$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a303518b-e7ad-365f-87bb-41815e34af4a.roa File: a303518b-e7ad-365f-87bb-41815e34af4a.roa (raw, json) Hash identifier: z655k819IpE4OwPk/JEYXzUSJQ3aeXyjrspIn65FHp0= Subject key identifier: 13:C5:D7:45:F9:95:86:04:4D:E3:D5:7E:77:AD:A6:73:11:2A:F3:10 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584BAD626F30F446258503BD78C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a303518b-e7ad-365f-87bb-41815e34af4a.roa Signing time: Wed 29 Oct 2025 01:00:31 +0000 ROA not before: Wed 29 Oct 2025 01:00:31 +0000 ROA not after: Tue 27 Jan 2026 02:00:31 +0000 asID: 396550 IP address blocks: 199.7.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ad:62:6f:30:f4:46:25:85:03:bd:78:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 29 01:00:31 2025 GMT Not After : Jan 27 02:00:31 2026 GMT Subject: CN=1738dd7f-7c4a-4f43-9629-8b9d5273ffe1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:0a:1d:76:f2:c5:c3:70:11:d2:1b:a8:83:26: 0d:91:7f:3d:a7:16:e7:46:4b:c3:f3:6a:4c:28:3a: 40:25:d2:87:c6:15:4d:2b:3d:37:82:da:52:43:9b: c0:e2:6a:a4:56:ae:6f:83:f5:e4:da:60:06:57:ca: e1:69:1d:ad:af:ec:5a:1a:94:6e:56:41:9f:b4:56: 9e:7e:b6:ab:b5:fe:10:5a:80:eb:26:8c:15:00:30: 86:38:be:49:32:45:13:06:fb:82:f6:e2:25:8b:b0: 9c:86:2f:bd:c2:22:56:a2:8f:22:89:66:ea:32:1f: ec:82:36:1d:54:c6:80:5b:ff:54:00:98:ec:18:e6: 12:03:78:4f:e7:54:98:a3:cb:ae:b1:89:f4:26:5d: e8:ba:bd:fb:1a:78:44:73:06:f9:af:99:a7:4f:6e: 1c:e7:00:b1:9c:f9:d9:9b:8f:1b:4d:5b:b3:f1:97: 69:e4:3d:24:be:83:f4:62:63:1b:4b:78:57:ca:83: 71:ce:d8:d3:0c:95:a6:3e:15:c9:67:d7:35:1f:03: da:ea:e2:da:f9:3c:a6:de:b6:a5:a5:88:a2:1f:ab: 3d:fa:cc:f8:b6:b7:2e:4c:5a:9a:d2:90:f1:6e:0c: 53:3a:64:16:6f:92:b6:a5:a7:a3:10:f9:5a:aa:31: 98:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:C5:D7:45:F9:95:86:04:4D:E3:D5:7E:77:AD:A6:73:11:2A:F3:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a303518b-e7ad-365f-87bb-41815e34af4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 199.7.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:d6:cc:f1:e5:ab:cb:f1:96:3b:eb:43:0d:b6:39:70:5f:a3: 8e:94:02:0b:8e:61:77:d6:6b:13:b7:5b:4b:10:69:0e:81:a0: 03:d1:69:d1:52:d5:78:00:de:42:0e:be:d2:90:86:f3:b1:00: 14:9a:2e:2a:fd:25:35:c7:8f:37:a4:bd:b4:18:2f:31:a5:68: 54:ab:38:83:6a:27:fe:75:e4:ae:69:4e:1d:8b:97:47:0f:59: f6:77:40:a9:4c:5d:98:e3:ef:32:7c:3d:c5:03:bd:2a:e2:ff: 89:8a:37:7d:34:06:e4:06:ad:a5:2f:1e:77:be:bf:28:b6:3a: ff:aa:5c:c8:a5:0d:51:c8:8c:39:2e:71:70:22:72:62:0e:a8: c3:df:6d:dd:50:6b:c1:78:13:de:17:d8:e1:12:35:8c:e8:86: a6:cd:a1:9f:70:db:12:15:84:c1:af:a2:07:98:30:f8:76:b2: 6b:67:03:f2:a7:f2:98:00:28:35:7e:dc:68:c5:52:7f:9b:bc: f9:a6:d2:eb:0f:7e:f2:a2:00:71:81:99:9b:ad:89:5e:4e:90: ec:3e:a9:15:b7:87:9d:d0:95:14:ea:e6:2b:a3:ab:de:92:d5: 57:39:65:ba:e3:ba:2d:36:8f:51:0f:4b:8e:40:6e:de:46:ce: d8:9d:17:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEutYm8w9EYlhQO9eMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAyOTAxMDAzMVoXDTI2MDEyNzAyMDAzMVowLzEtMCsGA1UEAxMk MTczOGRkN2YtN2M0YS00ZjQzLTk2MjktOGI5ZDUyNzNmZmUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgoddvLFw3AR0huogyYNkX89pxbnRkvD82pM KDpAJdKHxhVNKz03gtpSQ5vA4mqkVq5vg/Xk2mAGV8rhaR2tr+xaGpRuVkGftFae frartf4QWoDrJowVADCGOL5JMkUTBvuC9uIli7Cchi+9wiJWoo8iiWbqMh/sgjYd VMaAW/9UAJjsGOYSA3hP51SYo8uusYn0Jl3our37GnhEcwb5r5mnT24c5wCxnPnZ m48bTVuz8Zdp5D0kvoP0YmMbS3hXyoNxztjTDJWmPhXJZ9c1HwPa6uLa+Tym3ral pYiiH6s9+sz4trcuTFqa0pDxbgxTOmQWb5K2paejEPlaqjGYNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBPF10X5lYYETePVfnetpnMRKvMQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTMwMzUxOGItZTdhZC0z NjVmLTg3YmItNDE4MTVlMzRhZjRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwdHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC3WzPHlq8vxljvrQw22OXBfo46UAguOYXfWaxO3W0sQaQ6BoAPRadFS 1XgA3kIOvtKQhvOxABSaLir9JTXHjzekvbQYLzGlaFSrOINqJ/515K5pTh2Ll0cP WfZ3QKlMXZjj7zJ8PcUDvSri/4mKN300BuQGraUvHne+vyi2Ov+qXMilDVHIjDku cXAicmIOqMPfbd1Qa8F4E94X2OESNYzohqbNoZ9w2xIVhMGvogeYMPh2smtnA/Kn 8pgAKDV+3GjFUn+bvPmm0usPfvKiAHGBmZutiV5OkOw+qRW3h53QlRTq5iujq96S 1Vc5Zbrjui02j1EPS45Abt5GztidF60= -----END CERTIFICATE-----Generated at Wed Oct 29 11:24:16 2025 by rpki-client