$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3/7a132f20-4870-3577-9adf-267b8e5675e3.roa File: 7a132f20-4870-3577-9adf-267b8e5675e3.roa (raw, json) Hash identifier: OdOIM/npfJjKMOVhNGif7hz0GJ+3KVOEJhdU1t+jnfs= Subject key identifier: E9:D8:46:8A:C2:11:BB:D6:AE:1D:6E:73:B9:74:3B:23:36:45:CF:15 Certificate issuer: /CN=cb0e4e7e-2c75-4541-8d67-ed2543afd5f3 Certificate serial: 010D0C9F4328584AFD440564AF021946D4279F00 Authority key identifier: 12:8F:83:F3:B6:50:D2:E5:1F:5D:42:02:A0:55:D6:B2:14:CF:AC:C7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3/7a132f20-4870-3577-9adf-267b8e5675e3.roa Signing time: Tue 26 Aug 2025 22:57:20 +0000 ROA not before: Tue 26 Aug 2025 22:57:20 +0000 ROA not after: Mon 24 Nov 2025 23:57:20 +0000 asID: 31898 IP address blocks: 199.7.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fd:44:05:64:af:02:19:46:d4:27:9f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb0e4e7e-2c75-4541-8d67-ed2543afd5f3 Validity Not Before: Aug 26 22:57:20 2025 GMT Not After : Nov 24 23:57:20 2025 GMT Subject: CN=ad8e0b0a-cf8d-410a-b81a-76f3e787adc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:74:7a:66:54:05:1a:54:1e:99:1b:da:e2:cc: 1d:5e:f7:9b:d5:cc:79:e6:fe:33:ec:af:e2:cc:e0: d4:39:a1:f0:43:7e:ce:03:2f:05:2b:02:82:e4:24: 1f:e8:3c:be:3a:45:3c:36:b7:35:b5:4a:05:6e:b4: 77:5c:15:5c:5e:98:26:84:f3:dc:c2:20:c2:e8:be: ba:0c:42:a2:db:14:58:84:d2:ad:2b:74:7b:e8:a6: a2:e5:ef:0b:c3:f4:78:35:a7:d0:0d:c0:7a:66:cf: b0:76:c6:90:5f:4d:40:bd:4e:f6:e5:0c:c7:a8:a3: ca:c6:eb:c9:2d:bc:ff:62:6c:23:dc:ff:db:05:17: c2:9b:6e:1c:23:9f:c0:cf:6a:a5:0c:2f:2e:fd:70: 4f:7f:67:06:37:6c:60:73:a1:de:7c:7f:6e:c2:5c: 2c:a8:d6:43:fd:87:1b:bf:9c:95:42:af:ac:29:7a: 0e:84:1b:a4:f3:0b:c3:b4:78:f3:d7:96:d7:ed:2e: e4:77:3a:3c:57:e9:6a:d7:22:ce:2a:a0:96:c5:c1: b7:b7:87:46:3a:f1:d4:44:39:60:db:7a:50:85:8c: 92:33:c0:af:fc:a4:d4:25:69:79:fb:d0:47:ae:8b: 8b:68:a3:a8:81:88:1d:45:c0:59:19:2d:34:c0:ca: 0f:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:D8:46:8A:C2:11:BB:D6:AE:1D:6E:73:B9:74:3B:23:36:45:CF:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3/7a132f20-4870-3577-9adf-267b8e5675e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3.crl X509v3 Authority Key Identifier: keyid:12:8F:83:F3:B6:50:D2:E5:1F:5D:42:02:A0:55:D6:B2:14:CF:AC:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3.cer sbgp-ipAddrBlock: critical IPv4: 199.7.