$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fd2b756d-dca9-320f-a24d-589725851877.roa File: fd2b756d-dca9-320f-a24d-589725851877.roa (raw, json) Hash identifier: uguFRNIbNuYPm7wwW16SclYS2CXI+u7nQvF9529o2+A= Subject key identifier: 3C:C1:72:39:D3:1A:90:E1:FB:64:F7:B9:7B:92:4F:91:08:D8:40:92 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B48E1E18B1908F3D7E1574DB0 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fd2b756d-dca9-320f-a24d-589725851877.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 397228 IP address blocks: 199.7.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:e1:8b:19:08:f3:d7:e1:57:4d:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=c1605298-26e3-4ced-8120-82c38d068b5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:37:f3:9d:df:cb:ed:e9:a7:dd:46:29:ec:03: c6:26:bb:7a:04:80:2f:fe:43:70:f5:81:e5:79:4f: c5:e6:e1:ee:5e:15:3f:b2:8d:11:6f:ef:85:4b:cd: e2:2b:35:44:b4:58:d2:3e:9e:1a:9c:b6:70:2a:5b: 8b:2d:9e:bd:55:ef:47:34:58:61:67:3e:17:ac:61: 00:ca:86:2f:4e:bb:d1:fb:a9:87:32:cd:60:1d:8a: e1:19:70:9d:d5:d9:09:b0:46:3c:bd:95:e0:cc:63: 81:9e:b5:c9:9e:7f:67:2c:5c:f0:60:d3:2f:f4:16: c8:3e:41:2b:a8:4b:e5:61:4c:3b:a8:9d:bb:ba:3c: d1:30:72:b4:52:37:63:3d:40:4d:60:f5:26:cb:4f: 11:9b:23:ba:24:7f:ec:97:39:44:af:7f:a5:8e:3f: 08:c9:a8:90:a3:07:81:56:ce:63:c1:01:0e:2f:8d: 9d:19:8c:2f:ac:26:e1:89:85:ae:0f:8c:25:c7:e7: ca:9e:b3:cf:b8:a3:61:06:8c:7a:6c:a6:7e:03:cf: 9c:ee:b4:60:0e:ad:bd:9a:19:41:90:79:40:d7:49: 3d:37:5d:40:04:43:7c:59:7b:ce:1c:e3:2f:b3:8f: fb:79:34:a0:52:0d:bc:f7:52:7b:76:7d:f8:10:57: 29:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:C1:72:39:D3:1A:90:E1:FB:64:F7:B9:7B:92:4F:91:08:D8:40:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fd2b756d-dca9-320f-a24d-589725851877.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 199.7.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:f1:fe:1b:70:7c:7b:ce:74:01:b7:ae:07:5f:54:72:ad:5f: b2:c5:a8:e1:c7:00:6f:9a:b0:66:60:8c:37:fc:3d:d4:2c:45: 5a:2b:46:23:a4:bc:95:2c:c3:1e:fe:04:d1:75:c6:92:5a:f1: 54:a1:b5:1c:d0:e0:ef:4b:ea:6e:ce:58:79:52:5e:43:00:40: 49:81:92:1b:4d:03:25:17:a2:52:8b:7d:31:8e:87:15:eb:c0: a9:fe:30:df:77:0e:07:65:15:7e:ea:0e:f9:68:f1:78:59:70: 93:dd:e3:be:a7:c6:57:21:54:8f:7c:b6:2f:42:00:e5:65:9e: f0:1b:0f:7d:21:16:60:9b:be:3b:21:43:79:1a:92:37:6f:90: 01:97:db:2b:c4:9e:31:30:19:87:ed:10:8f:d6:6d:fc:4e:46: 0c:3f:83:96:e8:be:7f:21:0c:25:9b:a2:60:84:46:b4:24:67: 66:d8:1f:58:bf:30:be:68:56:54:d4:4f:37:b7:d1:31:c5:0e: 68:36:fe:78:a0:d8:0f:c2:ce:73:da:3d:71:60:82:e3:79:96: 5a:02:7a:a9:68:9e:e2:64:95:a8:89:32:3d:e3:1c:ba:8d:f6: 86:1a:08:1d:20:c3:2c:bc:97:6e:ca:d1:b0:10:e2:9d:a3:2f: 65:8e:3a:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4eGLGQjz1+FXTbAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk YzE2MDUyOTgtMjZlMy00Y2VkLTgxMjAtODJjMzhkMDY4YjVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTfznd/L7emn3UYp7APGJrt6BIAv/kNw9YHl eU/F5uHuXhU/so0Rb++FS83iKzVEtFjSPp4anLZwKluLLZ69Ve9HNFhhZz4XrGEA yoYvTrvR+6mHMs1gHYrhGXCd1dkJsEY8vZXgzGOBnrXJnn9nLFzwYNMv9BbIPkEr qEvlYUw7qJ27ujzRMHK0UjdjPUBNYPUmy08RmyO6JH/slzlEr3+ljj8IyaiQoweB Vs5jwQEOL42dGYwvrCbhiYWuD4wlx+fKnrPPuKNhBox6bKZ+A8+c7rRgDq29mhlB kHlA10k9N11ABEN8WXvOHOMvs4/7eTSgUg2891J7dn34EFcpDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDzBcjnTGpDh+2T3uXuST5EI2ECSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZmQyYjc1NmQtZGNhOS0z MjBmLWEyNGQtNTg5NzI1ODUxODc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwdEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACjx/htwfHvOdAG3rgdfVHKtX7LFqOHHAG+asGZgjDf8PdQsRVorRiOk vJUswx7+BNF1xpJa8VShtRzQ4O9L6m7OWHlSXkMAQEmBkhtNAyUXolKLfTGOhxXr wKn+MN93DgdlFX7qDvlo8XhZcJPd476nxlchVI98ti9CAOVlnvAbD30hFmCbvjsh Q3kakjdvkAGX2yvEnjEwGYftEI/WbfxORgw/g5bovn8hDCWbomCERrQkZ2bYH1i/ ML5oVlTUTze30THFDmg2/nig2A/CznPaPXFgguN5lloCeqlonuJklaiJMj3jHLqN 9oYaCB0gwyy8l27K0bAQ4p2jL2WOOss= -----END CERTIFICATE-----Generated at Wed Oct 29 17:22:37 2025 by rpki-client