$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b858aae4-a2d0-3206-926a-11f8600ccc2a.roa File: b858aae4-a2d0-3206-926a-11f8600ccc2a.roa (raw, json) Hash identifier: EUGAVtMt1/9wSV+hzPMkTRjyNeO90ImcCeOXtlML0Zg= Subject key identifier: E0:AF:0F:F4:98:29:F4:FC:DF:CD:69:1A:7B:2C:C0:2F:B5:A3:A1:2C Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A8410FA887F96F4C6EA5AD730 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b858aae4-a2d0-3206-926a-11f8600ccc2a.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 40306 IP address blocks: 99.196.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:10:fa:88:7f:96:f4:c6:ea:5a:d7:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=24a906b1-5660-430d-abb9-9116bbe38cfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:2a:fb:2c:9c:00:b9:9d:52:8f:29:da:27:c0: f7:10:56:ee:fa:b2:5f:30:bf:f3:5c:e3:d4:9f:c5: 10:1c:82:9f:5b:c7:1c:08:54:a2:b4:38:7a:af:f5: e9:c3:32:df:c4:62:61:c6:31:e4:14:23:66:2b:2f: 72:1f:18:ec:d2:ca:a7:ed:23:c1:1d:c3:56:0c:3c: ed:78:2d:74:8d:0e:3a:e3:2a:12:1e:c2:df:9d:2a: 7e:bd:29:f4:f6:99:04:64:6e:93:57:30:e6:1b:08: 16:de:f3:dc:2b:04:51:f0:15:6b:97:d6:95:ab:f2: 18:d7:84:f5:9a:45:dd:e5:4f:94:6c:2c:c6:44:8d: f2:ff:fb:d5:9e:30:4f:a1:43:eb:76:d3:1d:e4:f7: 82:e0:01:fa:6a:d2:00:bd:38:9c:b2:09:df:09:f7: 6a:ff:5c:bc:2c:f8:03:7c:55:33:91:91:7f:49:47: 4e:56:dc:01:40:31:eb:04:74:a1:c6:67:e6:b4:9e: b1:af:a1:77:08:c2:bb:e0:13:25:20:dc:7f:de:62: 15:25:9e:c6:d5:8c:4f:0a:e0:7f:7b:3d:1b:45:af: 12:5c:5a:a8:f6:63:23:ef:ee:97:7b:f8:22:7b:55: 8c:88:3f:58:f3:84:d2:ae:48:21:a6:59:93:b5:8f: 66:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:AF:0F:F4:98:29:F4:FC:DF:CD:69:1A:7B:2C:C0:2F:B5:A3:A1:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b858aae4-a2d0-3206-926a-11f8600ccc2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.196.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:6a:a4:c3:a3:8f:dd:c2:e7:19:11:3c:94:34:b0:92:35:1d: 82:bd:5a:68:1b:90:38:c3:41:e6:75:5f:04:e6:32:d8:49:fb: 9f:b9:19:8d:e1:d9:d2:52:22:25:5b:38:5b:e6:88:bc:06:64: a7:59:08:1e:58:79:3b:c1:53:d3:de:0b:11:58:97:06:af:3c: 0e:b5:3e:96:6b:63:53:ae:4c:b1:2e:38:04:6f:6d:b0:8b:13: ad:66:e9:bd:60:dd:05:6c:a2:ce:09:32:e6:b0:92:3c:0d:02: b5:52:3e:5f:8e:a9:b9:14:36:22:7f:65:13:9d:a7:1b:b9:58: f8:72:d8:77:fc:b2:05:11:cf:aa:7d:3c:e4:08:f5:01:9c:8f: 1b:3a:ca:95:ae:6f:6a:3e:93:91:6a:34:ef:88:72:7b:57:2b: ac:04:54:f2:26:bd:ad:52:f0:ff:20:f7:00:1a:ee:a4:35:75: 27:d5:94:f1:bd:88:f5:a4:6b:88:e8:23:14:1f:70:94:bb:ec: 4d:bf:94:5b:04:ed:d7:00:26:5f:36:16:3f:54:16:92:e7:fd: 76:fe:21:71:36:19:47:71:ec:47:d5:a1:5a:2e:30:ab:db:88: 89:40:36:10:db:53:06:ec:88:f5:d7:fa:87:2f:f1:4b:64:c2: 9c:ee:e9:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEPqIf5b0xupa1zAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MjRhOTA2YjEtNTY2MC00MzBkLWFiYjktOTExNmJiZTM4Y2ZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjyr7LJwAuZ1SjynaJ8D3EFbu+rJfML/zXOPU n8UQHIKfW8ccCFSitDh6r/XpwzLfxGJhxjHkFCNmKy9yHxjs0sqn7SPBHcNWDDzt eC10jQ464yoSHsLfnSp+vSn09pkEZG6TVzDmGwgW3vPcKwRR8BVrl9aVq/IY14T1 mkXd5U+UbCzGRI3y//vVnjBPoUPrdtMd5PeC4AH6atIAvTicsgnfCfdq/1y8LPgD fFUzkZF/SUdOVtwBQDHrBHShxmfmtJ6xr6F3CMK74BMlINx/3mIVJZ7G1YxPCuB/ ez0bRa8SXFqo9mMj7+6Xe/gie1WMiD9Y84TSrkghplmTtY9mUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOCvD/SYKfT8381pGnsswC+1o6EsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYjg1OGFhZTQtYTJkMC0z MjA2LTkyNmEtMTFmODYwMGNjYzJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8R7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL1qpMOjj93C5xkRPJQ0sJI1HYK9WmgbkDjDQeZ1XwTmMthJ+5+5GY3h 2dJSIiVbOFvmiLwGZKdZCB5YeTvBU9PeCxFYlwavPA61PpZrY1OuTLEuOARvbbCL E61m6b1g3QVsos4JMuawkjwNArVSPl+OqbkUNiJ/ZROdpxu5WPhy2Hf8sgURz6p9 POQI9QGcjxs6ypWub2o+k5FqNO+IcntXK6wEVPImva1S8P8g9wAa7qQ1dSfVlPG9 iPWka4joIxQfcJS77E2/lFsE7dcAJl82Fj9UFpLn/Xb+IXE2GUdx7EfVoVouMKvb iIlANhDbUwbsiPXX+ocv8Utkwpzu6YQ= -----END CERTIFICATE-----Generated at Wed Aug 6 16:04:00 2025 by rpki-client