$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3/df51f702-a91e-30cf-988e-dca1dd4d9a92.roa File: df51f702-a91e-30cf-988e-dca1dd4d9a92.roa (raw, json) Hash identifier: EJCC3I5o3Okt+08GAsUjnoAGPZkPl3worb9HZRQi2oo= Subject key identifier: D7:83:3D:77:5C:CE:16:44:2D:DA:DA:13:74:12:FB:6A:C5:5D:55:A9 Certificate issuer: /CN=cb0e4e7e-2c75-4541-8d67-ed2543afd5f3 Certificate serial: 010D0C9F4328584AFD43FA81C00DBCA042FF4300 Authority key identifier: 12:8F:83:F3:B6:50:D2:E5:1F:5D:42:02:A0:55:D6:B2:14:CF:AC:C7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3/df51f702-a91e-30cf-988e-dca1dd4d9a92.roa Signing time: Tue 26 Aug 2025 22:57:15 +0000 ROA not before: Tue 26 Aug 2025 22:57:15 +0000 ROA not after: Mon 24 Nov 2025 23:57:15 +0000 asID: 31898 IP address blocks: 199.7.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fd:43:fa:81:c0:0d:bc:a0:42:ff:43:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb0e4e7e-2c75-4541-8d67-ed2543afd5f3 Validity Not Before: Aug 26 22:57:15 2025 GMT Not After : Nov 24 23:57:15 2025 GMT Subject: CN=e70dc294-749e-4ab4-99a8-b200aadb9ce5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:3a:89:0c:4b:79:56:1a:e0:a4:cd:92:87:1a: 40:cd:49:f9:ed:c1:59:e8:09:79:70:f2:4e:8e:1f: fa:04:1f:e0:b4:14:8d:26:4f:3b:aa:91:7d:19:ec: 05:d6:b1:88:c1:31:29:31:82:96:b8:cc:32:04:47: 03:0a:a5:24:0f:ed:c0:74:75:d2:1d:7f:1a:72:06: 47:26:22:f4:b8:16:4b:65:af:2f:0c:2b:b2:25:d5: 04:d0:56:f1:da:e6:37:3d:ec:25:e3:fe:dc:26:6a: f8:66:e7:d8:87:f8:8b:5b:ce:31:9e:89:8b:8e:8c: 99:4e:f9:c4:41:ad:e3:3a:99:1a:89:04:30:de:25: 9f:8b:a9:f1:07:75:c4:f3:e1:57:e2:d0:48:f0:5d: 89:51:64:cd:07:9f:46:13:b6:d2:f3:4a:ac:fe:11: fb:ef:e5:d2:c8:f2:c6:68:2a:86:7f:3e:89:54:01: d6:a4:03:c6:09:a3:c0:53:51:04:2c:1e:a7:1f:d4: 5c:08:91:47:b4:81:11:96:ff:30:e0:3d:44:7d:3f: d2:3f:3c:2d:ec:ca:be:09:e8:2b:e2:cd:c4:3e:a4: 96:5f:92:23:12:40:48:5b:3f:5a:fd:69:3d:cd:cd: 3d:ca:3d:a7:b7:5d:84:f3:36:94:27:fc:5e:de:fc: e4:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:83:3D:77:5C:CE:16:44:2D:DA:DA:13:74:12:FB:6A:C5:5D:55:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3/df51f702-a91e-30cf-988e-dca1dd4d9a92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3.crl X509v3 Authority Key Identifier: keyid:12:8F:83:F3:B6:50:D2:E5:1F:5D:42:02:A0:55:D6:B2:14:CF:AC:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3.cer sbgp-ipAddrBlock: critical IPv4: 199.7.