$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/593fa97d-efc1-3300-8917-c0e3f0203381.roa File: 593fa97d-efc1-3300-8917-c0e3f0203381.roa (raw, json) Hash identifier: ycGWrdfDol9fp1ZtLjfMyst1zOTzfVmAZZVU2e+/5Pk= Subject key identifier: C1:87:98:90:8A:35:5C:07:80:18:61:80:63:2B:B7:65:FC:E1:BB:D5 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584BAD626C0ADC874B359E544040 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/593fa97d-efc1-3300-8917-c0e3f0203381.roa Signing time: Wed 29 Oct 2025 01:00:31 +0000 ROA not before: Wed 29 Oct 2025 01:00:31 +0000 ROA not after: Tue 27 Jan 2026 02:00:31 +0000 asID: 396574 IP address blocks: 199.7.71.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ad:62:6c:0a:dc:87:4b:35:9e:54:40:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 29 01:00:31 2025 GMT Not After : Jan 27 02:00:31 2026 GMT Subject: CN=be1e8b14-bd5a-4a6b-a10e-dbf83cada007 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:0b:1e:9e:82:5b:28:c2:ed:e5:d7:8d:fe:28: 24:17:14:7a:ba:0b:0b:1e:91:d8:ab:d9:79:ce:ba: 1a:e2:78:2d:e9:69:b5:d5:d3:73:58:e6:3e:06:fe: f3:02:42:c0:0b:e5:39:f0:dc:f0:d7:c3:f4:f7:46: 0e:a7:dc:27:e8:66:9a:47:d4:d2:4e:10:cb:87:6f: c2:95:be:5c:95:ce:71:73:3e:0c:9e:f9:55:13:08: 58:94:0d:a3:d4:cc:bd:07:f0:e3:3e:2c:e8:ac:bc: 70:aa:d3:44:2b:09:15:64:cb:d6:ba:b7:cc:d3:f5: 4b:6d:b5:37:3b:8d:d3:a1:c5:e7:8e:ff:a4:f0:bf: 1d:aa:e4:00:9a:80:2b:0b:29:93:28:a8:04:2d:f5: fc:47:f3:29:39:56:2a:fb:fb:9f:b6:81:93:51:b5: 2d:2e:a1:c2:46:41:ad:9d:f5:5f:b4:8d:12:80:47: 38:42:34:70:e5:a6:71:b5:99:2b:c8:29:c7:26:7f: 6b:28:5e:bf:7a:38:1e:5a:eb:fa:75:af:6c:89:a3: 0f:20:70:0a:48:2f:eb:8b:46:14:ca:66:91:af:1b: 9f:83:1c:5e:02:01:b5:1f:8a:b2:d8:a8:15:58:3c: 95:bd:f8:c6:00:9d:d9:02:ad:b2:0b:27:da:3d:f7: 8b:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:87:98:90:8A:35:5C:07:80:18:61:80:63:2B:B7:65:FC:E1:BB:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/593fa97d-efc1-3300-8917-c0e3f0203381.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 199.7.71.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:75:ba:98:f9:60:c3:c1:f1:bc:e1:da:ab:32:80:a2:28:07: 0b:a2:2a:50:0e:34:23:64:d8:20:13:8a:64:61:6c:f6:bb:de: c7:ad:16:e5:d2:33:4c:bb:59:97:86:2e:24:ce:91:ce:d5:a8: 21:23:45:a9:4d:2a:dd:bc:30:2e:a7:aa:b3:8a:33:1c:aa:b0: 23:dd:da:9c:bf:02:5b:bc:f2:14:15:e0:14:8d:f2:5a:fb:d8: fd:15:b9:fc:a0:a0:37:e0:01:53:54:ba:34:bf:ce:aa:4a:cc: f8:c4:97:3d:c8:17:ca:df:e6:43:78:46:59:67:60:6e:c7:6e: 70:b1:14:61:3f:0c:78:cb:64:70:0b:6e:e3:76:6a:3b:6c:c7: 6c:a1:ce:0a:bc:c1:23:28:ef:be:29:1c:2f:f6:0b:37:fa:eb: d9:41:b1:4d:85:98:aa:ee:5f:3f:95:fe:13:59:23:dd:75:da: 37:dc:26:27:f7:e3:80:6c:5a:06:28:9c:b9:91:ae:4f:1d:ff: f4:f2:f9:d2:e5:2c:ee:4c:0a:f4:0a:22:5c:0f:42:7f:80:a5: 23:68:a1:2e:21:94:2d:42:14:86:90:b2:b5:6a:11:b4:d7:63: 3f:7e:30:5c:c1:e1:28:35:55:41:8a:2f:82:e8:f6:11:39:eb: 41:8a:4f:16 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEutYmwK3IdLNZ5UQEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAyOTAxMDAzMVoXDTI2MDEyNzAyMDAzMVowLzEtMCsGA1UEAxMk YmUxZThiMTQtYmQ1YS00YTZiLWExMGUtZGJmODNjYWRhMDA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngsenoJbKMLt5deN/igkFxR6ugsLHpHYq9l5 zroa4ngt6Wm11dNzWOY+Bv7zAkLAC+U58Nzw18P090YOp9wn6GaaR9TSThDLh2/C lb5clc5xcz4MnvlVEwhYlA2j1My9B/DjPizorLxwqtNEKwkVZMvWurfM0/VLbbU3 O43TocXnjv+k8L8dquQAmoArCymTKKgELfX8R/MpOVYq+/uftoGTUbUtLqHCRkGt nfVftI0SgEc4QjRw5aZxtZkryCnHJn9rKF6/ejgeWuv6da9siaMPIHAKSC/ri0YU ymaRrxufgxxeAgG1H4qy2KgVWDyVvfjGAJ3ZAq2yCyfaPfeLsQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMGHmJCKNVwHgBhhgGMrt2X84bvVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNTkzZmE5N2QtZWZjMS0z MzAwLTg5MTctYzBlM2YwMjAzMzgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxwdHHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCsdbqY+WDDwfG84dqrMoCiKAcLoipQDjQjZNggE4pkYWz2u97HrRbl 0jNMu1mXhi4kzpHO1aghI0WpTSrdvDAup6qzijMcqrAj3dqcvwJbvPIUFeAUjfJa +9j9Fbn8oKA34AFTVLo0v86qSsz4xJc9yBfK3+ZDeEZZZ2Bux25wsRRhPwx4y2Rw C27jdmo7bMdsoc4KvMEjKO++KRwv9gs3+uvZQbFNhZiq7l8/lf4TWSPdddo33CYn 9+OAbFoGKJy5ka5PHf/08vnS5SzuTAr0CiJcD0J/gKUjaKEuIZQtQhSGkLK1ahG0 12M/fjBcweEoNVVBii+C6PYROetBik8W -----END CERTIFICATE-----Generated at Wed Oct 29 07:06:35 2025 by rpki-client