$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/03cf468d-c9e8-3921-86a7-ac28e5e9702e.roa File: 03cf468d-c9e8-3921-86a7-ac28e5e9702e.roa (raw, json) Hash identifier: dpJ27dt+Mzh+UrtBo7NTZzRnlHUUl0Rfn0llAPPfKYI= Subject key identifier: 1A:05:4C:10:68:3E:65:A3:1D:5C:75:98:5C:C8:EF:2E:81:0E:D0:5B Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584BAD6268E067EA993D34758040 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/03cf468d-c9e8-3921-86a7-ac28e5e9702e.roa Signing time: Wed 29 Oct 2025 01:00:31 +0000 ROA not before: Wed 29 Oct 2025 01:00:31 +0000 ROA not after: Tue 27 Jan 2026 02:00:31 +0000 asID: 25485 IP address blocks: 199.7.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ad:62:68:e0:67:ea:99:3d:34:75:80:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 29 01:00:31 2025 GMT Not After : Jan 27 02:00:31 2026 GMT Subject: CN=d7e550b6-ce6d-4ee5-ba47-d0247a7fe169 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:3d:4d:bf:40:8e:d0:28:ff:7b:e7:fb:cd:8e: 9f:95:1d:6f:3c:52:30:7d:74:76:c6:d5:a9:d8:c7: 70:b7:b4:6d:df:03:7c:d3:e5:a0:68:29:14:e9:30: 46:27:72:70:77:1c:25:dc:38:88:89:4a:3b:83:05: 2b:30:0c:de:1f:98:19:4f:9f:9e:4d:5b:12:a1:8f: 71:db:db:0d:30:06:78:65:82:ba:08:76:14:05:b0: 14:b8:d6:1b:00:50:61:e2:b8:83:52:ab:36:c3:83: 4e:af:e1:11:af:87:b4:e2:46:39:59:79:16:a8:fb: 23:59:db:2f:94:ef:ad:eb:18:8c:88:bb:6a:6a:b5: c1:d9:12:1f:b3:4f:ac:e1:ad:15:5f:ca:b6:b5:a7: 8a:cf:34:18:43:fa:c8:cf:e4:bd:8f:51:cf:af:68: fd:d2:5b:c5:39:28:cd:f8:1d:c0:3e:d7:a1:0e:da: 7d:45:fc:12:d0:17:27:61:20:c6:88:31:4b:37:85: 1e:d5:e3:35:13:22:87:ea:a1:78:9b:1d:42:10:54: 0d:fe:18:b1:41:05:30:18:71:e2:ab:f5:68:e3:51: fb:ed:1c:67:4a:dc:75:58:d4:66:05:5e:fc:95:c9: b7:cd:4f:ce:19:88:b0:04:e0:96:6b:69:a4:c3:02: 12:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:05:4C:10:68:3E:65:A3:1D:5C:75:98:5C:C8:EF:2E:81:0E:D0:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/03cf468d-c9e8-3921-86a7-ac28e5e9702e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 199.7.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:35:b5:e3:92:a3:89:7b:be:71:a1:73:b3:93:ac:32:62:e5: 26:21:62:3f:13:d7:2a:ce:e9:e1:37:b3:ef:77:c3:8d:79:83: b2:48:64:45:24:d9:bf:d3:86:f2:67:96:79:8f:a1:54:c8:51: 71:a4:5c:a1:50:0e:d6:ee:17:a3:d9:7c:42:1e:eb:3d:b1:4a: a4:4b:48:79:1d:52:e8:38:48:49:da:87:63:aa:1c:a3:c5:e0: 18:64:de:ad:d5:e3:7d:46:08:8c:48:bf:a4:46:54:b4:c6:fa: 40:ab:0f:0a:5d:0b:f9:8a:fb:bb:8b:17:d7:cd:9b:ba:14:45: 25:4b:ea:0a:83:41:5d:86:96:5d:bb:71:a6:38:d2:0f:23:2b: d2:df:5d:22:5e:f2:fc:da:f7:9e:bb:1e:fb:82:4e:d2:5c:72: ac:37:db:5b:64:03:5d:a1:1b:61:03:f6:c6:22:62:22:61:23: ce:8f:ac:12:3e:e1:82:7a:37:88:bd:0b:a3:1c:6c:1a:b6:8c: 3a:1d:21:e2:af:7d:69:e1:40:47:71:0c:47:29:30:e5:68:70: 10:9c:3e:10:8e:fc:b0:70:db:c8:cc:36:07:32:19:08:53:47: af:a9:bd:60:14:fd:9d:e0:ea:1f:f7:76:95:0d:7b:63:b0:13: 6e:a9:36:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEutYmjgZ+qZPTR1gEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAyOTAxMDAzMVoXDTI2MDEyNzAyMDAzMVowLzEtMCsGA1UEAxMk ZDdlNTUwYjYtY2U2ZC00ZWU1LWJhNDctZDAyNDdhN2ZlMTY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2z1Nv0CO0Cj/e+f7zY6flR1vPFIwfXR2xtWp 2Mdwt7Rt3wN80+WgaCkU6TBGJ3Jwdxwl3DiIiUo7gwUrMAzeH5gZT5+eTVsSoY9x 29sNMAZ4ZYK6CHYUBbAUuNYbAFBh4riDUqs2w4NOr+ERr4e04kY5WXkWqPsjWdsv lO+t6xiMiLtqarXB2RIfs0+s4a0VX8q2taeKzzQYQ/rIz+S9j1HPr2j90lvFOSjN +B3APtehDtp9RfwS0BcnYSDGiDFLN4Ue1eM1EyKH6qF4mx1CEFQN/hixQQUwGHHi q/Vo41H77RxnStx1WNRmBV78lcm3zU/OGYiwBOCWa2mkwwISdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBoFTBBoPmWjHVx1mFzI7y6BDtBbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMDNjZjQ2OGQtYzllOC0z OTIxLTg2YTctYWMyOGU1ZTk3MDJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwdHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA01teOSo4l7vnGhc7OTrDJi5SYhYj8T1yrO6eE3s+93w415g7JIZEUk 2b/ThvJnlnmPoVTIUXGkXKFQDtbuF6PZfEIe6z2xSqRLSHkdUug4SEnah2OqHKPF 4Bhk3q3V431GCIxIv6RGVLTG+kCrDwpdC/mK+7uLF9fNm7oURSVL6gqDQV2Gll27 caY40g8jK9LfXSJe8vza9567HvuCTtJccqw321tkA12hG2ED9sYiYiJhI86PrBI+ 4YJ6N4i9C6McbBq2jDodIeKvfWnhQEdxDEcpMOVocBCcPhCO/LBw28jMNgcyGQhT R6+pvWAU/Z3g6h/3dpUNe2OwE26pNnw= -----END CERTIFICATE-----Generated at Wed Oct 29 07:20:07 2025 by rpki-client