$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b858aae4-a2d0-3206-926a-11f8600ccc2a.roa File: b858aae4-a2d0-3206-926a-11f8600ccc2a.roa (raw, json) Hash identifier: wy3PTipalJSWvlStojw6U0sFxg6pjZRPCd6FQA3bcnY= Subject key identifier: 67:28:38:35:50:8B:AA:1D:5B:D7:60:7E:0C:EB:10:E5:D2:02:E6:C1 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CCC4A940325B6F4762B140 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b858aae4-a2d0-3206-926a-11f8600ccc2a.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 40306 IP address blocks: 99.196.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cc:c4:a9:40:32:5b:6f:47:62:b1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=c3466d70-af8b-41a5-a0da-878122f89d30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:cf:76:f4:ba:a5:bf:86:19:4f:d4:3b:5a:39: 87:98:9f:84:37:f6:44:e9:40:45:e6:7f:4e:92:0b: ab:44:69:68:42:c8:49:a3:89:44:59:48:04:cd:45: cd:94:d1:d6:18:03:7d:e8:c7:8a:a1:86:34:fb:80: 0f:1f:b4:51:ee:36:87:60:76:ae:86:47:e1:be:37: f7:f0:33:50:5c:e9:f0:fa:55:5b:66:98:5d:8b:f0: 5c:20:33:06:e0:50:f6:93:20:77:93:79:7e:56:be: d9:21:74:e1:59:fa:4e:ab:95:ec:07:27:b3:f7:2d: 7b:54:8b:bd:b1:42:fd:68:4a:12:8c:04:ee:81:44: b6:df:8a:8a:d7:e5:da:0e:35:b6:86:05:01:08:53: da:ca:68:14:ae:5d:b0:17:6e:72:6a:95:b3:26:9f: b3:a7:51:14:b4:60:f9:84:be:62:66:89:c4:85:7c: 19:71:ea:2f:8c:e3:cb:3e:e9:a6:0c:bd:60:46:af: a8:8c:f8:4d:5a:99:a4:fa:e3:0d:ed:ea:00:86:5b: 3a:3b:a0:47:7d:2e:ac:e0:77:dc:54:4f:76:9e:d0: 2f:72:28:85:51:cb:7e:0e:ce:d9:77:e8:89:5c:82: 32:02:b5:f0:a8:81:bb:62:1d:4f:70:89:de:6e:16: c8:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:28:38:35:50:8B:AA:1D:5B:D7:60:7E:0C:EB:10:E5:D2:02:E6:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b858aae4-a2d0-3206-926a-11f8600ccc2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.196.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:c7:97:60:fa:63:a3:50:35:4f:c8:35:57:9a:54:4f:80:fc: 7e:29:13:4c:9d:67:94:21:5f:48:77:06:eb:0f:05:35:38:df: 0c:7f:4b:c2:cc:52:d2:43:57:db:da:94:73:bd:52:e3:75:55: 9d:98:df:18:9d:f5:fe:e8:fb:e9:b6:77:e1:34:8d:7f:86:6c: 75:13:ae:f7:38:af:be:c7:24:6a:b5:45:49:f5:03:8a:66:a8: 50:10:fc:b4:a4:0e:12:99:8b:0e:ca:d3:3e:3c:de:8b:2e:57: 3d:48:9b:ed:67:c2:e5:47:13:a7:52:f2:4c:fa:31:e5:ce:c8: c9:ec:bc:a2:50:d7:b6:3d:ab:d0:00:7f:2d:15:0e:de:8d:63: c9:d0:7f:45:30:b2:83:ff:dc:c4:75:6a:e3:f0:55:23:3a:c5: ef:fb:87:5f:3c:3f:20:80:ff:1d:b4:43:8f:65:b0:ac:c6:4b: 61:d2:77:de:72:f6:27:77:d0:bb:63:d2:2a:ea:84:90:20:4f: 7c:14:1a:57:8c:b3:41:a6:29:a4:e8:2d:da:72:ee:f4:59:b1: 6b:09:2b:04:d2:03:7e:76:ae:a6:fa:eb:df:84:96:45:f9:f2: cf:d1:45:66:eb:d4:7a:53:67:d2:cf:52:1b:3a:88:19:0e:f9: 39:1a:a3:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzMSpQDJbb0disUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk YzM0NjZkNzAtYWY4Yi00MWE1LWEwZGEtODc4MTIyZjg5ZDMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnM929Lqlv4YZT9Q7WjmHmJ+EN/ZE6UBF5n9O kgurRGloQshJo4lEWUgEzUXNlNHWGAN96MeKoYY0+4APH7RR7jaHYHauhkfhvjf3 8DNQXOnw+lVbZphdi/BcIDMG4FD2kyB3k3l+Vr7ZIXThWfpOq5XsByez9y17VIu9 sUL9aEoSjATugUS234qK1+XaDjW2hgUBCFPaymgUrl2wF25yapWzJp+zp1EUtGD5 hL5iZonEhXwZceovjOPLPummDL1gRq+ojPhNWpmk+uMN7eoAhls6O6BHfS6s4Hfc VE92ntAvciiFUct+Ds7Zd+iJXIIyArXwqIG7Yh1PcInebhbIYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGcoODVQi6odW9dgfgzrEOXSAubBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYjg1OGFhZTQtYTJkMC0z MjA2LTkyNmEtMTFmODYwMGNjYzJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8R7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG/Hl2D6Y6NQNU/INVeaVE+A/H4pE0ydZ5QhX0h3BusPBTU43wx/S8LM UtJDV9valHO9UuN1VZ2Y3xid9f7o++m2d+E0jX+GbHUTrvc4r77HJGq1RUn1A4pm qFAQ/LSkDhKZiw7K0z483osuVz1Im+1nwuVHE6dS8kz6MeXOyMnsvKJQ17Y9q9AA fy0VDt6NY8nQf0UwsoP/3MR1auPwVSM6xe/7h188PyCA/x20Q49lsKzGS2HSd95y 9id30Ltj0irqhJAgT3wUGleMs0GmKaToLdpy7vRZsWsJKwTSA352rqb669+ElkX5 8s/RRWbr1HpTZ9LPUhs6iBkO+Tkao8A= -----END CERTIFICATE-----Generated at Sat Oct 18 21:07:45 2025 by rpki-client