$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f1cb0954-1849-3cc9-802b-245a53c17568.roa File: f1cb0954-1849-3cc9-802b-245a53c17568.roa (raw, json) Hash identifier: QY9CyB7dgjHvIRLNG5wK7S4sdunKp+GwLlrrMdU43ws= Subject key identifier: D1:9F:7F:89:54:B1:B4:C8:EA:47:58:11:95:05:C2:1F:1C:6C:C6:58 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584BAD6273F654B79DA5B86D9E00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f1cb0954-1849-3cc9-802b-245a53c17568.roa Signing time: Wed 29 Oct 2025 01:00:31 +0000 ROA not before: Wed 29 Oct 2025 01:00:31 +0000 ROA not after: Tue 27 Jan 2026 02:00:31 +0000 asID: 36621 IP address blocks: 199.7.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ad:62:73:f6:54:b7:9d:a5:b8:6d:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 29 01:00:31 2025 GMT Not After : Jan 27 02:00:31 2026 GMT Subject: CN=a28e309f-a9e0-45e4-b4f2-de58f6fa8c4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c6:b2:cc:f7:26:85:96:c5:44:4d:4c:50:95: d5:33:5c:7c:d1:b7:ed:43:c0:14:19:83:4d:76:5b: 3a:7b:49:04:68:30:d4:2e:b1:4b:87:64:50:33:7b: e4:89:a7:f4:e4:6d:c0:46:47:c9:1f:d5:c9:56:d4: ec:6b:fd:34:56:68:be:fb:3a:60:00:28:1c:ea:30: 21:bd:9f:41:6e:ab:c6:d0:04:6d:6c:12:29:da:a5: ad:00:64:0a:23:fe:42:f7:24:25:79:dd:6a:38:4f: a4:55:8e:ab:5c:a0:42:e5:04:fd:72:00:47:f4:8a: 7b:23:91:c2:0a:c5:6f:3c:b2:92:c5:de:53:85:8f: de:e7:fb:71:18:af:cf:26:3c:e3:87:3d:25:b0:eb: 16:d1:7a:a6:fd:d2:5e:8f:96:a9:b5:83:60:c1:cf: cb:87:31:0f:d8:e2:dc:07:e7:3e:4b:89:0b:4d:6e: 85:ab:a2:a9:09:d7:05:2f:7e:cb:84:95:6d:56:df: f1:11:e6:a9:73:68:0f:56:ce:d6:75:96:1f:4d:18: 34:9e:b4:59:9c:a5:bd:30:7f:63:86:6e:8a:f2:a8: 58:8c:44:0a:0b:fb:27:6e:15:91:1b:a9:68:c0:3f: 9a:b7:f3:58:ef:92:bd:85:99:86:49:c5:70:af:ff: c1:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:9F:7F:89:54:B1:B4:C8:EA:47:58:11:95:05:C2:1F:1C:6C:C6:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f1cb0954-1849-3cc9-802b-245a53c17568.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 199.7.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:c3:42:53:e5:9c:69:fb:38:53:95:d0:46:aa:79:ca:7c:07: ce:4b:c8:49:77:c2:4b:69:ef:b5:0e:90:03:ac:d1:ac:3a:00: 3b:36:a4:f3:df:af:90:93:fb:6d:62:0f:56:fd:17:ad:27:42: 71:68:53:9d:bb:b7:a7:63:f1:07:ac:2b:c6:da:74:25:43:d1: 8a:f8:03:96:66:7c:e9:18:7a:46:e9:4c:86:7f:9e:3f:21:e8: 0c:e2:02:69:00:7d:0b:e0:92:17:50:26:ab:fb:fa:27:47:8a: 7b:b6:4c:1d:60:75:f8:92:bf:ec:b5:6f:83:58:6a:6f:c5:20: a5:ae:d9:8c:90:c8:11:65:c7:c7:0d:89:99:3d:9f:c5:d6:40: 4d:0b:35:1d:dc:d2:d3:6d:bd:50:4a:b2:9d:d9:05:c2:34:a2: c1:b6:5b:28:98:75:6a:8f:b9:79:27:ed:7e:83:d5:8b:99:4b: 4a:48:19:89:a2:dd:a6:cd:73:a6:46:ac:24:c4:28:ea:67:00: b0:f9:f9:7c:54:3e:98:ed:eb:1d:86:7c:28:b4:da:45:6f:0f: 45:8f:d1:5d:55:7f:2c:86:21:32:0d:05:04:9d:26:98:c7:3c: 37:20:bc:42:c9:b4:4a:63:83:1d:ab:88:0f:78:41:f5:c6:e3: 64:46:92:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEutYnP2VLedpbhtngAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAyOTAxMDAzMVoXDTI2MDEyNzAyMDAzMVowLzEtMCsGA1UEAxMk YTI4ZTMwOWYtYTllMC00NWU0LWI0ZjItZGU1OGY2ZmE4YzRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMayzPcmhZbFRE1MUJXVM1x80bftQ8AUGYNN dls6e0kEaDDULrFLh2RQM3vkiaf05G3ARkfJH9XJVtTsa/00Vmi++zpgACgc6jAh vZ9BbqvG0ARtbBIp2qWtAGQKI/5C9yQled1qOE+kVY6rXKBC5QT9cgBH9Ip7I5HC CsVvPLKSxd5ThY/e5/txGK/PJjzjhz0lsOsW0Xqm/dJej5aptYNgwc/LhzEP2OLc B+c+S4kLTW6Fq6KpCdcFL37LhJVtVt/xEeapc2gPVs7WdZYfTRg0nrRZnKW9MH9j hm6K8qhYjEQKC/snbhWRG6lowD+at/NY75K9hZmGScVwr//BkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNGff4lUsbTI6kdYEZUFwh8cbMZYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjFjYjA5NTQtMTg0OS0z Y2M5LTgwMmItMjQ1YTUzYzE3NTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwdHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEDDQlPlnGn7OFOV0Eaqecp8B85LyEl3wktp77UOkAOs0aw6ADs2pPPf r5CT+21iD1b9F60nQnFoU527t6dj8QesK8badCVD0Yr4A5ZmfOkYekbpTIZ/nj8h 6AziAmkAfQvgkhdQJqv7+idHinu2TB1gdfiSv+y1b4NYam/FIKWu2YyQyBFlx8cN iZk9n8XWQE0LNR3c0tNtvVBKsp3ZBcI0osG2WyiYdWqPuXkn7X6D1YuZS0pIGYmi 3abNc6ZGrCTEKOpnALD5+XxUPpjt6x2GfCi02kVvD0WP0V1VfyyGITINBQSdJpjH PDcgvELJtEpjgx2riA94QfXG42RGkhM= -----END CERTIFICATE-----Generated at Wed Oct 29 07:07:54 2025 by rpki-client