$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/00e2c1b8-b1d6-355e-ac9a-97faee7cd686.roa File: 00e2c1b8-b1d6-355e-ac9a-97faee7cd686.roa (raw, json) Hash identifier: 76f3Du587vjnAMxMhOCfigCvWixGAsCAuH4WH4ieIZ8= Subject key identifier: 01:88:A4:5D:C7:C2:C6:09:12:8D:9F:20:61:20:8B:4B:92:F3:D0:61 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584BAD62769D8D9BE3C763A40600 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/00e2c1b8-b1d6-355e-ac9a-97faee7cd686.roa Signing time: Wed 29 Oct 2025 01:00:31 +0000 ROA not before: Wed 29 Oct 2025 01:00:31 +0000 ROA not after: Tue 27 Jan 2026 02:00:31 +0000 asID: 396560 IP address blocks: 199.7.71.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ad:62:76:9d:8d:9b:e3:c7:63:a4:06:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 29 01:00:31 2025 GMT Not After : Jan 27 02:00:31 2026 GMT Subject: CN=1a766c27-afc1-43ef-900b-e4cc4aa0bfc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:21:8d:70:9b:65:73:fb:05:de:31:a2:f5:dd: ac:9e:85:1a:74:e7:d9:ed:51:f0:88:4a:42:e4:ec: 96:54:33:91:97:73:55:33:cd:9b:a9:d5:22:cb:ac: 8c:a3:64:0a:b2:c5:79:ee:29:13:d7:80:b5:25:21: c5:cb:9e:69:0f:b7:01:ae:d5:bf:f4:41:30:d2:55: d6:ef:62:17:20:3c:ef:2a:31:27:79:0d:d8:6e:df: 53:54:20:78:95:a0:d7:1b:40:1f:54:bf:f3:52:f5: 6f:0b:28:fc:4f:17:f0:13:59:7b:f4:02:dc:2f:18: 86:f9:84:86:50:6d:c7:ed:ab:6a:95:97:ab:b8:cb: 24:10:2b:c9:11:04:d8:fd:30:d3:44:74:8b:0e:dd: c9:f7:bc:7c:49:c2:54:ff:e2:d4:c7:e4:db:d6:e2: 2b:50:66:84:b8:21:83:54:c5:2b:83:b0:aa:5b:58: 83:24:ce:24:9d:b8:b1:71:58:ac:64:6d:01:3c:0a: d4:ef:b6:ed:61:ca:c8:ec:88:70:fc:d9:32:ed:49: b2:ec:31:cf:65:20:e2:fd:ba:af:91:c7:67:fe:a1: ac:1b:f5:38:1a:65:a2:3c:7e:c4:07:71:3b:43:7d: 74:f0:6f:ad:6a:7d:91:d4:a8:21:1e:9d:54:08:bb: 4e:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:88:A4:5D:C7:C2:C6:09:12:8D:9F:20:61:20:8B:4B:92:F3:D0:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/00e2c1b8-b1d6-355e-ac9a-97faee7cd686.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 199.7.71.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:5b:33:de:69:ae:d4:bf:54:9b:ec:ed:72:ad:02:a4:57:98: 45:71:c5:38:81:ba:2d:f0:d9:1a:32:3c:1f:0e:f2:92:eb:d0: e0:bb:40:f2:d6:a0:1b:30:04:7a:9a:3d:8f:b2:fe:1a:44:2d: 45:8e:c2:c9:a1:ba:aa:8d:bc:2b:58:6f:f5:f7:e8:36:a2:75: 80:ad:f3:a0:0b:23:ee:22:ad:c3:c6:91:e2:ad:2e:69:48:48: 36:9c:18:1d:ba:09:ec:d1:4e:58:1c:82:c1:c7:d3:77:aa:03: 7b:4b:76:74:e6:f3:98:b4:24:a8:c4:d9:11:c5:26:12:da:a8: 40:f7:41:fa:bb:78:d3:ef:e5:c5:f6:28:14:94:f0:97:4d:40: 86:29:4f:8e:e9:f8:c4:24:99:fe:ad:6d:ec:11:2a:71:b1:5c: ef:55:98:35:20:5e:0c:76:15:84:32:e8:94:4e:da:93:21:ff: 68:cd:2d:a2:d7:6d:b3:39:60:de:19:a5:22:36:84:d9:ed:81: d4:a4:30:2c:06:ff:99:0e:49:2e:18:3c:a6:8e:ff:17:3e:f5: e4:28:c2:ab:af:8d:58:03:3a:90:0a:e9:cb:7f:e0:97:3f:e5: 79:e0:59:87:19:98:52:10:41:81:61:2f:7a:8e:c6:43:de:8c: 15:20:f0:87 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEutYnadjZvjx2OkBgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAyOTAxMDAzMVoXDTI2MDEyNzAyMDAzMVowLzEtMCsGA1UEAxMk MWE3NjZjMjctYWZjMS00M2VmLTkwMGItZTRjYzRhYTBiZmM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyGNcJtlc/sF3jGi9d2snoUadOfZ7VHwiEpC 5OyWVDORl3NVM82bqdUiy6yMo2QKssV57ikT14C1JSHFy55pD7cBrtW/9EEw0lXW 72IXIDzvKjEneQ3Ybt9TVCB4laDXG0AfVL/zUvVvCyj8TxfwE1l79ALcLxiG+YSG UG3H7atqlZeruMskECvJEQTY/TDTRHSLDt3J97x8ScJU/+LUx+Tb1uIrUGaEuCGD VMUrg7CqW1iDJM4knbixcVisZG0BPArU77btYcrI7Ihw/Nky7Umy7DHPZSDi/bqv kcdn/qGsG/U4GmWiPH7EB3E7Q3108G+tan2R1KghHp1UCLtOJQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFAGIpF3HwsYJEo2fIGEgi0uS89BhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMDBlMmMxYjgtYjFkNi0z NTVlLWFjOWEtOTdmYWVlN2NkNjg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxwdHHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB/WzPeaa7Uv1Sb7O1yrQKkV5hFccU4gbot8NkaMjwfDvKS69Dgu0Dy 1qAbMAR6mj2Psv4aRC1FjsLJobqqjbwrWG/19+g2onWArfOgCyPuIq3DxpHirS5p SEg2nBgdugns0U5YHILBx9N3qgN7S3Z05vOYtCSoxNkRxSYS2qhA90H6u3jT7+XF 9igUlPCXTUCGKU+O6fjEJJn+rW3sESpxsVzvVZg1IF4MdhWEMuiUTtqTIf9ozS2i 122zOWDeGaUiNoTZ7YHUpDAsBv+ZDkkuGDymjv8XPvXkKMKrr41YAzqQCunLf+CX P+V54FmHGZhSEEGBYS96jsZD3owVIPCH -----END CERTIFICATE-----Generated at Wed Oct 29 07:12:48 2025 by rpki-client