$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/aa5104e4-39cb-313d-bee2-af57ed7c9645.roa File: aa5104e4-39cb-313d-bee2-af57ed7c9645.roa (raw, json) Hash identifier: A9LaE1G68EIlTOL5vb3pRZQWtWA1xGr6qBSeeTXmw3c= Subject key identifier: A8:A5:9C:B9:A7:CC:41:B8:B1:F3:82:C4:3D:F4:22:34:0A:16:0E:33 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A8411ED2F5415FDFFAFBE26E0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/aa5104e4-39cb-313d-bee2-af57ed7c9645.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 99.197.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:ed:2f:54:15:fd:ff:af:be:26:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=408ea4ea-7fa2-4814-a801-715a853a9c59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:1f:10:50:c2:13:ff:93:c0:62:ad:02:da:54: bf:4a:10:3f:a2:65:3c:72:db:7a:ae:7f:01:c4:9c: e6:d0:2f:0e:a1:48:7a:69:6c:0f:54:16:b3:5a:84: a8:62:8f:c8:c6:34:d4:20:eb:26:56:02:9c:8a:1c: f3:42:38:10:dc:b8:d9:e3:26:23:9c:19:56:e7:28: ed:21:99:19:e4:f6:57:e1:c8:f1:57:f9:87:f1:cf: cb:c5:dd:72:87:ec:32:f0:32:0f:e4:b7:ba:70:c2: 1a:cb:18:98:53:cc:3e:ea:19:e4:c0:94:79:99:64: 14:ba:ba:ed:17:58:ab:a5:f6:ea:50:ca:0c:b2:1a: 77:62:42:b6:e3:2a:04:03:f5:59:ba:73:80:92:a6: b3:b4:55:77:55:55:a9:ac:38:52:16:4a:25:71:0c: 39:81:30:94:8b:fc:20:46:49:e4:3d:f5:f7:69:d1: ac:22:95:e9:44:48:fa:08:1c:6b:c6:a5:43:c4:93: 7b:0b:24:4b:e9:e4:3c:67:fb:66:f9:ee:da:c4:e6: c3:71:b6:fd:ce:b8:67:5b:4d:dd:41:70:9d:06:cc: 1d:4e:d9:86:52:b4:23:af:75:fd:7a:bc:21:e7:ae: c5:18:76:63:a5:b1:d3:0a:85:fb:c3:73:28:d9:3e: 10:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:A5:9C:B9:A7:CC:41:B8:B1:F3:82:C4:3D:F4:22:34:0A:16:0E:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/aa5104e4-39cb-313d-bee2-af57ed7c9645.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.197.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:74:58:ca:92:6c:c7:ec:08:91:f7:37:6f:9e:f2:11:4b:ac: f3:91:de:86:33:2f:18:54:c0:8c:6c:10:b5:f2:96:2a:ad:12: 47:7d:9d:83:2f:33:ee:16:26:d0:84:6f:e9:b3:e4:30:21:31: 2e:b9:3c:d2:bd:c4:ba:08:96:1e:ff:93:65:2b:b3:94:ec:0a: 90:d6:67:f9:93:25:10:25:fa:e8:cc:c9:3d:40:73:72:8f:de: 42:2c:4c:62:a3:f6:fd:08:6d:9b:a8:1f:aa:3f:ed:dc:01:58: 38:2d:c7:92:87:57:84:d7:1c:2e:be:5e:2e:88:fc:bd:34:a7: d4:b1:4d:e9:6a:e6:2e:8b:43:07:af:19:e0:84:dd:99:7f:0b: a7:da:6e:92:3e:5a:c9:b6:f2:b9:96:c8:05:91:d4:a9:1e:1c: 72:d6:5b:35:85:3b:98:8f:5e:e2:15:31:d3:80:16:08:27:b9: 79:a9:a6:6f:16:2b:aa:fe:04:61:45:c2:84:f8:90:82:56:b2: 87:d1:dc:2f:65:07:35:50:7b:2e:c9:85:99:c8:d5:6c:dd:17: 3e:66:a8:ee:44:8c:5a:ee:b0:57:e4:1b:9e:c5:44:1b:29:90: 60:0e:26:52:6e:06:bf:00:a6:56:7e:8e:c0:21:05:99:4a:21: cb:06:50:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEe0vVBX9/6++JuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk NDA4ZWE0ZWEtN2ZhMi00ODE0LWE4MDEtNzE1YTg1M2E5YzU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjB8QUMIT/5PAYq0C2lS/ShA/omU8ctt6rn8B xJzm0C8OoUh6aWwPVBazWoSoYo/IxjTUIOsmVgKcihzzQjgQ3LjZ4yYjnBlW5yjt IZkZ5PZX4cjxV/mH8c/Lxd1yh+wy8DIP5Le6cMIayxiYU8w+6hnkwJR5mWQUurrt F1irpfbqUMoMshp3YkK24yoEA/VZunOAkqaztFV3VVWprDhSFkolcQw5gTCUi/wg RknkPfX3adGsIpXpREj6CBxrxqVDxJN7CyRL6eQ8Z/tm+e7axObDcbb9zrhnW03d QXCdBswdTtmGUrQjr3X9erwh567FGHZjpbHTCoX7w3Mo2T4QtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKilnLmnzEG4sfOCxD30IjQKFg4zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYWE1MTA0ZTQtMzljYi0z MTNkLWJlZTItYWY1N2VkN2M5NjQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8WwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACp0WMqSbMfsCJH3N2+e8hFLrPOR3oYzLxhUwIxsELXyliqtEkd9nYMv M+4WJtCEb+mz5DAhMS65PNK9xLoIlh7/k2Urs5TsCpDWZ/mTJRAl+ujMyT1Ac3KP 3kIsTGKj9v0IbZuoH6o/7dwBWDgtx5KHV4TXHC6+Xi6I/L00p9SxTelq5i6LQwev GeCE3Zl/C6fabpI+Wsm28rmWyAWR1KkeHHLWWzWFO5iPXuIVMdOAFggnuXmppm8W K6r+BGFFwoT4kIJWsofR3C9lBzVQey7JhZnI1WzdFz5mqO5EjFrusFfkG57FRBsp kGAOJlJuBr8AplZ+jsAhBZlKIcsGUPE= -----END CERTIFICATE-----Generated at Sat Jul 26 11:18:39 2025 by rpki-client