:76:36:7d:99:df:34:27:f6:17:e6:b0:16:5d:27:ef: 1a:8d:59:33:b3:07:cb:11:80:76:74:13:f4:72:ac:fe:3f:d2: 72:c9:b3:ce:fd:21:0f:89:a6:a5:96:39:b2:21:64:5e:51:ba: 00:98:cf:d6:82:f2:39:0d:fe:44:e8:6d:d0:d6:0a:b2:5b:96: ba:1c:4d:a1:6c:e4:81:ea:8e:87:da:7b:3f:5b:82:b0:e0:9e: 0b:09:f0:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEETtUQXow42mlEoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MzhmNDkzYTYtOThmZS00MjAxLWIzNGMtNjkyNzM2YTExODQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtj8afLJC63vCElCYbsk0sgL53AZCm2JfwMjq SJVXVTD1YK1OARksR2I+1WtejEMvCGBlmtYc0wcS5RTYKeX2JrPDW1lmVGMNu762 5g3ZbAJ9AYSJD4H/gwntcgZsV9TLIs+hQD2kEWYFc4QtyAagFOQYU/bDN/WCj90H 0RD5r8BFCFHK1MmO4x7scb2ClEo+4IggWi27De5TD65DzkjA3jMX/sFbBFuJh2LH xkqKfNvlv2xHR38bc/IvxvcfGFYbc72UV9EE1yCkS3LwSMle16GqXuG5Sz6a8G1i 7kLHu1+tMg4V+No3VKHWF+tW6l/99ztaSDHURqBpnuIovRBh3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDJODD7FTFkfpJkoACV9QI0EBaMgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvM2Y5NmNjYTYtZmFhNS0z YzFjLWE5Y2QtNDM3ODAwMGNjZjI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8YTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFRdgx16TRwizfFt2mO49k03jmqDuCQD3/B/13e82/SXLonNl/DAv8Tz R0/roNvSb4kwEen/UNGg0SDVxRgB3atKi45TYBwkxVRdxW6yhkqDSl6s7ChvtvbL Gh/1e2gUH0or8VMj0FUntBbRucwMGrKVr8nLxYp7IrbQiu4ZtTFEK1br0kPYJH+2 zoLlvNI088qGGl6Bc5F7BPsuFGo+WN3FnYCYG3Y2fZnfNCf2F+awFl0n7xqNWTOz B8sRgHZ0E/RyrP4/0nLJs879IQ+JpqWWObIhZF5RugCYz9aC8jkN/kTobdDWCrJb lrocTaFs5IHqjofaez9bgrDgngsJ8BM= -----END CERTIFICATE-----Generated at Sat Jul 26 11:32:21 2025 by rpki-client