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:84:50:49:6c:54:50:88:98:fa:62:ef:74:45:ac:cb:b8:4c: 93:e4:1c:40:69:c7:5a:76:5b:2e:ed:70:8b:74:9b:b5:59:62: b1:e8:ec:49:9d:45:de:dd:1e:a2:3b:ac:ba:6d:2c:4c:40:bf: 9d:66:48:e5:6b:fb:fb:5a:95:a6:df:50:8a:f8:77:0c:2f:f4: a1:95:09:50:11:29:3e:d5:18:d8:48:9d:c1:44:ba:64:82:01: 06:43:9d:fc:17:d3:0d:8e:b8:2d:6f:14:4b:83:38:1f:d6:3c: 17:7d:86:04:ca:da:19:37:04:db:0f:e2:d0:a1:71:9d:0a:53: 53:de:21:7d:3b:d1:96:a1:73:99:fd:ad:48:d6:9a:4d:ff:2b: 56:1c:40:44:91:59:e1:89:32:b8:c2:6e:d2:5f:44:fa:52:72: 85:5f:4b:73:1e:3e:c3:22:5d:9e:7d:f3:0a:e3:4d:53:3b:d7: ec:c0:d8:c5:0a:23:81:30:0f:5d:67:6c:23:55:24:ba:02:3c: 23:d6:bf:50:fa:06:0a:8f:15:ba:9d:63:38:b5:96:36:dd:d5: cc:e2:13:22:5f:d4:3b:8b:88:55:27:b6:50:fb:03:7e:4c:90: e6:dc:04:05:b0:63:36:eb:6d:31:62:f4:01:2a:5e:92:c9:6d: b7:03:85:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr9RAVkrwIZRtQnnwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2IwZTRlN2UtMmM3NS00NTQxLThkNjctZWQyNTQzYWZk NWYzMB4XDTI1MDgyNjIyNTcyMFoXDTI1MTEyNDIzNTcyMFowLzEtMCsGA1UEAxMk YWQ4ZTBiMGEtY2Y4ZC00MTBhLWI4MWEtNzZmM2U3ODdhZGM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6nR6ZlQFGlQemRva4swdXveb1cx55v4z7K/i zODUOaHwQ37OAy8FKwKC5CQf6Dy+OkU8Nrc1tUoFbrR3XBVcXpgmhPPcwiDC6L66 DEKi2xRYhNKtK3R76Kai5e8Lw/R4NafQDcB6Zs+wdsaQX01AvU725QzHqKPKxuvJ Lbz/Ymwj3P/bBRfCm24cI5/Az2qlDC8u/XBPf2cGN2xgc6HefH9uwlwsqNZD/Ycb v5yVQq+sKXoOhBuk8wvDtHjz15bX7S7kdzo8V+lq1yLOKqCWxcG3t4dGOvHURDlg 23pQhYySM8Cv/KTUJWl5+9BHrouLaKOogYgdRcBZGS00wMoPMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOnYRorCEbvWrh1uc7l0OyM2Rc8VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jYjBl NGU3ZS0yYzc1LTQ1NDEtOGQ2Ny1lZDI1NDNhZmQ1ZjMvN2ExMzJmMjAtNDg3MC0z NTc3LTlhZGYtMjY3YjhlNTY3NWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvY2IwZTRlN2UtMmM3NS00NTQxLThk NjctZWQyNTQzYWZkNWYzL2NiMGU0ZTdlLTJjNzUtNDU0MS04ZDY3LWVkMjU0M2Fm ZDVmMy5jcmwwHwYDVR0jBBgwFoAUEo+D87ZQ0uUfXUICoFXWshTPrMcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jYjBlNGU3ZS0yYzc1LTQ1NDEtOGQ2Ny1lZDI1 NDNhZmQ1ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwfPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGSEUElsVFCImPpi73RFrMu4TJPkHEBpx1p2Wy7tcIt0m7VZYrHo7Emd Rd7dHqI7rLptLExAv51mSOVr+/talabfUIr4dwwv9KGVCVARKT7VGNhIncFEumSC AQZDnfwX0w2OuC1vFEuDOB/WPBd9hgTK2hk3BNsP4tChcZ0KU1PeIX070Zahc5n9 rUjWmk3/K1YcQESRWeGJMrjCbtJfRPpScoVfS3MePsMiXZ598wrjTVM71+zA2MUK I4EwD11nbCNVJLoCPCPWv1D6BgqPFbqdYzi1ljbd1cziEyJf1DuLiFUntlD7A35M kObcBAWwYzbrbTFi9AEqXpLJbbcDhTI= -----END CERTIFICATE-----Generated at Wed Oct 8 21:12:34 2025 by rpki-client