$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4c9999d1-b4ac-325f-9815-e7468b499fee.roa File: 4c9999d1-b4ac-325f-9815-e7468b499fee.roa (raw, json) Hash identifier: aTtsfL08OkVk1AFfX4ANh+HdGDbM+fwinK2wil++Mwg= Subject key identifier: 2C:61:1C:8A:39:00:84:80:FA:F8:90:C3:7E:AA:B8:26:B0:29:9D:60 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584BAD626EC1CE83B685111909A8 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4c9999d1-b4ac-325f-9815-e7468b499fee.roa Signing time: Wed 29 Oct 2025 01:00:31 +0000 ROA not before: Wed 29 Oct 2025 01:00:31 +0000 ROA not after: Tue 27 Jan 2026 02:00:31 +0000 asID: 396603 IP address blocks: 199.7.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ad:62:6e:c1:ce:83:b6:85:11:19:09:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 29 01:00:31 2025 GMT Not After : Jan 27 02:00:31 2026 GMT Subject: CN=b9d128e3-8bde-481a-b3bf-cb6aad33b549 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:aa:c7:28:34:cd:9d:38:1e:09:33:b3:60:b9: d0:e1:84:bc:84:c5:11:47:ca:fd:7a:fd:b8:fb:a1: aa:68:4b:d6:75:11:b9:bc:e8:19:ac:d8:b8:ab:72: a8:54:01:ca:5d:6d:13:da:9d:99:2e:41:6e:06:56: 91:5e:57:f2:48:45:ee:23:1a:b2:e5:a1:74:77:e8: 95:38:69:c9:81:c3:ef:9d:35:c9:6b:c3:fd:0f:16: e2:76:b1:94:31:a3:58:53:1c:8b:5c:08:7e:ae:6a: da:4f:8d:de:31:77:51:9b:b2:1c:77:b2:b4:77:56: f0:2d:db:2a:79:cc:d1:5d:89:3c:d6:e7:a6:aa:6a: a3:86:58:d2:fb:2b:df:4d:0d:33:92:ca:48:bd:48: 43:9f:52:d4:44:f3:77:b6:d0:23:ee:f1:42:59:aa: 00:a5:77:d2:46:cc:e7:26:a1:12:e5:37:0c:17:fb: 35:85:8a:17:46:9f:95:82:76:51:cc:d8:a1:cb:27: 76:fb:3b:77:cd:58:2c:71:19:dd:69:c9:33:7f:12: 99:dc:c8:d5:61:e9:80:bc:1a:6a:34:6b:d1:e5:6c: 84:8a:1a:04:96:14:dc:fe:c5:54:55:88:ae:df:31: a8:88:f8:ee:36:0d:c1:18:0e:29:81:64:c8:a3:4c: d9:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:61:1C:8A:39:00:84:80:FA:F8:90:C3:7E:AA:B8:26:B0:29:9D:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4c9999d1-b4ac-325f-9815-e7468b499fee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 199.7.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:31:bd:5a:70:b4:03:f5:61:52:fb:ca:0c:f8:10:29:50:0f: 4c:29:9b:5c:bc:35:6e:eb:1d:c2:4a:41:6a:56:b4:8a:0f:50: d4:20:dd:a6:59:00:7f:fb:cc:06:9f:b7:3e:67:4a:9c:98:91: 2c:c8:fd:c1:65:b6:05:76:81:2c:28:71:3b:ac:b2:a6:20:99: aa:42:f9:57:b9:3b:17:ec:c1:5b:8e:34:f8:2c:7f:69:d8:e7: c8:ab:4b:b7:56:1b:bf:1a:61:93:17:97:9f:05:ad:bf:f5:eb: d7:09:24:4e:c3:22:c9:ba:c0:c7:21:c9:9a:58:3d:0e:46:23: 94:5a:f1:5a:1e:9b:45:10:61:17:0f:04:61:fd:e3:fa:86:bf: c1:6d:88:04:77:08:a9:e1:ae:69:11:af:cb:37:92:f5:36:f3: 8d:bf:26:1a:e4:72:95:46:17:a7:ba:19:81:09:51:6e:3f:20: b3:36:ce:9e:d3:a9:e4:91:ed:8e:86:80:b5:a1:e6:5f:01:3f: 88:3a:a9:f1:e4:07:33:74:2c:55:e0:9f:21:5e:ed:d6:2a:62: ae:d8:68:b9:5c:49:72:7a:01:2f:1d:a3:dd:8a:3a:5e:44:03: 1e:ff:ec:1a:e6:a1:dd:f6:bc:c9:7f:4c:a2:96:fa:3f:3a:70: e9:b4:bd:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEutYm7BzoO2hREZCagwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAyOTAxMDAzMVoXDTI2MDEyNzAyMDAzMVowLzEtMCsGA1UEAxMk YjlkMTI4ZTMtOGJkZS00ODFhLWIzYmYtY2I2YWFkMzNiNTQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqrHKDTNnTgeCTOzYLnQ4YS8hMURR8r9ev24 +6GqaEvWdRG5vOgZrNi4q3KoVAHKXW0T2p2ZLkFuBlaRXlfySEXuIxqy5aF0d+iV OGnJgcPvnTXJa8P9DxbidrGUMaNYUxyLXAh+rmraT43eMXdRm7Icd7K0d1bwLdsq eczRXYk81uemqmqjhljS+yvfTQ0zkspIvUhDn1LURPN3ttAj7vFCWaoApXfSRszn JqES5TcMF/s1hYoXRp+VgnZRzNihyyd2+zt3zVgscRndackzfxKZ3MjVYemAvBpq NGvR5WyEihoElhTc/sVUVYiu3zGoiPjuNg3BGA4pgWTIo0zZlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCxhHIo5AISA+viQw36quCawKZ1gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNGM5OTk5ZDEtYjRhYy0z MjVmLTk4MTUtZTc0NjhiNDk5ZmVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwdHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG4xvVpwtAP1YVL7ygz4EClQD0wpm1y8NW7rHcJKQWpWtIoPUNQg3aZZ AH/7zAaftz5nSpyYkSzI/cFltgV2gSwocTussqYgmapC+Ve5OxfswVuONPgsf2nY 58irS7dWG78aYZMXl58Frb/169cJJE7DIsm6wMchyZpYPQ5GI5Ra8Voem0UQYRcP BGH94/qGv8FtiAR3CKnhrmkRr8s3kvU2842/JhrkcpVGF6e6GYEJUW4/ILM2zp7T qeSR7Y6GgLWh5l8BP4g6qfHkBzN0LFXgnyFe7dYqYq7YaLlcSXJ6AS8do92KOl5E Ax7/7Brmod32vMl/TKKW+j86cOm0vUc= -----END CERTIFICATE-----Generated at Wed Oct 29 07:18:30 2025 by rpki-client