$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6af2a3a7-f9b8-35e7-968e-2f0168a51391.roa File: 6af2a3a7-f9b8-35e7-968e-2f0168a51391.roa (raw, json) Hash identifier: qQaimXJAyApxLaPvREAtVdAdNuU332l1fCRPFboiS1I= Subject key identifier: E3:6C:92:E8:6D:80:F4:30:F8:94:84:79:5A:E6:01:08:17:7D:3E:C4 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584BAD62654F7F512E8681EC2F90 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6af2a3a7-f9b8-35e7-968e-2f0168a51391.roa Signing time: Wed 29 Oct 2025 01:00:31 +0000 ROA not before: Wed 29 Oct 2025 01:00:31 +0000 ROA not after: Tue 27 Jan 2026 02:00:31 +0000 asID: 396545 IP address blocks: 199.7.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ad:62:65:4f:7f:51:2e:86:81:ec:2f:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 29 01:00:31 2025 GMT Not After : Jan 27 02:00:31 2026 GMT Subject: CN=f71f2f5e-bc13-46d7-b5f0-edbe7a8d813c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:d1:52:9e:67:72:55:bb:2e:4f:ae:16:90:18: 28:76:13:66:00:04:09:e3:54:b8:a6:63:fe:d9:3a: 5c:36:07:45:c1:d0:a7:41:97:0b:60:d5:e7:f9:99: 22:c8:64:19:72:bf:34:d8:7e:66:7d:b5:a9:46:b6: c5:cf:7e:d7:f2:b5:fa:e1:52:44:6b:3f:d4:23:78: 08:b4:b0:96:58:4b:1f:5d:93:13:4a:b3:54:78:d2: 3b:88:33:7a:67:41:e2:57:cd:33:53:b5:14:55:d0: 9e:1a:6a:17:be:92:b7:f1:cc:44:b0:66:f2:f6:3c: 76:3c:26:7f:03:0a:f6:b3:a6:3a:cf:0c:b1:3d:f6: 50:ae:5c:0d:13:09:dd:64:cd:6d:00:80:00:36:ca: dc:cf:47:7c:b5:4c:43:36:28:79:51:16:7d:c3:18: 80:82:b9:32:41:03:7b:9f:f5:11:84:5c:5b:9d:06: 75:6d:84:1f:d2:bb:16:30:a9:9b:fc:22:4e:d2:6d: 16:96:6f:79:e2:ba:a2:69:a3:22:67:c9:05:22:d4: 86:34:14:c5:aa:d9:72:ae:30:ab:10:66:d5:57:f4: 8d:09:a0:f8:92:30:e1:5f:d7:c9:2a:f8:6d:ad:82: fd:5a:b6:87:ab:b2:6c:a1:a7:25:16:1f:04:09:7f: 21:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:6C:92:E8:6D:80:F4:30:F8:94:84:79:5A:E6:01:08:17:7D:3E:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6af2a3a7-f9b8-35e7-968e-2f0168a51391.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 199.7.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:5f:b9:94:b0:68:4e:c3:62:47:6c:26:67:01:68:0e:ac:90: 59:27:36:7c:f0:e4:fc:d7:e7:e4:ae:c9:43:18:3c:bd:b3:59: 63:6a:a3:3b:da:b1:87:9c:d7:93:94:ec:b8:8c:01:68:fb:75: b3:d8:d3:63:0f:5d:d8:96:50:5f:3f:8e:ce:88:8f:64:6b:ff: d1:bb:bb:ea:c7:1f:04:e5:b5:b7:6f:ff:2b:a8:12:d8:c5:99: 7e:11:21:62:a0:39:60:35:60:e6:f6:e7:1b:10:56:04:dd:a4: 26:66:48:68:ba:31:27:c2:1c:f3:06:c5:a6:99:8a:2b:6b:cb: 2e:05:0b:bd:d9:05:93:d3:da:29:d8:77:e4:ee:3a:71:a8:21: 92:9c:44:17:9d:86:fe:0b:b6:4f:6d:55:20:cb:b6:e6:bc:53: 00:1f:2b:6a:36:20:a8:bc:ef:ca:f3:c0:e0:d2:d6:6e:06:a1: 2d:42:d2:57:d6:c6:dc:0d:18:fb:65:da:99:44:de:ee:6f:18: 8a:b4:6f:50:a7:5c:f9:26:10:a5:a9:ed:85:94:b2:e3:e8:07: b8:23:71:98:b7:41:c5:9f:76:a0:2a:fe:62:41:b7:a0:14:d7: 42:09:6e:73:a7:df:96:15:e5:b8:e6:3a:0d:f6:7d:23:78:01: 2c:46:10:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEutYmVPf1EuhoHsL5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAyOTAxMDAzMVoXDTI2MDEyNzAyMDAzMVowLzEtMCsGA1UEAxMk ZjcxZjJmNWUtYmMxMy00NmQ3LWI1ZjAtZWRiZTdhOGQ4MTNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhdFSnmdyVbsuT64WkBgodhNmAAQJ41S4pmP+ 2TpcNgdFwdCnQZcLYNXn+ZkiyGQZcr802H5mfbWpRrbFz37X8rX64VJEaz/UI3gI tLCWWEsfXZMTSrNUeNI7iDN6Z0HiV80zU7UUVdCeGmoXvpK38cxEsGby9jx2PCZ/ Awr2s6Y6zwyxPfZQrlwNEwndZM1tAIAANsrcz0d8tUxDNih5URZ9wxiAgrkyQQN7 n/URhFxbnQZ1bYQf0rsWMKmb/CJO0m0Wlm954rqiaaMiZ8kFItSGNBTFqtlyrjCr EGbVV/SNCaD4kjDhX9fJKvhtrYL9WraHq7JsoaclFh8ECX8h6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFONskuhtgPQw+JSEeVrmAQgXfT7EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNmFmMmEzYTctZjliOC0z NWU3LTk2OGUtMmYwMTY4YTUxMzkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwdHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIBfuZSwaE7DYkdsJmcBaA6skFknNnzw5PzX5+SuyUMYPL2zWWNqozva sYec15OU7LiMAWj7dbPY02MPXdiWUF8/js6Ij2Rr/9G7u+rHHwTltbdv/yuoEtjF mX4RIWKgOWA1YOb25xsQVgTdpCZmSGi6MSfCHPMGxaaZiitryy4FC73ZBZPT2inY d+TuOnGoIZKcRBedhv4Ltk9tVSDLtua8UwAfK2o2IKi878rzwODS1m4GoS1C0lfW xtwNGPtl2plE3u5vGIq0b1CnXPkmEKWp7YWUsuPoB7gjcZi3QcWfdqAq/mJBt6AU 10IJbnOn35YV5bjmOg32fSN4ASxGEM8= -----END CERTIFICATE-----Generated at Wed Oct 29 09:00:24 2025 by rpki-client