$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f4afae56-3009-3741-963c-1aa30325339f.roa File: f4afae56-3009-3741-963c-1aa30325339f.roa (raw, json) Hash identifier: jJeDrU8ER0p7/7GxcSpOoq1GW11Q5Dd+Kv9kcfFIy90= Subject key identifier: E0:CC:93:45:3E:A7:31:66:E5:67:E7:25:96:2A:72:71:F5:4E:56:95 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A8411E962D39A29C578AE7300 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f4afae56-3009-3741-963c-1aa30325339f.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 99.197.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:e9:62:d3:9a:29:c5:78:ae:73:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=4a94c9d0-691c-41ae-87f5-85b9346a5bdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:85:47:5a:d7:28:e4:83:8c:8f:10:b4:40:5e: 94:b9:d6:22:d0:c0:f3:5c:95:b6:d4:7d:e4:0e:0e: a8:89:81:9e:0b:43:9d:1f:54:9e:2b:8e:45:1f:5a: 4e:dd:c9:a9:56:f1:08:be:5b:a4:8e:22:7a:6f:f9: 7a:b4:79:4a:89:ea:16:3f:7a:41:d8:9c:5e:49:91: 08:bf:4c:7c:26:7b:e9:be:ae:73:10:fa:72:90:b3: a0:c0:25:6a:23:8e:ec:cc:fb:65:92:f4:d1:63:80: 84:43:50:5e:99:f0:92:c9:d5:3c:6e:b8:ea:1a:45: c0:85:f9:f8:31:d8:0a:a7:43:ab:9e:32:8b:b2:4b: 0a:9f:93:9e:b9:58:2f:08:f4:1d:98:8e:25:08:62: ef:4d:2e:6f:3a:59:2f:51:9d:d0:12:f3:35:93:45: 56:12:ce:76:5a:4f:8a:98:da:f3:48:80:5d:72:ba: 72:89:11:8e:04:7b:4f:49:a8:d8:61:24:f9:0a:f5: 9c:9a:b2:58:3a:9e:8a:68:1d:4f:80:b0:42:01:84: af:c6:90:6c:b9:68:73:28:ec:94:09:2f:86:b7:90: a7:17:10:38:3d:1b:7a:e6:c7:51:1e:25:9c:9b:16: cd:0e:3a:13:68:3d:cb:b3:17:df:a8:8e:3d:5a:33: 43:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:CC:93:45:3E:A7:31:66:E5:67:E7:25:96:2A:72:71:F5:4E:56:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f4afae56-3009-3741-963c-1aa30325339f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.197.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:77:59:f6:f3:ab:cd:8f:d4:19:07:6f:5e:73:a8:08:43:13: d0:3e:90:7f:11:f4:03:4c:36:3e:00:69:72:14:a8:01:43:23: 50:2f:a8:3e:1a:b7:f8:c1:c3:f5:7a:5a:ea:ef:02:c8:60:12: 8c:2d:c1:fb:02:6b:d2:51:ec:ae:56:a9:e5:67:93:92:1d:e8: 40:a4:ec:19:c2:2e:b9:ed:99:6c:be:1d:ac:69:58:0c:c8:03: 3d:db:2b:77:60:3e:61:23:25:fe:07:40:0a:be:b1:5f:c4:b8: 5b:e9:b0:c5:21:a0:f2:ca:0e:53:a4:af:91:42:3d:e0:ee:1d: 31:ad:23:3b:b5:d7:1a:94:98:a9:11:d7:9d:c0:e8:7a:37:7e: 5b:6e:e9:a2:87:b5:4e:26:ba:a0:18:62:15:71:cc:f0:20:41: 47:3a:2b:a1:36:0e:1e:69:d1:51:04:bd:10:e6:40:f0:a6:6a: 99:e5:d2:7b:23:db:fc:41:57:09:b7:00:8a:13:c1:ac:9b:d8: ac:e5:52:38:36:14:b9:26:5e:bc:52:d0:32:0b:57:8f:6a:ff: 5d:c5:7c:05:8d:90:c9:0f:eb:42:7a:2f:2a:d9:c5:a9:c3:5a: 4f:0c:f9:8e:f3:bd:e0:30:77:66:aa:d8:6e:6d:be:32:6b:a5: 05:e5:12:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEeli05opxXiucwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk NGE5NGM5ZDAtNjkxYy00MWFlLTg3ZjUtODViOTM0NmE1YmRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyoVHWtco5IOMjxC0QF6UudYi0MDzXJW21H3k Dg6oiYGeC0OdH1SeK45FH1pO3cmpVvEIvlukjiJ6b/l6tHlKieoWP3pB2JxeSZEI v0x8Jnvpvq5zEPpykLOgwCVqI47szPtlkvTRY4CEQ1BemfCSydU8brjqGkXAhfn4 MdgKp0OrnjKLsksKn5OeuVgvCPQdmI4lCGLvTS5vOlkvUZ3QEvM1k0VWEs52Wk+K mNrzSIBdcrpyiRGOBHtPSajYYST5CvWcmrJYOp6KaB1PgLBCAYSvxpBsuWhzKOyU CS+Gt5CnFxA4PRt65sdRHiWcmxbNDjoTaD3LsxffqI49WjNDuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFODMk0U+pzFm5WfnJZYqcnH1TlaVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZjRhZmFlNTYtMzAwOS0z NzQxLTk2M2MtMWFhMzAzMjUzMzlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8U0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAp3Wfbzq82P1BkHb15zqAhDE9A+kH8R9ANMNj4AaXIUqAFDI1AvqD4a t/jBw/V6WurvAshgEowtwfsCa9JR7K5WqeVnk5Id6ECk7BnCLrntmWy+HaxpWAzI Az3bK3dgPmEjJf4HQAq+sV/EuFvpsMUhoPLKDlOkr5FCPeDuHTGtIzu11xqUmKkR 153A6Ho3fltu6aKHtU4muqAYYhVxzPAgQUc6K6E2Dh5p0VEEvRDmQPCmapnl0nsj 2/xBVwm3AIoTwayb2KzlUjg2FLkmXrxS0DILV49q/13FfAWNkMkP60J6LyrZxanD Wk8M+Y7zveAwd2aq2G5tvjJrpQXlEn8= -----END CERTIFICATE-----Generated at Sat Jul 26 11:52:26 2025 by rpki-client