$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2ffe19ac-3ffa-3563-bdbd-5c41f1d99444.roa File: 2ffe19ac-3ffa-3563-bdbd-5c41f1d99444.roa (raw, json) Hash identifier: XMDvxkdirC3Ns51cj5xWBAYvGUqc9wBG+tlHtQ3oqSQ= Subject key identifier: A6:AB:44:8D:C5:CF:2B:77:9E:60:96:EA:F1:20:DA:29:51:31:B2:72 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584BAD6279CCE1C66AE0A4CADC40 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2ffe19ac-3ffa-3563-bdbd-5c41f1d99444.roa Signing time: Wed 29 Oct 2025 01:00:31 +0000 ROA not before: Wed 29 Oct 2025 01:00:31 +0000 ROA not after: Tue 27 Jan 2026 02:00:31 +0000 asID: 397202 IP address blocks: 199.7.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ad:62:79:cc:e1:c6:6a:e0:a4:ca:dc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 29 01:00:31 2025 GMT Not After : Jan 27 02:00:31 2026 GMT Subject: CN=008646e8-8dcf-4b14-a944-6005628d7495 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:fc:94:ac:ec:66:b9:ce:83:e9:a1:de:35:b3: d2:9d:44:ac:2c:18:09:d5:ca:61:c3:9a:fa:c8:d7: e1:37:12:5a:a4:4d:6d:85:27:f4:00:23:1c:69:d5: 49:cc:d9:2e:83:a5:07:b7:ae:28:08:8d:80:b6:f2: f6:22:40:a8:08:42:90:e8:87:25:03:6c:0d:04:65: 4a:a4:57:8b:67:89:74:d8:37:72:e2:59:36:1f:a3: 48:93:95:86:95:d3:2d:51:8d:0c:5e:79:4b:3b:34: 1f:94:64:b6:36:ee:14:cc:7f:6e:8f:44:49:4e:d2: 9f:75:52:a3:20:f3:97:84:68:2f:7e:04:b3:60:f5: 9f:c5:ff:11:f7:91:c1:c1:ba:b3:d8:59:b8:ed:cc: 94:fa:89:bf:07:ef:7b:3a:ab:73:ab:0a:ab:cd:b8: a2:58:1b:f4:50:5d:1a:e8:30:04:04:17:c4:d5:e4: e1:75:47:f2:95:0a:8f:87:83:d2:27:84:ef:10:38: 1b:fa:ce:fa:db:8c:fe:44:c8:b8:86:d7:21:51:cf: c2:55:32:9e:bd:43:68:a9:e1:12:4d:d6:43:c2:64: 0a:7c:5e:56:b4:67:6a:52:cc:e6:c6:c3:91:6b:05: d1:c8:81:c9:58:7d:0a:4a:75:19:74:81:e5:93:77: 77:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:AB:44:8D:C5:CF:2B:77:9E:60:96:EA:F1:20:DA:29:51:31:B2:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2ffe19ac-3ffa-3563-bdbd-5c41f1d99444.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 199.7.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:73:90:dd:b8:ee:b8:8c:95:60:4e:a6:85:87:a2:33:e1:70: 4d:1b:d9:3f:b6:fe:0a:e1:45:f2:54:1f:84:c4:fe:01:2c:57: 04:34:d7:95:bd:f9:f1:7b:ef:c1:fb:79:8f:37:09:8d:56:dc: 9b:b2:6d:81:33:6c:0a:bb:c6:f0:12:23:52:73:a7:c5:bd:de: 47:5b:0b:cc:69:2e:82:02:77:90:49:a2:12:97:9a:1f:5c:eb: 37:33:a5:2f:a1:d9:9d:07:56:dd:80:eb:dd:42:e7:d6:a6:b5: 24:bc:28:8b:f8:84:48:10:e1:4a:f9:62:b2:ac:b9:22:e7:a1: e5:cf:d6:77:0d:f3:dd:42:3a:68:67:25:68:93:3e:82:ec:ba: 24:bf:9c:b5:ad:53:32:4a:20:25:08:61:bf:dd:c1:04:5d:5c: f0:e5:51:10:33:01:48:45:74:a2:09:cd:93:3f:22:1c:f7:32: 84:87:7c:4f:a4:3a:36:7c:e1:85:25:e6:12:0c:a8:5a:f3:11: 55:29:4c:80:26:cc:37:e9:25:e8:8b:ba:11:aa:e9:eb:88:31: 59:b4:a4:64:71:7d:02:5c:44:0d:f8:0f:45:8a:3f:42:36:57: 42:23:cc:83:21:fc:94:13:0c:2a:be:48:9a:2b:99:5d:ba:f1: 46:71:f4:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEutYnnM4cZq4KTK3EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAyOTAxMDAzMVoXDTI2MDEyNzAyMDAzMVowLzEtMCsGA1UEAxMk MDA4NjQ2ZTgtOGRjZi00YjE0LWE5NDQtNjAwNTYyOGQ3NDk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3fyUrOxmuc6D6aHeNbPSnUSsLBgJ1cphw5r6 yNfhNxJapE1thSf0ACMcadVJzNkug6UHt64oCI2AtvL2IkCoCEKQ6IclA2wNBGVK pFeLZ4l02Ddy4lk2H6NIk5WGldMtUY0MXnlLOzQflGS2Nu4UzH9uj0RJTtKfdVKj IPOXhGgvfgSzYPWfxf8R95HBwbqz2Fm47cyU+om/B+97OqtzqwqrzbiiWBv0UF0a 6DAEBBfE1eThdUfylQqPh4PSJ4TvEDgb+s7624z+RMi4htchUc/CVTKevUNoqeES TdZDwmQKfF5WtGdqUszmxsORawXRyIHJWH0KSnUZdIHlk3d3jwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKarRI3Fzyt3nmCW6vEg2ilRMbJyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMmZmZTE5YWMtM2ZmYS0z NTYzLWJkYmQtNWM0MWYxZDk5NDQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwdHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJBzkN247riMlWBOpoWHojPhcE0b2T+2/grhRfJUH4TE/gEsVwQ015W9 +fF778H7eY83CY1W3JuybYEzbAq7xvASI1Jzp8W93kdbC8xpLoICd5BJohKXmh9c 6zczpS+h2Z0HVt2A691C59amtSS8KIv4hEgQ4Ur5YrKsuSLnoeXP1ncN891COmhn JWiTPoLsuiS/nLWtUzJKICUIYb/dwQRdXPDlURAzAUhFdKIJzZM/Ihz3MoSHfE+k OjZ84YUl5hIMqFrzEVUpTIAmzDfpJeiLuhGq6euIMVm0pGRxfQJcRA34D0WKP0I2 V0IjzIMh/JQTDCq+SJormV268UZx9M4= -----END CERTIFICATE-----Generated at Wed Oct 29 07:19:22 2025 by rpki-client