$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/bcc973e1-9d01-3d4e-85af-27d694043429.roa File: bcc973e1-9d01-3d4e-85af-27d694043429.roa (raw, json) Hash identifier: MzRwJfIqmBgo9/Z3cj17Bf+H3zv+8JnMfU/+5CZUdrc= Subject key identifier: 05:00:54:99:87:E7:73:10:1E:CA:5E:0C:E2:56:E2:48:15:D3:93:3F Certificate issuer: /CN=96aa12fd-20f6-4f37-aab7-a27391ae096e Certificate serial: 010D0C9F4328584B0746BBC3823D76CD0575E080 Authority key identifier: 64:2E:31:9D:C5:17:1B:E0:F6:CD:30:94:51:D8:10:99:B1:1D:AE:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/bcc973e1-9d01-3d4e-85af-27d694043429.roa Signing time: Sat 30 Aug 2025 13:00:42 +0000 ROA not before: Sat 30 Aug 2025 13:00:42 +0000 ROA not after: Fri 28 Nov 2025 14:00:42 +0000 asID: 396982 IP address blocks: 199.47.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/96aa12fd-20f6-4f37-aab7-a27391ae096e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/96aa12fd-20f6-4f37-aab7-a27391ae096e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:07:46:bb:c3:82:3d:76:cd:05:75:e0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96aa12fd-20f6-4f37-aab7-a27391ae096e Validity Not Before: Aug 30 13:00:42 2025 GMT Not After : Nov 28 14:00:42 2025 GMT Subject: CN=fb4e2f0f-9c71-47f2-b52a-1f9e223c1538 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:61:c3:9a:c6:9a:08:d4:93:04:25:20:7d:1b: a4:a2:d6:30:1a:7d:2c:4c:e6:a5:5c:00:dc:d4:8a: bc:88:a4:b0:17:73:0c:6c:11:f2:43:a3:4f:31:b7: be:e4:f1:60:95:d1:d0:f2:e7:25:7d:51:ed:0a:27: ab:c8:f3:3b:a0:4e:dc:5f:23:e4:07:00:16:6d:9e: 89:d4:72:58:36:e2:cc:48:46:88:b9:e7:73:48:43: c7:c8:c2:0d:64:83:79:5a:a8:d7:8d:9e:24:45:c7: de:22:ba:2e:e6:ea:6b:64:5f:35:6a:a3:b1:f0:b5: 0f:1b:33:cf:9f:0a:7d:af:4b:01:2f:66:63:40:47: 18:58:14:c5:95:66:ac:27:c0:7e:54:56:c9:29:1b: 72:08:bf:11:19:5b:ad:37:71:27:fa:f7:1f:b8:25: a7:fe:bc:cf:0d:22:02:77:2b:48:76:ca:d0:c7:8c: be:7f:29:eb:65:a4:5c:a0:f4:55:eb:59:2e:e7:54: 2e:e5:ad:e4:34:36:75:ca:41:20:86:ad:49:bc:eb: 65:7d:ef:aa:46:f0:c4:96:65:33:24:4e:86:0c:af: a9:32:bf:32:7b:0b:80:78:6c:52:89:77:08:85:d3: e1:b9:6e:18:53:55:1c:70:71:8b:f2:58:2b:31:4a: 0f:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:00:54:99:87:E7:73:10:1E:CA:5E:0C:E2:56:E2:48:15:D3:93:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/bcc973e1-9d01-3d4e-85af-27d694043429.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/96aa12fd-20f6-4f37-aab7-a27391ae096e.crl X509v3 Authority Key Identifier: keyid:64:2E:31:9D:C5:17:1B:E0:F6:CD:30:94:51:D8:10:99:B1:1D:AE:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e.cer sbgp-ipAddrBlock: critical IPv4: 199.47.