$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4599d9d3-f0aa-3734-aff1-21a5f1fcbba2.roa File: 4599d9d3-f0aa-3734-aff1-21a5f1fcbba2.roa (raw, json) Hash identifier: cZKP5MoDGVBc6PYF4448J3TUsIBZ3DZgztkqxKdlmRw= Subject key identifier: 15:EA:E0:4A:A6:A1:48:65:4F:F2:73:A8:99:4D:61:9B:8D:17:9B:37 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A8411EF620ECB66CFF9D0B500 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4599d9d3-f0aa-3734-aff1-21a5f1fcbba2.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 99.197.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:ef:62:0e:cb:66:cf:f9:d0:b5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=1b1716f7-e323-4a13-a20d-66dddbaec00f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b2:a0:23:54:f8:76:14:42:ea:db:91:00:21: 2f:ae:75:26:f3:fa:a7:36:a6:b4:09:c1:e0:20:ac: 0a:53:89:4a:53:59:68:01:fc:a4:d8:cd:8e:ea:cd: 94:9d:ca:83:2e:1e:58:1b:51:4f:9e:84:cc:d5:44: a5:83:23:57:6e:24:e3:b5:c5:bb:17:d1:7d:f6:50: 9f:dd:3c:e7:e1:67:a8:ba:f8:59:15:95:0d:a5:22: c6:17:32:25:f4:ba:c7:1b:4a:5b:9b:1f:43:ec:cb: ef:85:43:cc:55:50:f4:be:b6:27:dc:ff:21:77:de: 99:cc:c5:ff:34:f0:78:c5:92:8d:c2:bb:b9:70:b2: 52:63:f3:1f:28:ea:69:9b:64:93:b4:4a:a8:8a:8f: eb:0e:c6:d1:d5:b3:4c:58:29:12:8b:17:00:d4:cb: 1d:2c:a3:81:ec:29:5b:53:0a:2d:e0:3c:24:9f:21: b0:ad:59:ea:e3:2d:c2:e2:55:77:7e:0d:a6:34:e1: ca:1d:2d:75:60:73:05:a0:b2:3a:02:eb:8e:bc:1a: 5d:e5:be:63:76:45:34:06:22:bd:cd:1d:ff:b3:2b: 24:0f:0a:0f:09:04:95:ed:4a:2e:5a:cd:f8:e0:76: 95:01:06:67:ac:3f:a6:ea:f9:80:6e:13:f9:b9:d1: 80:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:EA:E0:4A:A6:A1:48:65:4F:F2:73:A8:99:4D:61:9B:8D:17:9B:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4599d9d3-f0aa-3734-aff1-21a5f1fcbba2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.197.246.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:db:88:29:a1:ea:a2:8e:55:1c:18:56:4e:42:4c:ad:96:18: 1c:6c:81:f1:76:74:f6:a6:d5:e1:de:c5:fd:18:7b:7e:bc:ab: 96:56:60:1d:6e:64:b6:5c:f3:ca:ae:25:f8:54:0d:ec:c0:57: dd:ea:df:b1:c1:47:cb:b3:26:f1:90:75:6d:39:1b:db:20:d7: 78:d7:45:4e:04:94:d2:85:6e:d6:81:4b:6b:94:fd:d7:f5:ac: 9d:4e:77:b1:c5:4b:ce:d0:7f:04:f9:3d:bc:5f:a8:31:f4:ce: 15:a4:98:e6:c9:fa:a3:23:bd:49:b9:9c:dd:73:c7:e1:7d:22: dc:bd:27:17:c4:87:5d:1e:ea:18:3d:52:c8:4e:e3:d1:18:9c: 37:92:7b:6a:06:ff:04:31:07:74:56:a5:4c:e0:b4:ab:9a:88: 5b:1d:4d:51:6e:3e:f6:fa:2c:ad:86:8a:46:ee:ea:de:2a:a7: c1:39:9b:1d:e3:b5:24:b8:2d:39:28:7b:bc:f5:c4:e6:8e:70: 42:c6:ab:7f:5b:ea:76:b8:91:c7:8f:be:85:c8:13:49:8f:60: 54:c4:01:76:69:5b:e6:7a:6f:f1:68:5a:cd:c0:56:f9:5e:c6: e0:0b:dc:45:13:1d:8c:34:09:58:c8:6a:72:c6:72:22:25:23: fb:6d:60:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEe9iDstmz/nQtQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MWIxNzE2ZjctZTMyMy00YTEzLWEyMGQtNjZkZGRiYWVjMDBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurKgI1T4dhRC6tuRACEvrnUm8/qnNqa0CcHg IKwKU4lKU1loAfyk2M2O6s2UncqDLh5YG1FPnoTM1USlgyNXbiTjtcW7F9F99lCf 3Tzn4WeouvhZFZUNpSLGFzIl9LrHG0pbmx9D7MvvhUPMVVD0vrYn3P8hd96ZzMX/ NPB4xZKNwru5cLJSY/MfKOppm2STtEqoio/rDsbR1bNMWCkSixcA1MsdLKOB7Clb Uwot4DwknyGwrVnq4y3C4lV3fg2mNOHKHS11YHMFoLI6AuuOvBpd5b5jdkU0BiK9 zR3/syskDwoPCQSV7UouWs344HaVAQZnrD+m6vmAbhP5udGAVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBXq4EqmoUhlT/JzqJlNYZuNF5s3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNDU5OWQ5ZDMtZjBhYS0z NzM0LWFmZjEtMjFhNWYxZmNiYmEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8X2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI7biCmh6qKOVRwYVk5CTK2WGBxsgfF2dPam1eHexf0Ye368q5ZWYB1u ZLZc88quJfhUDezAV93q37HBR8uzJvGQdW05G9sg13jXRU4ElNKFbtaBS2uU/df1 rJ1Od7HFS87QfwT5PbxfqDH0zhWkmObJ+qMjvUm5nN1zx+F9Ity9JxfEh10e6hg9 UshO49EYnDeSe2oG/wQxB3RWpUzgtKuaiFsdTVFuPvb6LK2Gikbu6t4qp8E5mx3j tSS4LTkoe7z1xOaOcELGq39b6na4kcePvoXIE0mPYFTEAXZpW+Z6b/FoWs3AVvle xuAL3EUTHYw0CVjIanLGciIlI/ttYNY= -----END CERTIFICATE-----Generated at Sat Jul 26 00:16:06 2025 by rpki-client