$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b288f3ac-b844-3c3f-9d2b-4e7f0d3d9cf1.roa File: b288f3ac-b844-3c3f-9d2b-4e7f0d3d9cf1.roa (raw, json) Hash identifier: sDaVLybVf9+NI+0FDRHt4Bg2h3a93rv1eQxPFziNq0M= Subject key identifier: 13:70:08:B7:A1:8A:26:A1:D2:B6:08:91:76:40:58:CA:9D:2F:70:9F Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A8411346D05AFD26E8016B680 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b288f3ac-b844-3c3f-9d2b-4e7f0d3d9cf1.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 99.196.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:34:6d:05:af:d2:6e:80:16:b6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=8157cec6-cce7-49da-9df6-a10fe3241e4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:ab:52:eb:a5:32:ff:34:cd:51:7c:87:27:28: 68:0f:d7:79:33:7f:06:35:04:2c:40:6b:4d:02:99: 44:e8:fe:6b:5e:c0:30:84:d9:f6:31:95:72:e3:87: 25:80:5d:39:8e:bc:e6:0e:1a:56:09:69:50:37:d4: 8e:ae:86:e8:05:a2:ba:3f:13:85:02:58:c0:86:c6: b4:7f:7f:d7:55:bb:0a:36:1b:6a:13:1e:f4:4e:de: 35:c8:5f:70:b4:65:9d:c5:69:4c:9e:0c:4e:d9:53: 66:b4:18:f1:df:04:0c:71:8d:50:55:74:cb:d7:25: a2:08:22:e8:48:53:03:45:b6:9b:8a:87:0d:40:20: a5:ec:e2:da:16:d4:6c:8b:df:d8:88:16:c7:47:1e: f6:50:40:ee:8a:f1:00:91:72:b8:4c:90:0d:b5:62: e7:98:95:45:e2:e2:b8:d2:e4:93:3c:77:81:dc:f5: 52:7c:e3:ba:9c:a3:d8:c3:9c:3e:03:86:07:54:d8: a6:ff:61:1f:74:35:c3:66:35:69:bb:02:8d:62:c8: 9e:7f:88:d8:e6:6f:dc:06:80:c4:22:3c:f3:2e:32: de:ac:e7:8f:7e:11:ce:4b:fb:17:da:6a:e5:57:0f: f9:a5:0c:aa:6d:d5:46:b2:78:5e:4b:e6:16:67:32: 07:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:70:08:B7:A1:8A:26:A1:D2:B6:08:91:76:40:58:CA:9D:2F:70:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b288f3ac-b844-3c3f-9d2b-4e7f0d3d9cf1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.196.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:44:ba:79:f4:a3:8d:ca:27:00:c8:23:2f:35:c9:3d:e3:ae: 64:d9:49:77:cf:be:2f:94:67:2c:ee:b5:77:04:a6:c6:19:49: d3:d7:71:51:97:bd:8b:5b:0d:94:10:2e:8c:c9:fa:e9:e0:d7: fc:9d:09:7f:26:6d:42:89:c4:7d:c6:1f:35:00:ac:63:77:a7: a4:08:ae:61:92:5b:c2:01:2f:fe:7e:0b:fe:61:88:52:84:86: bb:01:4c:38:aa:3b:f1:04:c7:36:86:2b:3a:8e:5a:cb:b3:91: 64:0d:94:84:f8:62:54:3a:c0:5a:a3:f0:c1:6e:4a:65:3c:35: ce:bc:95:00:83:21:36:42:93:0f:46:4e:0b:b9:61:fc:6e:f0: 91:7f:1f:b2:7b:d9:4f:f8:1e:d4:99:01:af:00:2f:b7:80:ae: 28:56:e6:41:5c:02:73:59:8c:a5:85:e0:ac:71:e9:b1:fe:ce: fd:e0:06:76:c3:d8:07:29:f5:03:b2:61:4e:b4:f5:63:ac:ec: e0:77:93:77:03:0c:f8:8c:09:73:ea:11:e9:c4:aa:3b:37:45: 50:1b:a5:9e:9c:28:c4:34:2b:5c:ee:0f:a7:e6:69:c1:75:a9: c3:78:f9:e5:67:90:86:65:39:c6:b5:cc:03:f2:4d:aa:b9:4a: 4a:d8:37:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEETRtBa/SboAWtoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk ODE1N2NlYzYtY2NlNy00OWRhLTlkZjYtYTEwZmUzMjQxZTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6tS66Uy/zTNUXyHJyhoD9d5M38GNQQsQGtN AplE6P5rXsAwhNn2MZVy44clgF05jrzmDhpWCWlQN9SOroboBaK6PxOFAljAhsa0 f3/XVbsKNhtqEx70Tt41yF9wtGWdxWlMngxO2VNmtBjx3wQMcY1QVXTL1yWiCCLo SFMDRbabiocNQCCl7OLaFtRsi9/YiBbHRx72UEDuivEAkXK4TJANtWLnmJVF4uK4 0uSTPHeB3PVSfOO6nKPYw5w+A4YHVNim/2EfdDXDZjVpuwKNYsief4jY5m/cBoDE IjzzLjLerOePfhHOS/sX2mrlVw/5pQyqbdVGsnheS+YWZzIHuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBNwCLehiiah0rYIkXZAWMqdL3CfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYjI4OGYzYWMtYjg0NC0z YzNmLTlkMmItNGU3ZjBkM2Q5Y2YxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8TPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAINEunn0o43KJwDIIy81yT3jrmTZSXfPvi+UZyzutXcEpsYZSdPXcVGX vYtbDZQQLozJ+ung1/ydCX8mbUKJxH3GHzUArGN3p6QIrmGSW8IBL/5+C/5hiFKE hrsBTDiqO/EExzaGKzqOWsuzkWQNlIT4YlQ6wFqj8MFuSmU8Nc68lQCDITZCkw9G Tgu5Yfxu8JF/H7J72U/4HtSZAa8AL7eArihW5kFcAnNZjKWF4Kxx6bH+zv3gBnbD 2Acp9QOyYU609WOs7OB3k3cDDPiMCXPqEenEqjs3RVAbpZ6cKMQ0K1zuD6fmacF1 qcN4+eVnkIZlOca1zAPyTaq5SkrYN1E= -----END CERTIFICATE-----Generated at Sat Jul 26 11:15:42 2025 by rpki-client