$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c4efa749-ff1b-3405-91d8-d66782d3c5b1.roa File: c4efa749-ff1b-3405-91d8-d66782d3c5b1.roa (raw, json) Hash identifier: sSIrg0ydjJyzDdkmt6vIHIIQ2WDiQ//wGilU8Z0A3hA= Subject key identifier: 17:83:08:14:7F:6C:1A:6A:F5:7D:6B:3D:56:0A:05:7F:5A:51:46:AB Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584BAD626D2204A2A021FEBCDA90 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c4efa749-ff1b-3405-91d8-d66782d3c5b1.roa Signing time: Wed 29 Oct 2025 01:00:31 +0000 ROA not before: Wed 29 Oct 2025 01:00:31 +0000 ROA not after: Tue 27 Jan 2026 02:00:31 +0000 asID: 36620 IP address blocks: 199.7.71.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ad:62:6d:22:04:a2:a0:21:fe:bc:da:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 29 01:00:31 2025 GMT Not After : Jan 27 02:00:31 2026 GMT Subject: CN=209a2859-b20c-45e4-b139-13883e043b77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ee:f3:19:d0:c0:71:b6:0a:2b:da:9b:32:22: f7:48:e1:03:6d:c6:31:fb:92:43:78:39:99:15:28: b3:a1:cc:34:d4:62:1e:4f:18:7c:b6:dc:1f:90:e4: b9:e6:49:ca:22:cf:98:c4:6f:a2:5a:1b:45:7c:13: b5:d2:da:f7:97:08:62:e8:1b:bc:e5:64:2c:70:4f: 97:ca:0a:1c:2e:1d:d7:0d:d7:0c:43:14:12:a0:5d: c3:a1:f2:ed:21:61:97:e0:88:d1:62:78:ed:9d:a2: c0:8c:e9:8e:04:f9:14:4e:32:e3:52:48:67:be:a8: 0e:b5:52:0c:d3:e2:1a:8a:cf:c7:ee:7a:90:7b:5e: 1c:31:8a:ac:cc:51:8d:5f:ef:a7:c8:28:22:e7:d8: de:95:be:16:67:33:39:20:d5:35:f8:19:fa:4e:cf: cf:fa:bb:fd:18:c2:ef:9e:1f:b5:25:87:e3:fc:ac: bc:a4:16:02:c2:90:de:2c:6f:ab:49:99:46:ac:de: 46:14:e4:78:17:41:1e:4c:90:01:04:8a:00:e6:9c: 7e:24:56:00:2c:12:bd:9c:ba:e0:b5:53:fb:d5:ee: 93:4f:c5:eb:28:2d:7f:2d:e1:05:1c:8a:f9:0e:14: 53:b4:79:9e:7c:70:77:34:dc:24:0e:d8:7b:ec:96: bc:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:83:08:14:7F:6C:1A:6A:F5:7D:6B:3D:56:0A:05:7F:5A:51:46:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c4efa749-ff1b-3405-91d8-d66782d3c5b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 199.7.71.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:d7:2b:33:94:eb:52:80:e6:44:f0:a6:db:38:0a:a0:8d:7a: 79:be:bd:1f:5a:49:ed:b7:d0:f4:98:30:23:8f:6a:81:91:af: 6a:d1:65:72:84:67:b4:e2:40:1e:cb:55:19:3c:59:ae:18:d3: ec:ed:07:aa:25:1a:b8:93:37:e7:5d:95:2d:1b:fc:85:fb:1b: aa:ec:26:6c:98:1e:e7:98:a5:8d:22:3e:3d:aa:4e:18:2a:50: 2e:ba:79:62:df:b5:7f:e8:b4:50:5d:08:82:04:ec:74:83:31: 46:8a:ca:61:a1:63:cc:e3:79:2a:14:fa:d8:68:b6:f2:22:02: 2f:48:ec:6f:bd:29:40:75:fb:cd:e1:c3:08:2a:b7:c2:fc:c4: ad:c1:7c:ca:c3:f4:02:60:68:e6:a2:1f:c4:1f:f4:3f:65:3c: f7:04:9a:4f:28:2b:02:6a:df:90:87:5b:47:22:74:62:01:10: 8b:22:f6:c6:4c:dc:47:d1:a7:4a:2b:68:30:3a:df:72:41:12: f1:84:7e:a6:1a:ea:ef:a6:68:9e:a8:2e:65:91:d7:0f:7e:83: c3:e2:e9:00:e6:0e:d3:76:fc:17:a2:f6:63:7f:8e:37:8a:7a: 6a:b2:eb:fe:1a:6d:27:0c:01:5c:27:fb:b2:32:23:2b:6d:d3: a3:a7:b8:ce -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEutYm0iBKKgIf682pAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAyOTAxMDAzMVoXDTI2MDEyNzAyMDAzMVowLzEtMCsGA1UEAxMk MjA5YTI4NTktYjIwYy00NWU0LWIxMzktMTM4ODNlMDQzYjc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2+7zGdDAcbYKK9qbMiL3SOEDbcYx+5JDeDmZ FSizocw01GIeTxh8ttwfkOS55knKIs+YxG+iWhtFfBO10tr3lwhi6Bu85WQscE+X ygocLh3XDdcMQxQSoF3DofLtIWGX4IjRYnjtnaLAjOmOBPkUTjLjUkhnvqgOtVIM 0+Iais/H7nqQe14cMYqszFGNX++nyCgi59jelb4WZzM5INU1+Bn6Ts/P+rv9GMLv nh+1JYfj/Ky8pBYCwpDeLG+rSZlGrN5GFOR4F0EeTJABBIoA5px+JFYALBK9nLrg tVP71e6TT8XrKC1/LeEFHIr5DhRTtHmefHB3NNwkDth77Ja8BwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBeDCBR/bBpq9X1rPVYKBX9aUUarMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzRlZmE3NDktZmYxYi0z NDA1LTkxZDgtZDY2NzgyZDNjNWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxwdHHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBH1yszlOtSgOZE8KbbOAqgjXp5vr0fWkntt9D0mDAjj2qBka9q0WVy hGe04kAey1UZPFmuGNPs7QeqJRq4kzfnXZUtG/yF+xuq7CZsmB7nmKWNIj49qk4Y KlAuunli37V/6LRQXQiCBOx0gzFGisphoWPM43kqFPrYaLbyIgIvSOxvvSlAdfvN 4cMIKrfC/MStwXzKw/QCYGjmoh/EH/Q/ZTz3BJpPKCsCat+Qh1tHInRiARCLIvbG TNxH0adKK2gwOt9yQRLxhH6mGurvpmieqC5lkdcPfoPD4ukA5g7TdvwXovZjf443 inpqsuv+Gm0nDAFcJ/uyMiMrbdOjp7jO -----END CERTIFICATE-----Generated at Wed Oct 29 09:11:51 2025 by rpki-client