$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5601347b-9529-3996-8a0b-84e74f65897c.roa File: 5601347b-9529-3996-8a0b-84e74f65897c.roa (raw, json) Hash identifier: qTk47TjMLQqHdiU55W5cB3l8IXafhKzwguJcl/A+8l4= Subject key identifier: 2E:D8:49:12:21:65:B3:F8:AE:D7:DF:F2:8F:A6:02:5E:09:D3:E5:90 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584BAD626324F4B7119FCB944C80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5601347b-9529-3996-8a0b-84e74f65897c.roa Signing time: Wed 29 Oct 2025 01:00:31 +0000 ROA not before: Wed 29 Oct 2025 01:00:31 +0000 ROA not after: Tue 27 Jan 2026 02:00:31 +0000 asID: 396612 IP address blocks: 199.7.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ad:62:63:24:f4:b7:11:9f:cb:94:4c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 29 01:00:31 2025 GMT Not After : Jan 27 02:00:31 2026 GMT Subject: CN=d90002f3-3b6d-4e5f-a3cf-75eeb66104a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:4c:89:92:7d:4c:38:3d:28:56:cc:4c:8f:3a: 96:6a:12:59:a5:c1:99:50:10:cc:8e:b7:3b:59:fc: 51:9d:dc:a1:a7:bd:eb:1e:c4:ea:b2:a1:c5:6d:20: 5b:c9:9a:dd:1f:1c:5a:65:fd:04:06:79:32:db:f9: 2b:05:03:f4:96:60:37:dc:21:bf:d3:9d:3b:b5:66: e4:4f:f6:c8:55:09:31:ad:1a:60:7f:19:f2:ec:af: 0d:68:c6:4f:35:e3:01:d2:65:8f:b9:10:d6:29:91: 19:93:08:39:90:e4:f3:7a:62:29:5a:d8:0e:66:f9: 7e:b4:08:a2:fb:06:6d:87:6f:0a:08:2d:8c:2f:ff: 8c:b2:63:30:36:50:52:38:fa:a6:b2:7b:17:07:e7: 9d:ba:9c:24:a9:2f:d8:c5:f9:59:eb:8f:48:b4:cb: 97:aa:cb:43:2e:8f:9f:0f:d3:3f:cb:6b:6f:97:45: 8f:0e:f6:54:b8:ef:98:9b:ed:fc:b7:9e:79:a2:24: 6c:b6:a8:1d:28:96:6d:53:71:88:02:85:a9:50:a1: 2a:42:66:b1:1b:46:73:80:33:9c:0f:88:34:1e:e2: 10:55:82:9d:f6:77:d9:24:e8:01:99:cd:d7:2d:f8: fb:3e:66:4d:24:f9:41:17:a0:1c:ad:6e:13:11:82: 1f:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:D8:49:12:21:65:B3:F8:AE:D7:DF:F2:8F:A6:02:5E:09:D3:E5:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5601347b-9529-3996-8a0b-84e74f65897c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 199.7.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:c4:e2:ab:a4:11:f6:f8:3b:69:51:fc:5d:32:50:04:d2:00: ba:de:7d:7c:90:fc:75:a8:c7:f3:a4:aa:3b:eb:de:f4:f9:8b: 2b:ac:a1:fc:b2:3c:1d:b7:4d:f7:12:d0:4a:5e:79:79:32:6f: 62:1d:93:73:23:b3:2d:43:2b:bb:d1:ca:c7:3a:8e:e5:af:89: f1:a7:93:8c:0a:8c:3d:41:86:d2:51:b9:27:4e:8a:39:0d:64: a5:e2:18:72:d6:58:fc:17:d7:73:ea:4b:45:79:f7:39:18:2c: 9e:54:b6:19:38:45:cc:87:bc:34:1c:e7:4a:c3:d1:39:19:4b: 77:e7:47:1e:65:22:a9:f9:51:28:94:66:f2:84:cd:3b:24:7a: 2d:02:55:64:e5:90:59:bf:b9:9c:65:e5:89:db:e3:ca:6b:23: e3:e9:d2:d2:ed:43:11:84:ae:41:f4:f1:1c:8d:0f:a5:6c:32: d5:e9:43:66:16:56:fb:00:9d:19:b4:da:f2:f2:63:1a:f8:37: 87:4e:50:7d:18:dd:e4:0f:c0:70:f5:0f:ad:37:8b:9d:ca:a5: ed:26:a9:2f:81:d8:4a:27:5f:5b:2e:bc:39:d9:0d:1b:5a:9f: c0:96:0f:a0:0d:a5:5f:6d:cd:98:ec:5c:ef:d9:bd:18:3d:ba: 29:03:da:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEutYmMk9LcRn8uUTIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAyOTAxMDAzMVoXDTI2MDEyNzAyMDAzMVowLzEtMCsGA1UEAxMk ZDkwMDAyZjMtM2I2ZC00ZTVmLWEzY2YtNzVlZWI2NjEwNGE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUyJkn1MOD0oVsxMjzqWahJZpcGZUBDMjrc7 WfxRndyhp73rHsTqsqHFbSBbyZrdHxxaZf0EBnky2/krBQP0lmA33CG/0507tWbk T/bIVQkxrRpgfxny7K8NaMZPNeMB0mWPuRDWKZEZkwg5kOTzemIpWtgOZvl+tAii +wZth28KCC2ML/+MsmMwNlBSOPqmsnsXB+edupwkqS/YxflZ649ItMuXqstDLo+f D9M/y2tvl0WPDvZUuO+Ym+38t555oiRstqgdKJZtU3GIAoWpUKEqQmaxG0ZzgDOc D4g0HuIQVYKd9nfZJOgBmc3XLfj7PmZNJPlBF6AcrW4TEYIf9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC7YSRIhZbP4rtff8o+mAl4J0+WQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNTYwMTM0N2ItOTUyOS0z OTk2LThhMGItODRlNzRmNjU4OTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwdHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC7E4qukEfb4O2lR/F0yUATSALrefXyQ/HWox/Okqjvr3vT5iyusofyy PB23TfcS0EpeeXkyb2Idk3Mjsy1DK7vRysc6juWvifGnk4wKjD1BhtJRuSdOijkN ZKXiGHLWWPwX13PqS0V59zkYLJ5Uthk4RcyHvDQc50rD0TkZS3fnRx5lIqn5USiU ZvKEzTskei0CVWTlkFm/uZxl5Ynb48prI+Pp0tLtQxGErkH08RyND6VsMtXpQ2YW VvsAnRm02vLyYxr4N4dOUH0Y3eQPwHD1D603i53Kpe0mqS+B2EonX1suvDnZDRta n8CWD6ANpV9tzZjsXO/ZvRg9uikD2rI= -----END CERTIFICATE-----Generated at Wed Oct 29 09:19:16 2025 by rpki-client