$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/daa373de-208a-3bd9-b922-46eab2bb7340.roa File: daa373de-208a-3bd9-b922-46eab2bb7340.roa (raw, json) Hash identifier: sHJd3h6TGfLXcXRoaV8x2Umjsk6Zhvomo1O/lA+cGo8= Subject key identifier: 60:27:20:73:DE:40:B0:B3:F0:FB:42:B0:6E:6F:13:15:BB:98:6C:31 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584BAD627AC980D0548936443F80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/daa373de-208a-3bd9-b922-46eab2bb7340.roa Signing time: Wed 29 Oct 2025 01:00:31 +0000 ROA not before: Wed 29 Oct 2025 01:00:31 +0000 ROA not after: Tue 27 Jan 2026 02:00:31 +0000 asID: 396589 IP address blocks: 199.7.71.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ad:62:7a:c9:80:d0:54:89:36:44:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 29 01:00:31 2025 GMT Not After : Jan 27 02:00:31 2026 GMT Subject: CN=b803da0b-e7a1-40c2-a3cd-f0ecd16d1241 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:c6:a0:66:9e:2d:fa:c4:f7:d7:e1:64:1d:d7: cf:6c:79:34:6d:9f:5e:df:a2:07:62:03:e5:7c:48: d8:b8:07:21:71:60:91:e5:cd:c1:46:ce:68:55:a7: 24:8f:d6:e5:ee:5b:bf:72:14:5a:e9:e5:3e:5f:0a: 78:8a:8e:cc:d0:56:43:52:49:57:e0:75:27:5a:97: dc:34:0f:f4:ae:3f:e9:ad:e0:bc:14:16:6b:9d:3f: 8d:6c:32:8a:fe:20:51:e8:80:e4:bd:ec:2c:da:fd: b9:b3:b0:0a:fe:9c:7f:47:1b:04:bf:35:90:d8:8d: d9:ad:70:0b:ed:16:ba:52:94:63:2f:99:31:73:fc: 0f:1b:20:bd:e4:f9:1b:5d:46:49:1b:e4:6b:0d:2d: f7:8e:63:41:86:e3:1c:f7:71:db:ad:7a:93:e3:da: f6:c1:92:a3:d8:6a:f0:9d:7d:5b:31:c5:96:57:b3: f3:84:93:4a:bb:9e:97:37:42:22:1e:d6:cc:eb:f2: 9e:6d:15:20:79:29:48:29:90:35:9a:ce:ca:1d:b3: 96:e9:80:51:a8:35:a0:27:91:1e:b5:27:d9:b8:a4: 65:f4:30:94:26:0b:ab:62:6c:63:2d:fb:ce:e6:7f: 10:48:f4:5b:a8:74:e7:17:d8:17:0b:eb:eb:b8:a4: a3:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:27:20:73:DE:40:B0:B3:F0:FB:42:B0:6E:6F:13:15:BB:98:6C:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/daa373de-208a-3bd9-b922-46eab2bb7340.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 199.7.71.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:4f:6f:92:32:18:6a:7c:43:55:31:93:c2:c3:59:8c:13:e6: 64:b6:a5:fe:21:2f:9e:d0:ca:a9:e4:e5:48:2a:fd:a0:fa:d1: 6f:68:d3:1e:58:d5:f6:3a:0b:84:39:08:ae:52:cb:5b:40:e8: 39:e4:da:62:78:74:9c:db:b2:c2:22:91:5f:6e:ef:3d:e5:5c: f6:f9:ef:31:98:61:3a:9a:2f:ba:33:98:28:1b:b5:75:c2:8a: df:58:80:12:59:1f:da:34:10:e9:a3:60:30:31:cc:d8:50:9d: b1:5f:73:ef:65:b4:69:38:10:77:23:89:fb:e2:3b:65:25:ac: a2:88:18:51:b4:d3:dd:6d:5d:cb:4c:8f:a3:28:6d:21:64:d6: 05:97:c9:79:06:44:9b:0b:8e:af:76:59:15:06:e5:40:f5:a7: 66:ec:06:03:08:98:c9:1f:e2:aa:57:69:08:14:90:e5:f8:1b: 12:e4:1e:b9:0d:75:cd:8c:3a:96:af:36:5c:bd:48:87:cf:ef: 42:cd:5e:ae:37:b6:ad:52:71:be:26:d9:25:6a:9e:84:df:a0: 51:1a:41:18:8b:06:02:38:04:cf:f0:11:9c:cf:19:23:e5:0f: 04:1b:8b:29:33:9e:4c:50:d8:f6:43:c6:cd:0a:a5:05:85:e9: 91:58:49:de -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEutYnrJgNBUiTZEP4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAyOTAxMDAzMVoXDTI2MDEyNzAyMDAzMVowLzEtMCsGA1UEAxMk YjgwM2RhMGItZTdhMS00MGMyLWEzY2QtZjBlY2QxNmQxMjQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcagZp4t+sT31+FkHdfPbHk0bZ9e36IHYgPl fEjYuAchcWCR5c3BRs5oVackj9bl7lu/chRa6eU+Xwp4io7M0FZDUklX4HUnWpfc NA/0rj/preC8FBZrnT+NbDKK/iBR6IDkvews2v25s7AK/px/RxsEvzWQ2I3ZrXAL 7Ra6UpRjL5kxc/wPGyC95PkbXUZJG+RrDS33jmNBhuMc93HbrXqT49r2wZKj2Grw nX1bMcWWV7PzhJNKu56XN0IiHtbM6/KebRUgeSlIKZA1ms7KHbOW6YBRqDWgJ5Ee tSfZuKRl9DCUJgurYmxjLfvO5n8QSPRbqHTnF9gXC+vruKSjfQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGAnIHPeQLCz8PtCsG5vExW7mGwxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZGFhMzczZGUtMjA4YS0z YmQ5LWI5MjItNDZlYWIyYmI3MzQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxwdHHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAsT2+SMhhqfENVMZPCw1mME+ZktqX+IS+e0Mqp5OVIKv2g+tFvaNMe WNX2OguEOQiuUstbQOg55NpieHSc27LCIpFfbu895Vz2+e8xmGE6mi+6M5goG7V1 worfWIASWR/aNBDpo2AwMczYUJ2xX3PvZbRpOBB3I4n74jtlJayiiBhRtNPdbV3L TI+jKG0hZNYFl8l5BkSbC46vdlkVBuVA9adm7AYDCJjJH+KqV2kIFJDl+BsS5B65 DXXNjDqWrzZcvUiHz+9CzV6uN7atUnG+Jtklap6E36BRGkEYiwYCOATP8BGczxkj 5Q8EG4spM55MUNj2Q8bNCqUFhemRWEne -----END CERTIFICATE-----Generated at Wed Oct 29 09:19:11 2025 by rpki-client