$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3/4016ef7e-8a77-3f3e-8fa4-7e614db0db74.roa File: 4016ef7e-8a77-3f3e-8fa4-7e614db0db74.roa (raw, json) Hash identifier: BfGHPZ/lpZxotbuU76u5ZttKqlDKcxVmt7wVT3EyIgs= Subject key identifier: 55:FB:00:FD:52:03:4E:26:DE:E1:D4:27:86:F6:5E:A8:4B:06:9D:40 Certificate issuer: /CN=cb0e4e7e-2c75-4541-8d67-ed2543afd5f3 Certificate serial: 010D0C9F4328584AFD43FD3091E7A70FCBD840C0 Authority key identifier: 12:8F:83:F3:B6:50:D2:E5:1F:5D:42:02:A0:55:D6:B2:14:CF:AC:C7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3/4016ef7e-8a77-3f3e-8fa4-7e614db0db74.roa Signing time: Tue 26 Aug 2025 22:57:16 +0000 ROA not before: Tue 26 Aug 2025 22:57:16 +0000 ROA not after: Mon 24 Nov 2025 23:57:16 +0000 asID: 31898 IP address blocks: 199.7.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fd:43:fd:30:91:e7:a7:0f:cb:d8:40:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb0e4e7e-2c75-4541-8d67-ed2543afd5f3 Validity Not Before: Aug 26 22:57:16 2025 GMT Not After : Nov 24 23:57:16 2025 GMT Subject: CN=06949613-9fc6-4496-aae9-a199f1f07787 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:6c:bd:f3:9b:da:b1:fb:b3:72:ff:b9:64:72: 6b:6d:b6:4b:af:15:48:88:1b:d3:23:51:ed:f0:1f: 1d:55:9d:0b:51:44:1a:43:90:c2:ad:d3:75:20:e6: 56:00:07:92:fe:80:68:b9:d5:53:22:4b:f9:fb:c8: fa:d0:19:e3:51:c4:d7:55:5e:95:b2:f6:c2:d9:50: 3d:e3:0f:a2:db:a8:31:ee:12:5c:b9:d1:74:d9:9c: b3:12:06:09:f4:95:8f:35:55:14:ab:05:5b:b3:5b: 50:83:e9:f9:8c:02:d5:66:16:79:1a:80:ae:f4:bd: 60:ea:80:80:03:0a:62:e1:2c:c8:83:96:7c:8b:8e: 8d:67:16:3a:25:a7:fa:7b:e2:93:82:18:0b:75:20: d3:f9:3c:08:2c:20:6d:ba:ea:ed:cd:26:3d:1b:4d: 96:98:17:4f:6f:a8:15:91:a9:95:c8:fd:ee:02:c3: 95:d9:26:d6:49:18:74:b4:eb:e9:00:69:3f:74:32: 02:ac:87:7c:24:de:63:f5:7e:b4:cc:ca:b5:a9:82: c3:7d:a3:98:92:a5:2e:76:32:e1:2d:45:94:ec:eb: 8a:10:c0:10:f1:c9:48:34:16:83:1d:b5:59:c7:82: b8:34:53:b4:5f:39:96:31:3a:70:3d:9d:9a:4e:e1: 1f:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:FB:00:FD:52:03:4E:26:DE:E1:D4:27:86:F6:5E:A8:4B:06:9D:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3/4016ef7e-8a77-3f3e-8fa4-7e614db0db74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3.crl X509v3 Authority Key Identifier: keyid:12:8F:83:F3:B6:50:D2:E5:1F:5D:42:02:A0:55:D6:B2:14:CF:AC:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3.cer sbgp-ipAddrBlock: critical IPv4: 199.7.