$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/af30c7b1-34db-3ab3-8096-4c1a3ca1401b.roa File: af30c7b1-34db-3ab3-8096-4c1a3ca1401b.roa (raw, json) Hash identifier: 25hb8/5sY0sfxkNFwkW7EkQu3vZrkDRrCfl1Txb6CWc= Subject key identifier: BB:55:ED:2E:61:3D:16:A7:21:EC:22:73:28:8F:3F:98:B0:D1:1C:47 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A8411EE90C548798DC50CFF80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/af30c7b1-34db-3ab3-8096-4c1a3ca1401b.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 99.197.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:ee:90:c5:48:79:8d:c5:0c:ff:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=6581649f-bab9-41b7-943e-a18802a623d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:87:35:4f:08:b9:9a:ea:72:77:d4:a4:ee:74: d3:17:b8:42:87:95:9e:35:32:d4:21:59:22:a2:60: f1:c7:4f:6f:25:ab:17:e5:a6:64:e8:28:3c:2f:bf: c6:7e:7d:e0:23:a5:2e:34:55:c8:2c:ec:68:f4:49: 3e:66:d0:b9:34:55:5e:f2:82:8f:63:f6:3c:c0:db: f6:ff:46:91:59:5b:ac:91:e6:d3:b2:fb:3b:91:e5: 3c:71:87:8f:60:44:ee:3f:e6:30:c4:c4:cf:97:07: a7:46:5e:4f:57:60:c3:ca:4b:21:9a:d2:42:bf:19: f2:25:98:3c:ee:16:08:6f:1b:83:80:04:cc:47:7b: 2d:58:70:56:52:b4:10:de:a8:ce:af:61:b6:d2:a1: 91:47:65:d2:13:a8:35:f3:47:be:fb:5b:a1:e3:06: 4c:a8:d1:89:d1:ca:43:a7:43:7d:cf:aa:ec:3f:19: 27:1b:d3:41:57:99:c6:69:fc:90:5b:35:17:bc:46: eb:3f:9b:c1:04:16:a9:f9:78:f4:ab:fc:88:2c:40: f4:8d:d9:a7:3f:a5:4f:8c:bf:0b:78:48:41:b1:c6: 47:e2:f9:ab:c6:ed:e2:6a:ff:9e:14:c3:18:52:d5: f7:66:1d:10:51:f7:c3:06:df:7f:eb:11:d2:bd:f1: 7d:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:55:ED:2E:61:3D:16:A7:21:EC:22:73:28:8F:3F:98:B0:D1:1C:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/af30c7b1-34db-3ab3-8096-4c1a3ca1401b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.197.219.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c4:1e:c7:84:8b:49:f5:f1:62:63:41:48:4b:9d:f0:1a:6f:ea: 25:d4:9d:ad:3e:d3:6b:2a:80:eb:d6:6c:b7:b3:d5:97:54:da: d3:69:04:11:c7:b5:ff:c7:9e:37:8a:84:41:e3:d4:80:58:29: c6:82:0b:f0:f1:9a:d6:16:a6:a2:db:b2:57:4d:b7:ed:77:ab: 31:3e:11:d6:68:89:fe:03:c2:79:e1:7b:5c:da:a3:1b:0d:ed: 78:32:96:f2:aa:f4:eb:98:a2:52:79:86:4e:04:64:67:cd:e3: 80:43:77:7e:30:df:05:8c:c0:b0:2e:bc:cc:55:08:08:99:4c: 69:4f:c3:4e:37:8a:6b:82:f1:29:0f:30:57:58:c9:d0:d5:e4: a4:00:4e:fa:95:3a:05:e8:a0:a1:2a:e5:c1:44:77:09:4f:fd: 2b:b5:42:f5:fb:f6:a9:a9:6f:61:8e:ac:7e:6e:c7:81:9f:b7: ee:a4:93:ae:d9:8a:56:d9:9c:21:49:6a:26:ec:f6:20:a2:af: 2b:a1:55:26:b3:9f:83:88:3b:a2:ef:89:cf:f8:54:ac:06:65: 6a:a8:18:35:be:f0:78:19:47:9b:da:19:00:3b:49:c2:74:22: c2:f9:76:bf:97:df:c2:2c:e7:b0:40:13:de:d4:8d:1c:ab:b7: 4f:f4:99:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEe6QxUh5jcUM/4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk NjU4MTY0OWYtYmFiOS00MWI3LTk0M2UtYTE4ODAyYTYyM2QzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIc1Twi5mupyd9Sk7nTTF7hCh5WeNTLUIVki omDxx09vJasX5aZk6Cg8L7/Gfn3gI6UuNFXILOxo9Ek+ZtC5NFVe8oKPY/Y8wNv2 /0aRWVuskebTsvs7keU8cYePYETuP+YwxMTPlwenRl5PV2DDykshmtJCvxnyJZg8 7hYIbxuDgATMR3stWHBWUrQQ3qjOr2G20qGRR2XSE6g180e++1uh4wZMqNGJ0cpD p0N9z6rsPxknG9NBV5nGafyQWzUXvEbrP5vBBBap+Xj0q/yILED0jdmnP6VPjL8L eEhBscZH4vmrxu3iav+eFMMYUtX3Zh0QUffDBt9/6xHSvfF95QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLtV7S5hPRanIewicyiPP5iw0RxHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYWYzMGM3YjEtMzRkYi0z YWIzLTgwOTYtNGMxYTNjYTE0MDFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8XbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMQex4SLSfXxYmNBSEud8Bpv6iXUna0+02sqgOvWbLez1ZdU2tNpBBHH tf/HnjeKhEHj1IBYKcaCC/DxmtYWpqLbsldNt+13qzE+EdZoif4Dwnnhe1zaoxsN 7XgylvKq9OuYolJ5hk4EZGfN44BDd34w3wWMwLAuvMxVCAiZTGlPw043imuC8SkP MFdYydDV5KQATvqVOgXooKEq5cFEdwlP/Su1QvX79qmpb2GOrH5ux4Gft+6kk67Z ilbZnCFJaibs9iCiryuhVSazn4OIO6Lvic/4VKwGZWqoGDW+8HgZR5vaGQA7ScJ0 IsL5dr+X38Is57BAE97UjRyrt0/0mck= -----END CERTIFICATE-----Generated at Sat Jul 26 00:02:05 2025 by rpki-client