$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f8278b0b-7976-3a49-9a77-7cb28d7f06e7.roa File: f8278b0b-7976-3a49-9a77-7cb28d7f06e7.roa (raw, json) Hash identifier: WjRQAioTeqe2IfhbvneX7dNjCijG9nfIjhWQi8Kb/M0= Subject key identifier: 7A:B8:C1:0A:B5:D8:79:B3:3F:7A:E4:35:B3:0F:68:81:86:25:61:59 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584BAD626606B8B427F5051A8502 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f8278b0b-7976-3a49-9a77-7cb28d7f06e7.roa Signing time: Wed 29 Oct 2025 01:00:31 +0000 ROA not before: Wed 29 Oct 2025 01:00:31 +0000 ROA not after: Tue 27 Jan 2026 02:00:31 +0000 asID: 19836 IP address blocks: 199.7.71.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ad:62:66:06:b8:b4:27:f5:05:1a:85:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 29 01:00:31 2025 GMT Not After : Jan 27 02:00:31 2026 GMT Subject: CN=5a9f998e-e835-4812-85a3-3ed8d185e3d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:98:29:aa:7b:d0:78:6e:d9:dd:b1:4c:9e:25: 9d:77:59:43:6a:95:4a:9c:4c:94:10:84:91:ba:0e: 55:12:69:97:e4:4c:07:ec:d2:f2:b3:49:8d:1b:f8: fd:1c:92:ca:d0:c6:11:cb:68:ff:d8:08:6d:65:a8: 47:84:6a:ab:65:29:70:c2:52:ca:ff:42:e7:30:3b: b0:88:a1:3b:20:12:37:2c:16:71:de:f2:3e:bb:0e: 54:d1:59:e0:29:3d:15:16:b7:31:2d:a4:bc:de:5c: 3e:db:35:74:b4:f8:1e:21:a9:af:87:93:1b:31:bf: 73:98:b2:b7:b1:76:7f:ef:4b:db:9a:b4:29:5c:ac: cd:b9:b9:76:f1:a1:14:ce:c1:59:5d:2b:f5:b7:bb: 15:bd:24:cc:84:d6:a2:b7:34:0b:1c:b3:86:c3:b1: 61:2e:d6:4a:9c:65:60:8f:e3:b5:8d:ba:b2:98:f3: de:50:f3:c2:b3:be:0d:97:9c:35:9d:3c:5c:e4:6a: 9c:cc:e9:3b:2f:9b:8e:0e:96:9e:16:e8:71:5b:14: 1f:31:49:57:3b:08:3a:c8:44:5e:c0:dc:0d:c8:80: a0:ea:64:b0:e3:1e:3f:13:ab:ed:09:5c:70:2e:9a: 18:d7:4f:dc:b3:ec:d0:f6:ee:bd:c3:de:a4:a3:ce: df:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:B8:C1:0A:B5:D8:79:B3:3F:7A:E4:35:B3:0F:68:81:86:25:61:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f8278b0b-7976-3a49-9a77-7cb28d7f06e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 199.7.71.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:66:49:c3:4a:c7:88:f4:fd:f2:e8:b4:c6:95:e6:c4:f2:2b: 68:ba:88:3d:d3:2c:ad:39:be:70:52:ad:c3:29:ed:78:19:ab: a3:76:c0:ee:df:7c:f8:e7:4c:46:8e:58:37:f1:35:70:c0:0f: b1:ef:53:65:6c:71:df:09:d1:b8:71:94:6f:dd:dd:f5:19:09: 6f:25:8f:0d:92:a6:ba:e7:fe:e4:34:b3:1d:2e:4c:db:d0:ac: 04:ae:75:37:f4:53:f1:b9:f4:e9:a0:a1:99:33:bc:ef:59:64: c7:15:79:e9:d0:36:9a:c4:03:f1:49:19:5a:98:5f:06:91:68: 3f:30:3d:e1:71:3f:4c:46:de:88:15:f6:76:7a:43:4b:ea:84: 4f:6e:8e:33:03:7c:13:0b:93:da:f8:24:aa:2c:c5:52:f1:83: bc:95:6b:26:66:fc:7b:36:45:c9:fe:d4:76:1c:60:95:af:b5: 87:97:cd:41:e2:ed:ab:30:84:61:e5:9f:c9:2a:e3:05:b6:c9: 4e:1b:78:93:75:0e:81:53:7e:85:3d:4f:09:f8:4d:9f:60:27: bf:15:17:14:5f:21:32:2e:f5:00:ab:80:2c:fe:65:df:a3:9d: 26:a2:54:36:d3:06:13:f4:bd:74:28:95:92:ce:02:90:d4:6e: de:fc:10:1e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEutYmYGuLQn9QUahQIwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAyOTAxMDAzMVoXDTI2MDEyNzAyMDAzMVowLzEtMCsGA1UEAxMk NWE5Zjk5OGUtZTgzNS00ODEyLTg1YTMtM2VkOGQxODVlM2Q0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJgpqnvQeG7Z3bFMniWdd1lDapVKnEyUEISR ug5VEmmX5EwH7NLys0mNG/j9HJLK0MYRy2j/2AhtZahHhGqrZSlwwlLK/0LnMDuw iKE7IBI3LBZx3vI+uw5U0VngKT0VFrcxLaS83lw+2zV0tPgeIamvh5MbMb9zmLK3 sXZ/70vbmrQpXKzNubl28aEUzsFZXSv1t7sVvSTMhNaitzQLHLOGw7FhLtZKnGVg j+O1jbqymPPeUPPCs74Nl5w1nTxc5GqczOk7L5uODpaeFuhxWxQfMUlXOwg6yERe wNwNyICg6mSw4x4/E6vtCVxwLpoY10/cs+zQ9u69w96ko87f0wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHq4wQq12HmzP3rkNbMPaIGGJWFZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjgyNzhiMGItNzk3Ni0z YTQ5LTlhNzctN2NiMjhkN2YwNmU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxwdHHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA2ZknDSseI9P3y6LTGlebE8itouog90yytOb5wUq3DKe14GaujdsDu 33z450xGjlg38TVwwA+x71NlbHHfCdG4cZRv3d31GQlvJY8Nkqa65/7kNLMdLkzb 0KwErnU39FPxufTpoKGZM7zvWWTHFXnp0DaaxAPxSRlamF8GkWg/MD3hcT9MRt6I FfZ2ekNL6oRPbo4zA3wTC5Pa+CSqLMVS8YO8lWsmZvx7NkXJ/tR2HGCVr7WHl81B 4u2rMIRh5Z/JKuMFtslOG3iTdQ6BU36FPU8J+E2fYCe/FRcUXyEyLvUAq4As/mXf o50molQ20wYT9L10KJWSzgKQ1G7e/BAe -----END CERTIFICATE-----Generated at Wed Oct 29 09:14:52 2025 by rpki-client