$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/50c6c70a-4eec-3e0f-95f6-71a7ac9c892f.roa File: 50c6c70a-4eec-3e0f-95f6-71a7ac9c892f.roa (raw, json) Hash identifier: FrWQDipWbfG6LA/YNRmOKAXOKI1cC44535cyCFaZuzY= Subject key identifier: F3:EC:52:0E:06:5B:CF:26:B3:82:03:FD:A8:8A:D9:79:D6:43:92:F2 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A84113B6CA8392887A013A480 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/50c6c70a-4eec-3e0f-95f6-71a7ac9c892f.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 99.198.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:3b:6c:a8:39:28:87:a0:13:a4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=bb443fa2-4a63-4066-91aa-2f9b278949cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:5b:d6:29:d0:e8:ce:f1:20:c8:8b:0a:94:79: 8d:ab:97:ae:91:b1:b0:46:bb:e8:58:21:d8:ec:e2: f8:02:5e:54:f7:38:ab:c1:b3:19:8b:5c:d1:c9:c3: c3:55:dc:f5:1b:47:ef:00:ef:46:6e:96:96:f6:74: 5d:be:98:eb:61:2c:26:ce:34:27:fe:ab:89:2c:05: d9:33:57:47:1e:d0:b6:f1:c3:f3:a4:34:95:9b:2a: 34:55:b2:12:ca:4c:60:03:16:f8:50:22:00:49:46: 0c:65:0c:94:a0:d5:f4:f2:e9:dd:df:dd:59:60:4c: 3c:52:1d:48:28:17:36:55:93:c7:21:ca:a0:d2:01: 1d:3e:70:50:cc:02:11:c6:21:49:fb:55:1b:ea:2b: a9:84:66:cb:8b:86:f6:ee:b8:ca:f1:a3:a0:10:44: 53:02:95:18:3d:b8:85:26:96:f6:6e:82:dc:1c:4b: fc:c0:24:fd:85:34:58:bf:6e:39:14:ce:4c:2a:8d: 7e:05:ba:98:18:9d:8f:f4:a0:63:f3:26:08:6f:f1: bd:cd:bd:6c:09:2e:7f:fc:24:72:03:4c:f9:db:73: 52:9c:2b:6c:8e:78:fc:9c:7e:c8:4c:33:5b:cb:27: 61:df:81:73:fa:64:86:ed:cb:5e:b2:1c:8b:52:24: 15:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:EC:52:0E:06:5B:CF:26:B3:82:03:FD:A8:8A:D9:79:D6:43:92:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/50c6c70a-4eec-3e0f-95f6-71a7ac9c892f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.198.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:54:54:e5:16:45:50:95:a9:ca:7c:77:b6:0f:c0:ea:6c:f3: 88:5b:cc:f2:33:f3:01:2c:36:74:4a:23:0c:6f:93:89:12:38: 47:62:b6:83:ad:1e:bf:e0:61:46:d2:08:c2:c6:5f:2e:51:31: 47:5c:90:3d:ca:dd:0b:41:27:c9:42:1d:76:98:44:92:f5:5e: 9e:06:7b:6f:20:68:af:be:b1:bc:86:fc:54:1b:dc:61:08:c4: 4c:35:0f:8d:4b:2c:31:60:8a:f8:9f:6b:7d:1b:00:7f:7a:43: ba:e1:b9:4d:41:e7:d8:31:fd:16:c7:ce:6e:fc:bf:c9:2c:40: 58:14:68:52:6e:4c:9c:1b:c7:b9:15:9a:a2:cb:49:44:43:72: 4c:21:20:9f:11:5e:03:23:7e:9f:a7:24:98:46:09:77:4d:74: 32:5e:61:c6:1d:ef:62:c5:a4:2c:ea:4c:54:c2:13:78:53:c8: c7:a9:83:61:cb:b5:70:b7:7b:f5:82:f3:4a:37:bf:a4:04:e2: 70:e8:33:c1:ba:bd:a3:a7:d7:e2:24:b8:85:21:16:dc:21:ca: c5:b3:7f:84:f2:14:57:5d:5c:67:fa:e3:a1:f3:78:53:6d:14: 95:30:3d:8f:d1:40:6f:c3:ee:33:7d:37:16:66:79:20:47:e4: 1d:1d:b9:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEETtsqDkoh6ATpIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk YmI0NDNmYTItNGE2My00MDY2LTkxYWEtMmY5YjI3ODk0OWNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslvWKdDozvEgyIsKlHmNq5eukbGwRrvoWCHY 7OL4Al5U9zirwbMZi1zRycPDVdz1G0fvAO9GbpaW9nRdvpjrYSwmzjQn/quJLAXZ M1dHHtC28cPzpDSVmyo0VbISykxgAxb4UCIASUYMZQyUoNX08und391ZYEw8Uh1I KBc2VZPHIcqg0gEdPnBQzAIRxiFJ+1Ub6iuphGbLi4b27rjK8aOgEERTApUYPbiF Jpb2boLcHEv8wCT9hTRYv245FM5MKo1+BbqYGJ2P9KBj8yYIb/G9zb1sCS5//CRy A0z523NSnCtsjnj8nH7ITDNbyydh34Fz+mSG7cteshyLUiQV7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPPsUg4GW88ms4ID/aiK2XnWQ5LyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNTBjNmM3MGEtNGVlYy0z ZTBmLTk1ZjYtNzFhN2FjOWM4OTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8YXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKhUVOUWRVCVqcp8d7YPwOps84hbzPIz8wEsNnRKIwxvk4kSOEditoOt Hr/gYUbSCMLGXy5RMUdckD3K3QtBJ8lCHXaYRJL1Xp4Ge28gaK++sbyG/FQb3GEI xEw1D41LLDFgivifa30bAH96Q7rhuU1B59gx/RbHzm78v8ksQFgUaFJuTJwbx7kV mqLLSURDckwhIJ8RXgMjfp+nJJhGCXdNdDJeYcYd72LFpCzqTFTCE3hTyMepg2HL tXC3e/WC80o3v6QE4nDoM8G6vaOn1+IkuIUhFtwhysWzf4TyFFddXGf646HzeFNt FJUwPY/RQG/D7jN9NxZmeSBH5B0dueE= -----END CERTIFICATE-----Generated at Sat Jul 26 00:03:27 2025 by rpki-client