$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/90de3f14-232c-3342-94f7-6cd2964a2e21.roa File: 90de3f14-232c-3342-94f7-6cd2964a2e21.roa (raw, json) Hash identifier: seIMziVOY47OYfdEy8JvNMIpxiABjHouJwvBf5Qt9dI= Subject key identifier: 1F:F1:42:CF:18:A9:51:67:E2:82:56:C2:29:FF:45:A8:84:73:C6:C3 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CDC23A15FFE6E23A3E4380 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/90de3f14-232c-3342-94f7-6cd2964a2e21.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 99.197.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:c2:3a:15:ff:e6:e2:3a:3e:43:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=ff1fdd83-0b8f-4109-8db0-55f01459a285 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ca:f1:24:9d:c0:83:ea:5e:19:3d:7a:34:89: 18:75:2c:2e:92:45:04:e2:19:88:cd:f8:bf:bb:7b: b5:41:ee:4b:9c:f8:bb:b6:92:ee:c6:d1:c4:7c:75: 33:5f:3a:3c:26:b5:fa:a2:26:2d:6f:dc:25:d6:b8: ea:ea:3a:8b:9d:ec:85:f1:56:32:08:b2:bd:7e:11: 9b:63:f5:10:ef:7f:8d:08:1c:5b:b2:f3:1e:68:a7: c3:bb:4c:ab:f5:5c:4f:34:08:1f:f4:eb:34:4b:9d: f7:3c:d5:04:45:30:cb:14:ae:e8:de:4d:0e:47:62: 22:8b:a9:ca:77:5c:68:5c:6a:eb:3d:b3:d5:1e:39: 0d:06:57:44:b2:99:25:c9:85:5c:b8:2f:1a:0e:f8: 9d:8a:d6:f2:04:16:d1:cf:2b:fb:9e:9b:08:f9:b0: 3f:36:eb:bf:1e:d7:73:61:e3:09:a8:05:88:98:da: 34:f4:9d:01:e1:00:13:35:51:2e:78:98:00:4c:b0: 4b:5e:92:cd:0c:9e:b6:8a:ca:02:88:17:ae:8d:f6: 81:35:f5:db:5d:76:1d:b9:5a:28:a7:dc:38:03:97: 7d:92:11:f8:3c:cb:dd:f7:04:9b:96:0b:a1:f2:9d: ad:ca:ff:d5:c3:ab:04:ba:77:e9:b0:49:d7:88:e8: ff:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:F1:42:CF:18:A9:51:67:E2:82:56:C2:29:FF:45:A8:84:73:C6:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/90de3f14-232c-3342-94f7-6cd2964a2e21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.197.134.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:d8:4e:72:bb:13:01:02:bc:56:48:13:ba:a3:14:96:db:7a: 4d:80:c0:ce:d6:7a:93:10:39:ec:97:3a:78:66:32:4f:0f:7c: c6:76:d7:4e:54:89:00:82:90:28:f4:ad:b0:56:05:c1:ac:cd: ed:31:b5:c2:1a:ac:43:8f:aa:31:58:3e:ab:4f:37:ba:c7:d2: 3e:77:b6:c1:8c:7a:45:4b:eb:ff:a6:d7:9b:40:7b:3f:d5:3c: 61:62:78:e8:df:95:3f:65:e5:0b:53:8e:5e:a1:52:bb:50:2e: 00:3b:f1:a0:eb:f7:b8:7a:e2:de:22:62:eb:bf:3f:16:c0:a0: 52:d4:37:23:33:be:0a:91:a3:58:37:b5:2d:24:c5:ef:18:7f: c9:89:73:d8:99:5a:0f:8e:a9:0f:c4:76:f2:9a:d9:83:4b:a9: 9a:72:ea:6a:52:59:95:0e:46:28:84:d6:d0:a8:5a:05:69:9b: 73:96:58:c4:3a:b7:68:aa:b0:a2:1e:47:71:f1:95:63:48:07: ca:31:ea:9d:e8:22:05:0a:25:ad:49:f0:83:d3:93:2e:53:3d: 8a:59:19:19:11:63:31:60:df:a0:bc:82:bb:ba:d5:97:2a:74: e4:dc:be:e0:16:55:11:6e:d2:90:18:e3:aa:19:e9:a1:95:cb: 08:34:26:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzcI6Ff/m4jo+Q4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk ZmYxZmRkODMtMGI4Zi00MTA5LThkYjAtNTVmMDE0NTlhMjg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8rxJJ3Ag+peGT16NIkYdSwukkUE4hmIzfi/ u3u1Qe5LnPi7tpLuxtHEfHUzXzo8JrX6oiYtb9wl1rjq6jqLneyF8VYyCLK9fhGb Y/UQ73+NCBxbsvMeaKfDu0yr9VxPNAgf9Os0S533PNUERTDLFK7o3k0OR2Iii6nK d1xoXGrrPbPVHjkNBldEspklyYVcuC8aDviditbyBBbRzyv7npsI+bA/Nuu/Htdz YeMJqAWImNo09J0B4QATNVEueJgATLBLXpLNDJ62isoCiBeujfaBNfXbXXYduVoo p9w4A5d9khH4PMvd9wSblguh8p2tyv/Vw6sEunfpsEnXiOj/AwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB/xQs8YqVFn4oJWwin/RaiEc8bDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOTBkZTNmMTQtMjMyYy0z MzQyLTk0ZjctNmNkMjk2NGEyZTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8WGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJfYTnK7EwECvFZIE7qjFJbbek2AwM7WepMQOeyXOnhmMk8PfMZ2105U iQCCkCj0rbBWBcGsze0xtcIarEOPqjFYPqtPN7rH0j53tsGMekVL6/+m15tAez/V PGFieOjflT9l5QtTjl6hUrtQLgA78aDr97h64t4iYuu/PxbAoFLUNyMzvgqRo1g3 tS0kxe8Yf8mJc9iZWg+OqQ/EdvKa2YNLqZpy6mpSWZUORiiE1tCoWgVpm3OWWMQ6 t2iqsKIeR3HxlWNIB8ox6p3oIgUKJa1J8IPTky5TPYpZGRkRYzFg36C8gru61Zcq dOTcvuAWVRFu0pAY46oZ6aGVywg0Jg4= -----END CERTIFICATE-----Generated at Sun Oct 26 09:58:16 2025 by rpki-client