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:35:79:a5:61:8d:c6:65:9c:2e:b0:d8:1f:c2:a1:4a:23:61: 4c:80:9a:74:33:49:b4:cb:93:43:ec:40:5c:a4:a8:05:7c:85: 1a:8e:c0:17:b3:38:af:23:ea:99:20:c3:f5:2b:94:7a:93:8b: 9d:b5:4d:36:08:0f:b3:0a:fb:e1:88:ba:b0:6c:5b:b8:d1:7a: b8:cf:3b:0c:01:70:c4:9c:8e:fb:3b:0f:d5:b3:6f:7f:f6:f8: f8:27:af:3b:98:60:fc:e6:b7:21:24:6e:88:72:e3:5e:e4:ac: 31:d4:29:cd:f1:51:8f:66:60:66:91:97:6e:be:ba:3a:c6:e0: 22:a6:47:98:a8:c0:14:17:33:27:d3:86:48:e8:5c:97:3f:68: 04:f9:48:0c:75:af:2f:4f:81:5d:2a:bf:16:86:65:f0:d2:45: 06:5c:3e:57:c9:1d:06:a6:f4:88:27:85:c4:bc:0d:c1:88:45: 21:86:f0:4d:7d:fa:1a:88:bb:9e:db:56:4e:a8:e9:96:47:9f: 37:2c:04:97:8d:d2:26:2e:af:c8:7e:69:34:a0:52:56:17:19: fe:0b:af:ae:b4:be:e3:7c:be:d9:01:eb:d1:27:c4:d3:3b:68: e9:cc:96:28:b6:4d:5b:96:3b:48:92:1e:b2:51:d7:ab:e3:78: 1c:ce:b5:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr9Q/0wkeenD8vYQMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2IwZTRlN2UtMmM3NS00NTQxLThkNjctZWQyNTQzYWZk NWYzMB4XDTI1MDgyNjIyNTcxNloXDTI1MTEyNDIzNTcxNlowLzEtMCsGA1UEAxMk MDY5NDk2MTMtOWZjNi00NDk2LWFhZTktYTE5OWYxZjA3Nzg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Wy985vasfuzcv+5ZHJrbbZLrxVIiBvTI1Ht 8B8dVZ0LUUQaQ5DCrdN1IOZWAAeS/oBoudVTIkv5+8j60BnjUcTXVV6VsvbC2VA9 4w+i26gx7hJcudF02ZyzEgYJ9JWPNVUUqwVbs1tQg+n5jALVZhZ5GoCu9L1g6oCA Awpi4SzIg5Z8i46NZxY6Jaf6e+KTghgLdSDT+TwILCBtuurtzSY9G02WmBdPb6gV kamVyP3uAsOV2SbWSRh0tOvpAGk/dDICrId8JN5j9X60zMq1qYLDfaOYkqUudjLh LUWU7OuKEMAQ8clINBaDHbVZx4K4NFO0XzmWMTpwPZ2aTuEfOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFX7AP1SA04m3uHUJ4b2XqhLBp1AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jYjBl NGU3ZS0yYzc1LTQ1NDEtOGQ2Ny1lZDI1NDNhZmQ1ZjMvNDAxNmVmN2UtOGE3Ny0z ZjNlLThmYTQtN2U2MTRkYjBkYjc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvY2IwZTRlN2UtMmM3NS00NTQxLThk NjctZWQyNTQzYWZkNWYzL2NiMGU0ZTdlLTJjNzUtNDU0MS04ZDY3LWVkMjU0M2Fm ZDVmMy5jcmwwHwYDVR0jBBgwFoAUEo+D87ZQ0uUfXUICoFXWshTPrMcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jYjBlNGU3ZS0yYzc1LTQ1NDEtOGQ2Ny1lZDI1 NDNhZmQ1ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwfMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFw1eaVhjcZlnC6w2B/CoUojYUyAmnQzSbTLk0PsQFykqAV8hRqOwBez OK8j6pkgw/UrlHqTi521TTYID7MK++GIurBsW7jRerjPOwwBcMScjvs7D9Wzb3/2 +PgnrzuYYPzmtyEkbohy417krDHUKc3xUY9mYGaRl26+ujrG4CKmR5iowBQXMyfT hkjoXJc/aAT5SAx1ry9PgV0qvxaGZfDSRQZcPlfJHQam9IgnhcS8DcGIRSGG8E19 +hqIu57bVk6o6ZZHnzcsBJeN0iYur8h+aTSgUlYXGf4Lr660vuN8vtkB69EnxNM7 aOnMlii2TVuWO0iSHrJR16vjeBzOtVs= -----END CERTIFICATE-----Generated at Wed Oct 8 21:12:33 2025 by rpki-client