$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f71e5e2a-ac0e-3671-ad8a-78791afb4075.roa File: f71e5e2a-ac0e-3671-ad8a-78791afb4075.roa (raw, json) Hash identifier: VWLy5TW+aaty4NiHT1QRJbtwIq/qdH1oIh9HskWMqJA= Subject key identifier: 7F:BE:B6:65:88:12:64:17:32:1D:B3:E7:8A:8E:EE:E5:FF:05:93:CE Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A8411E4EC9507162F825DF2C8 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f71e5e2a-ac0e-3671-ad8a-78791afb4075.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 99.196.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:e4:ec:95:07:16:2f:82:5d:f2:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=7b459070-a934-4f00-aa31-6c0f2a703b92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:6f:4d:c2:63:ac:14:33:d5:89:cc:d8:08:b8: 71:b3:e3:08:a4:5a:38:54:18:ba:66:f2:58:80:7a: e0:7a:7d:72:94:71:9d:0b:d1:16:fe:fb:38:f9:65: 66:26:d8:42:29:ac:e4:fb:6c:90:94:50:9b:3c:90: ab:e0:69:e2:88:7e:04:61:76:b2:4c:2d:61:e4:e2: a5:81:57:36:47:47:a7:45:7f:4c:5a:d4:87:f3:8a: 4c:63:8d:41:d5:b2:58:a7:cf:85:35:11:17:d7:49: 1d:56:27:35:e9:38:27:e5:ec:63:c7:74:f1:6e:3e: 09:cc:f8:e5:d0:c3:4f:8b:3f:ce:3f:da:4e:7c:cc: 5f:b9:0f:f9:47:7f:2d:bd:56:de:06:29:33:7f:9d: 89:31:ba:0a:40:68:db:47:f2:3b:4b:4f:d0:ce:fc: 5f:32:ea:c4:41:e0:b9:23:10:7d:ac:a1:e6:65:6c: ad:c0:80:e0:23:41:5b:01:ba:a8:2f:7e:e5:92:3e: 4b:7a:09:98:98:d3:d7:9d:8e:cf:03:db:08:4e:9d: 48:cc:78:26:2f:e6:1e:18:85:c5:01:ba:bb:12:3f: 05:08:9f:8b:1c:fa:4f:d2:17:08:dc:f5:3a:f4:04: ce:fe:b3:90:61:11:fc:73:13:ff:5a:22:3d:6e:ec: 4e:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:BE:B6:65:88:12:64:17:32:1D:B3:E7:8A:8E:EE:E5:FF:05:93:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f71e5e2a-ac0e-3671-ad8a-78791afb4075.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.196.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:39:7d:04:ae:6f:b7:ae:d6:e6:ba:95:c3:75:16:8d:33:88: c9:82:a4:f6:0e:ad:da:94:6e:e8:38:82:a7:f7:fa:01:53:15: 33:09:22:b6:a1:88:e8:e3:b8:6e:5c:34:d9:fe:74:4a:5c:56: 30:24:80:80:a8:fd:13:45:b6:f5:fc:9d:3d:59:51:46:66:76: 50:3e:7f:80:d3:ad:db:ff:c4:16:7f:6f:d2:a1:6b:98:b9:21: e6:42:b5:59:47:cd:42:ab:04:d4:df:2f:e6:e0:82:6a:fe:ae: a0:2e:a5:fe:9d:c9:68:54:ba:ef:b5:af:9e:31:d9:18:32:3d: 90:b6:91:5a:d8:23:09:20:c9:b5:1a:6a:bb:0e:26:a4:7d:ea: 13:0f:b9:72:84:25:9c:0b:86:2e:95:6c:af:02:71:0f:5b:0f: 72:90:39:39:d8:5e:3d:c2:e6:25:21:57:99:3b:5b:93:a9:1e: 63:76:a9:c7:f4:6e:c3:0f:9d:8d:3a:fd:e3:8e:09:cd:ce:57: 04:fb:10:00:f3:cd:41:6e:17:89:2a:70:a6:c9:11:99:77:b4: 89:af:da:cc:35:1c:90:74:94:f7:b3:72:cb:e5:56:94:31:5f: 0e:53:b5:6f:68:86:b2:24:09:d4:53:1b:65:cc:74:97:1a:92: b0:98:8e:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEeTslQcWL4Jd8sgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk N2I0NTkwNzAtYTkzNC00ZjAwLWFhMzEtNmMwZjJhNzAzYjkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo29NwmOsFDPViczYCLhxs+MIpFo4VBi6ZvJY gHrgen1ylHGdC9EW/vs4+WVmJthCKazk+2yQlFCbPJCr4GniiH4EYXayTC1h5OKl gVc2R0enRX9MWtSH84pMY41B1bJYp8+FNREX10kdVic16Tgn5exjx3Txbj4JzPjl 0MNPiz/OP9pOfMxfuQ/5R38tvVbeBikzf52JMboKQGjbR/I7S0/QzvxfMurEQeC5 IxB9rKHmZWytwIDgI0FbAbqoL37lkj5LegmYmNPXnY7PA9sITp1IzHgmL+YeGIXF Abq7Ej8FCJ+LHPpP0hcI3PU69ATO/rOQYRH8cxP/WiI9buxOxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH++tmWIEmQXMh2z54qO7uX/BZPOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZjcxZTVlMmEtYWMwZS0z NjcxLWFkOGEtNzg3OTFhZmI0MDc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8RoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFM5fQSub7eu1ua6lcN1Fo0ziMmCpPYOrdqUbug4gqf3+gFTFTMJIrah iOjjuG5cNNn+dEpcVjAkgICo/RNFtvX8nT1ZUUZmdlA+f4DTrdv/xBZ/b9Kha5i5 IeZCtVlHzUKrBNTfL+bggmr+rqAupf6dyWhUuu+1r54x2RgyPZC2kVrYIwkgybUa arsOJqR96hMPuXKEJZwLhi6VbK8CcQ9bD3KQOTnYXj3C5iUhV5k7W5OpHmN2qcf0 bsMPnY06/eOOCc3OVwT7EADzzUFuF4kqcKbJEZl3tImv2sw1HJB0lPezcsvlVpQx Xw5TtW9ohrIkCdRTG2XMdJcakrCYjvk= -----END CERTIFICATE-----Generated at Sat Jul 26 11:45:53 2025 by rpki-client