$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fa809409-0782-3bc7-912c-a72823c91156.roa File: fa809409-0782-3bc7-912c-a72823c91156.roa (raw, json) Hash identifier: T52sb9SrpvcUGW+reso+GNrTOm6Db625ZBkLMW5w2bU= Subject key identifier: 17:A5:53:35:1D:E1:DA:98:B8:79:E3:2F:5E:2E:84:C1:C0:67:16:07 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B328C40113913F621D45BB300 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fa809409-0782-3bc7-912c-a72823c91156.roa Signing time: Mon 15 Sep 2025 01:00:33 +0000 ROA not before: Mon 15 Sep 2025 01:00:33 +0000 ROA not after: Sun 14 Dec 2025 02:00:33 +0000 asID: 40306 IP address blocks: 99.196.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:32:8c:40:11:39:13:f6:21:d4:5b:b3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 15 01:00:33 2025 GMT Not After : Dec 14 02:00:33 2025 GMT Subject: CN=3922ff49-0305-4c77-bf7c-a481e8019559 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:de:dd:bf:5c:57:58:ff:de:29:cc:e8:d9:32: a7:07:a6:e7:73:08:c4:1c:f7:6b:dc:0e:ec:03:b9: 21:39:9b:0b:0f:63:92:e3:19:78:8e:11:fb:c0:c2: 3e:bc:10:b8:3d:c9:3b:05:1f:b6:31:57:81:09:ca: 7b:41:4e:6e:06:82:ef:fc:18:e4:da:45:7e:ca:3f: 43:02:1f:af:26:a1:a9:02:09:92:80:59:d3:5b:14: 62:8e:36:4c:ba:b9:09:3d:a8:86:20:57:31:b3:a7: 2f:9e:e2:a4:2e:9b:c9:48:8e:f3:c2:0a:97:91:19: 09:69:a4:d8:6f:43:fe:42:32:4b:83:fa:7a:44:28: 1d:e7:93:72:ad:d6:24:72:6d:3b:2e:e4:4c:ae:e9: 85:7d:3f:c8:81:4e:d3:34:23:01:8c:c5:28:a8:b2: 78:9e:7b:21:a8:30:05:6c:36:c9:f0:49:9f:31:56: 83:8c:0f:2d:f8:de:54:dd:30:14:aa:6e:00:b6:1e: 1b:85:06:d0:2d:75:ca:7b:e7:1c:25:8d:3d:f3:8d: 52:b6:5f:08:4b:fd:53:1e:2d:15:60:e1:4c:4e:54: a5:92:ff:08:77:d4:69:f6:f5:9b:ac:b5:3a:5c:95: 79:a0:9f:fe:2b:8f:22:75:af:50:87:aa:55:9a:e8: 25:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:A5:53:35:1D:E1:DA:98:B8:79:E3:2F:5E:2E:84:C1:C0:67:16:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fa809409-0782-3bc7-912c-a72823c91156.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.196.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:7c:81:26:f9:2d:44:0e:9c:aa:57:06:1e:c9:1b:b6:03:75: c3:dc:2c:e4:05:0e:30:88:60:9f:db:bd:2f:d2:da:d7:01:ff: 6f:a2:34:e9:a9:2b:68:4a:7c:83:85:c6:a4:7d:95:25:f1:84: ad:85:76:ee:3d:2b:ac:ef:3f:60:61:ec:da:6d:9f:8f:fe:53: 09:d3:30:d9:9a:75:07:f9:95:cb:dd:3f:05:be:c2:d0:20:75: 72:bb:a1:ce:78:35:ad:a6:28:6a:6e:da:6d:69:b6:f1:0b:94: 46:c6:0c:d9:f4:c6:aa:b3:3e:72:16:6b:2c:71:e0:e3:f6:ec: 67:20:a1:5a:3b:40:ae:cc:ba:39:8a:75:25:0e:fb:a1:30:a7: 7c:c6:f5:d4:b4:60:4a:cd:35:ad:21:cb:62:83:3e:ad:17:bc: 38:37:b1:58:86:84:04:aa:e9:a0:c2:13:f4:0d:02:2a:3d:aa: 5a:86:ea:af:5c:9c:7e:23:54:44:5e:21:b3:d7:83:cd:2d:a1: a3:6d:d6:f5:d5:04:e7:04:ed:ef:6c:cf:e3:95:26:8c:ef:96: 3a:5e:80:99:46:43:f3:f9:d2:e0:69:29:ec:b1:e7:48:93:5f: 94:f2:f2:93:c7:ee:36:b2:e5:0e:44:f3:90:73:40:df:7e:2d: cd:3a:07:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsyjEARORP2IdRbswAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDkxNTAxMDAzM1oXDTI1MTIxNDAyMDAzM1owLzEtMCsGA1UEAxMk MzkyMmZmNDktMDMwNS00Yzc3LWJmN2MtYTQ4MWU4MDE5NTU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArd7dv1xXWP/eKczo2TKnB6bncwjEHPdr3A7s A7khOZsLD2OS4xl4jhH7wMI+vBC4Pck7BR+2MVeBCcp7QU5uBoLv/Bjk2kV+yj9D Ah+vJqGpAgmSgFnTWxRijjZMurkJPaiGIFcxs6cvnuKkLpvJSI7zwgqXkRkJaaTY b0P+QjJLg/p6RCgd55NyrdYkcm07LuRMrumFfT/IgU7TNCMBjMUoqLJ4nnshqDAF bDbJ8EmfMVaDjA8t+N5U3TAUqm4Ath4bhQbQLXXKe+ccJY09841Stl8IS/1THi0V YOFMTlSlkv8Id9Rp9vWbrLU6XJV5oJ/+K48ida9Qh6pVmugl5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBelUzUd4dqYuHnjL14uhMHAZxYHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZmE4MDk0MDktMDc4Mi0z YmM3LTkxMmMtYTcyODIzYzkxMTU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8SEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAp8gSb5LUQOnKpXBh7JG7YDdcPcLOQFDjCIYJ/bvS/S2tcB/2+iNOmp K2hKfIOFxqR9lSXxhK2Fdu49K6zvP2Bh7Nptn4/+UwnTMNmadQf5lcvdPwW+wtAg dXK7oc54Na2mKGpu2m1ptvELlEbGDNn0xqqzPnIWayxx4OP27GcgoVo7QK7MujmK dSUO+6Ewp3zG9dS0YErNNa0hy2KDPq0XvDg3sViGhASq6aDCE/QNAio9qlqG6q9c nH4jVEReIbPXg80toaNt1vXVBOcE7e9sz+OVJozvljpegJlGQ/P50uBpKeyx50iT X5Ty8pPH7jay5Q5E85BzQN9+Lc06B8w= -----END CERTIFICATE-----Generated at Sat Oct 18 21:07:46 2025 by rpki-client