$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aff240dd-81d1-322b-9bb2-f6722f21a5ef.roa File: aff240dd-81d1-322b-9bb2-f6722f21a5ef.roa (raw, json) Hash identifier: sxLc0zxXmfJAkqeHppi9nFs2R+nQPy51jAbvoRpdzFg= Subject key identifier: 54:F4:F0:63:6D:0A:E9:63:14:63:D6:14:1A:3E:E7:C9:D3:B6:DC:F8 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584BAD627528154D1E3997E1AD80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aff240dd-81d1-322b-9bb2-f6722f21a5ef.roa Signing time: Wed 29 Oct 2025 01:00:31 +0000 ROA not before: Wed 29 Oct 2025 01:00:31 +0000 ROA not after: Tue 27 Jan 2026 02:00:31 +0000 asID: 36625 IP address blocks: 199.7.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ad:62:75:28:15:4d:1e:39:97:e1:ad:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 29 01:00:31 2025 GMT Not After : Jan 27 02:00:31 2026 GMT Subject: CN=c7e9c590-bbbf-4a4d-a7da-e8b0f8e6a3ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f7:77:52:10:d1:ea:8a:97:59:07:2c:de:03: 13:09:00:3a:29:c9:51:de:1b:89:f7:03:8d:85:ec: c3:25:07:0d:ec:d6:a5:c2:b0:2d:41:97:24:fb:9c: a3:36:fd:38:09:f1:d7:b9:38:2b:ca:25:e3:5c:de: c7:d5:69:68:d7:c5:ee:ab:04:fd:e5:7e:dd:0b:91: 4a:70:95:08:31:c1:9d:8b:7f:db:6e:d9:7f:d9:08: db:32:7e:21:12:a2:eb:d6:82:81:99:fd:d3:9c:54: 38:f5:29:ce:c9:69:d8:43:de:b8:29:86:b4:6f:c7: a2:b5:17:c5:22:7e:e4:56:8e:db:14:f2:04:7c:b1: 83:81:57:94:94:7e:79:62:30:78:ef:66:7f:bf:93: b1:b1:9e:eb:b0:fd:1a:02:4d:b8:a9:9a:89:c1:16: 48:fa:ca:53:37:13:2f:05:64:4a:88:18:ec:d7:aa: 77:3b:55:95:0c:f2:24:1a:9f:97:65:f9:86:b8:da: 14:06:85:80:a3:2e:08:d5:bd:1c:8b:20:59:9c:6d: 41:12:87:3e:11:c3:60:5a:61:fc:0b:c7:a0:b1:87: 6c:cc:66:1f:f5:2c:14:67:f7:18:67:81:1b:1b:2a: cc:02:5a:a9:09:87:90:45:b5:05:6e:19:98:2d:8e: 0d:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:F4:F0:63:6D:0A:E9:63:14:63:D6:14:1A:3E:E7:C9:D3:B6:DC:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aff240dd-81d1-322b-9bb2-f6722f21a5ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 199.7.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:21:11:e4:1d:5c:35:8e:c9:2a:8f:55:98:31:22:bc:73:0d: a4:b0:ce:aa:51:4e:79:fe:42:35:9a:ac:b5:05:93:62:a5:d1: 24:79:ef:b2:53:a5:81:d5:ac:c5:97:74:6a:c7:38:1d:f0:a6: 0a:e8:8c:63:3f:6a:a5:b2:c4:4b:4b:30:0a:35:1e:ba:81:a4: ae:3f:90:75:89:76:47:5b:6d:65:11:c9:c7:1b:30:74:c9:7d: b2:e4:75:ed:85:5a:87:31:72:03:3c:05:d8:1b:4a:5e:c6:f6: d7:3e:a0:40:77:f7:95:a6:c7:9c:39:4e:43:0a:18:1f:32:75: 68:b0:88:fc:50:24:c5:b1:02:bb:23:47:50:54:0d:30:85:01: 32:5c:32:0b:e6:88:e0:c0:64:47:7e:d9:1a:36:a8:12:7e:1d: 78:fc:54:78:e2:b8:8b:82:4c:d7:12:c6:4a:2f:9e:17:06:5e: f3:35:00:ec:ff:31:d3:76:e7:62:54:84:60:2e:15:12:9d:ea: ac:e3:dc:47:4f:1d:d6:cb:1f:36:e1:c5:22:de:5d:67:73:6b: 74:ed:24:46:1d:75:ac:9e:6b:d3:a6:6c:ec:2d:a7:27:29:3b: ae:9e:c9:f6:e4:ef:cb:a1:b0:48:fa:1d:69:6a:27:1d:eb:ca: d3:10:48:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEutYnUoFU0eOZfhrYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAyOTAxMDAzMVoXDTI2MDEyNzAyMDAzMVowLzEtMCsGA1UEAxMk YzdlOWM1OTAtYmJiZi00YTRkLWE3ZGEtZThiMGY4ZTZhM2VjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/d3UhDR6oqXWQcs3gMTCQA6KclR3huJ9wON hezDJQcN7NalwrAtQZck+5yjNv04CfHXuTgryiXjXN7H1Wlo18XuqwT95X7dC5FK cJUIMcGdi3/bbtl/2QjbMn4hEqLr1oKBmf3TnFQ49SnOyWnYQ964KYa0b8eitRfF In7kVo7bFPIEfLGDgVeUlH55YjB472Z/v5OxsZ7rsP0aAk24qZqJwRZI+spTNxMv BWRKiBjs16p3O1WVDPIkGp+XZfmGuNoUBoWAoy4I1b0ciyBZnG1BEoc+EcNgWmH8 C8egsYdszGYf9SwUZ/cYZ4EbGyrMAlqpCYeQRbUFbhmYLY4NlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFT08GNtCuljFGPWFBo+58nTttz4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWZmMjQwZGQtODFkMS0z MjJiLTliYjItZjY3MjJmMjFhNWVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwdHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFAhEeQdXDWOySqPVZgxIrxzDaSwzqpRTnn+QjWarLUFk2Kl0SR577JT pYHVrMWXdGrHOB3wpgrojGM/aqWyxEtLMAo1HrqBpK4/kHWJdkdbbWURyccbMHTJ fbLkde2FWocxcgM8BdgbSl7G9tc+oEB395Wmx5w5TkMKGB8ydWiwiPxQJMWxArsj R1BUDTCFATJcMgvmiODAZEd+2Ro2qBJ+HXj8VHjiuIuCTNcSxkovnhcGXvM1AOz/ MdN252JUhGAuFRKd6qzj3EdPHdbLHzbhxSLeXWdza3TtJEYddayea9OmbOwtpycp O66eyfbk78uhsEj6HWlqJx3rytMQSDY= -----END CERTIFICATE-----Generated at Wed Oct 29 07:11:52 2025 by rpki-client