$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b23d8920-fb36-3e67-9eaf-42bcfd43f71f.roa File: b23d8920-fb36-3e67-9eaf-42bcfd43f71f.roa (raw, json) Hash identifier: AejMWGOBjcDwtXBy1Sd8SYQiF+RQqrpaAOpLqng1cNw= Subject key identifier: 2A:09:B9:F3:6B:E1:A6:B8:DF:5A:CF:B3:84:05:39:C6:BD:D1:4A:25 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A84119818173335D886937940 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b23d8920-fb36-3e67-9eaf-42bcfd43f71f.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 40306 IP address blocks: 99.196.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:98:18:17:33:35:d8:86:93:79:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=86c8fea6-0349-4325-8db7-99dbccbd3ff7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f5:72:9b:6c:ae:ce:b6:b0:9b:78:95:19:b4: 7b:0d:d2:d9:2a:37:bc:3b:7e:39:5d:1a:39:4a:a4: 72:a3:4a:4f:0e:45:8d:da:54:2a:b6:28:99:32:ac: 82:3a:ee:d5:ed:73:7a:75:12:9d:58:6a:c7:db:44: 1e:05:57:19:54:d0:82:02:37:2c:e8:3e:f4:b2:c7: 0f:69:e5:5b:ed:ef:0a:0e:34:74:b8:6e:67:51:c9: 84:7d:48:d3:75:ad:d0:23:18:ef:94:01:f3:91:a9: c5:b6:76:a8:10:fc:75:15:42:7a:9d:57:9c:49:3d: b6:79:82:5f:0f:a7:bc:45:b9:0a:0f:c3:bf:91:b0: b7:ee:0f:ad:79:b6:5f:dd:ef:3e:21:09:c8:28:2b: 19:be:77:1e:65:b2:54:17:f6:f6:a0:9b:ee:ea:b6: 23:5b:65:81:ad:a5:f0:c7:e8:b8:72:b2:c9:1b:87: 6d:f4:41:ec:1d:d5:3d:39:58:72:f3:ac:93:c3:a6: 2a:f1:06:02:f2:da:80:29:06:51:0d:fa:65:89:cc: f5:0d:02:12:a6:33:80:f7:74:ab:3f:39:79:e0:68: 1e:d6:5e:7d:7a:56:c1:13:11:e4:ea:d0:03:cf:cc: c6:17:8f:5a:1c:f5:fc:15:df:e7:15:15:de:d5:39: 72:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:09:B9:F3:6B:E1:A6:B8:DF:5A:CF:B3:84:05:39:C6:BD:D1:4A:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b23d8920-fb36-3e67-9eaf-42bcfd43f71f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.196.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c8:a9:ad:3b:79:a5:e8:88:84:c5:f6:df:7f:3e:a7:70:f6:38: 34:fa:8d:7b:1b:3b:53:d0:2a:de:2d:dc:b1:dc:92:f9:a3:33: b2:6f:8a:20:ef:d2:21:da:43:88:c7:eb:43:f7:5d:65:51:c2: 55:ea:46:56:7e:1d:27:be:c1:aa:46:72:2f:ff:75:04:71:ab: 96:b2:a6:aa:e3:25:e1:c1:02:a2:e7:f2:d5:d3:f8:32:47:5c: e7:e5:9e:04:fd:7b:cc:3f:99:2e:4a:8c:f2:25:20:7c:38:24: fa:06:4e:94:78:6b:01:b8:a3:7a:49:2b:92:dd:a7:cc:d7:52: 25:6c:55:88:5f:31:a5:4a:cf:82:da:17:4d:0b:06:46:4a:1e: 47:80:05:d2:50:1b:a2:89:88:f1:df:1d:9d:ea:b5:ec:a9:cc: 16:12:76:aa:92:d6:a1:54:d4:0b:2a:a9:01:f6:c9:35:72:30: af:a2:74:d7:32:6b:00:a9:ef:a6:f6:f2:56:22:e9:c8:b2:61: 25:ef:db:1b:20:ff:86:c1:ef:03:b8:04:c0:87:d0:04:31:ad: 53:7c:1e:09:ed:fe:60:8e:40:64:db:3d:b2:b9:08:ed:2b:eb: 46:70:bd:8a:32:08:cc:81:1b:df:ff:b9:62:2f:dd:f1:76:9d: 38:57:4d:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEZgYFzM12IaTeUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk ODZjOGZlYTYtMDM0OS00MzI1LThkYjctOTlkYmNjYmQzZmY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfVym2yuzrawm3iVGbR7DdLZKje8O345XRo5 SqRyo0pPDkWN2lQqtiiZMqyCOu7V7XN6dRKdWGrH20QeBVcZVNCCAjcs6D70sscP aeVb7e8KDjR0uG5nUcmEfUjTda3QIxjvlAHzkanFtnaoEPx1FUJ6nVecST22eYJf D6e8RbkKD8O/kbC37g+tebZf3e8+IQnIKCsZvnceZbJUF/b2oJvu6rYjW2WBraXw x+i4crLJG4dt9EHsHdU9OVhy86yTw6Yq8QYC8tqAKQZRDfplicz1DQISpjOA93Sr Pzl54Gge1l59elbBExHk6tADz8zGF49aHPX8Fd/nFRXe1TlynQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCoJufNr4aa431rPs4QFOca90UolMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYjIzZDg5MjAtZmIzNi0z ZTY3LTllYWYtNDJiY2ZkNDNmNzFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCY8R4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMiprTt5peiIhMX2338+p3D2ODT6jXsbO1PQKt4t3LHckvmjM7JviiDv 0iHaQ4jH60P3XWVRwlXqRlZ+HSe+wapGci//dQRxq5aypqrjJeHBAqLn8tXT+DJH XOflngT9e8w/mS5KjPIlIHw4JPoGTpR4awG4o3pJK5Ldp8zXUiVsVYhfMaVKz4La F00LBkZKHkeABdJQG6KJiPHfHZ3qteypzBYSdqqS1qFU1AsqqQH2yTVyMK+idNcy awCp76b28lYi6ciyYSXv2xsg/4bB7wO4BMCH0AQxrVN8Hgnt/mCOQGTbPbK5CO0r 60ZwvYoyCMyBG9//uWIv3fF2nThXTdg= -----END CERTIFICATE-----Generated at Wed Aug 6 18:44:17 2025 by rpki-client