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:eb:29:6c:e3:70:3d:6b:cb:d1:b6:d5:1c:d5:c2:0f:24:45: 1b:2b:b3:e2:75:a7:4c:23:29:49:a6:97:19:eb:74:c4:65:fa: 29:c2:88:79:65:5c:72:c8:b7:26:f0:96:a5:86:ac:fd:16:10: 99:0d:f4:da:65:49:ad:fb:bb:9a:5b:eb:dc:27:bc:fb:9b:73: a5:ce:3c:18:03:08:76:8d:1f:c1:9e:06:99:97:ff:8c:71:87: d0:6f:01:c3:b4:3b:d1:bf:0d:8a:bf:fa:86:6e:08:59:86:65: 54:a8:55:bd:f0:ef:b0:a4:8f:6d:9e:ae:12:8c:5c:91:7b:ca: 64:7b:34:5b:6f:a8:7f:a4:2f:41:1f:17:8b:d6:7b:dd:12:9f: 24:67:98:c4:62:c9:fb:77:81:d4:8d:49:28:32:4f:05:c0:3a: 62:ed:31:ee:e7:0e:6f:aa:d4:8d:29:bb:1f:16:00:3a:4f:10: b3:78:4c:c5:55:0f:f7:d1:d5:88:62:db:c3:b4:ba:23:9e:92: 92:2b:dd:f1:f6:5a:6b:da:d2:f4:ef:54:aa:f8:58:bb:1d:e4: 92:59:ef:d8:52:c1:1e:f9:3a:66:16:9b:15:27:35:b2:b6:e7: b1:c5:80:74:87:ad:86:42:3d:46:54:8a:46:58:16:ac:04:29: 57:e1:df:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsHRrvDgj12zQV14IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTZhYTEyZmQtMjBmNi00ZjM3LWFhYjctYTI3MzkxYWUw OTZlMB4XDTI1MDgzMDEzMDA0MloXDTI1MTEyODE0MDA0MlowLzEtMCsGA1UEAxMk ZmI0ZTJmMGYtOWM3MS00N2YyLWI1MmEtMWY5ZTIyM2MxNTM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2HDmsaaCNSTBCUgfRukotYwGn0sTOalXADc 1Iq8iKSwF3MMbBHyQ6NPMbe+5PFgldHQ8uclfVHtCieryPM7oE7cXyPkBwAWbZ6J 1HJYNuLMSEaIuedzSEPHyMINZIN5WqjXjZ4kRcfeIrou5uprZF81aqOx8LUPGzPP nwp9r0sBL2ZjQEcYWBTFlWasJ8B+VFbJKRtyCL8RGVutN3En+vcfuCWn/rzPDSIC dytIdsrQx4y+fynrZaRcoPRV61ku51Qu5a3kNDZ1ykEghq1JvOtlfe+qRvDElmUz JE6GDK+pMr8yewuAeGxSiXcIhdPhuW4YU1UccHGL8lgrMUoPgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAUAVJmH53MQHspeDOJW4kgV05M/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS85NmFh MTJmZC0yMGY2LTRmMzctYWFiNy1hMjczOTFhZTA5NmUvYmNjOTczZTEtOWQwMS0z ZDRlLTg1YWYtMjdkNjk0MDQzNDI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvOTZhYTEyZmQtMjBmNi00ZjM3LWFh YjctYTI3MzkxYWUwOTZlLzk2YWExMmZkLTIwZjYtNGYzNy1hYWI3LWEyNzM5MWFl MDk2ZS5jcmwwHwYDVR0jBBgwFoAUZC4xncUXG+D2zTCUUdgQmbEdrl8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS85NmFhMTJmZC0yMGY2LTRmMzctYWFiNy1hMjcz OTFhZTA5NmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxy9sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADLrKWzjcD1ry9G21RzVwg8kRRsrs+J1p0wjKUmmlxnrdMRl+inCiHll XHLItybwlqWGrP0WEJkN9NplSa37u5pb69wnvPubc6XOPBgDCHaNH8GeBpmX/4xx h9BvAcO0O9G/DYq/+oZuCFmGZVSoVb3w77Ckj22erhKMXJF7ymR7NFtvqH+kL0Ef F4vWe90SnyRnmMRiyft3gdSNSSgyTwXAOmLtMe7nDm+q1I0pux8WADpPELN4TMVV D/fR1Yhi28O0uiOekpIr3fH2Wmva0vTvVKr4WLsd5JJZ79hSwR75OmYWmxUnNbK2 57HFgHSHrYZCPUZUikZYFqwEKVfh3+s= -----END CERTIFICATE-----Generated at Fri Oct 10 21:07:00 2025 by rpki-client