$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2cd04b2c-ebfc-38cf-9611-32d914a8ec85.roa File: 2cd04b2c-ebfc-38cf-9611-32d914a8ec85.roa (raw, json) Hash identifier: 0rXDdNjURUF6Yn2JxUh85Zxwpdb6l4Ri+LGasOJ9Y60= Subject key identifier: 0F:69:21:1D:51:9C:42:AE:91:AC:E2:67:38:EF:9F:DF:0B:34:97:FC Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584ACCA6849FCF269F19C8768E00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2cd04b2c-ebfc-38cf-9611-32d914a8ec85.roa Signing time: Sat 09 Aug 2025 13:00:41 +0000 ROA not before: Sat 09 Aug 2025 13:00:41 +0000 ROA not after: Fri 07 Nov 2025 14:00:41 +0000 asID: 396541 IP address blocks: 199.7.71.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cc:a6:84:9f:cf:26:9f:19:c8:76:8e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 9 13:00:41 2025 GMT Not After : Nov 7 14:00:41 2025 GMT Subject: CN=ff1a761d-6173-439a-bdc4-fb7dc087d037 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:d4:bf:da:a3:32:cd:a7:e5:ff:17:9b:1a:2b: 49:77:2f:48:bb:c3:f5:83:78:e4:5b:db:a6:06:03: 92:1d:45:b9:33:54:c7:fc:72:92:ec:6c:67:73:82: b2:c3:56:d1:a9:0c:64:10:f2:03:81:f0:f4:2e:8d: 2a:c5:26:be:34:1f:3e:62:22:fc:75:23:c7:a6:75: 39:dc:f0:02:73:8e:2c:ea:ca:18:a8:b3:74:11:25: 01:b3:85:95:9f:97:84:9f:b9:88:60:72:0d:c3:8c: c0:49:5b:f5:11:d3:66:3a:a7:24:7e:13:ed:b9:c4: e8:05:4d:62:b8:38:c2:77:0e:b7:09:7b:8b:dc:0c: cd:fb:34:4a:74:cd:b6:b0:4f:03:05:04:eb:bc:67: 3e:b7:40:df:9e:fb:21:01:c0:bb:22:be:30:5d:cc: e7:96:e9:c0:de:b7:61:59:71:98:b9:4b:94:ae:28: 2b:11:1c:9f:e8:0e:d6:42:4d:75:b4:ae:e3:b7:6c: 2f:fb:e6:3c:2e:5b:3b:00:22:a0:2c:63:8a:4f:1e: 3f:93:a2:19:78:6e:03:1e:31:d1:b1:bb:8b:a6:6d: ec:28:2a:38:cb:3b:a3:b0:4a:27:e3:d4:06:2b:3f: 40:73:53:de:33:6d:c5:cd:3a:11:f6:08:73:24:d1: ec:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:69:21:1D:51:9C:42:AE:91:AC:E2:67:38:EF:9F:DF:0B:34:97:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2cd04b2c-ebfc-38cf-9611-32d914a8ec85.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 199.7.71.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:d3:73:27:98:99:1b:3e:70:b4:4d:13:f2:83:25:1e:f2:31: ab:53:9e:a3:d1:10:65:cd:83:54:a2:94:59:86:b7:37:e2:ab: 25:d6:5d:00:c7:9c:4a:fa:6a:69:2c:ee:ac:88:8d:4a:a8:28: 3c:69:84:83:03:f0:1f:aa:e5:00:8c:28:3d:40:63:af:fa:d8: 5a:c7:75:e0:27:0e:aa:c9:73:c3:e1:92:c3:c2:68:da:a2:26: 00:8b:67:31:6c:b5:6f:66:32:62:0d:11:4f:fd:77:eb:bc:a0: 40:55:f2:cc:5e:db:3b:38:aa:41:d1:db:4f:41:17:fc:3c:53: 23:9d:f2:8f:a8:ab:47:1a:5e:34:21:3c:0b:5f:d3:37:29:b1: 46:3f:49:27:bd:f6:5b:76:40:55:8a:7f:d3:88:e7:33:d4:0e: 60:b6:ff:aa:06:6e:28:9b:46:86:62:5e:09:5e:23:a5:d1:b6: 9b:21:8f:42:9d:30:fa:70:29:6b:c1:38:44:de:d1:46:91:71: 67:77:d1:4e:be:30:9d:f9:ba:1c:b9:1e:ba:62:00:cf:29:19: 94:e5:79:9e:97:de:46:97:4b:77:29:a7:51:8d:86:c1:9e:83: d0:05:d9:1a:af:61:e1:a8:08:1a:cc:94:bb:d0:bf:4b:f7:ea: 03:bf:e6:18 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWErMpoSfzyafGch2jgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgwOTEzMDA0MVoXDTI1MTEwNzE0MDA0MVowLzEtMCsGA1UEAxMk ZmYxYTc2MWQtNjE3My00MzlhLWJkYzQtZmI3ZGMwODdkMDM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNS/2qMyzafl/xebGitJdy9Iu8P1g3jkW9um BgOSHUW5M1TH/HKS7Gxnc4Kyw1bRqQxkEPIDgfD0Lo0qxSa+NB8+YiL8dSPHpnU5 3PACc44s6soYqLN0ESUBs4WVn5eEn7mIYHINw4zASVv1EdNmOqckfhPtucToBU1i uDjCdw63CXuL3AzN+zRKdM22sE8DBQTrvGc+t0DfnvshAcC7Ir4wXcznlunA3rdh WXGYuUuUrigrERyf6A7WQk11tK7jt2wv++Y8Lls7ACKgLGOKTx4/k6IZeG4DHjHR sbuLpm3sKCo4yzujsEon49QGKz9Ac1PeM23FzToR9ghzJNHsJwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFA9pIR1RnEKukaziZzjvn98LNJf8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMmNkMDRiMmMtZWJmYy0z OGNmLTk2MTEtMzJkOTE0YThlYzg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxwdHHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCv03MnmJkbPnC0TRPygyUe8jGrU56j0RBlzYNUopRZhrc34qsl1l0A x5xK+mppLO6siI1KqCg8aYSDA/AfquUAjCg9QGOv+thax3XgJw6qyXPD4ZLDwmja oiYAi2cxbLVvZjJiDRFP/XfrvKBAVfLMXts7OKpB0dtPQRf8PFMjnfKPqKtHGl40 ITwLX9M3KbFGP0knvfZbdkBVin/TiOcz1A5gtv+qBm4om0aGYl4JXiOl0babIY9C nTD6cClrwThE3tFGkXFnd9FOvjCd+bocuR66YgDPKRmU5Xmel95Gl0t3KadRjYbB noPQBdkar2HhqAgazJS70L9L9+oDv+YY -----END CERTIFICATE-----Generated at Sat Aug 23 16:02:21 2025 by rpki-client