$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6834039f-c461-3144-a6bb-95213067102c.roa File: 6834039f-c461-3144-a6bb-95213067102c.roa (raw, json) Hash identifier: fmIdXOP59a9zWOgNrUzDAawoDgfBEEd8R7WCFK2AAwU= Subject key identifier: CB:FF:A7:94:9E:0B:04:7A:9B:28:93:DD:07:35:77:B8:6F:92:AC:36 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584BAD628101A70C787CA018ECC0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6834039f-c461-3144-a6bb-95213067102c.roa Signing time: Wed 29 Oct 2025 01:00:31 +0000 ROA not before: Wed 29 Oct 2025 01:00:31 +0000 ROA not after: Tue 27 Jan 2026 02:00:31 +0000 asID: 396611 IP address blocks: 199.7.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ad:62:81:01:a7:0c:78:7c:a0:18:ec:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 29 01:00:31 2025 GMT Not After : Jan 27 02:00:31 2026 GMT Subject: CN=89ec2ded-4aa4-4d1c-a0bd-bcedba04b1af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:26:f4:e5:67:b2:8a:f4:ce:7c:d2:9c:e3:18: 49:1a:6e:ae:c2:ec:49:ca:4e:6e:29:d0:4e:69:a0: 01:22:c3:f8:a7:68:a7:b9:7f:95:c4:f8:86:58:6c: 1a:b7:d2:d7:dc:c3:a2:21:e2:e1:84:d0:f9:6f:a3: 5d:08:31:5d:81:33:ea:e9:6e:dd:1a:e8:06:5d:b0: 08:f8:c7:4f:87:b0:e7:45:4b:83:87:f4:df:f5:fb: 29:ac:87:2b:89:9e:be:8c:f1:e2:7b:80:d5:d6:56: 66:e6:f4:a5:ab:77:30:50:11:dc:a2:c6:2c:a4:1e: 02:10:24:51:34:8c:7a:4b:08:bc:6f:0c:a7:be:99: 90:bf:c9:0b:bd:e9:c6:9a:0c:88:b1:cf:50:4c:6c: 0b:1d:74:59:3b:16:4f:61:fc:13:69:0e:3c:7e:26: ab:6d:35:9d:59:00:0c:6f:e6:c8:cc:d1:44:45:ca: 89:8b:3b:d0:86:c4:26:b6:11:1b:3e:0d:a8:24:01: be:7c:1a:b9:a4:00:37:ff:3d:c8:99:17:82:7e:25: f9:78:bf:42:1d:95:f3:ee:de:cb:f2:54:f5:b7:21: 01:2a:09:68:a1:b1:de:4c:7e:34:b8:3c:d3:63:90: 84:ad:2c:e9:b3:dc:5d:05:24:6a:fe:86:b7:96:f3: c0:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:FF:A7:94:9E:0B:04:7A:9B:28:93:DD:07:35:77:B8:6F:92:AC:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6834039f-c461-3144-a6bb-95213067102c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 199.7.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:a5:28:d9:a9:6a:09:f2:2f:cb:e7:b6:89:e0:a8:f0:ab:b5: 0e:83:5f:8c:21:49:33:a4:f8:41:6a:4d:41:df:2c:25:98:d7: a2:c2:fe:82:d8:d0:1a:c6:2f:0d:e2:19:01:83:cc:a6:ee:aa: 19:16:c8:de:73:dc:ed:e5:e8:d8:98:1f:03:5e:4d:ed:93:c7: 9b:e9:d0:61:bd:2e:89:94:97:8b:27:b1:c4:d6:35:01:a3:b4: 8c:0d:de:4c:d5:14:36:ba:9e:51:d9:fe:fb:b6:39:b2:7a:71: 8a:77:1b:16:db:3e:9c:45:63:17:9c:b3:e1:bf:1c:49:b5:4f: e1:04:04:aa:ee:46:9e:d0:34:72:d9:a1:73:65:fc:b7:21:06: ad:8e:82:9f:58:ee:fe:ea:44:8b:7d:a0:4d:4b:0d:2b:e5:77: ca:38:d1:83:e8:0d:7d:78:42:fa:2c:5f:6b:45:7b:e0:5d:ed: a5:38:b4:00:54:53:38:fb:f3:c5:e4:33:43:fd:3c:4b:94:69: 69:ec:35:ef:17:6c:dc:79:db:b7:1a:9f:f4:12:d6:5c:2f:87: 2f:95:4a:2e:7d:04:6d:c5:3c:86:07:a3:03:ec:23:80:ac:b0: 18:fa:01:d3:6f:de:d0:1d:ae:d9:51:ae:d8:fb:1e:3b:f9:13: 41:37:6f:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEutYoEBpwx4fKAY7MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAyOTAxMDAzMVoXDTI2MDEyNzAyMDAzMVowLzEtMCsGA1UEAxMk ODllYzJkZWQtNGFhNC00ZDFjLWEwYmQtYmNlZGJhMDRiMWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuib05WeyivTOfNKc4xhJGm6uwuxJyk5uKdBO aaABIsP4p2inuX+VxPiGWGwat9LX3MOiIeLhhND5b6NdCDFdgTPq6W7dGugGXbAI +MdPh7DnRUuDh/Tf9fsprIcriZ6+jPHie4DV1lZm5vSlq3cwUBHcosYspB4CECRR NIx6Swi8bwynvpmQv8kLvenGmgyIsc9QTGwLHXRZOxZPYfwTaQ48fiarbTWdWQAM b+bIzNFERcqJizvQhsQmthEbPg2oJAG+fBq5pAA3/z3ImReCfiX5eL9CHZXz7t7L 8lT1tyEBKgloobHeTH40uDzTY5CErSzps9xdBSRq/oa3lvPAhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMv/p5SeCwR6myiT3Qc1d7hvkqw2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNjgzNDAzOWYtYzQ2MS0z MTQ0LWE2YmItOTUyMTMwNjcxMDJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwdHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJilKNmpagnyL8vntongqPCrtQ6DX4whSTOk+EFqTUHfLCWY16LC/oLY 0BrGLw3iGQGDzKbuqhkWyN5z3O3l6NiYHwNeTe2Tx5vp0GG9LomUl4snscTWNQGj tIwN3kzVFDa6nlHZ/vu2ObJ6cYp3GxbbPpxFYxecs+G/HEm1T+EEBKruRp7QNHLZ oXNl/LchBq2Ogp9Y7v7qRIt9oE1LDSvld8o40YPoDX14QvosX2tFe+Bd7aU4tABU Uzj788XkM0P9PEuUaWnsNe8XbNx527can/QS1lwvhy+VSi59BG3FPIYHowPsI4Cs sBj6AdNv3tAdrtlRrtj7Hjv5E0E3b3c= -----END CERTIFICATE-----Generated at Wed Oct 29 07:06:41 2025 by rpki-client