$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cfc353a4-13c4-3131-8c52-c9b37f1b6b0a.roa File: cfc353a4-13c4-3131-8c52-c9b37f1b6b0a.roa (raw, json) Hash identifier: NtH8w9cikGs/v3e9so5RlEVjZH6G5ny4m/e5t+uU0Q8= Subject key identifier: 70:A6:12:86:2A:04:CA:21:40:18:29:90:1A:3D:BB:98:AE:AF:67:F0 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A8411EC697EA36E11335DF580 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cfc353a4-13c4-3131-8c52-c9b37f1b6b0a.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 99.197.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:ec:69:7e:a3:6e:11:33:5d:f5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=bea1c458-8b65-4332-b183-434a986f824c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:c1:6e:41:ea:46:b4:d9:31:be:b1:e3:41:f0: 53:8b:cd:3d:b2:1e:b2:52:7a:6a:61:f7:23:f8:a2: aa:05:43:7e:f6:cc:fa:2a:ab:d8:48:4b:5c:49:60: 8a:33:51:74:3e:f7:44:87:10:a7:a2:3e:4c:5c:e9: 04:5e:91:0a:7d:6e:20:7e:f5:c2:73:10:3f:1b:f1: d7:66:46:6c:62:3d:85:b3:67:94:74:c8:c4:01:2e: 6b:2e:e1:de:ef:d9:70:a1:ee:42:6f:eb:0a:5e:7d: 13:1f:95:d5:ed:66:f0:84:6f:0d:9f:2b:42:df:09: 6d:68:44:f8:3b:e7:d3:0a:94:53:89:3d:62:d1:9d: 93:df:dc:d4:3d:c7:71:c8:cf:d7:8c:a7:ee:d9:91: 55:d4:5e:6d:45:b0:d4:5b:59:f2:4f:99:0b:89:9f: b3:29:6f:39:be:ea:36:ec:ce:1c:ce:6d:54:ef:38: 07:31:c6:bb:1d:c5:1b:f5:4e:03:45:b4:0d:b2:06: 91:20:b7:8e:f3:47:a8:79:28:00:6f:e0:53:36:a0: 6e:81:ea:7a:9e:1b:2f:c6:81:08:b0:9f:bb:bb:e3: c0:69:e8:b5:d5:85:c2:ea:f4:5f:2f:2f:3e:c3:42: f1:2e:d9:de:08:8a:dc:4a:0c:18:79:b9:bc:34:7d: 3a:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:A6:12:86:2A:04:CA:21:40:18:29:90:1A:3D:BB:98:AE:AF:67:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cfc353a4-13c4-3131-8c52-c9b37f1b6b0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.197.146.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:89:d3:80:60:41:62:23:43:89:d2:d0:3b:9a:0f:73:6e:d7: 14:2a:dc:78:7f:23:bf:d2:5d:48:88:8c:a3:51:28:2b:fb:5d: 54:62:d8:78:86:0c:ab:b9:a1:40:7b:91:ee:fb:01:97:74:29: 12:fc:d4:50:3d:c1:90:6f:2c:0c:6b:26:2a:b3:9a:82:93:8f: 7f:2a:07:a7:8f:2c:d5:dd:3b:f5:4e:80:e2:6f:9a:d3:0c:c5: 7a:cb:ec:59:7d:be:8e:cc:a3:04:02:dc:5f:ac:b1:3c:b1:69: ed:9a:58:8c:50:d9:f3:18:19:30:22:18:92:eb:67:fa:f1:16: 5b:0a:c4:8f:66:46:a0:ec:80:c9:f3:76:05:24:dd:a0:b0:d0: 80:e8:67:21:e6:47:61:91:97:d7:3d:0a:9d:fd:81:86:17:b7: 29:b5:10:c3:a8:f4:15:17:0e:c5:7d:9a:11:77:45:5c:62:51: 22:01:1c:ea:05:92:7e:13:3c:e0:fa:13:57:a2:81:97:bd:07: 20:5a:f6:2c:ae:cb:f9:b0:8a:bf:64:59:ac:cd:fc:fc:b3:95: 66:c2:77:85:5e:db:10:c6:64:1f:db:bc:04:08:83:75:10:15: 92:05:b9:14:43:5e:38:33:5c:51:28:cc:dc:f5:e6:15:68:65: 75:f2:8b:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEexpfqNuETNd9YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk YmVhMWM0NTgtOGI2NS00MzMyLWIxODMtNDM0YTk4NmY4MjRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsFuQepGtNkxvrHjQfBTi809sh6yUnpqYfcj +KKqBUN+9sz6KqvYSEtcSWCKM1F0PvdEhxCnoj5MXOkEXpEKfW4gfvXCcxA/G/HX ZkZsYj2Fs2eUdMjEAS5rLuHe79lwoe5Cb+sKXn0TH5XV7WbwhG8NnytC3wltaET4 O+fTCpRTiT1i0Z2T39zUPcdxyM/XjKfu2ZFV1F5tRbDUW1nyT5kLiZ+zKW85vuo2 7M4czm1U7zgHMca7HcUb9U4DRbQNsgaRILeO80eoeSgAb+BTNqBugep6nhsvxoEI sJ+7u+PAaei11YXC6vRfLy8+w0LxLtneCIrcSgwYebm8NH06qwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHCmEoYqBMohQBgpkBo9u5iur2fwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvY2ZjMzUzYTQtMTNjNC0z MTMxLThjNTItYzliMzdmMWI2YjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8WSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFiJ04BgQWIjQ4nS0DuaD3Nu1xQq3Hh/I7/SXUiIjKNRKCv7XVRi2HiG DKu5oUB7ke77AZd0KRL81FA9wZBvLAxrJiqzmoKTj38qB6ePLNXdO/VOgOJvmtMM xXrL7Fl9vo7MowQC3F+ssTyxae2aWIxQ2fMYGTAiGJLrZ/rxFlsKxI9mRqDsgMnz dgUk3aCw0IDoZyHmR2GRl9c9Cp39gYYXtym1EMOo9BUXDsV9mhF3RVxiUSIBHOoF kn4TPOD6E1eigZe9ByBa9iyuy/mwir9kWazN/PyzlWbCd4Ve2xDGZB/bvAQIg3UQ FZIFuRRDXjgzXFEozNz15hVoZXXyixY= -----END CERTIFICATE-----Generated at Sat Jul 26 00:03:20 2025 by rpki-client