$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7c4e93d8-eeca-3f3d-8092-bc77f8238d20.roa File: 7c4e93d8-eeca-3f3d-8092-bc77f8238d20.roa (raw, json) Hash identifier: AVUc/yMkIVW75fcr6GIWXC1CsRTU3Y+BkxkC+Xqm1l8= Subject key identifier: 59:66:83:FE:61:5F:CA:0E:B6:8E:ED:B2:CB:9C:4B:07:03:94:6A:B1 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A8411EC32BA259E711AB49F40 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7c4e93d8-eeca-3f3d-8092-bc77f8238d20.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 99.197.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:ec:32:ba:25:9e:71:1a:b4:9f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=a722a412-79d1-4d9e-9809-48d993b0e501 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:66:30:61:cf:b4:d3:46:48:75:13:9c:ef:ab: 15:e0:b4:cc:ba:a0:ff:6c:be:3e:aa:c9:46:04:df: 4f:d3:88:10:53:80:17:7e:c5:0e:bc:26:91:53:d2: 96:90:88:6d:e5:35:5f:d4:fb:2b:9b:d2:cb:fe:91: f9:92:74:4c:0e:b0:c6:0f:8e:e7:29:40:73:33:e6: 4c:81:69:01:b9:ba:b2:05:0b:f8:38:93:17:af:85: 01:38:00:0b:8d:74:2a:df:ab:63:23:ed:a5:7c:3d: 53:53:21:e7:ba:34:c7:ee:91:62:96:dc:3e:6e:f0: 29:56:55:21:7c:85:34:2d:70:d0:3c:08:cb:ec:75: 3e:a1:ad:d7:20:c1:b2:67:2f:92:a0:e7:d8:f2:f7: 14:6c:5a:5b:5d:e4:12:12:eb:26:85:dc:21:68:58: 26:9b:30:cd:7f:2d:90:7b:d6:85:af:48:ef:e6:2b: 7e:0b:99:bc:14:1b:1a:5d:88:b4:3a:9c:74:30:52: df:38:24:57:cb:f5:d1:de:68:5f:b2:02:73:dd:c3: bb:8b:b3:37:69:07:b4:50:0c:03:5a:02:c1:eb:f3: cc:f3:f4:15:f6:de:fe:09:e9:2d:81:ed:37:d5:cd: 4f:19:28:37:6a:b0:47:54:73:12:b2:01:aa:e3:76: 20:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:66:83:FE:61:5F:CA:0E:B6:8E:ED:B2:CB:9C:4B:07:03:94:6A:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7c4e93d8-eeca-3f3d-8092-bc77f8238d20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.197.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c7:c3:b8:ef:3b:50:3d:8b:ed:ad:96:28:e7:44:0f:08:16:5b: ec:c5:d1:a0:16:4a:64:9a:0a:d2:6a:56:21:b8:32:d5:d5:57: 76:6f:b1:a3:16:16:8b:2a:2e:25:d5:75:2f:0d:38:13:50:a6: 4d:28:31:fc:eb:56:66:a0:d6:45:8a:94:d9:dd:0a:53:45:d2: 30:0e:7d:f7:ac:da:11:92:67:09:34:67:a0:6b:ad:3d:02:96: 71:ff:31:b4:dd:05:c3:59:a3:13:5d:ae:76:ff:00:e6:3e:64: 16:62:a1:54:a4:31:ff:8b:07:03:76:cb:45:7e:e9:41:ac:6a: b4:06:76:85:72:fd:c7:75:64:34:01:eb:74:9f:7d:15:14:d7: a1:9b:e2:ce:1a:43:d3:d3:7e:70:8f:2c:bb:63:dd:a1:d4:b0: 61:fc:57:3c:b2:69:41:f2:57:10:07:10:45:0f:9f:fb:4e:c4: 52:dd:df:25:95:31:c0:63:c5:24:58:f2:40:b9:9b:98:9d:36: 81:0f:ce:86:c1:03:f2:bd:16:6d:ed:c7:0e:bf:d2:33:a3:66: 5f:1f:cb:7d:0d:d0:44:90:86:5e:58:90:d2:4d:0a:b7:fa:ea: ad:87:3c:ab:41:58:3f:1d:38:c5:1c:03:8c:39:52:40:4a:ae: 2f:dd:88:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEewyuiWecRq0n0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk YTcyMmE0MTItNzlkMS00ZDllLTk4MDktNDhkOTkzYjBlNTAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGYwYc+000ZIdROc76sV4LTMuqD/bL4+qslG BN9P04gQU4AXfsUOvCaRU9KWkIht5TVf1Psrm9LL/pH5knRMDrDGD47nKUBzM+ZM gWkBubqyBQv4OJMXr4UBOAALjXQq36tjI+2lfD1TUyHnujTH7pFiltw+bvApVlUh fIU0LXDQPAjL7HU+oa3XIMGyZy+SoOfY8vcUbFpbXeQSEusmhdwhaFgmmzDNfy2Q e9aFr0jv5it+C5m8FBsaXYi0Opx0MFLfOCRXy/XR3mhfsgJz3cO7i7M3aQe0UAwD WgLB6/PM8/QV9t7+Cektge031c1PGSg3arBHVHMSsgGq43YgLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFlmg/5hX8oOto7tssucSwcDlGqxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvN2M0ZTkzZDgtZWVjYS0z ZjNkLTgwOTItYmM3N2Y4MjM4ZDIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8WLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMfDuO87UD2L7a2WKOdEDwgWW+zF0aAWSmSaCtJqViG4MtXVV3ZvsaMW FosqLiXVdS8NOBNQpk0oMfzrVmag1kWKlNndClNF0jAOffes2hGSZwk0Z6BrrT0C lnH/MbTdBcNZoxNdrnb/AOY+ZBZioVSkMf+LBwN2y0V+6UGsarQGdoVy/cd1ZDQB 63SffRUU16Gb4s4aQ9PTfnCPLLtj3aHUsGH8VzyyaUHyVxAHEEUPn/tOxFLd3yWV McBjxSRY8kC5m5idNoEPzobBA/K9Fm3txw6/0jOjZl8fy30N0ESQhl5YkNJNCrf6 6q2HPKtBWD8dOMUcA4w5UkBKri/diE8= -----END CERTIFICATE-----Generated at Sat Jul 26 11:36:02 2025 by rpki-client