$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7515baa8-6f6e-3e8c-86b4-5c66e901d2da.roa File: 7515baa8-6f6e-3e8c-86b4-5c66e901d2da.roa (raw, json) Hash identifier: /B+t8RFqECo6HPqfHjf78P4FaaqwCsnH0BqPGX/abJ8= Subject key identifier: 3D:64:D3:93:5A:70:74:D4:AE:1E:A3:03:37:6A:11:4B:D1:CA:B1:51 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A841139947CE4303EE025D680 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7515baa8-6f6e-3e8c-86b4-5c66e901d2da.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 99.197.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:39:94:7c:e4:30:3e:e0:25:d6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=462c5a61-950e-4ea0-920e-61ab4a0a2efd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:a4:02:15:76:0b:e4:ba:b8:8a:73:a9:76:03: cd:f8:c0:93:da:72:5f:4b:58:79:c0:9c:98:ae:fb: 95:1d:22:6f:8a:6e:74:3c:ee:3f:0c:1d:3c:0c:65: 68:91:65:4d:79:6c:3d:66:93:70:8f:3d:cf:59:1f: 87:17:1a:3c:e1:2e:e7:05:57:27:d7:0b:fd:13:05: d3:97:d3:f4:14:ae:e4:8d:e8:a3:96:24:c6:05:9f: af:f5:50:8f:b5:e1:8f:84:fe:e2:19:af:a9:70:30: f4:9f:e0:f0:ef:fd:93:26:0a:23:b8:71:61:0e:40: c0:6e:9d:02:fb:b8:bd:38:12:a0:1c:2f:90:03:0e: bb:42:15:c7:c1:08:a9:4f:c3:32:43:20:ef:82:77: 76:90:ac:3e:a2:26:03:b4:c9:f3:a0:24:d8:7b:98: e7:72:b2:0d:d6:98:fa:80:cb:46:a4:5b:de:b3:86: eb:26:7e:31:35:4a:a0:5d:a4:e7:0c:74:16:f7:4b: ca:86:05:cd:0b:c7:de:c0:ed:fc:0c:2c:6f:bd:ab: 00:c6:39:56:ac:1c:dd:1d:7e:2d:3f:8f:22:c6:e8: 14:49:23:04:45:d9:1b:2a:13:37:e2:09:0e:94:f9: cd:df:6e:e3:e1:29:be:e0:29:2c:a0:cc:5d:0e:75: a3:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:64:D3:93:5A:70:74:D4:AE:1E:A3:03:37:6A:11:4B:D1:CA:B1:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7515baa8-6f6e-3e8c-86b4-5c66e901d2da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.197.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:a5:29:9b:99:c3:80:3f:93:e7:5a:1f:27:71:82:fd:6f:0d: c4:a1:06:23:92:bf:97:ad:3e:1c:e3:b8:60:2a:02:84:8c:5a: 99:67:0f:e0:2d:2c:38:ae:10:db:d3:71:9c:1b:26:18:ed:ab: ac:9a:30:d5:ee:f2:63:bf:8a:6e:10:a3:9c:35:6b:03:51:0c: b0:20:8a:2a:a3:18:94:c8:45:08:92:67:25:d8:e5:52:c7:41: 96:53:f6:ae:49:61:58:f4:83:71:38:b5:e5:9e:85:f5:50:8b: 9c:68:1c:6a:6e:11:56:ce:88:4c:f1:ed:ef:a7:c2:f4:af:bb: 1f:ec:1e:e0:83:93:35:30:8e:91:8a:06:33:0f:f9:16:ec:49: c7:6f:5e:23:34:6b:e4:57:ce:e7:44:51:0b:1f:6b:bb:4b:79: 27:87:a0:55:75:65:79:b7:5c:8b:30:62:e6:70:e3:51:91:07: 80:2d:74:86:41:ef:83:ce:0a:46:5a:97:16:d3:15:31:e3:6e: 4e:93:29:50:41:e1:e5:5e:fd:6c:d3:de:ce:a0:d0:c8:4b:92: f7:a8:5e:4e:b9:42:9b:43:6b:9b:54:03:f4:34:02:1e:fc:e2: 66:f9:a9:37:7c:ad:56:d1:78:2f:34:01:5f:94:e0:c6:40:0c: f0:cd:1f:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEETmUfOQwPuAl1oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk NDYyYzVhNjEtOTUwZS00ZWEwLTkyMGUtNjFhYjRhMGEyZWZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKQCFXYL5Lq4inOpdgPN+MCT2nJfS1h5wJyY rvuVHSJvim50PO4/DB08DGVokWVNeWw9ZpNwjz3PWR+HFxo84S7nBVcn1wv9EwXT l9P0FK7kjeijliTGBZ+v9VCPteGPhP7iGa+pcDD0n+Dw7/2TJgojuHFhDkDAbp0C +7i9OBKgHC+QAw67QhXHwQipT8MyQyDvgnd2kKw+oiYDtMnzoCTYe5jncrIN1pj6 gMtGpFves4brJn4xNUqgXaTnDHQW90vKhgXNC8fewO38DCxvvasAxjlWrBzdHX4t P48ixugUSSMERdkbKhM34gkOlPnN327j4Sm+4CksoMxdDnWjOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD1k05NacHTUrh6jAzdqEUvRyrFRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNzUxNWJhYTgtNmY2ZS0z ZThjLTg2YjQtNWM2NmU5MDFkMmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8WuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADSlKZuZw4A/k+daHydxgv1vDcShBiOSv5etPhzjuGAqAoSMWplnD+At LDiuENvTcZwbJhjtq6yaMNXu8mO/im4Qo5w1awNRDLAgiiqjGJTIRQiSZyXY5VLH QZZT9q5JYVj0g3E4teWehfVQi5xoHGpuEVbOiEzx7e+nwvSvux/sHuCDkzUwjpGK BjMP+RbsScdvXiM0a+RXzudEUQsfa7tLeSeHoFV1ZXm3XIswYuZw41GRB4AtdIZB 74POCkZalxbTFTHjbk6TKVBB4eVe/WzT3s6g0MhLkveoXk65QptDa5tUA/Q0Ah78 4mb5qTd8rVbReC80AV+U4MZADPDNH7U= -----END CERTIFICATE-----Generated at Sat Jul 26 00:01:27 2025 by rpki-client