$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/58e0f1d9-ebff-3aba-bbdf-156b3d24c973.roa File: 58e0f1d9-ebff-3aba-bbdf-156b3d24c973.roa (raw, json) Hash identifier: HxhO4U74o09zn+NdEbmU1Pc4Vn48PVL3im8ZCd1RyEk= Subject key identifier: 47:73:A6:38:35:62:2A:18:EE:52:C0:21:64:59:95:95:6F:35:E2:85 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584BAD62662B14C6724DCE643480 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/58e0f1d9-ebff-3aba-bbdf-156b3d24c973.roa Signing time: Wed 29 Oct 2025 01:00:31 +0000 ROA not before: Wed 29 Oct 2025 01:00:31 +0000 ROA not after: Tue 27 Jan 2026 02:00:31 +0000 asID: 396710 IP address blocks: 199.7.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ad:62:66:2b:14:c6:72:4d:ce:64:34:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 29 01:00:31 2025 GMT Not After : Jan 27 02:00:31 2026 GMT Subject: CN=014bec84-38b6-47de-a5fe-3f31a4880347 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:42:2a:f1:ad:69:41:43:bb:14:e2:7e:32:5b: 3b:6f:5b:ef:94:6b:88:22:f4:5c:09:50:65:c2:c5: a9:f7:fe:fc:03:20:2a:e6:60:ca:88:18:82:eb:c0: c1:77:c2:0a:e0:58:c7:c9:e7:ee:c6:6f:10:15:3e: 6e:d2:67:50:cc:17:0b:3e:8c:90:c9:94:74:0e:a7: cd:54:55:f4:a7:21:ac:ec:58:ad:75:c7:82:a8:93: bc:56:92:62:3e:7b:f8:73:d3:03:22:a6:e7:d2:62: f9:d0:8e:cf:67:b2:77:98:81:6e:7f:71:68:db:3e: e3:2a:7b:99:23:2e:c0:d5:bd:5c:b4:dd:11:08:3f: 1e:3a:ee:af:f2:50:6d:1f:84:97:c0:ef:2a:78:f6: 3e:a4:8a:14:de:69:5f:78:94:7b:96:e6:50:f6:19: d2:50:14:fa:a6:cd:1e:9f:ce:63:57:9e:6b:86:30: b1:78:f2:ca:da:82:bc:f5:b6:88:97:0b:2f:74:63: dd:0d:d7:e6:b9:64:2b:c5:b0:b5:ba:11:4d:c5:83: 79:f4:06:40:2e:58:0f:bf:a6:00:0e:ed:58:67:87: 00:38:6a:3b:3a:08:64:0e:e1:c2:50:1a:67:90:14: 64:5b:b0:83:85:90:18:d7:b6:66:38:a0:36:60:14: 98:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:73:A6:38:35:62:2A:18:EE:52:C0:21:64:59:95:95:6F:35:E2:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/58e0f1d9-ebff-3aba-bbdf-156b3d24c973.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 199.7.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:55:c7:c8:33:d1:ab:1a:57:c6:f3:ea:63:eb:b1:08:d4:1f: 51:e8:06:59:88:de:4a:f9:1d:6f:d3:77:af:c9:4c:f0:0a:46: 0c:94:c7:a1:ad:c4:81:0a:83:f7:ff:0b:49:74:f5:fa:1b:d6: db:40:fa:9b:dc:d3:06:df:77:ac:64:f5:b1:45:98:9f:aa:09: 32:1d:ac:46:23:63:a2:1e:25:08:b5:28:5b:77:3f:2e:03:4d: 28:0a:82:fb:ac:3d:53:fe:a3:f8:22:d6:aa:44:bc:95:f2:bc: 37:ee:33:95:d7:d4:ca:9f:69:96:36:c2:e2:b1:0d:9d:b7:15: 00:fc:fa:c2:52:94:3b:73:72:2c:e2:18:01:54:5a:ce:99:66: 70:9c:a1:1c:e3:bb:3e:5d:fa:77:1f:f1:c8:58:0f:4e:59:d6: 0d:0f:36:2d:28:c2:2a:0e:2e:1f:7e:61:5a:65:bb:17:47:fe: 22:c2:2e:32:60:b0:c2:33:92:cf:ea:5d:39:ee:2a:a7:03:89: 21:6f:47:33:2a:6b:0e:34:a8:aa:ec:d4:b0:e9:35:93:a0:d4: 01:5c:5f:19:bb:0f:29:a1:06:38:b3:11:75:1a:ee:31:73:56: 06:f1:b2:5e:3d:91:ac:94:99:b4:3c:53:0c:79:00:db:e7:3b: 3e:ed:98:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEutYmYrFMZyTc5kNIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAyOTAxMDAzMVoXDTI2MDEyNzAyMDAzMVowLzEtMCsGA1UEAxMk MDE0YmVjODQtMzhiNi00N2RlLWE1ZmUtM2YzMWE0ODgwMzQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0Iq8a1pQUO7FOJ+Mls7b1vvlGuIIvRcCVBl wsWp9/78AyAq5mDKiBiC68DBd8IK4FjHyefuxm8QFT5u0mdQzBcLPoyQyZR0DqfN VFX0pyGs7FitdceCqJO8VpJiPnv4c9MDIqbn0mL50I7PZ7J3mIFuf3Fo2z7jKnuZ Iy7A1b1ctN0RCD8eOu6v8lBtH4SXwO8qePY+pIoU3mlfeJR7luZQ9hnSUBT6ps0e n85jV55rhjCxePLK2oK89baIlwsvdGPdDdfmuWQrxbC1uhFNxYN59AZALlgPv6YA Du1YZ4cAOGo7OghkDuHCUBpnkBRkW7CDhZAY17ZmOKA2YBSYWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEdzpjg1YioY7lLAIWRZlZVvNeKFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNThlMGYxZDktZWJmZi0z YWJhLWJiZGYtMTU2YjNkMjRjOTczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwdHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAhVx8gz0asaV8bz6mPrsQjUH1HoBlmI3kr5HW/Td6/JTPAKRgyUx6Gt xIEKg/f/C0l09fob1ttA+pvc0wbfd6xk9bFFmJ+qCTIdrEYjY6IeJQi1KFt3Py4D TSgKgvusPVP+o/gi1qpEvJXyvDfuM5XX1MqfaZY2wuKxDZ23FQD8+sJSlDtzcizi GAFUWs6ZZnCcoRzjuz5d+ncf8chYD05Z1g0PNi0owioOLh9+YVpluxdH/iLCLjJg sMIzks/qXTnuKqcDiSFvRzMqaw40qKrs1LDpNZOg1AFcXxm7DymhBjizEXUa7jFz Vgbxsl49kayUmbQ8Uwx5ANvnOz7tmEE= -----END CERTIFICATE-----Generated at Wed Oct 29 09:12:33 2025 by rpki-client