$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a38a8da5-2705-3176-9add-cee9d33d73a3.roa File: a38a8da5-2705-3176-9add-cee9d33d73a3.roa (raw, json) Hash identifier: UxdSG+gcwDoKywmjvyrzXYwcwCB9JLjE0Sp3GH+FFjc= Subject key identifier: B5:18:02:2C:E5:8A:49:18:98:9C:7C:A8:15:EB:E5:05:BB:B0:C0:A9 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584BAD6270E3BA5F7582045B5600 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a38a8da5-2705-3176-9add-cee9d33d73a3.roa Signing time: Wed 29 Oct 2025 01:00:31 +0000 ROA not before: Wed 29 Oct 2025 01:00:31 +0000 ROA not after: Tue 27 Jan 2026 02:00:31 +0000 asID: 397200 IP address blocks: 199.7.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ad:62:70:e3:ba:5f:75:82:04:5b:56:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 29 01:00:31 2025 GMT Not After : Jan 27 02:00:31 2026 GMT Subject: CN=1d8b171d-9904-43d6-8aec-ed642184cb2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b8:c7:8a:0f:77:4e:95:90:83:8f:ea:b7:51: 5d:22:15:3a:af:21:30:e6:a9:4a:18:1b:d1:73:e8: 5c:1b:70:01:20:18:14:ef:78:37:9b:7a:cc:b6:58: 91:c3:0a:8a:88:a2:78:9a:ec:e4:6c:01:91:38:aa: 15:ed:55:4c:ca:34:da:a7:5d:3b:7b:7f:fb:40:b2: 3c:93:55:7d:7f:83:d3:ab:db:32:b5:a7:15:96:a7: 1c:a3:b5:52:ec:64:a4:0b:27:2e:45:ed:55:35:fe: 15:51:75:45:ca:33:58:a7:1b:ca:e9:e9:23:46:ea: 90:cc:74:4a:05:06:b2:87:18:8d:63:d5:43:82:6c: e6:5f:a7:f7:5d:5f:8d:73:dd:77:1a:9e:d1:08:31: fc:c6:ca:2d:7f:64:64:f9:1d:78:22:e3:62:d9:9e: 95:a6:81:a5:f2:3f:d5:e6:d9:b1:1f:57:48:73:4f: 5a:e5:18:ae:6d:ca:b3:de:40:62:a4:67:b7:b5:b8: db:32:d3:ff:3e:c5:4d:92:14:8c:f7:31:a3:10:db: 2e:99:16:3c:c2:13:b2:d4:9e:11:7d:20:d7:a1:33: 19:86:c0:3c:46:5e:06:be:d5:be:03:05:64:a7:6b: 42:a1:26:dd:9b:42:68:d3:51:82:5c:32:d8:96:45: 0c:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:18:02:2C:E5:8A:49:18:98:9C:7C:A8:15:EB:E5:05:BB:B0:C0:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a38a8da5-2705-3176-9add-cee9d33d73a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 199.7.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:e5:56:b4:98:ab:d7:e2:fb:07:00:6c:75:92:0e:87:44:7c: b7:6a:d8:01:14:eb:e0:c5:15:29:df:b0:f9:f7:a6:cf:b1:62: a1:6a:a7:57:50:2a:0a:5d:2d:a6:ed:f7:41:22:3e:29:e6:97: 6c:e9:ec:18:41:9b:e3:51:6d:67:bf:9e:58:59:74:f1:e8:15: 38:e9:3e:aa:7e:e7:15:f5:9f:95:1a:0a:45:86:f3:42:d7:20: 87:20:ad:c0:1c:6b:50:45:ea:ac:77:f0:4d:51:a3:44:0d:98: 4c:56:46:1e:40:60:56:26:17:80:ca:20:29:c3:4b:f3:18:7d: 92:bc:b0:d5:a1:e1:61:3e:3f:60:ff:14:ef:3a:1c:f5:b4:f4: 5a:b3:79:9f:64:d7:a5:19:7f:ec:12:d9:d0:ee:dd:02:9b:4e: 42:fa:a5:f8:07:73:64:af:75:73:75:54:1a:46:98:4a:c0:20: 53:9a:e0:79:1b:f8:c8:be:1b:85:ae:1a:0a:72:16:f4:28:0d: 6e:5b:55:58:40:ec:af:80:28:3f:2c:13:a1:7a:e1:5c:26:e5: 88:8f:07:ed:d6:f1:25:8b:19:7d:d4:84:4e:99:c1:bb:26:4c: 45:44:b1:eb:0a:40:26:a7:b6:23:0b:94:92:94:c0:53:7a:70: 49:16:85:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEutYnDjul91ggRbVgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAyOTAxMDAzMVoXDTI2MDEyNzAyMDAzMVowLzEtMCsGA1UEAxMk MWQ4YjE3MWQtOTkwNC00M2Q2LThhZWMtZWQ2NDIxODRjYjJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbjHig93TpWQg4/qt1FdIhU6ryEw5qlKGBvR c+hcG3ABIBgU73g3m3rMtliRwwqKiKJ4muzkbAGROKoV7VVMyjTap107e3/7QLI8 k1V9f4PTq9sytacVlqcco7VS7GSkCycuRe1VNf4VUXVFyjNYpxvK6ekjRuqQzHRK BQayhxiNY9VDgmzmX6f3XV+Nc913Gp7RCDH8xsotf2Rk+R14IuNi2Z6VpoGl8j/V 5tmxH1dIc09a5Riubcqz3kBipGe3tbjbMtP/PsVNkhSM9zGjENsumRY8whOy1J4R fSDXoTMZhsA8Rl4GvtW+AwVkp2tCoSbdm0Jo01GCXDLYlkUMRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLUYAizlikkYmJx8qBXr5QW7sMCpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTM4YThkYTUtMjcwNS0z MTc2LTlhZGQtY2VlOWQzM2Q3M2EzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwdHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHDlVrSYq9fi+wcAbHWSDodEfLdq2AEU6+DFFSnfsPn3ps+xYqFqp1dQ KgpdLabt90EiPinml2zp7BhBm+NRbWe/nlhZdPHoFTjpPqp+5xX1n5UaCkWG80LX IIcgrcAca1BF6qx38E1Ro0QNmExWRh5AYFYmF4DKICnDS/MYfZK8sNWh4WE+P2D/ FO86HPW09FqzeZ9k16UZf+wS2dDu3QKbTkL6pfgHc2SvdXN1VBpGmErAIFOa4Hkb +Mi+G4WuGgpyFvQoDW5bVVhA7K+AKD8sE6F64Vwm5YiPB+3W8SWLGX3UhE6Zwbsm TEVEsesKQCantiMLlJKUwFN6cEkWhbk= -----END CERTIFICATE-----Generated at Wed Oct 29 09:22:42 2025 by rpki-client