$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7a71f1a3-2694-3350-ae37-53aac64b01a4.roa File: 7a71f1a3-2694-3350-ae37-53aac64b01a4.roa (raw, json) Hash identifier: e9ZNlQ3CNqDAHbZxio1RSM+pZztDomUByec6IVdWj+c= Subject key identifier: DA:FF:51:92:74:C0:DE:95:04:52:15:D4:65:E4:0C:DA:1A:B9:7B:3C Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B1C3705DC86838E8682B4DF50 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7a71f1a3-2694-3350-ae37-53aac64b01a4.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 397238 IP address blocks: 192.100.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:37:05:dc:86:83:8e:86:82:b4:df:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=4e06dce1-4226-44ba-932e-64e013c5c20c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:39:8a:80:85:00:69:63:87:9b:63:e2:f3:a9: f6:ac:5b:d8:59:1d:e5:b0:e5:b5:fb:45:ce:ba:61: 71:2e:f3:ce:ee:8c:5a:bb:2b:41:21:b6:d6:a6:2f: f9:95:95:c1:a9:15:42:c2:8a:e4:b8:02:29:63:e9: 0e:3c:1e:30:a1:a3:81:8e:c1:89:91:c4:b1:be:ed: 98:b7:db:cf:7a:28:17:bc:32:fe:f1:a3:09:5f:51: 06:50:a5:0e:25:b4:32:55:cf:ff:04:6d:c6:0a:4b: 80:68:9e:bc:5d:3e:24:11:9b:bf:e0:47:00:dd:36: 1b:1d:93:e9:b2:11:c5:7e:5e:b8:55:63:19:93:98: cc:34:80:a8:4b:e2:19:ac:e9:96:6e:c8:7c:74:4d: 42:24:0b:80:16:d4:b0:15:66:d9:f5:1d:3f:56:4c: a5:fb:08:3e:b1:6d:46:bd:f9:5a:3b:2f:cb:60:fd: e4:f7:1f:24:0b:37:70:7f:60:d9:cf:87:50:c1:c0: 5e:f2:3f:a8:c3:e3:30:65:6e:44:12:87:37:47:a4: 90:6c:d3:3c:45:2a:02:98:f4:91:f1:3c:3b:a8:ef: a4:e2:a6:cf:e3:c7:3d:c4:c7:a0:96:03:ba:05:dd: 0a:bc:88:8f:21:ff:0c:6e:2b:a0:72:ae:a5:5e:d4: dd:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:FF:51:92:74:C0:DE:95:04:52:15:D4:65:E4:0C:DA:1A:B9:7B:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7a71f1a3-2694-3350-ae37-53aac64b01a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 192.100.59.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:aa:52:d1:0a:d7:a4:a2:38:05:b4:c5:92:61:a7:91:57:cf: 7d:60:3d:91:ac:b9:09:61:07:f4:e1:47:16:9a:ad:7b:07:42: 76:50:9f:37:6b:53:70:ef:47:d8:7c:d0:96:79:ad:17:54:5e: 6b:06:3c:e3:b8:80:6a:13:84:1d:b3:25:25:01:fb:b2:ca:c2: b0:ba:4c:b2:26:39:12:94:d1:4c:f5:f8:83:28:54:a7:10:aa: 2d:6d:6a:f0:bc:a3:61:91:08:a2:2a:a1:38:0d:98:73:50:95: a2:e6:3d:eb:af:39:5f:ee:9a:5c:5c:fe:1a:26:5a:07:70:9b: c2:1c:39:47:de:2f:ad:fa:e5:54:e5:19:09:b9:af:71:d2:63: 77:48:ea:30:75:db:e4:6f:c9:86:d6:a7:87:57:15:aa:ec:77: 9f:6f:60:aa:1e:71:f3:16:91:7b:c6:6c:c0:5b:17:04:fa:6b: d0:0f:d1:d9:bb:6b:32:c1:3c:9f:7a:6d:7c:2c:bd:b4:03:12: d5:1e:4b:37:60:d8:98:64:c6:be:dd:6d:75:5d:6f:bd:26:e3: 83:72:85:19:9b:43:be:f8:bd:2b:dd:13:3f:15:b7:81:b6:cd: 47:7b:cf:1f:dd:f5:b9:6e:17:4e:51:6d:ce:fd:1a:35:55:61: f0:80:38:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNwXchoOOhoK031AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk NGUwNmRjZTEtNDIyNi00NGJhLTkzMmUtNjRlMDEzYzVjMjBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDmKgIUAaWOHm2Pi86n2rFvYWR3lsOW1+0XO umFxLvPO7oxauytBIbbWpi/5lZXBqRVCworkuAIpY+kOPB4woaOBjsGJkcSxvu2Y t9vPeigXvDL+8aMJX1EGUKUOJbQyVc//BG3GCkuAaJ68XT4kEZu/4EcA3TYbHZPp shHFfl64VWMZk5jMNICoS+IZrOmWbsh8dE1CJAuAFtSwFWbZ9R0/Vkyl+wg+sW1G vflaOy/LYP3k9x8kCzdwf2DZz4dQwcBe8j+ow+MwZW5EEoc3R6SQbNM8RSoCmPSR 8Tw7qO+k4qbP48c9xMeglgO6Bd0KvIiPIf8Mbiugcq6lXtTdEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNr/UZJ0wN6VBFIV1GXkDNoauXs8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvN2E3MWYxYTMtMjY5NC0z MzUwLWFlMzctNTNhYWM2NGIwMWE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwGQ7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHCqUtEK16SiOAW0xZJhp5FXz31gPZGsuQlhB/ThRxaarXsHQnZQnzdr U3DvR9h80JZ5rRdUXmsGPOO4gGoThB2zJSUB+7LKwrC6TLImORKU0Uz1+IMoVKcQ qi1tavC8o2GRCKIqoTgNmHNQlaLmPeuvOV/umlxc/homWgdwm8IcOUfeL6365VTl GQm5r3HSY3dI6jB12+RvyYbWp4dXFarsd59vYKoecfMWkXvGbMBbFwT6a9AP0dm7 azLBPJ96bXwsvbQDEtUeSzdg2Jhkxr7dbXVdb70m44NyhRmbQ774vSvdEz8Vt4G2 zUd7zx/d9bluF05Rbc79GjVVYfCAOEc= -----END CERTIFICATE-----Generated at Sun Sep 14 07:43:34 2025 by rpki-client