$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/59dacd66-3510-37a0-acd1-c5b1f5df0c4a.roa File: 59dacd66-3510-37a0-acd1-c5b1f5df0c4a.roa (raw, json) Hash identifier: zosGuC110xhpV3vSmQsBYtEAetsy6JC35wIa7lX7TXI= Subject key identifier: 60:A0:92:BF:0F:72:CF:BB:C8:E4:49:F2:12:17:27:5F:7D:D6:C6:AF Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A8411E82634B77ED76D59DA60 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/59dacd66-3510-37a0-acd1-c5b1f5df0c4a.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 99.196.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:e8:26:34:b7:7e:d7:6d:59:da:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=cee006ff-7262-4688-9fad-4ca1e9c95e3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:fd:c6:cf:9d:57:f5:76:2c:70:4c:97:e9:dc: 0d:08:7b:75:03:fc:0d:79:23:9c:e4:0b:55:80:b7: 30:4b:64:16:37:5c:41:77:f9:3e:ed:c8:fb:d1:e5: 56:ae:3c:f1:82:31:06:1e:ac:ba:d7:ad:e2:51:0a: cb:19:e9:1f:35:09:01:1f:fb:13:ea:90:dd:5e:c2: 16:48:40:68:27:e7:a2:ae:ef:04:dc:8a:b7:7c:6e: 99:47:b2:38:25:8d:36:8b:0d:08:ed:8b:ce:a9:eb: ca:b1:ac:7b:d5:06:0b:75:99:dd:9f:b7:1f:76:93: ee:5f:74:11:12:9a:af:41:8b:6b:72:1a:6b:0f:67: 96:5f:52:87:1b:c4:13:da:53:a3:5b:6a:a5:f6:d8: 02:b3:ff:0b:87:ae:48:22:a8:7a:c1:3d:75:72:04: d3:02:f7:75:f8:86:86:39:1d:6d:87:8d:91:c3:37: 74:f8:f6:ad:1e:69:d3:64:98:fe:19:e2:b2:46:dc: 4b:1f:77:bd:5e:4c:b5:5f:24:5d:89:9a:a3:35:e2: 46:de:7e:36:21:6f:cc:7d:40:43:50:10:77:74:85: 0d:30:de:e8:88:a4:60:d8:06:4a:23:62:8f:ac:00: df:5f:df:65:31:75:3d:55:41:15:dc:8a:ec:e6:d9: 4a:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:A0:92:BF:0F:72:CF:BB:C8:E4:49:F2:12:17:27:5F:7D:D6:C6:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/59dacd66-3510-37a0-acd1-c5b1f5df0c4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.196.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:51:0e:f7:28:64:10:4b:15:77:4d:91:fc:a1:24:44:82:68: 51:bb:c3:7e:29:32:33:c4:51:3d:ca:6f:ca:85:c8:e1:1f:a1: 2a:d0:c5:ec:73:84:c7:a2:48:b3:bf:e0:22:1a:fb:ed:5f:87: 3b:9f:fe:6c:92:66:f2:97:31:34:22:cc:c2:20:00:9e:b8:0a: f6:41:58:94:86:63:2d:65:03:91:8d:70:2d:f6:59:02:e3:d1: 70:70:53:ef:3e:af:8f:e8:c0:69:a2:48:43:e7:90:99:99:28: 12:74:39:e4:a0:a9:2f:c3:29:7d:0a:5d:7f:83:52:54:51:59: ac:8c:a7:c3:ae:72:b0:19:5e:cd:8b:a8:94:c7:d0:df:7d:73: 36:49:69:3b:2c:4c:f8:27:cb:c9:e2:8e:db:02:d4:a6:53:4d: 3e:c4:59:cd:ad:ea:e3:99:7a:a3:3b:c1:6c:fc:2b:f9:ca:ca: 26:b4:4a:ba:c5:2e:f0:68:36:7f:24:0c:10:23:44:45:bb:e4: db:bd:79:36:71:16:d8:50:d6:96:7a:c5:00:ed:ea:67:d8:13: 45:52:ee:8b:99:00:f8:df:00:70:e3:a7:e4:fb:f3:06:e3:f1: a7:ab:72:47:8c:82:03:86:e1:05:1c:29:b4:20:a8:0f:6f:6b: a7:3a:55:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEegmNLd+121Z2mAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk Y2VlMDA2ZmYtNzI2Mi00Njg4LTlmYWQtNGNhMWU5Yzk1ZTNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmv3Gz51X9XYscEyX6dwNCHt1A/wNeSOc5AtV gLcwS2QWN1xBd/k+7cj70eVWrjzxgjEGHqy6163iUQrLGekfNQkBH/sT6pDdXsIW SEBoJ+eiru8E3Iq3fG6ZR7I4JY02iw0I7YvOqevKsax71QYLdZndn7cfdpPuX3QR EpqvQYtrchprD2eWX1KHG8QT2lOjW2ql9tgCs/8Lh65IIqh6wT11cgTTAvd1+IaG OR1th42Rwzd0+PatHmnTZJj+GeKyRtxLH3e9Xky1XyRdiZqjNeJG3n42IW/MfUBD UBB3dIUNMN7oiKRg2AZKI2KPrADfX99lMXU9VUEV3Irs5tlK8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGCgkr8Pcs+7yORJ8hIXJ1991savMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNTlkYWNkNjYtMzUxMC0z N2EwLWFjZDEtYzViMWY1ZGYwYzRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8TrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG5RDvcoZBBLFXdNkfyhJESCaFG7w34pMjPEUT3Kb8qFyOEfoSrQxexz hMeiSLO/4CIa++1fhzuf/mySZvKXMTQizMIgAJ64CvZBWJSGYy1lA5GNcC32WQLj 0XBwU+8+r4/owGmiSEPnkJmZKBJ0OeSgqS/DKX0KXX+DUlRRWayMp8OucrAZXs2L qJTH0N99czZJaTssTPgny8nijtsC1KZTTT7EWc2t6uOZeqM7wWz8K/nKyia0SrrF LvBoNn8kDBAjREW75Nu9eTZxFthQ1pZ6xQDt6mfYE0VS7ouZAPjfAHDjp+T78wbj 8aerckeMggOG4QUcKbQgqA9va6c6VWk= -----END CERTIFICATE-----Generated at Sat Jul 26 00:09:24 2025 by rpki-client