$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3df48b1f-3ca0-3c23-8ef3-696a3904554d.roa File: 3df48b1f-3ca0-3c23-8ef3-696a3904554d.roa (raw, json) Hash identifier: ynqXXR7JrO8qvms6lN2eim+8rPlOzw2qzfJNmFsNnts= Subject key identifier: 96:C6:57:AB:60:41:51:0A:07:B0:7E:15:2B:35:9D:A6:BB:C5:A2:4F Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B1C3702ED2F789F84E0D26700 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3df48b1f-3ca0-3c23-8ef3-696a3904554d.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 397224 IP address blocks: 199.7.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Sep 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:37:02:ed:2f:78:9f:84:e0:d2:67:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=c21b8163-a7c5-42c4-b50d-6729fc06e13c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:03:65:76:43:b1:86:df:61:6c:77:38:20:fd: b4:26:7f:9d:d2:82:72:ae:8e:e0:b6:3e:a0:c2:40: 52:58:84:41:85:ae:6d:88:68:47:14:55:cd:cc:00: 4c:8d:a7:5c:88:fa:01:3d:fe:46:b5:11:14:3c:3d: ea:00:a7:53:52:42:d3:15:f1:d7:21:c5:08:8b:d8: ba:04:01:32:64:f8:6f:86:63:af:cc:75:17:9a:fe: 8f:a6:7c:17:29:66:c1:2a:6d:7e:9e:38:3a:cb:ef: 11:74:21:4e:35:09:f5:f7:0b:e4:74:f8:a6:2a:ba: d1:16:c3:36:94:01:47:67:35:78:ac:42:41:e1:3c: e5:61:b7:0e:95:13:21:4a:de:17:4f:c4:47:38:47: 30:f7:c3:da:9a:e7:fb:8d:c5:96:f2:42:5c:b6:fc: d8:6c:58:19:06:fa:93:ec:1d:2f:ca:f9:33:83:58: d1:55:5b:09:af:26:bf:0a:bd:ab:ab:08:aa:73:e1: 5b:d2:e9:09:a6:24:89:40:83:75:16:b8:7f:8b:35: 52:bb:e3:96:57:78:4b:6b:8b:81:30:34:06:a0:25: 65:64:6f:cc:4a:0a:80:cb:28:9e:ae:87:c9:9e:ef: a7:dc:c0:51:63:53:d9:c3:ed:50:cf:7b:d9:c3:63: b2:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:C6:57:AB:60:41:51:0A:07:B0:7E:15:2B:35:9D:A6:BB:C5:A2:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3df48b1f-3ca0-3c23-8ef3-696a3904554d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 199.7.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:7d:d6:86:91:40:c7:86:a8:b6:73:cc:62:36:ed:b3:8a:5d: 58:3d:96:40:15:00:67:25:03:4a:d3:d8:99:08:6c:ae:6b:ae: 38:41:8c:cd:1b:20:64:85:35:52:7d:09:c8:ad:a8:03:67:af: 67:00:59:6b:9f:91:35:fc:21:1a:98:18:78:33:f5:3f:1f:0d: df:cd:7c:1b:59:43:35:3c:9c:85:e2:9b:bc:51:3c:6c:1a:19: 6a:00:96:af:09:09:5f:1c:3d:2e:15:28:ae:07:3d:82:5c:21: d2:a8:48:44:4e:20:f8:6c:1c:63:83:0e:3e:85:e0:9a:2f:5c: a1:0a:85:4f:60:ea:e7:a2:36:42:2e:86:0d:0c:18:bc:b7:d3: 2d:c0:56:df:3b:d7:48:b6:88:38:fd:20:61:c5:68:9d:5d:6a: 09:5b:25:88:19:7c:02:e9:20:91:8c:71:3f:78:e6:04:a2:5e: 9d:84:d5:04:87:7a:ba:ac:69:16:32:78:ec:cd:f0:33:0c:c9: 8b:03:fe:c2:5d:e4:0c:e2:bd:4e:12:96:0e:0a:fa:31:9a:47: b1:cb:78:bf:35:75:b3:7a:18:14:10:74:e0:91:16:a3:1e:14: c9:10:18:66:e8:51:14:c2:0d:86:7f:86:c2:00:cb:4c:e3:01: fa:e3:59:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNwLtL3ifhODSZwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk YzIxYjgxNjMtYTdjNS00MmM0LWI1MGQtNjcyOWZjMDZlMTNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngNldkOxht9hbHc4IP20Jn+d0oJyro7gtj6g wkBSWIRBha5tiGhHFFXNzABMjadciPoBPf5GtREUPD3qAKdTUkLTFfHXIcUIi9i6 BAEyZPhvhmOvzHUXmv6PpnwXKWbBKm1+njg6y+8RdCFONQn19wvkdPimKrrRFsM2 lAFHZzV4rEJB4TzlYbcOlRMhSt4XT8RHOEcw98Pamuf7jcWW8kJctvzYbFgZBvqT 7B0vyvkzg1jRVVsJrya/Cr2rqwiqc+Fb0ukJpiSJQIN1Frh/izVSu+OWV3hLa4uB MDQGoCVlZG/MSgqAyyierofJnu+n3MBRY1PZw+1Qz3vZw2OyBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJbGV6tgQVEKB7B+FSs1naa7xaJPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvM2RmNDhiMWYtM2NhMC0z YzIzLThlZjMtNjk2YTM5MDQ1NTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwdCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAJ91oaRQMeGqLZzzGI27bOKXVg9lkAVAGclA0rT2JkIbK5rrjhBjM0b IGSFNVJ9CcitqANnr2cAWWufkTX8IRqYGHgz9T8fDd/NfBtZQzU8nIXim7xRPGwa GWoAlq8JCV8cPS4VKK4HPYJcIdKoSEROIPhsHGODDj6F4JovXKEKhU9g6ueiNkIu hg0MGLy30y3AVt8710i2iDj9IGHFaJ1daglbJYgZfALpIJGMcT945gSiXp2E1QSH erqsaRYyeOzN8DMMyYsD/sJd5AzivU4Slg4K+jGaR7HLeL81dbN6GBQQdOCRFqMe FMkQGGboURTCDYZ/hsIAy0zjAfrjWY8= -----END CERTIFICATE-----Generated at Thu Sep 18 00:06:37 2025 by rpki-client