$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/dfb0982a-41c3-3e04-a214-27f23f1ed8e7.roa File: dfb0982a-41c3-3e04-a214-27f23f1ed8e7.roa (raw, json) Hash identifier: 1qHC4B9ZRvGNFioU8Z/QV2qjR+9gP+JqoEJCBsReBU4= Subject key identifier: 51:9B:B3:09:E3:6B:51:87:FE:1E:6F:7F:3A:53:F5:8E:8B:AA:88:8B Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B48E1E152B76B4F241C249230 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/dfb0982a-41c3-3e04-a214-27f23f1ed8e7.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 397225 IP address blocks: 199.7.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:e1:52:b7:6b:4f:24:1c:24:92:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=a9e1d2a5-9841-435e-8596-297469d7e866 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:8f:26:cc:ad:1b:e7:3a:20:ce:01:5d:ad:9a: 37:44:61:59:bb:76:ac:06:20:85:bf:15:39:44:fc: 72:99:e5:9a:61:88:47:3b:d3:1e:f1:8d:0d:1f:9c: db:8f:e7:09:f4:2d:10:d1:45:2e:df:89:e4:35:a3: 43:76:6a:05:c9:55:65:4a:95:3d:44:ec:f4:45:70: 72:7a:39:ae:c2:94:1c:ae:dc:bc:bd:10:ac:df:d2: 68:15:41:18:8f:9a:fa:63:d3:da:37:27:87:30:f6: 13:1a:21:e1:a1:20:55:2e:d0:f5:be:c1:91:5f:75: dd:4a:66:39:1b:dc:ac:08:26:28:f0:ee:ad:9d:12: d7:5f:64:9a:c6:b6:d4:5e:30:27:fd:07:34:b4:6b: df:d0:0d:c8:18:7e:fd:56:77:ae:21:dc:f5:fc:27: fb:c9:62:a8:e9:41:80:45:5f:6c:db:15:80:39:d8: 6c:e1:64:0a:f2:04:33:90:40:00:87:e4:ed:b2:d6: e9:68:60:21:eb:b9:35:c3:5d:28:89:40:c7:2b:62: b4:a2:e1:22:81:5a:d2:4a:06:6f:66:87:31:4e:7d: b0:74:ea:2f:66:1b:cf:f0:90:ad:ba:e0:c1:91:79: b7:6e:1b:89:e7:ba:f8:19:b2:2d:df:28:e8:84:a0: b1:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:9B:B3:09:E3:6B:51:87:FE:1E:6F:7F:3A:53:F5:8E:8B:AA:88:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/dfb0982a-41c3-3e04-a214-27f23f1ed8e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 199.7.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:78:7e:84:e7:ad:90:c2:ea:d1:b5:0c:69:ef:51:41:10:b8: ae:77:ae:8e:37:c2:78:7e:34:f1:27:09:57:1d:24:eb:5d:4e: e1:19:0b:2a:83:e0:f7:1d:92:f6:09:0c:19:52:2c:6d:83:c6: 2a:99:c6:fd:9e:5d:b8:70:87:0a:6e:e3:f6:8e:c2:0c:a1:a6: 17:20:b0:6e:83:0d:bf:ee:af:ac:a5:58:de:1c:ca:ef:c3:e5: 09:cd:2e:9d:6b:9a:fe:5c:ae:35:69:c4:1f:d2:3b:70:b1:c0: 39:eb:a7:38:18:f0:0c:9d:53:d3:73:3e:89:b5:6d:2a:9f:8c: 42:15:40:43:b2:81:6d:a9:42:4b:17:a6:de:71:d5:f0:0c:ca: ea:d9:dc:c8:7a:2a:37:19:ed:e7:3b:32:db:64:e2:36:d9:01: 79:63:f1:cd:28:5b:ec:97:9d:80:87:6d:91:72:4d:9c:6c:47: 3e:0c:a3:de:70:a8:3d:0d:c7:7a:1a:66:22:79:d6:e9:f2:3c: cf:d5:43:7b:df:ca:cf:84:c0:09:e5:94:ca:a8:e4:59:5b:ca: 88:b7:cf:15:e0:53:87:dc:b0:7d:13:16:ce:19:5e:de:08:58: c4:81:ed:a6:7c:69:85:b4:3e:78:98:ab:a6:dd:c7:20:0c:11: 99:7f:e4:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4eFSt2tPJBwkkjAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk YTllMWQyYTUtOTg0MS00MzVlLTg1OTYtMjk3NDY5ZDdlODY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzI8mzK0b5zogzgFdrZo3RGFZu3asBiCFvxU5 RPxymeWaYYhHO9Me8Y0NH5zbj+cJ9C0Q0UUu34nkNaNDdmoFyVVlSpU9ROz0RXBy ejmuwpQcrty8vRCs39JoFUEYj5r6Y9PaNyeHMPYTGiHhoSBVLtD1vsGRX3XdSmY5 G9ysCCYo8O6tnRLXX2SaxrbUXjAn/Qc0tGvf0A3IGH79VneuIdz1/Cf7yWKo6UGA RV9s2xWAOdhs4WQK8gQzkEAAh+TtstbpaGAh67k1w10oiUDHK2K0ouEigVrSSgZv ZocxTn2wdOovZhvP8JCtuuDBkXm3bhuJ57r4GbIt3yjohKCxbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFGbswnja1GH/h5vfzpT9Y6LqoiLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZGZiMDk4MmEtNDFjMy0z ZTA0LWEyMTQtMjdmMjNmMWVkOGU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwdEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABV4foTnrZDC6tG1DGnvUUEQuK53ro43wnh+NPEnCVcdJOtdTuEZCyqD 4PcdkvYJDBlSLG2DxiqZxv2eXbhwhwpu4/aOwgyhphcgsG6DDb/ur6ylWN4cyu/D 5QnNLp1rmv5crjVpxB/SO3CxwDnrpzgY8AydU9NzPom1bSqfjEIVQEOygW2pQksX pt5x1fAMyurZ3Mh6KjcZ7ec7Mttk4jbZAXlj8c0oW+yXnYCHbZFyTZxsRz4Mo95w qD0Nx3oaZiJ51unyPM/VQ3vfys+EwAnllMqo5Flbyoi3zxXgU4fcsH0TFs4ZXt4I WMSB7aZ8aYW0PniYq6bdxyAMEZl/5CA= -----END CERTIFICATE-----Generated at Mon Nov 3 10:07:46 2025 by rpki-client