$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/561f4af7-5a9f-37f0-b503-ec071712cfe7.roa File: 561f4af7-5a9f-37f0-b503-ec071712cfe7.roa (raw, json) Hash identifier: ZVlr2TNP8HdOumGbswTpQQdJU/iiH3TwikVPpjEzedI= Subject key identifier: 0A:77:41:25:DC:6F:32:52:58:67:5A:4E:50:74:4C:8E:16:3C:DE:07 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CDC5E7AFDB4AD40CC88240 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/561f4af7-5a9f-37f0-b503-ec071712cfe7.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 99.197.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:c5:e7:af:db:4a:d4:0c:c8:82:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=cea810df-f439-4294-949a-e5dda7e34d3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:e9:b5:80:46:ce:ce:91:ef:bd:4c:6e:ed:10: 41:86:f9:d1:4e:f5:d1:b9:96:9a:de:a7:38:b9:b9: 1a:72:67:88:6b:6d:31:16:0a:b8:51:ac:e1:ac:f9: 1c:db:67:d7:62:dd:c8:a4:a6:1d:9c:7e:66:05:ec: 08:50:40:ec:af:a4:95:8e:a4:f6:ef:a1:55:72:b6: 20:84:a4:44:d8:51:e8:2b:da:7c:48:e2:77:63:da: 5a:48:69:bc:6f:34:06:43:a6:5e:c8:c2:f6:1e:6f: cd:ea:7e:dd:4a:5b:83:92:5b:63:07:12:6f:39:68: 91:a0:7f:27:e6:93:99:0c:d9:d1:a3:bf:4a:77:9d: 17:8b:0f:10:77:a3:6e:f4:a4:57:a3:f3:0f:28:f7: c4:71:79:6d:4f:ce:f9:c9:77:d9:88:58:30:6c:ec: 97:41:34:23:c8:64:03:68:57:a7:81:27:18:57:7e: ab:95:d9:67:05:d5:32:31:50:c9:d4:a6:4f:d7:33: 71:2e:58:5e:cf:3c:f0:1a:c2:6d:db:95:84:34:a0: 40:3f:28:46:38:87:71:3c:c1:fb:6f:7a:ab:8a:a4: 53:24:c8:f8:e1:28:7e:7f:68:29:23:64:a8:22:4a: 4a:59:2c:77:70:e4:18:c4:de:1f:85:29:4b:e8:80: 7c:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:77:41:25:DC:6F:32:52:58:67:5A:4E:50:74:4C:8E:16:3C:DE:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/561f4af7-5a9f-37f0-b503-ec071712cfe7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.197.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:39:3f:c0:a7:7c:41:d4:d5:05:b5:2d:c3:0a:d7:16:f8:83: 3b:40:0a:64:66:f7:14:c8:42:a8:17:dd:8d:f8:20:c1:1f:14: e1:2d:2e:a7:89:7a:ab:d5:20:04:6f:61:b0:6b:77:c6:a8:aa: 65:da:6c:ae:46:9b:46:d2:1e:38:a3:ad:b7:27:9c:80:3d:48: e0:89:16:e8:d7:6a:18:d5:7c:24:33:a0:e9:39:b3:eb:49:ce: 4e:bb:68:d6:e8:b2:49:52:e4:64:90:12:27:ef:cd:ae:25:78: 6c:a5:82:05:ca:8c:b0:9f:21:75:02:45:83:30:d6:71:0d:84: aa:e8:ec:15:ef:77:0e:8e:7b:97:4d:9e:e0:d3:fd:23:3b:4b: 5a:d8:11:42:9f:b2:e3:ac:3f:3a:ce:09:dc:8a:58:ca:6f:94: aa:3b:81:fa:42:42:87:75:37:8f:c2:ba:fd:1a:c8:07:b5:36: 9c:53:cb:fb:48:e2:b4:3a:bb:94:7d:35:d1:a8:22:9c:55:0d: c6:43:1f:3a:04:88:eb:95:72:fb:42:09:b7:6a:b0:d2:75:03: d7:2c:26:53:31:56:a4:0b:d9:e3:05:9e:43:b0:78:a5:27:c9: f4:90:6c:9b:c0:94:bb:57:dd:07:6c:94:96:58:b7:61:0f:3f: 66:49:ed:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzcXnr9tK1AzIgkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk Y2VhODEwZGYtZjQzOS00Mjk0LTk0OWEtZTVkZGE3ZTM0ZDNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlum1gEbOzpHvvUxu7RBBhvnRTvXRuZaa3qc4 ubkacmeIa20xFgq4UazhrPkc22fXYt3IpKYdnH5mBewIUEDsr6SVjqT276FVcrYg hKRE2FHoK9p8SOJ3Y9paSGm8bzQGQ6ZeyML2Hm/N6n7dSluDkltjBxJvOWiRoH8n 5pOZDNnRo79Kd50Xiw8Qd6Nu9KRXo/MPKPfEcXltT875yXfZiFgwbOyXQTQjyGQD aFengScYV36rldlnBdUyMVDJ1KZP1zNxLlhezzzwGsJt25WENKBAPyhGOIdxPMH7 b3qriqRTJMj44Sh+f2gpI2SoIkpKWSx3cOQYxN4fhSlL6IB8CwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAp3QSXcbzJSWGdaTlB0TI4WPN4HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNTYxZjRhZjctNWE5Zi0z N2YwLWI1MDMtZWMwNzE3MTJjZmU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8XsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG45P8CnfEHU1QW1LcMK1xb4gztACmRm9xTIQqgX3Y34IMEfFOEtLqeJ eqvVIARvYbBrd8aoqmXabK5Gm0bSHjijrbcnnIA9SOCJFujXahjVfCQzoOk5s+tJ zk67aNbosklS5GSQEifvza4leGylggXKjLCfIXUCRYMw1nENhKro7BXvdw6Oe5dN nuDT/SM7S1rYEUKfsuOsPzrOCdyKWMpvlKo7gfpCQod1N4/Cuv0ayAe1NpxTy/tI 4rQ6u5R9NdGoIpxVDcZDHzoEiOuVcvtCCbdqsNJ1A9csJlMxVqQL2eMFnkOweKUn yfSQbJvAlLtX3QdslJZYt2EPP2ZJ7eo= -----END CERTIFICATE-----Generated at Sun Oct 26 12:04:11 2025 by rpki-client