$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a4ea65de-1ab8-30e2-8a38-081d13a85433.roa File: a4ea65de-1ab8-30e2-8a38-081d13a85433.roa (raw, json) Hash identifier: GY9tgm2Cc1+StQMaz3T57fH1BZmxRAb/4svlSj1C8GY= Subject key identifier: E3:B8:A7:6B:F8:77:3E:8B:D6:99:BB:FF:F6:B7:AB:99:A6:8B:E9:62 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A84113B932EC75606F13F4180 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a4ea65de-1ab8-30e2-8a38-081d13a85433.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 99.198.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:3b:93:2e:c7:56:06:f1:3f:41:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=982f5551-19e9-4a10-8456-5af345261ee3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:2f:ea:30:a6:7b:a5:03:f7:c3:63:34:41:cc: 35:7f:26:57:25:a5:b0:f4:ac:79:0d:b6:52:5a:13: 04:f3:fe:b4:54:10:62:e5:f7:6e:a7:4d:a9:a5:3a: fa:91:c6:c4:3a:bb:dc:7b:58:d7:d6:a1:81:8c:cd: a4:76:ce:2c:09:e0:3e:e7:07:4e:7f:09:02:4c:a6: e3:88:89:fb:fb:1f:e6:1a:01:55:b1:3b:56:e6:c5: c8:d6:25:6f:81:ea:6a:49:2e:68:a4:e6:98:2a:b3: c4:f0:b2:91:0e:1c:31:a5:27:40:13:e9:d5:8f:b4: ae:9c:9b:ff:57:51:9c:b1:c3:1a:0d:bf:38:ec:d0: c1:2c:48:64:b9:7c:3e:6a:15:87:18:a9:af:c6:60: 2a:e7:a7:56:94:f3:0d:2b:61:c1:a0:a5:af:8c:cc: d3:9c:a5:a0:a0:c5:b9:3d:64:62:2c:8b:74:cf:d1: 57:b0:cf:a0:34:ad:ca:00:ac:98:97:e4:ae:83:1a: 7f:da:8c:9f:e5:f1:b3:8e:47:83:ba:71:5b:81:70: e3:8e:f6:12:cf:75:a3:c7:62:83:e5:cf:87:65:98: b1:ef:77:c5:f5:0e:ca:d8:93:f3:68:3a:03:01:ec: 5b:98:bb:8c:e5:3f:7c:62:32:e4:1a:9a:4d:64:c4: 90:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:B8:A7:6B:F8:77:3E:8B:D6:99:BB:FF:F6:B7:AB:99:A6:8B:E9:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a4ea65de-1ab8-30e2-8a38-081d13a85433.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.198.31.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:12:dd:e8:a8:c6:3d:c3:ce:5b:c4:d0:10:f6:c2:77:c5:1f: 4f:00:f4:b6:a6:20:84:cd:e9:43:8c:1f:e5:8f:7e:d1:41:bf: ec:e0:90:6e:de:33:ff:a2:fe:78:71:89:d5:1a:b2:1e:b2:92: 86:16:ac:30:a2:4a:fd:cb:81:c5:93:e3:a1:84:2c:f4:af:80: ff:7f:21:ec:ee:1b:54:ba:95:7e:0a:cb:c4:8c:78:6d:c3:81: 54:32:f8:5d:c5:56:be:20:ed:77:1d:e5:4f:a1:5d:f6:c3:76: 2c:3c:1e:bb:70:2b:2a:24:42:8e:c3:5f:1d:5f:17:1a:e8:82: b5:f8:a3:20:d0:0a:c3:d1:e2:65:5e:09:ee:96:4d:6d:4e:93: 55:68:ad:66:b7:fe:43:90:1b:85:c2:5c:c9:c0:9a:76:3a:63: c3:5c:e8:68:c5:39:13:ac:33:7f:7b:2b:97:e5:48:59:24:e5: 25:f0:0a:33:73:a4:c5:b8:c0:ea:9f:ab:54:d3:39:21:85:01: 16:3a:16:1c:8b:78:dc:e2:13:87:dc:0b:4f:e2:29:0d:c4:d7: 86:c7:2f:76:b5:ec:a0:0c:d8:c8:3f:61:91:ac:4f:91:14:9b: ca:4e:93:f5:55:8d:44:9e:db:d0:40:70:3d:5f:4f:b1:89:d7: 62:52:c0:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEETuTLsdWBvE/QYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk OTgyZjU1NTEtMTllOS00YTEwLTg0NTYtNWFmMzQ1MjYxZWUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvC/qMKZ7pQP3w2M0Qcw1fyZXJaWw9Kx5DbZS WhME8/60VBBi5fdup02ppTr6kcbEOrvce1jX1qGBjM2kds4sCeA+5wdOfwkCTKbj iIn7+x/mGgFVsTtW5sXI1iVvgepqSS5opOaYKrPE8LKRDhwxpSdAE+nVj7SunJv/ V1GcscMaDb847NDBLEhkuXw+ahWHGKmvxmAq56dWlPMNK2HBoKWvjMzTnKWgoMW5 PWRiLIt0z9FXsM+gNK3KAKyYl+Sugxp/2oyf5fGzjkeDunFbgXDjjvYSz3Wjx2KD 5c+HZZix73fF9Q7K2JPzaDoDAexbmLuM5T98YjLkGppNZMSQfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOO4p2v4dz6L1pm7//a3q5mmi+liMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYTRlYTY1ZGUtMWFiOC0z MGUyLThhMzgtMDgxZDEzYTg1NDMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8YfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFwS3eioxj3DzlvE0BD2wnfFH08A9LamIITN6UOMH+WPftFBv+zgkG7e M/+i/nhxidUash6ykoYWrDCiSv3LgcWT46GELPSvgP9/IezuG1S6lX4Ky8SMeG3D gVQy+F3FVr4g7Xcd5U+hXfbDdiw8HrtwKyokQo7DXx1fFxrogrX4oyDQCsPR4mVe Ce6WTW1Ok1VorWa3/kOQG4XCXMnAmnY6Y8Nc6GjFOROsM397K5flSFkk5SXwCjNz pMW4wOqfq1TTOSGFARY6FhyLeNziE4fcC0/iKQ3E14bHL3a17KAM2Mg/YZGsT5EU m8pOk/VVjUSe29BAcD1fT7GJ12JSwAU= -----END CERTIFICATE-----Generated at Sat Jul 26 11:10:47 2025 by rpki-client