$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4cf9feb4-0d06-3f08-b835-425f470b5390.roa File: 4cf9feb4-0d06-3f08-b835-425f470b5390.roa (raw, json) Hash identifier: w3Emi4g3//4VAPshbHjiLl2Rd2VaNqAzSJBqVSZSkjE= Subject key identifier: 7E:9D:49:6C:56:C3:AB:78:DE:88:8D:52:BE:53:E8:E0:F5:DF:56:D4 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584BAD62692C4895F9E114277055 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4cf9feb4-0d06-3f08-b835-425f470b5390.roa Signing time: Wed 29 Oct 2025 01:00:31 +0000 ROA not before: Wed 29 Oct 2025 01:00:31 +0000 ROA not after: Tue 27 Jan 2026 02:00:31 +0000 asID: 396552 IP address blocks: 199.7.71.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ad:62:69:2c:48:95:f9:e1:14:27:70:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 29 01:00:31 2025 GMT Not After : Jan 27 02:00:31 2026 GMT Subject: CN=69f5d759-9f8c-4476-a15b-d7d92f781c30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:d6:47:99:0d:49:a2:36:9e:c3:e4:33:f4:ee: 0f:ef:57:9c:36:29:e3:ef:00:18:19:5a:ac:c1:07: 24:3f:28:93:dc:e2:8d:9d:98:f4:0b:7a:cd:01:68: bd:f2:a6:5c:1f:f6:cd:ef:03:77:46:d6:f6:ea:ec: ba:12:2d:ef:30:49:b7:4e:10:19:ba:ce:04:21:36: be:c9:ae:a8:8b:97:6f:40:2d:6c:d6:d7:69:a1:62: ce:5a:2d:5f:c9:fc:3f:81:04:9a:3a:9d:09:83:0b: 21:92:e7:aa:b3:05:f4:00:c1:1f:4e:1d:71:02:bd: 31:f8:55:fc:6b:94:8a:0b:fd:0a:48:7b:13:3b:71: 4d:b4:ba:c0:3e:7d:2a:4b:38:81:4c:bb:15:d3:19: 53:27:2c:83:84:4c:59:b1:93:1e:fe:33:e9:59:bc: 3f:d5:b9:dd:91:60:5c:41:16:4c:8a:2b:64:a9:9b: f5:1b:ff:17:75:5e:9d:75:d9:3e:bc:bd:dc:ba:c3: a1:fe:1d:56:68:44:7b:df:57:aa:1d:43:bf:0f:cf: 1b:aa:01:6a:d2:e8:d8:30:9a:63:03:d4:0e:6e:d4: b3:0f:9c:a0:62:b2:e1:39:8a:1c:f4:08:a9:e0:d8: 2d:c1:69:6e:e3:8b:a9:e2:5e:4d:c1:8c:65:0c:e1: 56:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:9D:49:6C:56:C3:AB:78:DE:88:8D:52:BE:53:E8:E0:F5:DF:56:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4cf9feb4-0d06-3f08-b835-425f470b5390.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 199.7.71.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:a5:97:6d:1d:3c:60:91:12:82:4d:66:55:33:67:a5:76:40: 58:60:fa:c0:21:02:ea:f6:6b:9a:a2:d4:4c:b2:db:ff:c5:06: d4:cd:b6:6b:cf:be:bd:58:d0:d2:87:3d:1e:fa:f1:d2:20:f2: de:1e:95:d0:c2:48:11:d6:26:ed:c4:08:46:a0:00:46:60:dc: 08:c7:f9:1e:15:71:e1:97:25:ca:c6:41:2f:41:6c:3c:16:ec: 25:f5:29:c5:7a:03:6c:70:40:ae:38:fc:5f:63:95:5c:0c:a4: 1d:f2:a7:e2:86:1a:63:32:c6:df:e2:c0:22:60:32:7f:be:a4: 97:56:4e:40:01:ef:a7:e9:e2:2f:34:86:6d:7a:e7:9e:74:df: d0:bc:d5:de:27:ca:eb:77:af:57:5b:fe:f3:4e:00:40:7d:3c: 6a:12:32:98:96:af:17:b6:2e:eb:63:99:ba:1c:2f:0e:24:12: 86:44:7a:9d:42:95:c6:75:fc:81:32:a8:2e:46:35:69:b2:10: 83:e8:09:d0:c1:83:a9:d2:11:e9:e7:ee:0a:7f:e0:67:17:89: df:4c:77:94:75:5b:3e:43:c0:47:ef:f8:bc:3f:67:76:35:65: bf:db:82:d2:07:ae:2b:bb:40:57:b5:f0:de:1c:f7:22:7d:2d: 4d:33:30:6e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEutYmksSJX54RQncFUwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAyOTAxMDAzMVoXDTI2MDEyNzAyMDAzMVowLzEtMCsGA1UEAxMk NjlmNWQ3NTktOWY4Yy00NDc2LWExNWItZDdkOTJmNzgxYzMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhtZHmQ1Jojaew+Qz9O4P71ecNinj7wAYGVqs wQckPyiT3OKNnZj0C3rNAWi98qZcH/bN7wN3Rtb26uy6Ei3vMEm3ThAZus4EITa+ ya6oi5dvQC1s1tdpoWLOWi1fyfw/gQSaOp0JgwshkueqswX0AMEfTh1xAr0x+FX8 a5SKC/0KSHsTO3FNtLrAPn0qSziBTLsV0xlTJyyDhExZsZMe/jPpWbw/1bndkWBc QRZMiitkqZv1G/8XdV6dddk+vL3cusOh/h1WaER731eqHUO/D88bqgFq0ujYMJpj A9QObtSzD5ygYrLhOYoc9Aip4NgtwWlu44up4l5NwYxlDOFW4QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFH6dSWxWw6t43oiNUr5T6OD131bUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNGNmOWZlYjQtMGQwNi0z ZjA4LWI4MzUtNDI1ZjQ3MGI1MzkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxwdHHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAupZdtHTxgkRKCTWZVM2eldkBYYPrAIQLq9muaotRMstv/xQbUzbZr z769WNDShz0e+vHSIPLeHpXQwkgR1ibtxAhGoABGYNwIx/keFXHhlyXKxkEvQWw8 Fuwl9SnFegNscECuOPxfY5VcDKQd8qfihhpjMsbf4sAiYDJ/vqSXVk5AAe+n6eIv NIZteueedN/QvNXeJ8rrd69XW/7zTgBAfTxqEjKYlq8Xti7rY5m6HC8OJBKGRHqd QpXGdfyBMqguRjVpshCD6AnQwYOp0hHp5+4Kf+BnF4nfTHeUdVs+Q8BH7/i8P2d2 NWW/24LSB64ru0BXtfDeHPcifS1NMzBu -----END CERTIFICATE-----Generated at Wed Oct 29 07:16:17 2025 by rpki-client