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:9a:2a:8c:2e:ca:56:53:6a:9e:7e:a3:43:86:50:96:39:60: 32:f0:a8:d8:be:77:55:b8:66:b3:84:20:68:72:cc:78:e2:a3: 58:1e:73:e5:5e:b0:86:06:dd:bd:2c:f7:de:67:58:a0:3e:ab: b6:4d:3d:40:7e:47:9b:1a:df:01:a0:2d:71:36:86:be:b3:a2: f9:4a:c9:3b:64:4c:e2:9c:2c:9c:65:64:54:71:97:e1:55:d6: f9:94:82:bd:70:46:05:b9:4e:45:98:f5:d5:61:20:95:dd:26: ad:ff:bb:3e:47:97:49:18:ee:fc:31:44:60:69:67:7f:d7:26: 52:97:26:5a:ce:34:3c:6a:99:16:2b:fd:d1:e3:1c:5e:20:de: 02:cc:dd:4e:ae:aa:7a:f3:66:46:32:53:09:d6:ce:b0:56:df: 69:6f:a8:16:f4:30:28:4f:2d:04:b7:68:6f:ce:c4:ed:ea:e6: 71:14:6a:73:6b:4e:a6:3c:e4:f5:25:e8:10:ad:5b:06:1f:a6: b2:da:7b:d4:dc:34:0d:79:54:e1:0e:81:27:1a:a5:d7:ac:0e: 4c:94:5d:91:c9:67:51:5c:7b:e0:e7:ea:af:0a:63:37:88:43: ac:8f:2f:1e:4e:f8:07:81:57:88:e7:55:8f:46:1f:b2:c3:b6: e2:e0:49:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr9Q/qBwA28oEL/QwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2IwZTRlN2UtMmM3NS00NTQxLThkNjctZWQyNTQzYWZk NWYzMB4XDTI1MDgyNjIyNTcxNVoXDTI1MTEyNDIzNTcxNVowLzEtMCsGA1UEAxMk ZTcwZGMyOTQtNzQ5ZS00YWI0LTk5YTgtYjIwMGFhZGI5Y2U1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxjqJDEt5VhrgpM2ShxpAzUn57cFZ6Al5cPJO jh/6BB/gtBSNJk87qpF9GewF1rGIwTEpMYKWuMwyBEcDCqUkD+3AdHXSHX8acgZH JiL0uBZLZa8vDCuyJdUE0Fbx2uY3Pewl4/7cJmr4ZufYh/iLW84xnomLjoyZTvnE Qa3jOpkaiQQw3iWfi6nxB3XE8+FX4tBI8F2JUWTNB59GE7bS80qs/hH77+XSyPLG aCqGfz6JVAHWpAPGCaPAU1EELB6nH9RcCJFHtIERlv8w4D1EfT/SPzwt7Mq+Cegr 4s3EPqSWX5IjEkBIWz9a/Wk9zc09yj2nt12E8zaUJ/xe3vzkGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNeDPXdczhZELdraE3QS+2rFXVWpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jYjBl NGU3ZS0yYzc1LTQ1NDEtOGQ2Ny1lZDI1NDNhZmQ1ZjMvZGY1MWY3MDItYTkxZS0z MGNmLTk4OGUtZGNhMWRkNGQ5YTkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvY2IwZTRlN2UtMmM3NS00NTQxLThk NjctZWQyNTQzYWZkNWYzL2NiMGU0ZTdlLTJjNzUtNDU0MS04ZDY3LWVkMjU0M2Fm ZDVmMy5jcmwwHwYDVR0jBBgwFoAUEo+D87ZQ0uUfXUICoFXWshTPrMcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jYjBlNGU3ZS0yYzc1LTQ1NDEtOGQ2Ny1lZDI1 NDNhZmQ1ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwfLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGaaKowuylZTap5+o0OGUJY5YDLwqNi+d1W4ZrOEIGhyzHjio1gec+Ve sIYG3b0s995nWKA+q7ZNPUB+R5sa3wGgLXE2hr6zovlKyTtkTOKcLJxlZFRxl+FV 1vmUgr1wRgW5TkWY9dVhIJXdJq3/uz5Hl0kY7vwxRGBpZ3/XJlKXJlrONDxqmRYr /dHjHF4g3gLM3U6uqnrzZkYyUwnWzrBW32lvqBb0MChPLQS3aG/OxO3q5nEUanNr TqY85PUl6BCtWwYfprLae9TcNA15VOEOgScapdesDkyUXZHJZ1Fce+Dn6q8KYzeI Q6yPLx5O+AeBV4jnVY9GH7LDtuLgSX8= -----END CERTIFICATE-----Generated at Wed Oct 8 21:11:24 2025 by rpki-client